last executing test programs: 6m47.268251058s ago: executing program 3 (id=178): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000007) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000240)={0x88, @remote, 0x4e24, 0x1, 'dh\x00', 0x20, 0x1, 0x17}, 0x2c) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180), 0x1, 0x5d4, &(0x7f0000001080)="$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") fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000001c0)={0x23, 0xffffffff, 0x1}) socketpair$tipc(0x1e, 0xbf9de76f07fedae7, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x2, @perf_bp={0x0, 0x8}, 0x1002ce, 0x0, 0x10ffe, 0x0, 0x7, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') read$nci(r3, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, r3) mmap$IORING_OFF_SQES(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000080000000000000000000000045da6ce54b5a57b03fd7e91504024dba42926b954450fe78902e9f000000000005000200000000a500fe"], &(0x7f0000000100)='GPL\x00', 0x2000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 6m46.324869676s ago: executing program 3 (id=184): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000a40)={0x6, 0x6, 0x800002, 0x2, 0xffffffdf, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x21a, 0x0, &(0x7f00000000c0)="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", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000c}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) socket(0x1e, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x4c}}, 0x4044080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) 6m43.379278838s ago: executing program 3 (id=195): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0xa, 0x0, 0x0, 0x102}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$eJzs3M9vFGUfAPDvbLu0wMtLRSQBUQtobExsoaBw8IKJiQdNjHiQY9MWUlnA0B6ENLIkBs8k3o1H400Tr3o0nvwD8ODBxJAQ5QJ4WjO7M9vt/uh2S2nT7ueTLDzP7PPM8zwz88w+M09nAuhbo+k/ScT/IuJuROytRZcnGK399+jB4vTjB4vTUa5Uzv2dVNM9TOOZPN/uLDJWiCh8kTStsGb++o1LU6XS7LUoV+MTC5c/nZi/fuP1uctTF2cvzl6ZPHPm1MkTp9+cfKM563DXRrUpL23Xw0OfXz188N3zd96fHmxeWWM7Ospz/VPumjTybdvBK43r2wb2NIST1nbd3NDKsGrD2WFYTPv/Yuno+c2uELBhKpVKZajz1+VKs1stS4AtK4nNrgGwOfIf+vT6N//UlhQ3Yvix6e6frV0APXywWLkZMf2o3v7BKGRpik3Xt6kVxkw9GY2Ij8v/fp1+YqX7EH+sU4EAQN/7+Ww2DEyiafxXiAMN6f6fzaGMRMQzEbEvIp6NiP0R8VzEsrTLJBGVFcrf37ygXv4P2SxC4d5a27Ya6fjvrWxuK/9k5eZJRgay2J6IfMA8ezzbJmNRHLowV5o90WH9O7qU3zj+Sz9p+flYMKvHvcGmwebM1MLU2lrb6v6tiEODze1PBtMdl0/jJBFxMCIO9bDekYbw3GvfHq5Hmi4rure/qtJmSm9d5s8q30S8Wtv/5Vi2/5dKTBrnJwst85MTw1GaPT6RHgXH25bx62+3P+hUftf2//hnc5Z3Tv907kmbXZfu/10Nx3/k87dL7R9JIpL6fO18RGWgtzJu//5ldb2jx1q/W+vxvyP5qBrO+9dnUwsL105E7Ejea10+uZQ3j+fp0/aPHWvf//dledIt8XxEpAfxCxHxYsRAXvcjEXE0Ito0re6Xt1/+pNN3qzz+n5q0/TNtz3/L9v/SfP0qA3nmdMnApSN3H3c4eWTt37vy/j9VDY1lS9qf/5Jlp4jV1vTJth4AAABsDYWo/u1/YbweLhTGx2v3gPbHrkLp6vzCSxFxZab2jMBIFAsX5kqz+Q25kSgm+f3PkYb4ZFP8ZHbf+KuBndX4+PTV0sxmNx763O5qn09a+n/qrx7v8wJb0DZ6Dg3oUbf+f+DOBlUE2HB+/6F/NfT/Tm+2KPtLGdie/P5D/2rX/2/Gdys+u+CcAVtfRV+GvrZy/+/+vk1g6xqMD+vh6mPPbZ+2BbYj43/oS70+199boDLU/qvhaPPGgOGnU42dbcralEA6slrHFRYjYnWJd66liHwI2PkND4XeVjgUrV8NxEq5kvbvcYiIcsdc6VbpWp+LB9b94M/fibLeh833S/20uMrd/aQB1/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC28l8AAAD//w1dzgU=") r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x2000000000006) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd}}}}}]}}]}}, 0x0) 6m42.964539987s ago: executing program 1 (id=200): chdir(&(0x7f0000000000)='./cgroup\x00') r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000010c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0xfffffffffffffda1) 6m42.929628751s ago: executing program 1 (id=201): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$packet(0x11, 0x3, 0x300) openat$vcsu(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x60000600) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 6m41.800018566s ago: executing program 1 (id=203): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0xfffffffffffffffe) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffff5, 0x7}}, './file0\x00'}) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8090}, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r1, r1, 0x19, 0x0, @void}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000440)=0xe8) setreuid(r5, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x11, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0}, 0x40) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x11, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f00000006c0)='syzkaller\x00', 0x7, 0x0, &(0x7f0000000700), 0x41000, 0x62, '\x00', r4, 0x25, r2, 0x8, &(0x7f0000000740)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x4, 0x9, 0xfffffff0}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000007c0)=[{0x3, 0x2, 0x5, 0x1}, {0x4, 0x3, 0x10, 0x5}, {0x0, 0x4, 0x6, 0x3}, {0x3, 0x1, 0x9, 0xb}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@ifindex=r4, r1, 0x33, 0x0, r1, @void, @value=r8, @void, @void, r7}, 0x20) ioctl$RFKILL_IOC_MAX_SIZE(r2, 0x2, &(0x7f00000008c0)=0x21c4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5, 0xee01}}, './file0\x00'}) r10 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {r5, 0xee01}}, './file0\x00'}) r13 = getgid() getgroups(0x9, &(0x7f0000000980)=[0x0, 0xee01, 0xee00, 0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0xee01]) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getegid() setgroups(0x7, &(0x7f0000000a80)=[r9, r10, r12, r13, r15, r18, r19]) r20 = getuid() getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0}, &(0x7f0000000b80)=0xc) getresgid(&(0x7f0000000bc0)=0x0, &(0x7f0000000c00), &(0x7f0000000c40)) setxattr$system_posix_acl(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='system.posix_acl_access\x00', &(0x7f0000000c80)={{}, {0x1, 0xc}, [{0x2, 0x4, r5}, {0x2, 0x0, r17}, {0x2, 0x4, r20}, {0x2, 0x1, r21}], {}, [{0x8, 0x0, r9}, {0x8, 0x4, r18}, {0x8, 0x0, r14}, {0x8, 0x0, r22}, {0x8, 0x4, r16}, {0x8, 0x2, r18}, {0x8, 0x4, r19}], {}, {0x20, 0x3}}, 0x7c, 0x2) getpid() mount$9p_xen(&(0x7f0000000d00), &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80), 0x1902820, &(0x7f0000000dc0)={'trans=xen,', {[{@access_client}, {@uname={'uname', 0x3d, '\x00'}}, {@directio}, {@cache_fscache}, {@access_client}, {@noextend}], [{@fowner_lt={'fowner<', r11}}]}}) ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000000e40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 6m41.700842889s ago: executing program 1 (id=204): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x510, 0x0, 0x228, 0xffffffff, 0x2e8, 0x3d0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x7, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2f, @rand_addr=0x64010100, @empty, @gre_key=0x1, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0x180, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "89ce", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@private1, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES32=0x0], 0x6, 0x801, &(0x7f0000001540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000000000000b, 0x149900) pread64(r2, &(0x7f0000002d40)=""/8, 0x8, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0f000000df000000020000006600000000010000", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="a1954f136a3a4074e85f2f961b324026bf63f380a0fa6e2d7417c226851382f83edb2013bccce1dfae02d2638533b2b53e366d29a002302995e9bb3a4243bfefdf754ec7c4999470e5717a7be4b1954b594f7df674e48027cae21762ed89cafbad8dc08acd6c6cf54045c318d68c4d538cab6af164d08e935e27566e190475e46b86da4d28cff8abfb67374a0a64f6f64dd3415670f7d99f4673fef884f33157ade7adb80eedf78b809b6f84c1f772b06e61e19f1fac66e4d125dc0a16519192bbce1d"], 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@local, @remote, 0x0}, &(0x7f00000000c0)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061118c000000004d260000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001a000800288f13bd942349e7ecef75e47000fb0c0000000080080800fd0a000100008aed373f514a626387199c55b0b605dbb59544dbda8c8c78979966d658c7cdbc3062b39006a5e0bbab0e0f36ea30af3d106baf5204e126acc9755348eaa82240b32b796b822fe382a7074a483ced1f8d547d8c38eb465cb93132f7", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x24000804) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000c80)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)={0x18, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40040) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a2d, 0x0, 0x7fc, 0x6, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000003600)) r10 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r10, &(0x7f0000000440)=[{&(0x7f0000000080)=""/121, 0x900}], 0x1, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4095, 0xfffffeb6}], 0x1, 0x0) 6m41.510850376s ago: executing program 1 (id=206): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) read$nci(r0, &(0x7f0000000040), 0x0) 6m41.008266919s ago: executing program 1 (id=212): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r4, 0x6e2, 0x620, 0x1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x3ec0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000280)=0x4) listen(0xffffffffffffffff, 0x1) socket$unix(0x1, 0x1, 0x0) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) 6m40.929238696s ago: executing program 32 (id=212): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r4, 0x6e2, 0x620, 0x1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x3ec0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000280)=0x4) listen(0xffffffffffffffff, 0x1) socket$unix(0x1, 0x1, 0x0) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) 6m40.644278687s ago: executing program 3 (id=218): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x510, 0x0, 0x228, 0xffffffff, 0x2e8, 0x3d0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x7, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2f, @rand_addr=0x64010100, @empty, @gre_key=0x1, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0x180, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "89ce", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@private1, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES32=0x0], 0x6, 0x801, &(0x7f0000001540)="$eJzs3U1oHOcZAOB3FMmW5WBMWtxgbGfspOCAo6xWiVKRQ7JZjeRJpF2xuyo2paQmloOwnAS7obUviSkkbWkpPfXQQ5prbr21FFrooc2p0Bx66S2QU0mhf6QNBZXZH1mytZL8n9TPI6SZnXm/+d5vtJp3RtLOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQSXWqVBpLYjavLZxI+6tONepzm6zvbe836ybrPLuu34ik+Izh4fjkH51lX7yyel/x5Ugc6Dw6EMPFZDgu7d639+kvDA702m+S0I06vM24JOLNIqmzp5aXF89fdzcxfN1Nbp/v/+q6m/x7pfg6k9XyZuRzlZkszZv1dHJiovT48elmOp3PZs2TzVY2l1YbWaVVb6RHq4+mY5OT42k2erK+UJuZqsxmvYVPPVYulSbS50fns0qjWa89/nw0q8fz2dm8NtOOKZe+FUXMU8UT8YW8lbayylyanllaXhzfKtUiaGyjFfd1nj8HHtn70esf/n1psXhC9ttI0n1ilsfGyuWxiScnn3yqVBosl8rrF5SuEqsRMRBRRNyWJy2fI7f2AA43YaBb/2M28qjFQpyIdIOPoajGVDSiHnPF4z8NXRPR1av/X378r3/YrN+19b9X5R+8snp/tOv/oc6jQ/3q/4a53smPC3ExLsXZOBXLsRyLcf6uZ7TFx8DNbiFZ++g/90dELfJoRj3ymItKzEQWaXdJGpMxERNRihfjeExHM9KYjjxmI4tmnIxmtCJrP6Oq0YgsKtGKejQijaNRjUcjjbGYjMkYjzSyGI2TUY+FqMVMTEWlvZUzsdTe7+NXZblvV/zy5T9+9E4xvxo0tsngk+Jkrgj62yZjH4jyddT/lZXifOHqCPX/HrBjs5W34SgON2alV/8BAACA/1tJ+7fvxfX/UBxsz03ns9nX7nZaAAAAwC3U/sv/gWIyVMwdjKS4/i9tEPnBHc8NAAAAuDWS9mvskogYiYc6c2diKd6MxdjolwARsfdOpwgAAADcpPbf/w8Vk5GIN9oLerdL6XP9DwAAAHzefLffPfY/7N1jtzm/M/n1UEQMJZfnTzySnKsUcZVz93XadSdfXd1ia3p/sqe7kfZkYvDS7iQiBqvZgaR398v/7uxMP25/3T+42rzfvf6TRqNIYFfR90YJxOYJtB/FD+JwJ+bw6fZkd7fJYNLpZWQ6n81Gq/XZp9u3RCw+W6+/svTtiKL379Xm9iRxZml5cfSlV5dPt3fG5aL55XPdGygmEYPbzWWluwfiYAzv6M6uHfFQ+4UY3X5HOv2W1n4DBjptBjYff7K2z7fiSCfmyEhnOtJb0+lzuOhzbPTpsahU9gy0shOt11fWjL7Iosh6deRDa0f+093bHPlb8XAn5uGjD3cmG2RRXpfFK1dlsbS8WF67/7e3L7adxTuH3zjxr9/Vk2x8qyzGryOLlfsirs4C4G45077rT6cKFZNd7br76UpHUf87dXdnr+7u6rXcxrH2n1d6WT3L6LVfU90Ho1fde9VtYPXAuL3qvhKdI/rRTszRzvnE4P5uXKfSdupKaYMj+mtLr/2+e0R/4r2f/Ozrh97/ebvftdVtG1l0jujvxaOdmO4kHvhtnxpbjPmHq5VkrD36d4sW7/bttzlbTtqnGN8891rsu3Dx0mNL5069vPjy4ivl8vhE6YlS6cly72RiqH3GsEmmANy7tn6Pnb4RvTqTPFFcVQ+v2ejp9ddzD6z+S8FovBSvxnKcjmPtVxtExEMb9zuy5t8Qjm1x1XoldiyObXFteSW2fG1sEn1ix9cM7ks/bk8+uQ3fDAC4Q45sUYeTOPJ+N7TfGUJyrN919zV1tKjlV10dR/9avpGv3M6dAQD3iKzxcTLSejtpNPL5F8cmJ8cqreP3p4169YW0kU/NZGlea2WN6vFKbSZL5xv1Vr3a+8XxVNZMmwvz8/VGK52uN9IYaOYn2u/8nnbf+r2ZzVVqrbzanJ/NKs0srdZrrUq1lU7lzWo6v/DcbN48njXajZvzWTWfzquVVl6vpc36QqOajaZpM8vWBOZTWa2VT+fFbC2db+RzlcbliJhdmMvSqaxZbeTzrXpng72+8tp0vTHX3uzotcP/y53e3wDwWXDh4qWzp5aXF8/f2MyftxN8t8cIAKynSgMAAAAAAAAAAAAAwGffhYuXzg7H8uL5vb0XAhRLb+IVgdc3szNuexf37EzxjfwMpHFjMwfvvzXb+cYzz5ztF/PcGw8e3952uj8pg7HlS13f3hOx4xc/6ix5tn/wd7o/f7dmj30QETfQfCXZYNWnK52ZdYeJHXf+yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1/pfAAAA//+iNle9") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000000000000b, 0x149900) pread64(r2, &(0x7f0000002d40)=""/8, 0x8, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0f000000df000000020000006600000000010000", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="a1954f136a3a4074e85f2f961b324026bf63f380a0fa6e2d7417c226851382f83edb2013bccce1dfae02d2638533b2b53e366d29a002302995e9bb3a4243bfefdf754ec7c4999470e5717a7be4b1954b594f7df674e48027cae21762ed89cafbad8dc08acd6c6cf54045c318d68c4d538cab6af164d08e935e27566e190475e46b86da4d28cff8abfb67374a0a64f6f64dd3415670f7d99f4673fef884f33157ade7adb80eedf78b809b6f84c1f772b06e61e19f1fac66e4d125dc0a16519192bbce1d"], 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@local, @remote, 0x0}, &(0x7f00000000c0)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061118c000000004d260000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001a000800288f13bd942349e7ecef75e47000fb0c0000000080080800fd0a000100008aed373f514a626387199c55b0b605dbb59544dbda8c8c78979966d658c7cdbc3062b39006a5e0bbab0e0f36ea30af3d106baf5204e126acc9755348eaa82240b32b796b822fe382a7074a483ced1f8d547d8c38eb465cb93132f7", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x24000804) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000c80)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)={0x18, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40040) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a2d, 0x0, 0x7fc, 0x6, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000003600)) r10 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r10, &(0x7f0000000440)=[{&(0x7f0000000080)=""/121, 0x900}], 0x1, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4095, 0xfffffeb6}], 0x1, 0x0) 6m40.060343686s ago: executing program 3 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x8004881, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r7, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 6m39.961061589s ago: executing program 4 (id=222): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 6m39.900267188s ago: executing program 4 (id=223): syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 6m39.837637507s ago: executing program 4 (id=224): r0 = socket$kcm(0x10, 0x2, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = timerfd_create(0x7, 0x800) timerfd_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = syz_open_dev$loop(&(0x7f0000000140), 0xa2, 0xc41) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000035b000/0x400000)=nil, 0x400000) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000380)) 6m39.057469133s ago: executing program 3 (id=227): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0xa, 0x0, 0x0, 0x102}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x2000000000006) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd}}}}}]}}]}}, 0x0) 6m39.001793953s ago: executing program 33 (id=227): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0xa, 0x0, 0x0, 0x102}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x2000000000006) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd}}}}}]}}]}}, 0x0) 6m38.996698133s ago: executing program 4 (id=229): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x510, 0x0, 0x228, 0xffffffff, 0x2e8, 0x3d0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x7, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2f, @rand_addr=0x64010100, @empty, @gre_key=0x1, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0x180, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "89ce", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@private1, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES32=0x0], 0x6, 0x801, &(0x7f0000001540)="$eJzs3U1oHOcZAOB3FMmW5WBMWtxgbGfspOCAo6xWiVKRQ7JZjeRJpF2xuyo2paQmloOwnAS7obUviSkkbWkpPfXQQ5prbr21FFrooc2p0Bx66S2QU0mhf6QNBZXZH1mytZL8n9TPI6SZnXm/+d5vtJp3RtLOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQSXWqVBpLYjavLZxI+6tONepzm6zvbe836ybrPLuu34ik+Izh4fjkH51lX7yyel/x5Ugc6Dw6EMPFZDgu7d639+kvDA702m+S0I06vM24JOLNIqmzp5aXF89fdzcxfN1Nbp/v/+q6m/x7pfg6k9XyZuRzlZkszZv1dHJiovT48elmOp3PZs2TzVY2l1YbWaVVb6RHq4+mY5OT42k2erK+UJuZqsxmvYVPPVYulSbS50fns0qjWa89/nw0q8fz2dm8NtOOKZe+FUXMU8UT8YW8lbayylyanllaXhzfKtUiaGyjFfd1nj8HHtn70esf/n1psXhC9ttI0n1ilsfGyuWxiScnn3yqVBosl8rrF5SuEqsRMRBRRNyWJy2fI7f2AA43YaBb/2M28qjFQpyIdIOPoajGVDSiHnPF4z8NXRPR1av/X378r3/YrN+19b9X5R+8snp/tOv/oc6jQ/3q/4a53smPC3ExLsXZOBXLsRyLcf6uZ7TFx8DNbiFZ++g/90dELfJoRj3ymItKzEQWaXdJGpMxERNRihfjeExHM9KYjjxmI4tmnIxmtCJrP6Oq0YgsKtGKejQijaNRjUcjjbGYjMkYjzSyGI2TUY+FqMVMTEWlvZUzsdTe7+NXZblvV/zy5T9+9E4xvxo0tsngk+Jkrgj62yZjH4jyddT/lZXifOHqCPX/HrBjs5W34SgON2alV/8BAACA/1tJ+7fvxfX/UBxsz03ns9nX7nZaAAAAwC3U/sv/gWIyVMwdjKS4/i9tEPnBHc8NAAAAuDWS9mvskogYiYc6c2diKd6MxdjolwARsfdOpwgAAADcpPbf/w8Vk5GIN9oLerdL6XP9DwAAAHzefLffPfY/7N1jtzm/M/n1UEQMJZfnTzySnKsUcZVz93XadSdfXd1ia3p/sqe7kfZkYvDS7iQiBqvZgaR398v/7uxMP25/3T+42rzfvf6TRqNIYFfR90YJxOYJtB/FD+JwJ+bw6fZkd7fJYNLpZWQ6n81Gq/XZp9u3RCw+W6+/svTtiKL379Xm9iRxZml5cfSlV5dPt3fG5aL55XPdGygmEYPbzWWluwfiYAzv6M6uHfFQ+4UY3X5HOv2W1n4DBjptBjYff7K2z7fiSCfmyEhnOtJb0+lzuOhzbPTpsahU9gy0shOt11fWjL7Iosh6deRDa0f+093bHPlb8XAn5uGjD3cmG2RRXpfFK1dlsbS8WF67/7e3L7adxTuH3zjxr9/Vk2x8qyzGryOLlfsirs4C4G45077rT6cKFZNd7br76UpHUf87dXdnr+7u6rXcxrH2n1d6WT3L6LVfU90Ho1fde9VtYPXAuL3qvhKdI/rRTszRzvnE4P5uXKfSdupKaYMj+mtLr/2+e0R/4r2f/Ozrh97/ebvftdVtG1l0jujvxaOdmO4kHvhtnxpbjPmHq5VkrD36d4sW7/bttzlbTtqnGN8891rsu3Dx0mNL5069vPjy4ivl8vhE6YlS6cly72RiqH3GsEmmANy7tn6Pnb4RvTqTPFFcVQ+v2ejp9ddzD6z+S8FovBSvxnKcjmPtVxtExEMb9zuy5t8Qjm1x1XoldiyObXFteSW2fG1sEn1ix9cM7ks/bk8+uQ3fDAC4Q45sUYeTOPJ+N7TfGUJyrN919zV1tKjlV10dR/9avpGv3M6dAQD3iKzxcTLSejtpNPL5F8cmJ8cqreP3p4169YW0kU/NZGlea2WN6vFKbSZL5xv1Vr3a+8XxVNZMmwvz8/VGK52uN9IYaOYn2u/8nnbf+r2ZzVVqrbzanJ/NKs0srdZrrUq1lU7lzWo6v/DcbN48njXajZvzWTWfzquVVl6vpc36QqOajaZpM8vWBOZTWa2VT+fFbC2db+RzlcbliJhdmMvSqaxZbeTzrXpng72+8tp0vTHX3uzotcP/y53e3wDwWXDh4qWzp5aXF8/f2MyftxN8t8cIAKynSgMAAAAAAAAAAAAAwGffhYuXzg7H8uL5vb0XAhRLb+IVgdc3szNuexf37EzxjfwMpHFjMwfvvzXb+cYzz5ztF/PcGw8e3952uj8pg7HlS13f3hOx4xc/6ix5tn/wd7o/f7dmj30QETfQfCXZYNWnK52ZdYeJHXf+yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1/pfAAAA//+iNle9") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000000000000b, 0x149900) pread64(r2, &(0x7f0000002d40)=""/8, 0x8, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0f000000df000000020000006600000000010000", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="a1954f136a3a4074e85f2f961b324026bf63f380a0fa6e2d7417c226851382f83edb2013bccce1dfae02d2638533b2b53e366d29a002302995e9bb3a4243bfefdf754ec7c4999470e5717a7be4b1954b594f7df674e48027cae21762ed89cafbad8dc08acd6c6cf54045c318d68c4d538cab6af164d08e935e27566e190475e46b86da4d28cff8abfb67374a0a64f6f64dd3415670f7d99f4673fef884f33157ade7adb80eedf78b809b6f84c1f772b06e61e19f1fac66e4d125dc0a16519192bbce1d"], 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@local, @remote, 0x0}, &(0x7f00000000c0)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061118c000000004d260000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001a000800288f13bd942349e7ecef75e47000fb0c0000000080080800fd0a000100008aed373f514a626387199c55b0b605dbb59544dbda8c8c78979966d658c7cdbc3062b39006a5e0bbab0e0f36ea30af3d106baf5204e126acc9755348eaa82240b32b796b822fe382a7074a483ced1f8d547d8c38eb465cb93132f7", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x24000804) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000c80)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)={0x18, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40040) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a2d, 0x0, 0x7fc, 0x6, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000003600)) r10 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r10, &(0x7f0000000440)=[{&(0x7f0000000080)=""/121, 0x900}], 0x1, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4095, 0xfffffeb6}], 0x1, 0x0) 6m38.638995781s ago: executing program 4 (id=230): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x7, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0xa, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x30}, 0x4, 0x700000000000000}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000400)={[{@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, 0xfe, 0x24e, &(0x7f0000000800)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AOiooFwdoLN2SgcyBFEBBUiIjZKIsQEu8TKxkIrC5VUNkHsjJaSJtgoglXUFLERNFgYLLRY2Z1EYrIaddcdzXw+MJmZzHvze8PO9+02sxugsS4muZyklWQ6SSdJcbTB7dVy8WB3bWprLun1Hv2hGLSr9iuH/S4kWU1yf5LNssjz7WR548ndn7Yfvvu1pc6d7248MTXRizywt7vzyP47V1/94Mp9y5998d3VIpfT/d11jV8x5H/tIrnh3yj2H1G06x4Bf8Xsy+9/2c/9jUnuGOS/kzLVi/f64jWbndz79h/1feP7z2+e5FiB8ev1Ov33wNUe0Dhlkm6KciZJtV2WMzPVZ/ivWufLFxYWX5p+bmFp/tm6ZypgXLrJzkMfnfvwwrH8f9uq8g+cXf38Pza7/nV/e79V92iAibilWvXzP/30yj0ZKf93vTm+gQGTMp78A/9H8g/NJf/QXPIPzSX/0FzyD2dY588Pyz80l/xDc8k/NNfR/AMAzdI7V/cTyEBd6p5/AAAAAAAAAAAAAAAAAACAk9amtuYOl0nV/OStZO/BJO1h9VuD3yNOrh38Pf9j0W/2m6LqNpKnbhvxBCN6r+anr6/7pt76n95ab/2V+WT1lSSX2u2T919xcP/9c9efcrzzzIgF/qbi2P4Dj0+2/nG/rNdb/8p28nF//rk0bP4pc9NgPXz+6Z7+FcunevHnEU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxPwaAAD//ynKbgk=") write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 6m35.568523662s ago: executing program 4 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4004000) (fail_nth: 4) 6m35.568325712s ago: executing program 34 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4004000) (fail_nth: 4) 1m3.135557843s ago: executing program 7 (id=2167): r0 = epoll_create1(0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x20002011}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) epoll_pwait2(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f00000024c0)=""/209, 0xd1, 0x8) lseek(r2, 0x116d, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="5b751d04a17ab86568fabad954b6aa50d8557643fe42aa4d7c33bb0f63cc65a9a14d07836a7494852536fe089b8b1bae3821d318ef9260b2a6ff4d26789dbcf06c86324f5b150def83546cd5d223fe4f0cd5542f9dabb570935a7aa22efcabb05ef82ca92238e2edab44f0103a06db97eb4a4ddaccefdc1bf60d52f0fc307f935f6e528da3fe09f3f3a654022a05399a503a3636bb3538a1de86bbaf6278da8c405ddec30fe5e728202a6bbbb463dd938bc198e44fabae63167e84ae", 0xbc, 0xfffffffffffffffb) rt_sigprocmask(0x3, &(0x7f0000000040), 0x0, 0x8) 1m2.960138969s ago: executing program 7 (id=2170): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m2.958086198s ago: executing program 7 (id=2171): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x18, 0x1, 0x2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r3], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12}, 0x0, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000540)='(pu&00\t||') ftruncate(r4, 0x5) 1m2.285056199s ago: executing program 7 (id=2180): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0xa2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) getpid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429a, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x88025, 0xccf8, 0x0, 0x1, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000380), 0xb}, 0x0, 0x4005, 0xa600000, 0x3, 0x2, 0x7, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xed1ca, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0xd, 0x8b, 0x0, 0x66, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x3, 0x4f8, &(0x7f0000000800)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0xd) getdents64(r3, &(0x7f0000000440)=""/45, 0x2d) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r1) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=r7, @ANYBLOB="100006000000000020"], 0x54, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r8, 0x0, 0xee01) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0xb0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) 1m1.503895889s ago: executing program 7 (id=2188): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x4}, 0x11111a, 0x3, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100140e1208000f0100810401a80016ea1f000740042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) alarm(0x20000000000000b) prlimit64(0x0, 0x8, &(0x7f0000000080), 0x0) mlock2(&(0x7f0000341000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a1000000004fe00002e000008001e8001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x8000000000000000, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2, r5}) ptrace$peek(0xffffffffffffffff, r5, &(0x7f0000000200)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000040)={[{@check_strict}, {@check_relaxed, 0x0}, {@mode={'mode', 0x3d, 0x1}}, {@map_off}, {@cruft}, {@norock, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@map_normal}, {@sbsector={'sbsector', 0x3d, 0xffff}}, {@mode={'mode', 0x3d, 0xfffffffffffffffd}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") 1m1.235357327s ago: executing program 7 (id=2192): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xff, 0x8, 0x5, 0x7, 0x0, 0x5, 0x80122, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x2, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ab88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x11}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc, 0x2, 0x0, 0x0, 0xfff9}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd0100000000141400100016800c0001000000000000000fff080005000a010102060015000600000008000b000c000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000440)='./bus\x00', 0xe, &(0x7f0000000480)={[{@noauto_da_alloc}, {@grpjquota}]}, 0x0, 0x453, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x4) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00') close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)) socket(0x80000000000000a, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140"], 0xfc}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f00000003c0)={0x5, 0x2, 0xd57, 0x8e6, 0x3, 0x1}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 1m1.180526427s ago: executing program 35 (id=2192): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xff, 0x8, 0x5, 0x7, 0x0, 0x5, 0x80122, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x2, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ab88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x11}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc, 0x2, 0x0, 0x0, 0xfff9}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd0100000000141400100016800c0001000000000000000fff080005000a010102060015000600000008000b000c000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000440)='./bus\x00', 0xe, &(0x7f0000000480)={[{@noauto_da_alloc}, {@grpjquota}]}, 0x0, 0x453, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x4) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00') close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)) socket(0x80000000000000a, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140"], 0xfc}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f00000003c0)={0x5, 0x2, 0xd57, 0x8e6, 0x3, 0x1}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 11.914111182s ago: executing program 8 (id=2554): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x0, &(0x7f0000000300)={[{@barrier}, {@debug}, {@lazytime}]}, 0x1, 0x5b3, &(0x7f0000001400)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) stat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file1\x00', r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@quota}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) tgkill(0x0, 0x0, 0x6) listen(r2, 0x2) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) 11.721799665s ago: executing program 8 (id=2558): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x81}, 0x106200, 0x10004, 0x20da, 0x7, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x22020600) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 11.328481389s ago: executing program 8 (id=2565): r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (fail_nth: 2) 11.236121911s ago: executing program 8 (id=2569): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000100)={[{@debug}, {@init_itable}]}, 0x1, 0x5a2, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x0, @link_local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @local}, 0x10) write$P9_RREADDIR(r0, &(0x7f0000000740)={0xb, 0x29, 0x2, {0x101}}, 0xb) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x13c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x110, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_EARLY_DROP_BLOCK={0x8}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r6, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080029bd7000fbdbdf257700009e5eceff31a576f54cefb29b000800ef00090000000580ee004c0000000500ee008d0000000800ef00050000000500ee00080000000500ee00060000000500ee0005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x5) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4212, r7, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xd1) 10.782613754s ago: executing program 8 (id=2575): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x32, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x640b3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x2000006, 0x2, 0x0, 0xfffffffe, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0}) syz_open_procfs(r0, &(0x7f0000000080)='io\x00') 9.128357745s ago: executing program 6 (id=2583): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x7, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x9, 0x96}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x2383}}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x4}, @const={0x3, 0x0, 0x0, 0xa, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x2e, 0x5f, 0x30, 0x61, 0x61]}}, &(0x7f00000001c0)=""/71, 0x6f, 0x47, 0x1, 0x400000, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000400)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf, r1}, 0x94) r2 = fsmount(r0, 0x0, 0x0) fchdir(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r2) getdents(r3, &(0x7f00000000c0)=""/31, 0x1f) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4ee, &(0x7f0000001100)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14L3XmwkvWh3kxvvbRCpFUSfCmp9jzHZhJBNNmQ3tQlFU/wAgogKPvnki+AHEKQfQYSCvosWRbTVBx+0Izs7sW26m6Qkzaab3w9O95w5s/M/Z5o9s7NzmAngzHo3Iq5HxFBEvBcR5WJ5WqTZIrXXe/Twznw7JZFlN/+eRFIs291WuzwcERciYiciRiLiG1+N+HbyfNzm1vbKXL1e2yjK1dbqerW5tX1leXVuqbZUW5uenvpw5urMBzOTWeFI/bwYEde+/ODHP/jFV6795rPf+ePsXy9/t92sL3y80+6ImD9SgB462y7l+2JXex9tvIxgfTBU9KfU74YAAHAo4xFxKSI+lX//L8dQ/m0OAAAAGCTZF0fjP0lEBgAAAAysNCJGI0krxXzf0UjTSqUzh/djcT6tN5qtzyw2NtcW2nURY1FKF5frtclirvBYlJJ2eSrPPym/v6c8HRFvRsSPyufycmW+UV/o948fAAAAcEZceOfZ8/9/ldM8DwAAAAyYsZ4FAAAAYFA45QcAAIDB5/wfAAAABtrXbtxop2z3Od4Lt7Y2Vxq3rizUmiuV1c35ynxjY72y1Ggs5ffsWz1oe/VGY/1zsbZ5u9qqNVvV5tb27Gpjc601u/zMI7ABAACAE/TmO/f+kETEzufP5SmK+wDuNXTiLQNOlT/3uwHAcXJch7NruN8NAPqmdOAaRggYdMkB9T0n7/z2+NsCAAC8HBOfeP76/2tF3cG/DQCvsm5zfQCAwebqHpxdJTMA4cwb77y83qv+6Nf/s+yFGwUAAByr0TwlaaW4FjgaaVqpRLyRPxaglCwu12uTEfGRiPh9ufR6uzyVvzM5cM4wAAAAAAAAAAAAAAAAAAAAAAAAANCRZUlk3SRdlwIAAACvoIj0L0l+N/+IifL46N7fB15L/l2OB0XhZzd/cnuu1dqYai//Rzmvj4jWT4vl72ceCQAAAACnQOc8vXid6ndrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg0jx7emd9NJxn3b1+KiLFu8YdjJH8diVJEnP9nEsNPvS+JiKFjiL9zNyLe6hY/icdZlo0VregW/9xLjj+W75ru8dOIuHAM8eEsu9cef653+/yl8W7+2v3zN1yko+o9/qX/H/+Geow/bxwyxsX7v6r2jH834uJw9/FnN37SI/6lQ8b/1je3t3vVZT+PmOh6/EmeiVVtra5Xm1vbV5ZX55ZqS7W16empD2euznwwM1ldXK7Xin+7xvjhJ3/9eL/+n+8Rf+yA/o8fsv//vX/74Uc72VK3+JcvdT/+vtUjfloc+z5d5Nv1E7v5nU7+aW//8ndv79f/hR79P+j///Ih+//e17//p0OuCgCcgObW9spcvV7b2Cczcoh1ZF4kUzodzThFmex7nb/Ho23niG9/LpP1e7f0MdPvkQkAADhuT77097slAAAAAAAAAAAAAAAAAAAAcHadxO3E9sbc6U9XAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD29b8AAAD//3iP3Ow=") r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]}) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x1f2) io_setup(0x80, &(0x7f0000000280)=0x0) lsm_list_modules(0x0, 0x0, 0x10000000) io_submit(r8, 0x0, &(0x7f00000002c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x100003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x94) setresuid(r7, r7, 0x0) 8.850047633s ago: executing program 2 (id=2589): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x4300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) (fail_nth: 5) 8.759122915s ago: executing program 8 (id=2590): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) socket(0x29, 0x80000, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[], 0xe) sendto$inet6(r2, &(0x7f0000000300)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 8.757509744s ago: executing program 36 (id=2590): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) socket(0x29, 0x80000, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[], 0xe) sendto$inet6(r2, &(0x7f0000000300)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 8.26561606s ago: executing program 2 (id=2596): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 7.867180903s ago: executing program 6 (id=2602): syz_io_uring_setup(0x27aa, &(0x7f0000000140)={0x0, 0xe83a, 0x80, 0x20000, 0x75}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000040), 0x22, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0xffffffffffffff4e) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910fe"], 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "e8b5b7af69360dd8", "60d3b4d5e031f222ba62a6aabda453295f8854b2d6f1dcbf27160a38a31d4e63", "c1cc3f2a", "3f73dc2ebc522482"}, 0x38) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010003bd", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401fc, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x4, 0x6}, 0x6000, 0x0, 0x0, 0x0, 0x401, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)=[0xc, 0x9, 0x2, 0x6]) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*s', 0x2}], 0x1}}], 0x1, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000d40), 0x40, 0x0) read$watch_queue(r7, &(0x7f0000000240)=""/30, 0x1e) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000240)=0x80000001, 0x4) 7.768261934s ago: executing program 2 (id=2604): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.751547781s ago: executing program 2 (id=2605): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$packet(0x11, 0x3, 0x300) openat$vcsu(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c6) mount(0x0, 0x0, 0x0, 0xc00, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.476569778s ago: executing program 6 (id=2608): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.631878086s ago: executing program 2 (id=2611): r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0xee00) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x18, 0x1, 0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r4], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) fdatasync(r5) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12}, 0x0, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t||') ftruncate(r5, 0x5) 6.456055012s ago: executing program 6 (id=2613): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="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", @ANYRESDEC, @ANYRES32=r3, @ANYRES64, @ANYRES16=r2, @ANYRES32=r2, @ANYRES32, @ANYRES8, @ANYRES16=r2, @ANYRESOCT], 0x25, 0x359, &(0x7f0000000bc0)="$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") quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000140)=@rnullb, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 6.386882329s ago: executing program 5 (id=2614): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.34061086s ago: executing program 5 (id=2615): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x8000000000000000, 0xf794}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x50000048) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x395e, 0xc000, 0x3, 0xa0002f5}) add_key(&(0x7f0000000380)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xff, 0x20000, 0xfffffffffffffffc, 0x1b}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000140)=0x10) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x569, &(0x7f0000001f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 6.087383571s ago: executing program 5 (id=2617): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="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", @ANYRESDEC, @ANYRES32=r2, @ANYRES64, @ANYRES16=r1, @ANYRES32=r1, @ANYRES32, @ANYRES8, @ANYRES16=r1, @ANYRESOCT], 0x25, 0x359, &(0x7f0000000bc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000100)={[{@inlinecrypt}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f0000000f80)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) 5.693833945s ago: executing program 2 (id=2619): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="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", @ANYRESDEC, @ANYRES32=r3, @ANYRES64, @ANYRES16=r2, @ANYRES32=r2, @ANYRES32, @ANYRES8, @ANYRES16=r2, @ANYRESOCT], 0x25, 0x359, &(0x7f0000000bc0)="$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") quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000140)=@rnullb, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 2.475661076s ago: executing program 0 (id=2627): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x8000000000000000, 0xf794}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24004880) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000240)='.\x00', 0x50000048) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x395e, 0xc000, 0x3, 0xa0002f5}) add_key(&(0x7f0000000380)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xff, 0x20000, 0xfffffffffffffffc, 0x1b}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000140)=0x10) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x569, &(0x7f0000001f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 2.195722742s ago: executing program 9 (id=2630): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f0000000100)='./file1/file0\x00', 0x14927e, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000080)={{0x4}, {0x81, 0x2}, 0x8, 0x7, 0x3}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1) fallocate(r1, 0x0, 0x8003, 0x7) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0x800e3, 0x0, 0x100, 0x1, 0x0, [{0x7, 0x3c, 0x0, '\x00', 0x280}]}) 2.0266277s ago: executing program 0 (id=2631): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x32, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x640b3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x2000006, 0x2, 0x0, 0xfffffffe, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0}) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r9, 0x3, r3, 0x5}) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0xa) fsetxattr$security_selinux(r10, 0x0, 0x0, 0x0, 0x3) ioctl$TUNATTACHFILTER(r10, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r11, 0x1, &(0x7f00000004c0)=[0x0]) 1.884420313s ago: executing program 9 (id=2633): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x81}, 0x106200, 0x10004, 0x20da, 0x7, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 1.732197784s ago: executing program 9 (id=2634): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0xfe8e, 0x12) 1.665914971s ago: executing program 9 (id=2635): unshare(0x22020600) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 1.595636807s ago: executing program 9 (id=2636): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$packet(0x11, 0x3, 0x300) openat$vcsu(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c6) mount(0x0, 0x0, 0x0, 0xc00, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.066750786s ago: executing program 5 (id=2637): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xb4df}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) fsmount(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3], 0x28}}, 0x802) 847.233593ms ago: executing program 0 (id=2638): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xb4df}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) fsmount(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3], 0x28}}, 0x802) 829.4749ms ago: executing program 5 (id=2639): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f08000100051075ad9aa8af1501cd4a3b4f05af1915000000000898083e5f82fcfebccf7c165ef099"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x18, 0x1, 0x2) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) fdatasync(r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12}, 0x0, 0x0, r7, 0x0) ftruncate(r7, 0x5) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x59) pwrite64(r8, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x149842, 0xa) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0xffffffffffffff9e, &(0x7f0000000ac0)={0x0}}, 0x40000c0) 763.577047ms ago: executing program 0 (id=2640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, 0x2, 0x3, 0x401, 0x0, 0x1000000, {0x3, 0x0, 0x4001}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setrlimit(0x2, &(0x7f0000000500)={0x89, 0xec}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x29201962041909f3}, 0x0) r4 = epoll_create1(0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r7 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x50, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x81}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000002c0)={r6, 0x2, 0x8, 0x7, 0x101, 0x7fff}, 0x14) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x10) 624.80431ms ago: executing program 9 (id=2641): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x33, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 597.562655ms ago: executing program 0 (id=2642): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @empty, 0xa2}}, 0x24) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x6, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @private2, 0x42}}, 0x24) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be", 0x61}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000540)="9172452e8d7b9e7c861a7142d138f77f22d01c7b247781817b764bda13d33d5eb2467f43b7f145272542449b69c08f", 0xfffffffffffffeee, 0x10008095, 0x0, 0xfffffffffffffd9a) 464.056979ms ago: executing program 6 (id=2643): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000000c000000000000000100000000000000", @ANYRES32=0x1], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125) r7 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x27, 0x0, 0x0) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f00000014c0)={0x5, 0x5, 0x1c, 0x20000a, 0x20019e, 0x0}) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) 0s ago: executing program 5 (id=2644): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000200), 0x6, 0x200) r1 = io_uring_setup(0xae5, &(0x7f0000000580)={0x0, 0x2cae4, 0x1000, 0x2, 0x3e1}) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, 0x0, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) close_range(r1, r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000700)={{0xa, 0x4e20, 0x0, @remote, 0xa}, {0xa, 0x4e23, 0x3, @local, 0x5}, 0xffffffffffffffff, {[0x1, 0xc, 0xb8, 0x8, 0x9, 0x0, 0xd, 0x8]}}, 0x5c) tkill(r8, 0x7) wait4(r8, 0x0, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x1ee86, 0x409}, [@IFLA_NET_NS_PID={0x8, 0x13, r8}]}, 0x28}}, 0x24008844) process_vm_readv(r8, &(0x7f0000000480)=[{&(0x7f0000000000)=""/37, 0x25}, {&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f0000000240)=""/202, 0xca}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000880)=""/190, 0xfffffffffffffec0}, {&(0x7f0000000400)=""/126, 0x7e}], 0x7, &(0x7f00000006c0)=[{&(0x7f0000000940)=""/129, 0x7f}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000640)=""/76, 0x4c}], 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000800)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e24, @multicast2}, 0x1de, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x7, 0x3}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f00000007c0)={0x5, &(0x7f0000000780)=[{0x5, 0xe9, 0xe1, 0x6}, {0xa, 0x2, 0x4, 0x629c}, {0x1, 0x1, 0x4, 0xac94}, {0x10, 0x6, 0x2, 0xef5}, {0xfbff, 0x5, 0x81, 0x24}]}, 0x10) pread64(r0, 0x0, 0x0, 0x10000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kernel console output (not intermixed with test programs): 3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.997126][T11802] RSP: 002b:00007ff3f15ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.997151][T11802] RAX: ffffffffffffffda RBX: 00007ff3f2e15fa0 RCX: 00007ff3f2b9c629 [ 425.997163][T11802] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 425.997180][T11802] RBP: 00007ff3f15ef090 R08: 0000000000000000 R09: 0000000000000000 [ 425.997195][T11802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.997207][T11802] R13: 00007ff3f2e16038 R14: 00007ff3f2e15fa0 R15: 00007fff2cb94348 [ 425.997285][T11802] [ 426.179327][T11805] netlink: 'syz.8.2322': attribute type 1 has an invalid length. [ 426.194770][T11808] tipc: Enabling of bearer rejected, failed to enable media [ 426.266855][T11818] veth3: entered promiscuous mode [ 426.293410][T11818] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 426.332456][T11805] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2322'. [ 426.366639][T11805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.419404][T11829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2331'. [ 426.450726][T11829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2331'. [ 426.675047][T11839] loop8: detected capacity change from 0 to 164 [ 426.706375][T11827] syz.5.2330 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 426.717124][T11839] iso9660: Unknown parameter '' [ 426.738349][T11827] CPU: 0 UID: 0 PID: 11827 Comm: syz.5.2330 Tainted: G W syzkaller #0 PREEMPT(full) [ 426.738409][T11827] Tainted: [W]=WARN [ 426.738416][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.738428][T11827] Call Trace: [ 426.738434][T11827] [ 426.738442][T11827] __dump_stack+0x1d/0x30 [ 426.738519][T11827] dump_stack_lvl+0x95/0xd0 [ 426.738541][T11827] dump_stack+0x15/0x1b [ 426.738562][T11827] dump_header+0x80/0x240 [ 426.738593][T11827] oom_kill_process+0x295/0x350 [ 426.738685][T11827] out_of_memory+0x97d/0xb80 [ 426.738705][T11827] try_charge_memcg+0x62e/0xa10 [ 426.738754][T11827] obj_cgroup_charge_pages+0x23/0xc0 [ 426.738783][T11827] __memcg_kmem_charge_page+0x9e/0x170 [ 426.738809][T11827] __alloc_frozen_pages_noprof+0x18a/0x360 [ 426.738837][T11827] alloc_pages_mpol+0xb3/0x260 [ 426.738904][T11827] alloc_pages_noprof+0x8f/0x130 [ 426.738993][T11827] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 426.739064][T11827] __kvmalloc_node_noprof+0x3d4/0x650 [ 426.739087][T11827] ? futex_hash_allocate+0x190/0x9d0 [ 426.739113][T11827] ? futex_hash_allocate+0x190/0x9d0 [ 426.739153][T11827] futex_hash_allocate+0x190/0x9d0 [ 426.739181][T11827] ? cap_task_prctl+0x13f/0x6e0 [ 426.739201][T11827] futex_hash_prctl+0xd8/0xf0 [ 426.739226][T11827] __se_sys_prctl+0xa3d/0x13f0 [ 426.739271][T11827] __x64_sys_prctl+0x67/0x80 [ 426.739296][T11827] x64_sys_call+0x2533/0x3020 [ 426.739321][T11827] do_syscall_64+0x12c/0x370 [ 426.739377][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.739398][T11827] RIP: 0033:0x7f74319bc629 [ 426.739413][T11827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.739431][T11827] RSP: 002b:00007f743040f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 426.739464][T11827] RAX: ffffffffffffffda RBX: 00007f7431c35fa0 RCX: 00007f74319bc629 [ 426.739478][T11827] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 426.739491][T11827] RBP: 00007f7431a52b39 R08: 0000000000000000 R09: 0000000000000000 [ 426.739506][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.739519][T11827] R13: 00007f7431c36038 R14: 00007f7431c35fa0 R15: 00007ffe67ff8658 [ 426.739537][T11827] [ 426.739664][T11827] memory: usage 282500kB, limit 307200kB, failcnt 519 [ 426.840412][ T50] bio_check_eod: 598 callbacks suppressed [ 426.840430][ T50] kworker/u8:3: attempt to access beyond end of device [ 426.840430][ T50] loop6: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 426.896903][T11827] memory+swap: usage 217076kB, limit 9007199254740988kB, failcnt 0 [ 426.917576][ T50] kworker/u8:3: attempt to access beyond end of device [ 426.917576][ T50] loop6: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 426.959408][T11827] kmem: usage 160216kB, limit 9007199254740988kB, failcnt 0 [ 427.071134][ T50] kworker/u8:3: attempt to access beyond end of device [ 427.071134][ T50] loop6: rw=1, sector=1960, nr_sectors = 2048 limit=256 [ 427.098659][T11827] Memory cgroup stats for /syz5: [ 427.099026][T11827] cache 0 [ 427.130565][T11845] loop8: detected capacity change from 0 to 512 [ 427.134563][ T50] kworker/u8:3: attempt to access beyond end of device [ 427.134563][ T50] loop6: rw=1, sector=4008, nr_sectors = 2536 limit=256 [ 427.137184][T11827] rss 204800 [ 427.137193][T11827] shmem 0 [ 427.137200][T11827] mapped_file 413696 [ 427.183914][T11845] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 427.204878][ T50] kworker/u8:3: attempt to access beyond end of device [ 427.204878][ T50] loop6: rw=1, sector=6544, nr_sectors = 2384 limit=256 [ 427.208577][T11845] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.2338: corrupted xattr entries [ 427.231417][T11827] dirty 0 [ 427.234618][T11827] writeback 0 [ 427.244492][T11827] workingset_refault_anon 869 [ 427.249752][T11845] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 427.249855][T11827] workingset_refault_file 0 [ 427.259618][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 427.259644][ C0] EXT4-fs (loop8): initial error at time 1772055506: xattr_find_entry:337: inode 15 [ 427.259689][ C0] EXT4-fs (loop8): last error at time 1772055506: xattr_find_entry:337: inode 15 [ 427.268787][ T50] kworker/u8:3: attempt to access beyond end of device [ 427.268787][ T50] loop6: rw=1, sector=8928, nr_sectors = 2712 limit=256 [ 427.284746][T11845] EXT4-fs (loop8): Remounting filesystem read-only [ 427.294879][ T50] kworker/u8:3: attempt to access beyond end of device [ 427.294879][ T50] loop6: rw=1, sector=11640, nr_sectors = 2056 limit=256 [ 427.330687][ T50] kworker/u8:3: attempt to access beyond end of device [ 427.330687][ T50] loop6: rw=1, sector=13696, nr_sectors = 2360 limit=256 [ 427.348465][T11845] EXT4-fs (loop8): 1 truncate cleaned up [ 427.351884][ T50] kworker/u8:3: attempt to access beyond end of device [ 427.351884][ T50] loop6: rw=1, sector=16056, nr_sectors = 2696 limit=256 [ 427.355136][T11845] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.370599][ T50] kworker/u8:3: attempt to access beyond end of device [ 427.370599][ T50] loop6: rw=1, sector=18752, nr_sectors = 136 limit=256 [ 427.390009][T11827] swap 98304 [ 427.414374][T11827] swapcached 22863872 [ 427.427108][T11827] pgpgin 382953 [ 427.430685][T11827] pgpgout 382903 [ 427.445191][T11827] pgfault 371835 [ 427.453385][T11827] pgmajfault 200 [ 427.469779][T11827] inactive_anon 204800 [ 427.474530][T11827] active_anon 0 [ 427.494624][T11827] inactive_file 0 [ 427.501456][T11827] active_file 0 [ 427.515314][T11827] unevictable 0 [ 427.519345][T11827] hierarchical_memory_limit 314572800 [ 427.525315][T11827] hierarchical_memsw_limit 9223372036854771712 [ 427.577212][T11827] total_cache 0 [ 427.582156][T11827] total_rss 204800 [ 427.586748][T11827] total_shmem 0 [ 427.590783][T11827] total_mapped_file 413696 [ 427.595620][T11827] total_dirty 0 [ 427.599868][T11827] total_writeback 0 [ 427.603810][T11827] total_workingset_refault_anon 869 [ 427.621402][T11827] total_workingset_refault_file 0 [ 427.623158][T11860] netlink: 'syz.2.2343': attribute type 1 has an invalid length. [ 427.626594][T11827] total_swap 98304 [ 427.626605][T11827] total_swapcached 22863872 [ 427.626614][T11827] total_pgpgin 382953 [ 427.626623][T11827] total_pgpgout 382903 [ 427.655682][T11827] total_pgfault 371835 [ 427.663247][T11827] total_pgmajfault 200 [ 427.667838][T11827] total_inactive_anon 204800 [ 427.672826][T11827] total_active_anon 0 [ 427.691590][T11860] veth7: entered promiscuous mode [ 427.701566][T11860] bond0: (slave veth7): Enslaving as a backup interface with a down link [ 427.717978][T11866] loop6: detected capacity change from 0 to 1024 [ 427.733931][T11860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2343'. [ 427.744662][T11827] total_inactive_file 0 [ 427.750016][T11827] total_active_file 0 [ 427.755454][T11866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.771545][T11860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.795729][T11827] total_unevictable 0 [ 427.805930][T11827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2330,pid=11826,uid=0 [ 427.953284][T11827] Memory cgroup out of memory: Killed process 11827 (syz.5.2330) total-vm:94564kB, anon-rss:1416kB, file-rss:22956kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 427.986944][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 427.986961][ T28] audit: type=1400 audit(1772055507.079:1009): avc: denied { rmdir } for pid=11865 comm="syz.6.2344" name="file1" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.056908][T11219] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.071224][ T28] audit: type=1400 audit(1772055507.079:1010): avc: denied { rename } for pid=11865 comm="syz.6.2344" name="file1" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.130079][ T28] audit: type=1400 audit(1772055507.079:1011): avc: denied { reparent } for pid=11865 comm="syz.6.2344" name="file1" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.136931][T11874] loop2: detected capacity change from 0 to 512 [ 428.191827][ T4260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.206042][ T28] audit: type=1400 audit(1772055507.079:1012): avc: denied { unlink } for pid=11865 comm="syz.6.2344" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 428.296541][T11874] EXT4-fs: Ignoring removed nobh option [ 428.297338][ T28] audit: type=1400 audit(1772055507.199:1013): avc: denied { unlink } for pid=4197 comm="syz-executor" name="file0" dev="tmpfs" ino=2370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 428.342608][T11882] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 428.349507][T11882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.367185][T11874] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 428.384524][T11882] vhci_hcd vhci_hcd.0: Device attached [ 428.390894][T11883] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(17) [ 428.398185][T11883] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.406973][T11883] vhci_hcd vhci_hcd.0: Device attached [ 428.414470][T11874] EXT4-fs (loop2): 1 truncate cleaned up [ 428.420667][T11874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.433286][T11874] FAULT_INJECTION: forcing a failure. [ 428.433286][T11874] name failslab, interval 1, probability 0, space 0, times 0 [ 428.455486][T11893] loop8: detected capacity change from 0 to 164 [ 428.468164][T11874] CPU: 0 UID: 0 PID: 11874 Comm: syz.2.2345 Tainted: G W syzkaller #0 PREEMPT(full) [ 428.468196][T11874] Tainted: [W]=WARN [ 428.468240][T11874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.468325][T11874] Call Trace: [ 428.468331][T11874] [ 428.468337][T11874] __dump_stack+0x1d/0x30 [ 428.468360][T11874] dump_stack_lvl+0x95/0xd0 [ 428.468390][T11874] dump_stack+0x15/0x1b [ 428.468475][T11874] should_fail_ex+0x263/0x280 [ 428.468493][T11874] should_failslab+0x8c/0xb0 [ 428.468631][T11874] kmem_cache_alloc_noprof+0x66/0x400 [ 428.468649][T11874] ? do_getname+0x2e/0x1c0 [ 428.468669][T11874] do_getname+0x2e/0x1c0 [ 428.468692][T11874] getname_flags+0x1d/0x30 [ 428.468713][T11874] do_sys_openat2+0x60/0x130 [ 428.468865][T11874] __x64_sys_openat+0xf2/0x120 [ 428.468887][T11874] x64_sys_call+0x1e39/0x3020 [ 428.468921][T11874] do_syscall_64+0x12c/0x370 [ 428.468956][T11874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.468979][T11874] RIP: 0033:0x7ff3f2b9c629 [ 428.468993][T11874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.469052][T11874] RSP: 002b:00007ff3f15ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 428.469069][T11874] RAX: ffffffffffffffda RBX: 00007ff3f2e16090 RCX: 00007ff3f2b9c629 [ 428.469081][T11874] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 428.469094][T11874] RBP: 00007ff3f15ce090 R08: 0000000000000000 R09: 0000000000000000 [ 428.469157][T11874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.469241][T11874] R13: 00007ff3f2e16128 R14: 00007ff3f2e16090 R15: 00007fff2cb94348 [ 428.469257][T11874] [ 428.504188][ T3315] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 428.547053][T11882] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(16) [ 428.677999][T11882] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 428.685897][T11883] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(21) [ 428.692820][T11883] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.701079][T11893] iso9660: Unknown parameter '' [ 428.703938][ T3315] CPU: 0 UID: 0 PID: 3315 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 428.703968][ T3315] Tainted: [W]=WARN [ 428.703975][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.704040][ T3315] Call Trace: [ 428.704047][ T3315] [ 428.704056][ T3315] __dump_stack+0x1d/0x30 [ 428.704084][ T3315] dump_stack_lvl+0x95/0xd0 [ 428.704147][ T3315] dump_stack+0x15/0x1b [ 428.704168][ T3315] dump_header+0x80/0x240 [ 428.704191][ T3315] oom_kill_process+0x295/0x350 [ 428.704246][ T3315] out_of_memory+0x97d/0xb80 [ 428.704267][ T3315] try_charge_memcg+0x62e/0xa10 [ 428.704358][ T3315] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 428.704388][ T3315] __swap_cache_prepare_and_add+0x386/0x530 [ 428.704482][ T3315] swap_cache_alloc_folio+0xa2/0x120 [ 428.704560][ T3315] swap_cluster_readahead+0x26e/0x3d0 [ 428.704632][ T3315] swapin_readahead+0xde/0x840 [ 428.704664][ T3315] ? _raw_spin_unlock+0x9/0x30 [ 428.704754][ T3315] ? swap_put_entries_cluster+0x385/0x3a0 [ 428.704783][ T3315] ? swap_put_entries_cluster+0x81/0x3a0 [ 428.704810][ T3315] ? __rcu_read_unlock+0x4e/0x70 [ 428.704868][ T3315] ? swap_cache_get_folio+0x26f/0x280 [ 428.704894][ T3315] do_swap_page+0x309/0x2210 [ 428.704964][ T3315] ? css_rstat_updated+0xbb/0x280 [ 428.704984][ T3315] ? __rcu_read_lock+0x36/0x50 [ 428.705004][ T3315] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 428.705030][ T3315] handle_mm_fault+0xb40/0x3020 [ 428.705109][ T3315] ? vma_start_read+0x1c7/0x2c0 [ 428.705150][ T3315] do_user_addr_fault+0x62f/0x1050 [ 428.705251][ T3315] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 428.705304][ T3315] ? trace_page_fault_user+0x1f/0xe0 [ 428.705351][ T3315] exc_page_fault+0x62/0xa0 [ 428.705451][ T3315] asm_exc_page_fault+0x26/0x30 [ 428.705472][ T3315] RIP: 0033:0x7fae6c8ba6ca [ 428.705488][ T3315] Code: 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 <39> 7c 24 08 48 89 ce 4c 0f 45 f1 48 29 c6 48 39 35 c1 af ed 00 73 [ 428.705507][ T3315] RSP: 002b:00007fff1c4e5ff0 EFLAGS: 00010202 [ 428.705524][ T3315] RAX: 00000000000684f0 RBX: 0000000000000555 RCX: 0000000000068992 [ 428.705537][ T3315] RDX: 00000000000001b2 RSI: 00007fff1c4e6080 RDI: 000000000000001b [ 428.705582][ T3315] RBP: 00007fff1c4e602c R08: 0000000019e0ae93 R09: 0000000000000000 [ 428.705595][ T3315] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 428.705609][ T3315] R13: 00000000000927c0 R14: 0000000000068694 R15: 00007fff1c4e6080 [ 428.705629][ T3315] [ 428.705636][ T3315] memory: usage 307196kB, limit 307200kB, failcnt 708 [ 428.881467][T11896] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(24) [ 428.982385][T11896] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.991265][T11882] vhci_hcd vhci_hcd.0: Device attached [ 428.997972][T11883] vhci_hcd vhci_hcd.0: Device attached [ 429.009456][ T3315] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 429.017798][ T3315] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 429.025616][ T3315] Memory cgroup stats for /syz0: [ 429.025901][ T3315] cache 0 [ 429.035531][ T3315] rss 0 [ 429.038573][ T3315] shmem 0 [ 429.041688][ T3315] mapped_file 413696 [ 429.045722][ T3315] dirty 0 [ 429.050820][T11896] vhci_hcd vhci_hcd.0: Device attached [ 429.087512][T11462] usb 13-1: new low-speed USB device number 3 using vhci_hcd [ 429.106537][T11883] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 429.147973][ T3315] writeback 0 [ 429.151490][ T3315] workingset_refault_anon 538 [ 429.156364][ T3315] workingset_refault_file 889 [ 429.161743][ T3315] swap 196608 [ 429.165150][ T3315] swapcached 18747392 [ 429.284120][T11896] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 429.306449][ T3315] pgpgin 478032 [ 429.328049][ T3315] pgpgout 478030 [ 429.342484][T11882] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(20) [ 429.349962][T11882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 429.381137][ T3315] pgfault 478903 [ 429.384992][ T3315] pgmajfault 115 [ 429.430644][ T3315] inactive_anon 0 [ 429.455030][ T3315] active_anon 8192 [ 429.496863][T11882] vhci_hcd vhci_hcd.0: Device attached [ 429.507004][ T3315] inactive_file 0 [ 429.511114][ T3315] active_file 0 [ 429.515031][ T3315] unevictable 0 [ 429.518796][ T3315] hierarchical_memory_limit 314572800 [ 429.524318][ T3315] hierarchical_memsw_limit 9223372036854771712 [ 429.540072][T11883] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 429.556699][ T3315] total_cache 0 [ 429.610200][ T3315] total_rss 0 [ 429.613514][ T3315] total_shmem 0 [ 429.619852][T11871] syz.2.2345 (11871) used greatest stack depth: 6944 bytes left [ 429.638417][ T3315] total_mapped_file 413696 [ 429.643672][ T3315] total_dirty 0 [ 429.647293][T11897] vhci_hcd: connection closed [ 429.647413][T11894] vhci_hcd: connection closed [ 429.647560][ T309] vhci_hcd vhci_hcd.6: stop threads [ 429.652346][T11891] vhci_hcd: connection closed [ 429.652423][T11886] vhci_hcd: connection closed [ 429.657827][T11884] vhci_hcd: connection reset by peer [ 429.663239][T11900] vhci_hcd: connection closed [ 429.668269][ T309] vhci_hcd vhci_hcd.6: release socket [ 429.688486][ T3315] total_writeback 0 [ 429.692569][ T3315] total_workingset_refault_anon 538 [ 429.710115][ T3315] total_workingset_refault_file 889 [ 429.720182][ T3315] total_swap 196608 [ 429.723391][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.724356][ T3315] total_swapcached 18747392 [ 429.724366][ T3315] total_pgpgin 478032 [ 429.724374][ T3315] total_pgpgout 478030 [ 429.754304][ T309] vhci_hcd vhci_hcd.6: disconnect device [ 429.767056][ T309] vhci_hcd vhci_hcd.6: stop threads [ 429.773126][ T3315] total_pgfault 478903 [ 429.777573][ T309] vhci_hcd vhci_hcd.6: release socket [ 429.783909][ T3315] total_pgmajfault 115 [ 429.795744][ T309] vhci_hcd vhci_hcd.6: disconnect device [ 429.804253][ T3315] total_inactive_anon 0 [ 429.810038][ T28] audit: type=1400 audit(1772055508.909:1014): avc: denied { mounton } for pid=11912 comm="syz.5.2354" path="/428/bus" dev="tmpfs" ino=2394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 429.837490][ T309] vhci_hcd vhci_hcd.6: stop threads [ 429.839385][ T3315] total_active_anon 8192 [ 429.847081][ T309] vhci_hcd vhci_hcd.6: release socket [ 429.853075][ T309] vhci_hcd vhci_hcd.6: disconnect device [ 429.853715][ T3315] total_inactive_file 0 [ 429.869498][ T309] vhci_hcd vhci_hcd.6: stop threads [ 429.886897][ T3315] total_active_file 0 [ 429.895665][ T309] vhci_hcd vhci_hcd.6: release socket [ 429.899666][ T3315] total_unevictable 0 [ 429.918466][ T3315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2339,pid=11848,uid=0 [ 429.925952][ T309] vhci_hcd vhci_hcd.6: disconnect device [ 429.953306][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2357'. [ 429.961106][ T3315] Memory cgroup out of memory: Killed process 11848 (syz.0.2339) total-vm:96612kB, anon-rss:1228kB, file-rss:22744kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 429.980964][ T309] vhci_hcd vhci_hcd.6: stop threads [ 429.986895][ T309] vhci_hcd vhci_hcd.6: release socket [ 429.992952][ T309] vhci_hcd vhci_hcd.6: disconnect device [ 429.999439][ T309] vhci_hcd vhci_hcd.6: stop threads [ 430.005161][ T309] vhci_hcd vhci_hcd.6: release socket [ 430.012535][ T309] vhci_hcd vhci_hcd.6: disconnect device [ 430.399808][T11932] loop6: detected capacity change from 0 to 164 [ 430.432976][T11931] rock: directory entry would overflow storage [ 430.440818][T11931] rock: sig=0x4f50, size=4, remaining=3 [ 430.448739][T11931] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 430.598362][ T28] audit: type=1400 audit(1772055509.699:1015): avc: denied { create } for pid=11936 comm="syz.8.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 430.622127][ T28] audit: type=1400 audit(1772055509.699:1016): avc: denied { block_suspend } for pid=11936 comm="syz.8.2362" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 430.646190][ T28] audit: type=1400 audit(1772055509.699:1017): avc: denied { name_connect } for pid=11936 comm="syz.8.2362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 431.448735][T11957] netlink: 'syz.5.2369': attribute type 6 has an invalid length. [ 431.464107][T11957] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.2369'. [ 431.510602][ T28] audit: type=1400 audit(1772055510.609:1018): avc: denied { create } for pid=11963 comm="syz.5.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 431.645867][T11962] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 431.653069][T11962] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 431.663496][T11962] vhci_hcd vhci_hcd.0: Device attached [ 431.671305][T11974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2374'. [ 431.818783][T11962] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(16) [ 431.825940][T11962] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 431.844397][T11974] loop2: detected capacity change from 0 to 164 [ 431.911741][T11967] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(19) [ 431.919131][T11967] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 432.005515][T11970] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(22) [ 432.012237][T11970] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.066364][T11962] vhci_hcd vhci_hcd.0: Device attached [ 432.087846][T11985] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(25) [ 432.094822][T11985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.124980][T11967] vhci_hcd vhci_hcd.0: Device attached [ 432.131151][T11970] vhci_hcd vhci_hcd.0: Device attached [ 432.137236][T11985] vhci_hcd vhci_hcd.0: Device attached [ 432.148005][T11988] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(18) [ 432.155059][T11988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.163061][T11988] vhci_hcd vhci_hcd.0: Device attached [ 432.169935][T11962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 432.182425][T11962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 432.191925][T11962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 432.201634][T11989] vhci_hcd: connection closed [ 432.201657][T11983] vhci_hcd: connection closed [ 432.202543][T11986] vhci_hcd: connection closed [ 432.206427][ T309] vhci_hcd vhci_hcd.6: stop threads [ 432.230909][T11981] vhci_hcd: connection closed [ 432.231099][T11977] vhci_hcd: connection closed [ 432.231596][ T309] vhci_hcd vhci_hcd.6: release socket [ 432.247357][T11973] vhci_hcd: connection closed [ 432.247569][ T309] vhci_hcd vhci_hcd.6: disconnect device [ 432.266885][ T309] vhci_hcd vhci_hcd.6: stop threads [ 432.278499][T11992] netlink: 'syz.5.2375': attribute type 4 has an invalid length. [ 432.283806][ T309] vhci_hcd vhci_hcd.6: release socket [ 432.294960][ T309] vhci_hcd vhci_hcd.6: disconnect device [ 432.327048][ T309] vhci_hcd vhci_hcd.6: stop threads [ 432.338333][ T309] vhci_hcd vhci_hcd.6: release socket [ 432.344992][ T309] vhci_hcd vhci_hcd.6: disconnect device [ 432.360697][ T309] vhci_hcd vhci_hcd.6: stop threads [ 432.369963][T11992] netlink: 'syz.5.2375': attribute type 4 has an invalid length. [ 432.387347][ T309] vhci_hcd vhci_hcd.6: release socket [ 432.395072][ T309] vhci_hcd vhci_hcd.6: disconnect device [ 432.417013][ T309] vhci_hcd vhci_hcd.6: stop threads [ 432.432508][ T309] vhci_hcd vhci_hcd.6: release socket [ 432.442534][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2375'. [ 432.462585][ T309] vhci_hcd vhci_hcd.6: disconnect device [ 432.481759][ T309] vhci_hcd vhci_hcd.6: stop threads [ 432.507057][ T309] vhci_hcd vhci_hcd.6: release socket [ 432.512616][ T309] vhci_hcd vhci_hcd.6: disconnect device [ 432.571826][T12010] loop8: detected capacity change from 0 to 512 [ 432.652986][T12017] FAULT_INJECTION: forcing a failure. [ 432.652986][T12017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.667028][T12010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 432.695727][T12010] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 432.706618][T12010] System zones: 1-2, 4-12, 8-8 [ 432.712999][T12017] CPU: 0 UID: 0 PID: 12017 Comm: syz.0.2382 Tainted: G W syzkaller #0 PREEMPT(full) [ 432.713032][T12017] Tainted: [W]=WARN [ 432.713040][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.713053][T12017] Call Trace: [ 432.713123][T12017] [ 432.713132][T12017] __dump_stack+0x1d/0x30 [ 432.713155][T12017] dump_stack_lvl+0x95/0xd0 [ 432.713175][T12017] dump_stack+0x15/0x1b [ 432.713193][T12017] should_fail_ex+0x263/0x280 [ 432.713215][T12017] should_fail+0xb/0x20 [ 432.713288][T12017] should_fail_usercopy+0x1a/0x20 [ 432.713340][T12017] _copy_to_user+0x20/0xa0 [ 432.713367][T12017] simple_read_from_buffer+0xb5/0x130 [ 432.713388][T12017] proc_fail_nth_read+0x10e/0x150 [ 432.713412][T12017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 432.713452][T12017] vfs_read+0x1ab/0x7f0 [ 432.713483][T12017] ? __rcu_read_unlock+0x4e/0x70 [ 432.713506][T12017] ? __fget_files+0x184/0x1c0 [ 432.713525][T12017] ? mutex_lock+0x57/0x90 [ 432.713610][T12017] ksys_read+0xdc/0x1a0 [ 432.713642][T12017] __x64_sys_read+0x40/0x50 [ 432.713782][T12017] x64_sys_call+0x2886/0x3020 [ 432.713808][T12017] do_syscall_64+0x12c/0x370 [ 432.713836][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.713890][T12017] RIP: 0033:0x7fae6c9acece [ 432.713904][T12017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 432.713920][T12017] RSP: 002b:00007fae6b425fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 432.713979][T12017] RAX: ffffffffffffffda RBX: 00007fae6b4266c0 RCX: 00007fae6c9acece [ 432.713994][T12017] RDX: 000000000000000f RSI: 00007fae6b4260a0 RDI: 0000000000000004 [ 432.714009][T12017] RBP: 00007fae6b426090 R08: 0000000000000000 R09: 0000000000000000 [ 432.714023][T12017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.714098][T12017] R13: 00007fae6cc66128 R14: 00007fae6cc66090 R15: 00007fff1c4e5c88 [ 432.714114][T12017] [ 432.716502][T12010] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2381: iget: bad i_size value: 38620345925642 [ 432.906618][T12024] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 432.944963][T12024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.952900][T12010] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 432.953578][T12010] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2381: couldn't read orphan inode 15 (err -117) [ 432.963260][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 432.963280][ C0] EXT4-fs (loop8): initial error at time 1772055512: ext4_orphan_get:1391: inode 15 [ 432.963310][ C0] EXT4-fs (loop8): last error at time 1772055512: ext4_orphan_get:1391: inode 15 [ 432.985605][T12028] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2386'. [ 432.995151][T12010] loop8: lost filesystem error report for type 5 error -117 [ 433.018864][T12024] vhci_hcd vhci_hcd.0: Device attached [ 433.019412][T12029] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(17) [ 433.019489][T12029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.019550][T12029] vhci_hcd vhci_hcd.0: Device attached [ 433.022171][T12010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.049632][T12024] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(16) [ 433.049660][T12024] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 433.058564][T12024] vhci_hcd vhci_hcd.0: Device attached [ 433.117632][T12029] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(20) [ 433.124784][T12029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.164424][T12029] vhci_hcd vhci_hcd.0: Device attached [ 433.177093][T12024] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(23) [ 433.184257][T12024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.220679][T12024] vhci_hcd vhci_hcd.0: Device attached [ 433.227087][T12029] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(22) [ 433.233892][T12029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.247863][T12029] vhci_hcd vhci_hcd.0: Device attached [ 433.268296][T12024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 433.279324][T12024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 433.288958][T12024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 433.304738][T12042] vhci_hcd: connection closed [ 433.304810][T12037] vhci_hcd: connection closed [ 433.306614][T12040] vhci_hcd: connection closed [ 433.310326][T12034] vhci_hcd: connection closed [ 433.314558][ T30] vhci_hcd vhci_hcd.6: stop threads [ 433.319930][T12030] vhci_hcd: connection closed [ 433.326869][ T30] vhci_hcd vhci_hcd.6: release socket [ 433.330201][T12032] vhci_hcd: connection closed [ 433.346314][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 433.361511][T12045] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2387'. [ 433.381328][ T30] vhci_hcd vhci_hcd.6: stop threads [ 433.391353][ T30] vhci_hcd vhci_hcd.6: release socket [ 433.411577][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 433.426951][ T30] vhci_hcd vhci_hcd.6: stop threads [ 433.438131][ T30] vhci_hcd vhci_hcd.6: release socket [ 433.441321][ T4545] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap [ 433.448079][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 433.472135][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 433.472176][ T28] audit: type=1400 audit(1772055512.569:1023): avc: denied { read } for pid=12044 comm="syz.0.2387" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 433.472993][ T4545] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 433.515517][ T30] vhci_hcd vhci_hcd.6: stop threads [ 433.521181][ T30] vhci_hcd vhci_hcd.6: release socket [ 433.525819][ T4545] EXT4-fs (loop8): This should not happen!! Data will be lost [ 433.525819][ T4545] [ 433.533661][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 433.537220][ T4545] EXT4-fs (loop8): Total free blocks count 0 [ 433.543390][ T30] vhci_hcd vhci_hcd.6: stop threads [ 433.549231][ T4545] EXT4-fs (loop8): Free/Dirty block details [ 433.554633][ T30] vhci_hcd vhci_hcd.6: release socket [ 433.560653][ T4545] EXT4-fs (loop8): free_blocks=0 [ 433.569266][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 433.578936][ T30] vhci_hcd vhci_hcd.6: stop threads [ 433.584952][ T30] vhci_hcd vhci_hcd.6: release socket [ 433.591669][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 433.601154][ T4545] EXT4-fs (loop8): dirty_blocks=8576 [ 433.607131][ T4545] EXT4-fs (loop8): Block reservation details [ 433.625045][ T4545] EXT4-fs (loop8): i_reserved_data_blocks=8576 [ 433.651020][ T30] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 433.677008][ T28] audit: type=1400 audit(1772055512.769:1024): avc: denied { read write } for pid=12044 comm="syz.0.2387" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 433.733152][ T28] audit: type=1400 audit(1772055512.779:1025): avc: denied { open } for pid=12044 comm="syz.0.2387" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 433.758167][ T28] audit: type=1400 audit(1772055512.799:1026): avc: denied { ioctl } for pid=12044 comm="syz.0.2387" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.187175][T12073] loop2: detected capacity change from 0 to 512 [ 434.208422][T12072] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 434.215572][T12072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 434.242903][T12064] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2388'. [ 434.284055][T12072] vhci_hcd vhci_hcd.0: Device attached [ 434.324744][T12074] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(17) [ 434.331890][T12074] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 434.400418][T12073] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.419665][T12064] netlink: zone id is out of range [ 434.425717][T12064] netlink: zone id is out of range [ 434.450052][T12074] vhci_hcd vhci_hcd.0: Device attached [ 434.452351][T12064] netlink: zone id is out of range [ 434.464421][T12084] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(16) [ 434.471529][T12084] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 434.499646][T12084] vhci_hcd vhci_hcd.0: Device attached [ 434.619903][T12088] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2398'. [ 434.664237][T12074] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(19) [ 434.671210][T12074] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 434.696253][T12074] vhci_hcd vhci_hcd.0: Device attached [ 434.763089][T12072] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(23) [ 434.769882][T12072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 434.828790][T12072] vhci_hcd vhci_hcd.0: Device attached [ 434.871165][T12073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.879325][T12072] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 434.907410][T12073] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.927176][T12084] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(26) [ 434.933891][T12084] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 434.959382][T12072] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 434.968870][T12098] loop8: detected capacity change from 0 to 164 [ 434.982749][ T28] audit: type=1400 audit(1772055514.069:1027): avc: denied { mounton } for pid=12095 comm="syz.8.2399" path="/file0" dev="ramfs" ino=37357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 434.985606][T12084] vhci_hcd vhci_hcd.0: Device attached [ 435.064193][T12072] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 435.127772][T12091] vhci_hcd: connection closed [ 435.128093][ T30] vhci_hcd vhci_hcd.6: stop threads [ 435.128234][T12064] netlink: set zone limit has 8 unknown bytes [ 435.132970][ T30] vhci_hcd vhci_hcd.6: release socket [ 435.138564][T12097] vhci_hcd: connection closed [ 435.146896][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 435.177488][T12085] vhci_hcd: connection closed [ 435.177541][T12098] [ 435.177642][T12077] vhci_hcd: connection closed [ 435.182901][T12090] vhci_hcd: connection closed [ 435.187117][T12075] vhci_hcd: connection reset by peer [ 435.216838][ T28] audit: type=1400 audit(1772055514.129:1028): avc: denied { ioctl } for pid=12100 comm="syz.5.2400" path="socket:[37372]" dev="sockfs" ino=37372 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 435.227775][ T30] vhci_hcd vhci_hcd.6: stop threads [ 435.262160][ T28] audit: type=1400 audit(1772055514.129:1029): avc: denied { bind } for pid=12100 comm="syz.5.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 435.282541][ T30] vhci_hcd vhci_hcd.6: release socket [ 435.289520][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.300223][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 435.321352][ T28] audit: type=1400 audit(1772055514.179:1030): avc: denied { write } for pid=12100 comm="syz.5.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 435.342632][ T30] vhci_hcd vhci_hcd.6: stop threads [ 435.354859][ T30] vhci_hcd vhci_hcd.6: release socket [ 435.361139][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 435.368082][ T30] vhci_hcd vhci_hcd.6: stop threads [ 435.374515][ T30] vhci_hcd vhci_hcd.6: release socket [ 435.381033][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 435.407850][T12109] FAULT_INJECTION: forcing a failure. [ 435.407850][T12109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.422657][ T28] audit: type=1400 audit(1772055514.509:1031): avc: denied { mount } for pid=12108 comm="syz.0.2403" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 435.446796][T12109] CPU: 0 UID: 0 PID: 12109 Comm: syz.0.2403 Tainted: G W syzkaller #0 PREEMPT(full) [ 435.446827][T12109] Tainted: [W]=WARN [ 435.446833][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.446865][T12109] Call Trace: [ 435.446872][T12109] [ 435.446880][T12109] __dump_stack+0x1d/0x30 [ 435.446917][T12109] dump_stack_lvl+0x95/0xd0 [ 435.446940][T12109] dump_stack+0x15/0x1b [ 435.446958][T12109] should_fail_ex+0x263/0x280 [ 435.446979][T12109] should_fail+0xb/0x20 [ 435.447061][T12109] should_fail_usercopy+0x1a/0x20 [ 435.447155][T12109] _copy_to_user+0x20/0xa0 [ 435.447178][T12109] simple_read_from_buffer+0xb5/0x130 [ 435.447244][T12109] proc_fail_nth_read+0x10e/0x150 [ 435.447380][T12109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.447454][T12109] vfs_read+0x1ab/0x7f0 [ 435.447483][T12109] ? __rcu_read_unlock+0x4e/0x70 [ 435.447501][T12109] ? __fget_files+0x184/0x1c0 [ 435.447520][T12109] ? mutex_lock+0x57/0x90 [ 435.447565][T12109] ksys_read+0xdc/0x1a0 [ 435.447621][T12109] __x64_sys_read+0x40/0x50 [ 435.447649][T12109] x64_sys_call+0x2886/0x3020 [ 435.447672][T12109] do_syscall_64+0x12c/0x370 [ 435.447700][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.447791][T12109] RIP: 0033:0x7fae6c9acece [ 435.447808][T12109] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.447826][T12109] RSP: 002b:00007fae6b446fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.447925][T12109] RAX: ffffffffffffffda RBX: 00007fae6b4476c0 RCX: 00007fae6c9acece [ 435.447941][T12109] RDX: 000000000000000f RSI: 00007fae6b4470a0 RDI: 0000000000000006 [ 435.447974][T12109] RBP: 00007fae6b447090 R08: 0000000000000000 R09: 0000000000000000 [ 435.447986][T12109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.448004][T12109] R13: 00007fae6cc66038 R14: 00007fae6cc65fa0 R15: 00007fff1c4e5c88 [ 435.448020][T12109] [ 435.656511][ T30] vhci_hcd vhci_hcd.6: stop threads [ 435.662098][ T30] vhci_hcd vhci_hcd.6: release socket [ 435.670406][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 435.690038][ T30] vhci_hcd vhci_hcd.6: stop threads [ 435.696234][ T30] vhci_hcd vhci_hcd.6: release socket [ 435.707111][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 435.773171][T12117] loop8: detected capacity change from 0 to 1024 [ 435.811342][T12117] EXT4-fs: inline encryption not supported [ 435.977313][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2407'. [ 436.003613][ T28] audit: type=1400 audit(1772055515.089:1032): avc: denied { firmware_load } for pid=12116 comm="syz.8.2407" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 436.006960][T12128] loop6: detected capacity change from 0 to 256 [ 436.039983][T12121] loop8: detected capacity change from 0 to 512 [ 436.116316][T12128] FAT-fs (loop6): Directory bread(block 64) failed [ 436.124047][T12128] FAT-fs (loop6): Directory bread(block 65) failed [ 436.140336][T12128] FAT-fs (loop6): Directory bread(block 66) failed [ 436.165624][T12128] FAT-fs (loop6): Directory bread(block 67) failed [ 436.204229][T12128] FAT-fs (loop6): Directory bread(block 68) failed [ 436.224721][T12128] FAT-fs (loop6): Directory bread(block 69) failed [ 436.256361][T12128] FAT-fs (loop6): Directory bread(block 70) failed [ 436.270412][T12134] loop2: detected capacity change from 0 to 1024 [ 436.285620][T12128] FAT-fs (loop6): Directory bread(block 71) failed [ 436.294775][T12134] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.316155][T12134] EXT4-fs: test_dummy_encryption option not supported [ 436.325731][T12128] FAT-fs (loop6): Directory bread(block 72) failed [ 436.357748][T12128] FAT-fs (loop6): Directory bread(block 73) failed [ 436.431578][T12138] loop2: detected capacity change from 0 to 164 [ 436.452066][T12138] iso9660: Unknown parameter '' [ 436.556494][T12140] loop2: detected capacity change from 0 to 512 [ 436.577576][T12140] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 436.718095][T12140] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 436.727108][T12140] System zones: 1-12 [ 436.742213][T12140] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.2414: corrupted in-inode xattr: e_value size too large [ 436.757372][T12140] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 436.758447][T12140] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2414: couldn't read orphan inode 15 (err -117) [ 436.767951][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 436.767975][ C1] EXT4-fs (loop2): initial error at time 1772055515: ext4_iget_extra_inode:5025: inode 15 [ 436.768031][ C1] EXT4-fs (loop2): last error at time 1772055515: ext4_iget_extra_inode:5025: inode 15 [ 436.810236][T12140] loop2: lost filesystem error report for type 5 error -117 [ 436.817405][T12140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.931497][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 438.970684][ T28] audit: type=1400 audit(1772055518.029:1035): avc: denied { read } for pid=12160 comm="syz.8.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 438.997272][T12165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.248899][T12175] loop8: detected capacity change from 0 to 512 [ 439.283373][T12175] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.369244][T12175] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 439.477100][ T28] audit: type=1400 audit(1772055518.569:1036): avc: denied { create } for pid=12139 comm="syz.2.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.548671][ T28] audit: type=1400 audit(1772055518.569:1037): avc: denied { setopt } for pid=12139 comm="syz.2.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.713101][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.751724][T12186] netlink: 'syz.2.2427': attribute type 39 has an invalid length. [ 439.846541][ T28] audit: type=1400 audit(1772055518.939:1038): avc: denied { name_bind } for pid=12192 comm="syz.0.2430" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 439.869098][T12193] netlink: 'syz.0.2430': attribute type 4 has an invalid length. [ 439.926844][ T28] audit: type=1400 audit(1772055518.969:1039): avc: denied { connect } for pid=12192 comm="syz.0.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.018391][T12201] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2433'. [ 440.093810][T11219] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.141652][T12196] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.180596][T12204] loop8: detected capacity change from 0 to 512 [ 440.188393][T12201] loop2: detected capacity change from 0 to 164 [ 440.205397][T12196] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.234077][T12204] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 440.241410][T12202] batadv_slave_1: entered promiscuous mode [ 440.322528][ T28] audit: type=1400 audit(1772055519.419:1040): avc: denied { name_bind } for pid=12194 comm="syz.0.2431" src=20128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 440.324552][T12207] loop2: detected capacity change from 0 to 4096 [ 440.405590][T12196] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.418468][T12207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 440.437392][T12196] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.458103][T12207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.690231][T12196] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.731741][T12196] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.866361][T12211] syz.2.2435 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 440.881854][T11462] usb 13-1: enqueue for inactive port 0 [ 440.890617][T12194] batadv_slave_1: left promiscuous mode [ 440.907374][T12211] CPU: 0 UID: 0 PID: 12211 Comm: syz.2.2435 Tainted: G W syzkaller #0 PREEMPT(full) [ 440.907489][T12211] Tainted: [W]=WARN [ 440.907510][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.907523][T12211] Call Trace: [ 440.907529][T12211] [ 440.907537][T12211] __dump_stack+0x1d/0x30 [ 440.907563][T12211] dump_stack_lvl+0x95/0xd0 [ 440.907659][T12211] dump_stack+0x15/0x1b [ 440.907681][T12211] dump_header+0x80/0x240 [ 440.907778][T12211] oom_kill_process+0x295/0x350 [ 440.907872][T12211] out_of_memory+0x97d/0xb80 [ 440.907895][T12211] try_charge_memcg+0x62e/0xa10 [ 440.907938][T12211] obj_cgroup_charge_pages+0x23/0xc0 [ 440.908035][T12211] __memcg_kmem_charge_page+0x9e/0x170 [ 440.908062][T12211] __alloc_frozen_pages_noprof+0x18a/0x360 [ 440.908147][T12211] alloc_pages_bulk_noprof+0x4aa/0x530 [ 440.908173][T12211] ? policy_nodemask+0x417/0x5e0 [ 440.908200][T12211] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 440.908237][T12211] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 440.908320][T12211] ? alloc_pages_mpol+0x217/0x260 [ 440.908416][T12211] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 440.908449][T12211] __kvmalloc_node_noprof+0x3d4/0x650 [ 440.908475][T12211] ? futex_hash_allocate+0x190/0x9d0 [ 440.908579][T12211] ? futex_hash_allocate+0x190/0x9d0 [ 440.908676][T12211] futex_hash_allocate+0x190/0x9d0 [ 440.908704][T12211] ? cap_task_prctl+0x13f/0x6e0 [ 440.908782][T12211] futex_hash_prctl+0xd8/0xf0 [ 440.908826][T12211] __se_sys_prctl+0xa3d/0x13f0 [ 440.908906][T12211] __x64_sys_prctl+0x67/0x80 [ 440.909000][T12211] x64_sys_call+0x2533/0x3020 [ 440.909026][T12211] do_syscall_64+0x12c/0x370 [ 440.909060][T12211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.909100][T12211] RIP: 0033:0x7ff3f2b9c629 [ 440.909119][T12211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.909164][T12211] RSP: 002b:00007ff3f1569028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 440.909183][T12211] RAX: ffffffffffffffda RBX: 00007ff3f2e16090 RCX: 00007ff3f2b9c629 [ 440.909197][T12211] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 440.909212][T12211] RBP: 00007ff3f2c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 440.909234][T12211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.909324][T12211] R13: 00007ff3f2e16128 R14: 00007ff3f2e16090 R15: 00007fff2cb94348 [ 440.909348][T12211] [ 440.909396][T12211] memory: usage 251036kB, limit 307200kB, failcnt 246 [ 441.176950][T11462] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 441.197547][T12211] memory+swap: usage 210580kB, limit 9007199254740988kB, failcnt 0 [ 441.206046][T12211] kmem: usage 180836kB, limit 9007199254740988kB, failcnt 0 [ 441.267828][T12196] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.297995][T12211] Memory cgroup stats for /syz2: [ 441.298431][T12211] cache 2736128 [ 441.316949][T12196] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.328495][T12211] rss 204800 [ 441.331980][T12211] shmem 2097152 [ 441.335841][T12211] mapped_file 688128 [ 441.350063][T12211] dirty 217088 [ 441.353716][T12211] writeback 0 [ 441.357430][T12211] workingset_refault_anon 467 [ 441.363300][T12211] workingset_refault_file 1141 [ 441.368554][T12211] swap 909312 [ 441.372105][T12211] swapcached 15806464 [ 441.376205][T12211] pgpgin 494965 [ 441.395301][ T309] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.404791][ T309] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.418459][T12211] pgpgout 494246 [ 441.422201][T12211] pgfault 449452 [ 441.425741][T12211] pgmajfault 108 [ 441.441905][ T309] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.460196][T12211] inactive_anon 2301952 [ 441.464541][T12211] active_anon 0 [ 441.468785][ T309] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.483557][T12211] inactive_file 0 [ 441.492148][ T309] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.506932][T12211] active_file 643072 [ 441.511050][T12211] unevictable 0 [ 441.530360][T12211] hierarchical_memory_limit 314572800 [ 441.536314][T12211] hierarchical_memsw_limit 9223372036854771712 [ 441.543538][ T309] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.563811][ T28] audit: type=1400 audit(1772055520.659:1041): avc: denied { setopt } for pid=12214 comm="syz.8.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 441.565796][T12211] total_cache 2736128 [ 441.591915][ T309] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.601902][T12211] total_rss 204800 [ 441.605701][T12211] total_shmem 2097152 [ 441.610469][ T309] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.619241][T12211] total_mapped_file 688128 [ 441.623886][T12211] total_dirty 217088 [ 441.633427][T12211] total_writeback 0 [ 441.636847][ T28] audit: type=1400 audit(1772055520.729:1042): avc: denied { read } for pid=12219 comm="syz.0.2438" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 441.637734][T12211] total_workingset_refault_anon 467 [ 441.673291][T12211] total_workingset_refault_file 1141 [ 441.684237][T12221] FAULT_INJECTION: forcing a failure. [ 441.684237][T12221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.716867][T12211] total_swap 909312 [ 441.717377][ T28] audit: type=1400 audit(1772055520.729:1043): avc: denied { open } for pid=12219 comm="syz.0.2438" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 441.750290][T12221] CPU: 0 UID: 0 PID: 12221 Comm: syz.0.2438 Tainted: G W syzkaller #0 PREEMPT(full) [ 441.750343][T12221] Tainted: [W]=WARN [ 441.750350][T12221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.750361][T12221] Call Trace: [ 441.750369][T12221] [ 441.750377][T12221] __dump_stack+0x1d/0x30 [ 441.750405][T12221] dump_stack_lvl+0x95/0xd0 [ 441.750428][T12221] dump_stack+0x15/0x1b [ 441.750498][T12221] should_fail_ex+0x263/0x280 [ 441.750518][T12221] should_fail+0xb/0x20 [ 441.750535][T12221] should_fail_usercopy+0x1a/0x20 [ 441.750621][T12221] _copy_from_user+0x1c/0xb0 [ 441.750643][T12221] __sys_bpf+0x183/0x7e0 [ 441.750666][T12221] __x64_sys_bpf+0x41/0x50 [ 441.750725][T12221] x64_sys_call+0x10cb/0x3020 [ 441.750791][T12221] do_syscall_64+0x12c/0x370 [ 441.750895][T12221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.750914][T12221] RIP: 0033:0x7fae6c9ec629 [ 441.750930][T12221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.750987][T12221] RSP: 002b:00007fae6b426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.751044][T12221] RAX: ffffffffffffffda RBX: 00007fae6cc66090 RCX: 00007fae6c9ec629 [ 441.751174][T12221] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005 [ 441.751185][T12221] RBP: 00007fae6b426090 R08: 0000000000000000 R09: 0000000000000000 [ 441.751196][T12221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.751253][T12221] R13: 00007fae6cc66128 R14: 00007fae6cc66090 R15: 00007fff1c4e5c88 [ 441.751283][T12221] [ 441.756737][T12211] total_swapcached 15806464 [ 441.932481][ T28] audit: type=1400 audit(1772055521.029:1044): avc: denied { kexec_image_load } for pid=12219 comm="syz.0.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 441.946801][T12211] total_pgpgin 494965 [ 441.966812][T12211] total_pgpgout 494246 [ 441.987055][T12211] total_pgfault 449452 [ 442.006810][T12211] total_pgmajfault 108 [ 442.011341][T12211] total_inactive_anon 2301952 [ 442.016578][T12211] total_active_anon 0 [ 442.036576][T12211] total_inactive_file 0 [ 442.048958][T12211] total_active_file 643072 [ 442.053582][T12211] total_unevictable 0 [ 442.076841][T12211] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2435,pid=12206,uid=0 [ 442.093286][T12228] netlink: 'syz.8.2441': attribute type 4 has an invalid length. [ 442.116839][T12211] Memory cgroup out of memory: Killed process 12211 (syz.2.2435) total-vm:96612kB, anon-rss:1412kB, file-rss:22996kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 442.157011][T12228] netlink: 'syz.8.2441': attribute type 4 has an invalid length. [ 442.189106][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2441'. [ 442.189504][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.252896][T12237] FAULT_INJECTION: forcing a failure. [ 442.252896][T12237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.276867][T12237] CPU: 0 UID: 0 PID: 12237 Comm: syz.8.2445 Tainted: G W syzkaller #0 PREEMPT(full) [ 442.276902][T12237] Tainted: [W]=WARN [ 442.276910][T12237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.276993][T12237] Call Trace: [ 442.277000][T12237] [ 442.277008][T12237] __dump_stack+0x1d/0x30 [ 442.277035][T12237] dump_stack_lvl+0x95/0xd0 [ 442.277060][T12237] dump_stack+0x15/0x1b [ 442.277081][T12237] should_fail_ex+0x263/0x280 [ 442.277167][T12237] should_fail+0xb/0x20 [ 442.277185][T12237] should_fail_usercopy+0x1a/0x20 [ 442.277206][T12237] _copy_from_user+0x1c/0xb0 [ 442.277227][T12237] vmemdup_user+0x5e/0xd0 [ 442.277296][T12237] map_get_next_key+0x140/0x330 [ 442.277315][T12237] ? __sys_bpf+0x643/0x7e0 [ 442.277331][T12237] __sys_bpf+0x64d/0x7e0 [ 442.277352][T12237] __x64_sys_bpf+0x41/0x50 [ 442.277435][T12237] x64_sys_call+0x10cb/0x3020 [ 442.277456][T12237] do_syscall_64+0x12c/0x370 [ 442.277499][T12237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.277517][T12237] RIP: 0033:0x7fec6570c629 [ 442.277586][T12237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.277601][T12237] RSP: 002b:00007fec64167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.277662][T12237] RAX: ffffffffffffffda RBX: 00007fec65985fa0 RCX: 00007fec6570c629 [ 442.277678][T12237] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000004 [ 442.277692][T12237] RBP: 00007fec64167090 R08: 0000000000000000 R09: 0000000000000000 [ 442.277705][T12237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.277750][T12237] R13: 00007fec65986038 R14: 00007fec65985fa0 R15: 00007fff2b1be858 [ 442.277770][T12237] [ 442.517209][ T8681] kworker/u8:10: attempt to access beyond end of device [ 442.517209][ T8681] loop6: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 442.543686][ T8681] kworker/u8:10: attempt to access beyond end of device [ 442.543686][ T8681] loop6: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 442.588224][ T8681] kworker/u8:10: attempt to access beyond end of device [ 442.588224][ T8681] loop6: rw=1, sector=1960, nr_sectors = 3072 limit=256 [ 442.615314][T12246] netlink: 'syz.0.2448': attribute type 4 has an invalid length. [ 442.621141][ T8681] kworker/u8:10: attempt to access beyond end of device [ 442.621141][ T8681] loop6: rw=1, sector=5032, nr_sectors = 1280 limit=256 [ 442.658768][ T8681] kworker/u8:10: attempt to access beyond end of device [ 442.658768][ T8681] loop6: rw=1, sector=6344, nr_sectors = 32 limit=256 [ 442.672845][ T8681] kworker/u8:10: attempt to access beyond end of device [ 442.672845][ T8681] loop6: rw=1, sector=6408, nr_sectors = 32 limit=256 [ 442.687378][ T8681] kworker/u8:10: attempt to access beyond end of device [ 442.687378][ T8681] loop6: rw=1, sector=6472, nr_sectors = 32 limit=256 [ 442.703139][ T8681] kworker/u8:10: attempt to access beyond end of device [ 442.703139][ T8681] loop6: rw=1, sector=6536, nr_sectors = 32 limit=256 [ 442.739845][ T8681] kworker/u8:10: attempt to access beyond end of device [ 442.739845][ T8681] loop6: rw=1, sector=6600, nr_sectors = 32 limit=256 [ 442.754655][ T8681] kworker/u8:10: attempt to access beyond end of device [ 442.754655][ T8681] loop6: rw=1, sector=6664, nr_sectors = 32 limit=256 [ 442.844142][T12260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=12260 comm=syz.0.2451 [ 442.879938][T12261] loop6: detected capacity change from 0 to 164 [ 442.932122][T12259] rock: directory entry would overflow storage [ 442.949814][T12259] rock: sig=0x4f50, size=4, remaining=3 [ 442.956757][T12259] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 443.014030][T12269] loop6: detected capacity change from 0 to 2048 [ 443.033941][T12271] loop8: detected capacity change from 0 to 512 [ 443.058229][T12271] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 443.076654][T12269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.085378][T12271] EXT4-fs (loop8): 1 truncate cleaned up [ 443.092221][T12269] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.117332][T12271] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.136553][ T4260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.270394][T11219] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.368847][T12293] tmpfs: Bad value for 'mpol' [ 443.861177][T12305] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2464'. [ 443.871926][T12305] netlink: zone id is out of range [ 443.878178][T12305] netlink: zone id is out of range [ 443.887457][T12305] netlink: zone id is out of range [ 443.978365][T12305] netlink: set zone limit has 8 unknown bytes [ 444.048444][T12305] loop2: detected capacity change from 0 to 512 [ 444.064717][T12305] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.175669][T12305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.190370][T12305] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.404501][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.421885][T12311] loop8: detected capacity change from 0 to 4096 [ 444.556206][T12311] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 444.739919][T12311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.713899][T11219] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.730276][T12325] loop6: detected capacity change from 0 to 164 [ 445.768039][T12325] iso9660: Unknown parameter '' [ 446.119919][T12337] loop2: detected capacity change from 0 to 512 [ 446.143796][T12337] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 446.173615][T12337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 446.196849][T12337] System zones: 1-12 [ 446.210043][T12337] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.2475: corrupted in-inode xattr: e_value size too large [ 446.251284][T12337] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 446.251470][T12337] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2475: couldn't read orphan inode 15 (err -117) [ 446.261104][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 446.261122][ C0] EXT4-fs (loop2): initial error at time 1772055525: ext4_iget_extra_inode:5025: inode 15 [ 446.261158][ C0] EXT4-fs (loop2): last error at time 1772055525: ext4_iget_extra_inode:5025: inode 15 [ 446.356152][T12337] loop2: lost filesystem error report for type 5 error -117 [ 446.357881][T12337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.401408][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.888465][T12344] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2477'. [ 446.899682][T12344] netlink: zone id is out of range [ 446.905479][T12344] netlink: zone id is out of range [ 446.913359][T12344] netlink: zone id is out of range [ 447.003277][T12344] netlink: set zone limit has 8 unknown bytes [ 447.051391][T12344] loop2: detected capacity change from 0 to 512 [ 447.078934][T12344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 447.167902][T12344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.182973][T12344] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.243831][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 447.243845][ T28] audit: type=1400 audit(1772055526.339:1047): avc: denied { create } for pid=12348 comm="syz.6.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 447.341149][ T28] audit: type=1400 audit(1772055526.369:1048): avc: denied { write } for pid=12348 comm="syz.6.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 447.445542][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.640977][T12353] loop8: detected capacity change from 0 to 164 [ 447.691127][T12352] rock: directory entry would overflow storage [ 447.704513][T12358] loop2: detected capacity change from 0 to 4096 [ 447.728674][T12352] rock: sig=0x4f50, size=4, remaining=3 [ 447.735074][T12352] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 447.759296][T12358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 447.850795][T12358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.914550][T12349] loop6: detected capacity change from 0 to 32768 [ 448.044676][T12359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=12359 comm=syz.6.2478 [ 448.185952][ T3300] loop6: p1 p2 p3 < p5 p6 > [ 448.248832][ T3300] loop6: p2 size 16775168 extends beyond EOD, truncated [ 448.324741][ T3300] loop6: p5 start 4294970168 is beyond EOD, truncated [ 448.436461][T12349] loop6: p1 p2 p3 < p5 p6 > [ 448.474676][T12349] loop6: p2 size 16775168 extends beyond EOD, truncated [ 448.487915][T12349] loop6: p5 start 4294970168 is beyond EOD, truncated [ 449.021395][T12376] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2483'. [ 449.031792][T12376] netlink: zone id is out of range [ 449.037793][T12376] netlink: zone id is out of range [ 449.045442][T12376] netlink: zone id is out of range [ 449.159069][T12376] netlink: set zone limit has 8 unknown bytes [ 449.228014][T12376] loop6: detected capacity change from 0 to 512 [ 449.289838][T12376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 449.298955][T12375] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 449.298982][T12375] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 449.299016][T12375] vhci_hcd vhci_hcd.0: Device attached [ 449.309067][T12375] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 449.327584][T12375] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 449.372058][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 449.382087][T12375] vhci_hcd vhci_hcd.0: Device attached [ 449.404729][T12376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.409619][T12358] syz.2.2481 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 449.420725][T12376] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.433619][T12358] CPU: 0 UID: 0 PID: 12358 Comm: syz.2.2481 Tainted: G W syzkaller #0 PREEMPT(full) [ 449.433703][T12358] Tainted: [W]=WARN [ 449.433711][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.433726][T12358] Call Trace: [ 449.433733][T12358] [ 449.433741][T12358] __dump_stack+0x1d/0x30 [ 449.433770][T12358] dump_stack_lvl+0x95/0xd0 [ 449.433831][T12358] dump_stack+0x15/0x1b [ 449.433880][T12358] dump_header+0x80/0x240 [ 449.433936][T12358] oom_kill_process+0x295/0x350 [ 449.433961][T12358] out_of_memory+0x97d/0xb80 [ 449.434005][T12358] try_charge_memcg+0x62e/0xa10 [ 449.434046][T12358] obj_cgroup_charge_pages+0x23/0xc0 [ 449.434119][T12358] __memcg_kmem_charge_page+0x9e/0x170 [ 449.434183][T12358] __alloc_frozen_pages_noprof+0x18a/0x360 [ 449.434270][T12358] alloc_pages_mpol+0xb3/0x260 [ 449.434303][T12358] alloc_pages_noprof+0x8f/0x130 [ 449.434332][T12358] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 449.434490][T12358] __kvmalloc_node_noprof+0x3d4/0x650 [ 449.434517][T12358] ? futex_hash_allocate+0x190/0x9d0 [ 449.434602][T12358] ? futex_hash_allocate+0x190/0x9d0 [ 449.434633][T12358] futex_hash_allocate+0x190/0x9d0 [ 449.434665][T12358] ? cap_task_prctl+0x13f/0x6e0 [ 449.434689][T12358] futex_hash_prctl+0xd8/0xf0 [ 449.434795][T12358] __se_sys_prctl+0xa3d/0x13f0 [ 449.434826][T12358] __x64_sys_prctl+0x67/0x80 [ 449.434855][T12358] x64_sys_call+0x2533/0x3020 [ 449.434919][T12358] do_syscall_64+0x12c/0x370 [ 449.435029][T12358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.435053][T12358] RIP: 0033:0x7ff3f2b9c629 [ 449.435072][T12358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.435092][T12358] RSP: 002b:00007ff3f15ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 449.435161][T12358] RAX: ffffffffffffffda RBX: 00007ff3f2e15fa0 RCX: 00007ff3f2b9c629 [ 449.435177][T12358] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 449.435190][T12358] RBP: 00007ff3f2c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 449.435205][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.435241][T12358] R13: 00007ff3f2e16038 R14: 00007ff3f2e15fa0 R15: 00007fff2cb94348 [ 449.435262][T12358] [ 449.435270][T12358] memory: usage 307200kB, limit 307200kB, failcnt 359 [ 449.459790][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 449.526026][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 449.530558][T12358] memory+swap: usage 310332kB, limit 9007199254740988kB, failcnt 0 [ 449.538158][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 449.572144][T12358] kmem: usage 285376kB, limit 9007199254740988kB, failcnt 0 [ 449.579705][T12375] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18) [ 449.741941][T12375] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 449.752657][T12358] Memory cgroup stats for /syz2: [ 449.753040][T12358] cache 528384 [ 449.776988][T12387] loop8: detected capacity change from 0 to 512 [ 449.777217][T12358] rss 4096 [ 449.786582][T12358] shmem 0 [ 449.797956][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 449.800738][ T7335] udevd[7335]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 449.818203][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 449.820991][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 449.829274][T12358] mapped_file 413696 [ 449.840024][T12378] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(21) [ 449.850145][T12378] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 449.861081][T12387] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 449.880998][T12375] vhci_hcd vhci_hcd.0: Device attached [ 449.890239][T12387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 449.891093][T12358] dirty 0 [ 449.905424][T12378] vhci_hcd vhci_hcd.0: Device attached [ 449.914056][T12387] System zones: 1-12 [ 449.918252][T12358] writeback 0 [ 449.924900][T12358] workingset_refault_anon 591 [ 449.930076][T12391] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(24) [ 449.936850][T12391] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 449.936930][T12358] workingset_refault_file 1397 [ 449.936940][T12358] swap 3207168 [ 449.937022][T12358] swapcached 19156992 [ 449.987012][T12387] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.2486: corrupted in-inode xattr: e_value size too large [ 450.001981][T12358] pgpgin 507163 [ 450.005897][T12358] pgpgout 507032 [ 450.010336][T12358] pgfault 462093 [ 450.013071][ T4260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.014173][T12358] pgmajfault 131 [ 450.027795][T12387] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 450.028893][T12391] vhci_hcd vhci_hcd.0: Device attached [ 450.028982][T12387] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2486: couldn't read orphan inode 15 (err -117) [ 450.039784][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 450.039807][ C1] EXT4-fs (loop8): initial error at time 1772055529: ext4_iget_extra_inode:5025: inode 15 [ 450.039859][ C1] EXT4-fs (loop8): last error at time 1772055529: ext4_iget_extra_inode:5025: inode 15 [ 450.108881][T12399] loop6: detected capacity change from 0 to 512 [ 450.116069][T12358] inactive_anon 0 [ 450.125281][T12375] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 450.126913][T12358] active_anon 4096 [ 450.133945][T12387] loop8: lost filesystem error report for type 5 error -117 [ 450.145028][T12387] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.145791][T12395] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(20) [ 450.171743][T12395] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.187496][T12375] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 450.196087][T12358] inactive_file 8192 [ 450.201373][T12375] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 450.206895][T12358] active_file 507904 [ 450.226135][T12399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.236840][T12358] unevictable 0 [ 450.242917][T12358] hierarchical_memory_limit 314572800 [ 450.243621][T11219] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.249459][T12395] vhci_hcd vhci_hcd.0: Device attached [ 450.265015][T12403] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2488'. [ 450.274498][T12358] hierarchical_memsw_limit 9223372036854771712 [ 450.284710][T12399] ext4 filesystem being mounted at /414/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 450.286846][T12358] total_cache 528384 [ 450.309149][T12403] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2488'. [ 450.309277][T12358] total_rss 4096 [ 450.322921][T12358] total_shmem 0 [ 450.326494][T12358] total_mapped_file 413696 [ 450.333943][T12358] total_dirty 0 [ 450.337644][T12358] total_writeback 0 [ 450.341583][T12358] total_workingset_refault_anon 591 [ 450.351901][T12358] total_workingset_refault_file 1397 [ 450.357829][T12396] vhci_hcd: connection closed [ 450.358197][ T8681] vhci_hcd vhci_hcd.0: stop threads [ 450.362437][T12358] total_swap 3207168 [ 450.363319][ T8681] vhci_hcd vhci_hcd.0: release socket [ 450.363424][ T8681] vhci_hcd vhci_hcd.0: disconnect device [ 450.370169][T12358] total_swapcached 19156992 [ 450.376887][T12392] vhci_hcd: connection closed [ 450.379791][T12389] vhci_hcd: connection closed [ 450.386948][T12381] vhci_hcd: connection closed [ 450.391938][T12403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.396052][T12385] vhci_hcd: connection closed [ 450.413262][ T8681] vhci_hcd vhci_hcd.0: stop threads [ 450.413399][T12379] vhci_hcd: connection closed [ 450.418216][ T8681] vhci_hcd vhci_hcd.0: release socket [ 450.434509][ T8681] vhci_hcd vhci_hcd.0: disconnect device [ 450.440790][T12358] total_pgpgin 507163 [ 450.441176][ T8681] vhci_hcd vhci_hcd.0: stop threads [ 450.444946][T12358] total_pgpgout 507032 [ 450.444956][T12358] total_pgfault 462093 [ 450.450447][ T8681] vhci_hcd vhci_hcd.0: release socket [ 450.464499][ T8681] vhci_hcd vhci_hcd.0: disconnect device [ 450.470498][T12358] total_pgmajfault 131 [ 450.471063][ T8681] vhci_hcd vhci_hcd.0: stop threads [ 450.475140][T12358] total_inactive_anon 0 [ 450.485347][T12358] total_active_anon 4096 [ 450.489880][T12358] total_inactive_file 8192 [ 450.494404][T12358] total_active_file 507904 [ 450.499252][T12358] total_unevictable 0 [ 450.503300][T12358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2481,pid=12357,uid=0 [ 450.518752][T12358] Memory cgroup out of memory: Killed process 12358 (syz.2.2481) total-vm:94564kB, anon-rss:1244kB, file-rss:23000kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 450.521106][ T8681] vhci_hcd vhci_hcd.0: release socket [ 450.547489][ T8681] vhci_hcd vhci_hcd.0: disconnect device [ 450.558246][ T8681] vhci_hcd vhci_hcd.0: stop threads [ 450.569279][ T8681] vhci_hcd vhci_hcd.0: release socket [ 450.575459][ T8681] vhci_hcd vhci_hcd.0: disconnect device [ 450.608809][ T8681] vhci_hcd vhci_hcd.0: stop threads [ 450.621342][ T8681] vhci_hcd vhci_hcd.0: release socket [ 450.629235][T12414] loop8: detected capacity change from 0 to 4096 [ 450.636537][ T8681] vhci_hcd vhci_hcd.0: disconnect device [ 450.648530][T12414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.662076][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.740947][ T28] audit: type=1400 audit(1772055529.839:1049): avc: denied { create } for pid=12417 comm="syz.2.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 450.763087][T12418] netlink: 'syz.2.2491': attribute type 27 has an invalid length. [ 450.771433][T12418] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2491'. [ 450.781174][ T28] audit: type=1400 audit(1772055529.859:1050): avc: denied { write } for pid=12417 comm="syz.2.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 450.802317][T12418] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 450.862758][T12422] loop2: detected capacity change from 0 to 128 [ 450.886144][T12422] FAT-fs (loop2): bogus number of FAT sectors [ 450.892705][T12422] FAT-fs (loop2): Can't find a valid FAT filesystem [ 450.893780][T11219] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.957769][ T28] audit: type=1400 audit(1772055530.059:1051): avc: denied { connect } for pid=12421 comm="syz.2.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 450.983282][T12424] loop8: detected capacity change from 0 to 4096 [ 451.000461][ T4260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.049191][T12424] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.080385][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2497'. [ 451.131716][T12429] vlan2: entered allmulticast mode [ 451.137076][T12429] bridge0: entered allmulticast mode [ 451.154031][T12432] netlink: 340 bytes leftover after parsing attributes in process `syz.5.2498'. [ 451.242992][T12434] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 451.249787][T12434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 451.297320][ T28] audit: type=1400 audit(1772055530.359:1052): avc: denied { map } for pid=12423 comm="syz.8.2494" path="/71/file0/memory.events.local" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 451.383429][T12434] vhci_hcd vhci_hcd.0: Device attached [ 451.470547][T12436] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(17) [ 451.477273][T12436] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 451.612929][T12436] vhci_hcd vhci_hcd.0: Device attached [ 451.619099][T12442] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(20) [ 451.623151][T12448] 9pnet_fd: Insufficient options for proto=fd [ 451.625877][T12442] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 451.640431][T12442] vhci_hcd vhci_hcd.0: Device attached [ 451.646874][ T1032] usb 13-1: new low-speed USB device number 4 using vhci_hcd [ 451.659849][T12434] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(16) [ 451.666561][T12434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 451.675224][T12434] vhci_hcd vhci_hcd.0: Device attached [ 451.683030][T12434] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(22) [ 451.683137][T11219] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.690325][T12434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 451.708408][T12434] vhci_hcd vhci_hcd.0: Device attached [ 451.727934][T12434] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 451.757386][T12434] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 451.786176][T12434] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 451.813821][T12443] vhci_hcd: connection closed [ 451.813851][T12437] vhci_hcd: connection reset by peer [ 451.813861][T12453] vhci_hcd: connection closed [ 451.825022][T12449] vhci_hcd: connection closed [ 451.826887][T12440] vhci_hcd: connection closed [ 451.836746][ T8681] vhci_hcd vhci_hcd.6: stop threads [ 451.905144][ T8681] vhci_hcd vhci_hcd.6: release socket [ 451.917096][ T8681] vhci_hcd vhci_hcd.6: disconnect device [ 451.924984][ T8681] vhci_hcd vhci_hcd.6: stop threads [ 451.931927][ T8681] vhci_hcd vhci_hcd.6: release socket [ 451.937657][ T8681] vhci_hcd vhci_hcd.6: disconnect device [ 451.944559][ T8681] vhci_hcd vhci_hcd.6: stop threads [ 451.950530][ T8681] vhci_hcd vhci_hcd.6: release socket [ 451.956252][ T8681] vhci_hcd vhci_hcd.6: disconnect device [ 451.963916][ T8681] vhci_hcd vhci_hcd.6: stop threads [ 451.976581][T12473] netlink: 'syz.5.2509': attribute type 4 has an invalid length. [ 451.976877][ T8681] vhci_hcd vhci_hcd.6: release socket [ 451.989671][T12473] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2509'. [ 451.996942][ T8681] vhci_hcd vhci_hcd.6: disconnect device [ 452.009953][ T8681] vhci_hcd vhci_hcd.6: stop threads [ 452.013157][T12471] netlink: 'syz.0.2508': attribute type 4 has an invalid length. [ 452.024542][ T8681] vhci_hcd vhci_hcd.6: release socket [ 452.027666][T12471] netlink: 'syz.0.2508': attribute type 4 has an invalid length. [ 452.030639][ T8681] vhci_hcd vhci_hcd.6: disconnect device [ 452.108115][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'. [ 452.636222][T12491] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.2511'. [ 452.647208][T12491] netlink: zone id is out of range [ 452.654145][T12491] netlink: zone id is out of range [ 452.662594][T12491] netlink: zone id is out of range [ 452.776099][T12491] netlink: set zone limit has 8 unknown bytes [ 452.874603][T12485] loop8: detected capacity change from 0 to 512 [ 452.881758][T12485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 452.926659][T12485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.939842][T12485] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.058122][T12502] netlink: 'syz.5.2517': attribute type 10 has an invalid length. [ 453.069670][T12502] team0: Port device netdevsim1 added [ 453.179540][T12502] netlink: 'syz.5.2517': attribute type 10 has an invalid length. [ 453.207824][T12502] team0: Port device netdevsim1 removed [ 453.214698][T11219] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.259072][T12509] loop8: detected capacity change from 0 to 512 [ 453.274224][T12509] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 453.288405][T12509] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2518: bg 0: block 255: padding at end of block bitmap is not set [ 453.312193][T12509] loop8: lost filesystem error report for type 5 error -117 [ 453.312617][T12509] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 453.320366][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 453.320408][ C1] EXT4-fs (loop8): initial error at time 1772055532: ext4_validate_block_bitmap:441 [ 453.320429][ C1] EXT4-fs (loop8): last error at time 1772055532: ext4_validate_block_bitmap:441 [ 453.324741][T12512] loop6: detected capacity change from 0 to 164 [ 453.329435][T12509] loop8: lost filesystem error report for type 5 error -117 [ 453.362681][T12509] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2518: invalid indirect mapped block 1 (level 1) [ 453.384266][T12509] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 453.384813][T12509] EXT4-fs (loop8): 1 truncate cleaned up [ 453.402182][T12512] iso9660: Unknown parameter '' [ 453.408037][T12509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.446837][T12509] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 453.485614][T11219] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.553102][T12518] veth7: entered promiscuous mode [ 453.576895][T12522] tmpfs: Bad value for 'size' [ 453.597448][T12523] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2523'. [ 453.640286][T12525] loop8: detected capacity change from 0 to 128 [ 453.646489][T12527] loop6: detected capacity change from 0 to 128 [ 453.746888][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 453.757385][T12532] netlink: 'syz.0.2527': attribute type 14 has an invalid length. [ 453.765738][T12532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2527'. [ 453.827520][ T28] audit: type=1400 audit(1772055532.919:1053): avc: denied { write } for pid=12526 comm="syz.6.2525" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 453.853626][T12536] 9p: Bad value for 'rfdno' [ 453.871399][ T28] audit: type=1400 audit(1772055532.919:1054): avc: denied { open } for pid=12526 comm="syz.6.2525" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 453.883296][ T309] bio_check_eod: 51 callbacks suppressed [ 453.883312][ T309] kworker/u8:6: attempt to access beyond end of device [ 453.883312][ T309] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 453.896637][ T28] audit: type=1400 audit(1772055532.919:1055): avc: denied { ioctl } for pid=12526 comm="syz.6.2525" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 454.000636][ T309] kworker/u8:6: attempt to access beyond end of device [ 454.000636][ T309] loop8: rw=1, sector=145, nr_sectors = 832 limit=128 [ 454.062653][ T309] kworker/u8:6: attempt to access beyond end of device [ 454.062653][ T309] loop8: rw=1, sector=977, nr_sectors = 64 limit=128 [ 454.670762][T12527] syz.6.2525 (12527) used greatest stack depth: 6752 bytes left [ 454.755931][T12545] loop6: detected capacity change from 0 to 512 [ 454.897440][ T28] audit: type=1400 audit(1772055532.949:1056): avc: denied { mounton } for pid=12524 comm="syz.8.2526" path="/78/file0/file0" dev="loop8" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 454.922534][ T28] audit: type=1326 audit(1772055532.969:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12524 comm="syz.8.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6570c629 code=0x7fc00000 [ 455.233283][ T28] audit: type=1400 audit(1772055533.089:1058): avc: denied { mount } for pid=12526 comm="syz.6.2525" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 455.255998][ T28] audit: type=1326 audit(1772055533.569:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12524 comm="syz.8.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec656ada19 code=0x7fc00000 [ 455.428426][T12560] netlink: 'syz.6.2536': attribute type 1 has an invalid length. [ 455.468194][ T28] audit: type=1400 audit(1772055534.569:1060): avc: denied { append } for pid=12557 comm="syz.2.2535" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 455.496625][ T28] audit: type=1400 audit(1772055534.569:1061): avc: denied { read } for pid=12557 comm="syz.2.2535" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 455.527168][T12568] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2536'. [ 455.556233][ T28] audit: type=1400 audit(1772055534.569:1062): avc: denied { open } for pid=12557 comm="syz.2.2535" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 455.589270][T12560] veth7: entered promiscuous mode [ 455.596607][T12554] loop8: detected capacity change from 0 to 164 [ 455.615289][T12573] loop2: detected capacity change from 0 to 4096 [ 455.644097][T12554] iso9660: Unknown parameter '' [ 455.690445][T12573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 455.707612][T12573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.805508][T12578] 9pnet_fd: Insufficient options for proto=fd [ 456.173047][T12581] syz.5.2541 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 456.246925][T12581] CPU: 1 UID: 0 PID: 12581 Comm: syz.5.2541 Tainted: G W syzkaller #0 PREEMPT(full) [ 456.246982][T12581] Tainted: [W]=WARN [ 456.246989][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.247003][T12581] Call Trace: [ 456.247057][T12581] [ 456.247066][T12581] __dump_stack+0x1d/0x30 [ 456.247097][T12581] dump_stack_lvl+0x95/0xd0 [ 456.247125][T12581] dump_stack+0x15/0x1b [ 456.247147][T12581] dump_header+0x80/0x240 [ 456.247172][T12581] oom_kill_process+0x295/0x350 [ 456.247244][T12581] out_of_memory+0x97d/0xb80 [ 456.247266][T12581] try_charge_memcg+0x62e/0xa10 [ 456.247314][T12581] obj_cgroup_charge_pages+0x23/0xc0 [ 456.247355][T12581] __memcg_kmem_charge_page+0x9e/0x170 [ 456.247384][T12581] __alloc_frozen_pages_noprof+0x18a/0x360 [ 456.247448][T12581] alloc_pages_bulk_noprof+0x4aa/0x530 [ 456.247476][T12581] ? policy_nodemask+0x417/0x5e0 [ 456.247503][T12581] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 456.247595][T12581] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 456.247712][T12581] ? alloc_pages_mpol+0x217/0x260 [ 456.247744][T12581] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 456.247779][T12581] __kvmalloc_node_noprof+0x3d4/0x650 [ 456.247932][T12581] ? futex_hash_allocate+0x190/0x9d0 [ 456.247962][T12581] ? futex_hash_allocate+0x190/0x9d0 [ 456.248015][T12581] futex_hash_allocate+0x190/0x9d0 [ 456.248044][T12581] ? cap_task_prctl+0x13f/0x6e0 [ 456.248110][T12581] futex_hash_prctl+0xd8/0xf0 [ 456.248140][T12581] __se_sys_prctl+0xa3d/0x13f0 [ 456.248168][T12581] __x64_sys_prctl+0x67/0x80 [ 456.248210][T12581] x64_sys_call+0x2533/0x3020 [ 456.248277][T12581] do_syscall_64+0x12c/0x370 [ 456.248313][T12581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.248337][T12581] RIP: 0033:0x7f74319bc629 [ 456.248353][T12581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.248450][T12581] RSP: 002b:00007f743040f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 456.248472][T12581] RAX: ffffffffffffffda RBX: 00007f7431c35fa0 RCX: 00007f74319bc629 [ 456.248486][T12581] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 456.248551][T12581] RBP: 00007f7431a52b39 R08: 0000000000000000 R09: 0000000000000000 [ 456.248564][T12581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.248578][T12581] R13: 00007f7431c36038 R14: 00007f7431c35fa0 R15: 00007ffe67ff8658 [ 456.248598][T12581] [ 456.248668][T12581] memory: usage 307200kB, limit 307200kB, failcnt 654 [ 456.543756][T12581] memory+swap: usage 307296kB, limit 9007199254740988kB, failcnt 0 [ 456.573707][T12581] kmem: usage 285248kB, limit 9007199254740988kB, failcnt 0 [ 456.609039][T12581] Memory cgroup stats for /syz5: [ 456.609249][T12581] cache 0 [ 456.657024][T12581] rss 196608 [ 456.661023][T12581] shmem 0 [ 456.664958][T12581] mapped_file 413696 [ 456.680197][T12609] netlink: 'syz.6.2550': attribute type 1 has an invalid length. [ 456.696871][T12581] dirty 0 [ 456.700056][T12581] writeback 0 [ 456.701769][ T1032] usb 13-1: enqueue for inactive port 0 [ 456.703545][T12581] workingset_refault_anon 942 [ 456.853557][T12581] workingset_refault_file 0 [ 456.866277][T12609] veth7: entered promiscuous mode [ 456.885281][T12581] swap 98304 [ 456.904540][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2550'. [ 456.922389][T12581] swapcached 25337856 [ 456.964648][T12581] pgpgin 419604 [ 457.013183][T12581] pgpgout 419556 [ 457.054936][T12581] pgfault 411873 [ 457.086238][T12581] pgmajfault 245 [ 457.131924][T12581] inactive_anon 188416 [ 457.160043][T12581] active_anon 8192 [ 457.174938][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2551'. [ 457.199344][T12581] inactive_file 0 [ 457.202388][ T1032] usb 13-1: enqueue for inactive port 0 [ 457.219713][T12617] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.222463][T12581] active_file 0 [ 457.227420][T12617] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.238852][T12581] unevictable 0 [ 457.246083][T12581] hierarchical_memory_limit 314572800 [ 457.251860][T12581] hierarchical_memsw_limit 9223372036854771712 [ 457.265580][T12581] total_cache 0 [ 457.279414][T12581] total_rss 196608 [ 457.286906][ T1032] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 457.296311][T12581] total_shmem 0 [ 457.315897][T12581] total_mapped_file 413696 [ 457.326710][T12623] loop8: detected capacity change from 0 to 512 [ 457.332544][T12581] total_dirty 0 [ 457.338326][T12581] total_writeback 0 [ 457.344179][T12581] total_workingset_refault_anon 942 [ 457.355122][T12581] total_workingset_refault_file 0 [ 457.366748][T12623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 457.372107][T12581] total_swap 98304 [ 457.387377][T12581] total_swapcached 25337856 [ 457.393215][T12581] total_pgpgin 419604 [ 457.401561][T12581] total_pgpgout 419556 [ 457.406291][T12623] System zones: 1-20 [ 457.410395][T12581] total_pgfault 411873 [ 457.415383][T12581] total_pgmajfault 245 [ 457.417378][T12623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.432618][T12629] loop6: detected capacity change from 0 to 2048 [ 457.432942][T12581] total_inactive_anon 188416 [ 457.444528][T12581] total_active_anon 8192 [ 457.449168][T12581] total_inactive_file 0 [ 457.454430][T12581] total_active_file 0 [ 457.459049][T12581] total_unevictable 0 [ 457.463165][T12581] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2541,pid=12580,uid=0 [ 457.486996][T12581] Memory cgroup out of memory: Killed process 12581 (syz.5.2541) total-vm:96480kB, anon-rss:1408kB, file-rss:23076kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 457.509457][T12629] loop6: p1 < > p3 < > p4 < > [ 457.516845][T12629] loop6: partition table partially beyond EOD, truncated [ 457.518580][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 457.536879][T12629] loop6: p1 start 3405774849 is beyond EOD, truncated [ 457.538389][ T3318] CPU: 0 UID: 0 PID: 3318 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 457.538483][ T3318] Tainted: [W]=WARN [ 457.538490][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 457.538502][ T3318] Call Trace: [ 457.538510][ T3318] [ 457.538518][ T3318] __dump_stack+0x1d/0x30 [ 457.538548][ T3318] dump_stack_lvl+0x95/0xd0 [ 457.538571][ T3318] dump_stack+0x15/0x1b [ 457.538616][ T3318] dump_header+0x80/0x240 [ 457.538650][ T3318] oom_kill_process+0x295/0x350 [ 457.538671][ T3318] out_of_memory+0x97d/0xb80 [ 457.538691][ T3318] try_charge_memcg+0x62e/0xa10 [ 457.538742][ T3318] __mem_cgroup_charge+0x65/0x150 [ 457.538769][ T3318] filemap_add_folio+0x110/0x350 [ 457.538802][ T3318] __filemap_get_folio_mpol+0x326/0x680 [ 457.538831][ T3318] filemap_fault+0x486/0xb90 [ 457.538905][ T3318] __do_fault+0xbc/0x200 [ 457.538934][ T3318] handle_mm_fault+0x11d7/0x3020 [ 457.538963][ T3318] ? vma_start_read+0x1c7/0x2c0 [ 457.538989][ T3318] do_user_addr_fault+0x62f/0x1050 [ 457.539080][ T3318] ? trace_page_fault_user+0x1f/0xe0 [ 457.539132][ T3318] exc_page_fault+0x62/0xa0 [ 457.539160][ T3318] asm_exc_page_fault+0x26/0x30 [ 457.539180][ T3318] RIP: 0033:0x7ff3f2a6a6b4 [ 457.539196][ T3318] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 [ 457.539215][ T3318] RSP: 002b:00007fff2cb946b0 EFLAGS: 00010202 [ 457.539245][ T3318] RAX: 0000001b33624000 RBX: 00000000000005e7 RCX: 000000000006f540 [ 457.539259][ T3318] RDX: 0000000006568ee6 RSI: 00007fff2cb94740 RDI: 0000000000000001 [ 457.539273][ T3318] RBP: 00007fff2cb946ec R08: 00000000182d9181 R09: 7fffffffffffffff [ 457.539286][ T3318] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 457.539336][ T3318] R13: 00000000000927c0 R14: 000000000006f4ab R15: 00007fff2cb94740 [ 457.539355][ T3318] [ 457.539362][ T3318] memory: usage 307200kB, limit 307200kB, failcnt 828 [ 457.544001][T12629] loop6: p3 start 2304 is beyond EOD, truncated [ 457.545640][T11219] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.562917][T12633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2557'. [ 457.593522][T12635] netlink: 'syz.5.2559': attribute type 6 has an invalid length. [ 457.622935][ T3318] memory+swap: usage 310336kB, limit 9007199254740988kB, failcnt 0 [ 457.833840][ T3318] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 457.842410][ T3318] Memory cgroup stats for /syz2: [ 457.842765][ T3318] cache 28672 [ 457.852491][ T3318] rss 0 [ 457.855571][ T3318] shmem 0 [ 457.876451][ T3318] mapped_file 413696 [ 457.885986][T12647] netlink: 'syz.6.2563': attribute type 4 has an invalid length. [ 457.897907][ T3318] dirty 0 [ 457.901021][ T3318] writeback 0 [ 457.904406][ T3318] workingset_refault_anon 639 [ 457.936544][T12647] netlink: 'syz.6.2563': attribute type 4 has an invalid length. [ 457.945388][ T3318] workingset_refault_file 2179 [ 457.950954][ T3318] swap 3211264 [ 457.954410][ T3318] swapcached 21381120 [ 457.962538][ T3318] pgpgin 509160 [ 457.966305][ T3318] pgpgout 509152 [ 457.970362][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2563'. [ 457.985687][T12661] loop8: detected capacity change from 0 to 1024 [ 457.993656][ T3318] pgfault 463904 [ 457.997803][ T3318] pgmajfault 183 [ 458.001649][ T3318] inactive_anon 0 [ 458.005681][ T3318] active_anon 0 [ 458.020580][ T3318] inactive_file 20480 [ 458.024731][ T3318] active_file 12288 [ 458.029164][ T3318] unevictable 0 [ 458.032910][ T3318] hierarchical_memory_limit 314572800 [ 458.039048][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 458.047061][ T3318] total_cache 28672 [ 458.055173][ T3318] total_rss 0 [ 458.059183][T12661] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 458.066724][T12668] netlink: 64985 bytes leftover after parsing attributes in process `syz.6.2570'. [ 458.069371][T12661] System zones: [ 458.077958][ T3318] total_shmem 0 [ 458.086977][ T3318] total_mapped_file 413696 [ 458.091740][ T3318] total_dirty 0 [ 458.095300][ T3318] total_writeback 0 [ 458.107617][T12661] 0-1, 3-8 [ 458.131398][ T3318] total_workingset_refault_anon 639 [ 458.137946][T12661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 458.176689][ T3318] total_workingset_refault_file 2179 [ 458.190925][ T3318] total_swap 3211264 [ 458.198108][T12672] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.205185][ T3318] total_swapcached 21381120 [ 458.217634][T12661] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.235456][ T3318] total_pgpgin 509160 [ 458.240329][T12672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.257441][T12661] batadv_slave_1: entered promiscuous mode [ 458.265233][ T3318] total_pgpgout 509152 [ 458.285528][ T3318] total_pgfault 463904 [ 458.290693][ T3318] total_pgmajfault 183 [ 458.295247][T12674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.308228][ T3318] total_inactive_anon 0 [ 458.312475][ T3318] total_active_anon 0 [ 458.325277][T12661] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.2569: Freeing blocks not in datazone - block = 0, count = 16 [ 458.346936][T12674] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.357930][ T3318] total_inactive_file 20480 [ 458.363138][ T3318] total_active_file 12288 [ 458.392419][ T3318] total_unevictable 0 [ 458.411806][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2539,pid=12572,uid=0 [ 458.427843][ T3318] Memory cgroup out of memory: Killed process 12572 (syz.2.2539) total-vm:96612kB, anon-rss:1220kB, file-rss:23000kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 458.445342][T11219] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /89/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 458.470277][ T4260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.670056][T12682] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.2574'. [ 458.680563][T12682] netlink: zone id is out of range [ 458.686594][T12682] netlink: zone id is out of range [ 458.694564][T12682] netlink: zone id is out of range [ 458.791043][T12682] netlink: set zone limit has 8 unknown bytes [ 458.862688][T11219] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /89/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 459.106093][T11219] EXT4-fs error (device loop8): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 459.427665][T12687] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2577'. [ 459.438218][T12687] netlink: zone id is out of range [ 459.443879][T12687] netlink: zone id is out of range [ 459.451403][T12687] netlink: zone id is out of range [ 459.541285][T12687] netlink: set zone limit has 8 unknown bytes [ 459.672534][T11219] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /89/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 459.701963][T11219] EXT4-fs error (device loop8): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 459.725487][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.737243][T11219] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /89/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 459.770352][T12496] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 459.793402][T11219] EXT4-fs error (device loop8): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 459.813977][T11219] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /89/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 459.895797][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 459.895863][ T28] audit: type=1400 audit(1772055538.989:1071): avc: denied { bind } for pid=12697 comm="syz.2.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 459.990696][T12701] set_capacity_and_notify: 1 callbacks suppressed [ 459.990713][T12701] loop2: detected capacity change from 0 to 4096 [ 460.039002][T12701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.257378][T12680] batadv_slave_1: left promiscuous mode [ 460.264007][T12717] netlink: 'syz.0.2586': attribute type 4 has an invalid length. [ 460.273954][ T372] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 460.287766][ T372] EXT4-fs (loop8): This should not happen!! Data will be lost [ 460.287766][ T372] [ 460.312673][T12717] netlink: 'syz.0.2586': attribute type 4 has an invalid length. [ 460.321399][ T372] EXT4-fs (loop8): Total free blocks count 0 [ 460.331632][ T372] EXT4-fs (loop8): Free/Dirty block details [ 460.338586][ T372] EXT4-fs (loop8): free_blocks=16 [ 460.347267][ T372] EXT4-fs (loop8): dirty_blocks=16 [ 460.353341][ T372] EXT4-fs (loop8): Block reservation details [ 460.360273][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2586'. [ 460.369888][ T372] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 460.378393][T12680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 460.394258][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.416134][T12708] loop6: detected capacity change from 0 to 512 [ 460.458886][ T309] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.470115][T12723] FAULT_INJECTION: forcing a failure. [ 460.470115][T12723] name failslab, interval 1, probability 0, space 0, times 0 [ 460.502732][T12723] CPU: 0 UID: 0 PID: 12723 Comm: syz.2.2589 Tainted: G W syzkaller #0 PREEMPT(full) [ 460.502766][T12723] Tainted: [W]=WARN [ 460.502773][T12723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 460.502785][T12723] Call Trace: [ 460.502791][T12723] [ 460.502852][T12723] __dump_stack+0x1d/0x30 [ 460.502878][T12723] dump_stack_lvl+0x95/0xd0 [ 460.502899][T12723] dump_stack+0x15/0x1b [ 460.502946][T12723] should_fail_ex+0x263/0x280 [ 460.502969][T12723] ? rtnl_newlink+0x5c/0x1330 [ 460.502996][T12723] should_failslab+0x8c/0xb0 [ 460.503051][T12723] __kmalloc_cache_noprof+0x5f/0x410 [ 460.503076][T12723] ? __pfx_rtnl_newlink+0x10/0x10 [ 460.503105][T12723] rtnl_newlink+0x5c/0x1330 [ 460.503194][T12723] ? __memcg_slab_free_hook+0x154/0x250 [ 460.503281][T12723] ? __rcu_read_unlock+0x4e/0x70 [ 460.503301][T12723] ? avc_has_perm_noaudit+0xab/0x130 [ 460.503356][T12723] ? cred_has_capability+0x224/0x2a0 [ 460.503442][T12723] ? selinux_capable+0x31/0x40 [ 460.503465][T12723] ? security_capable+0x7b/0x90 [ 460.503485][T12723] ? ns_capable+0x7c/0xb0 [ 460.503504][T12723] ? __pfx_rtnl_newlink+0x10/0x10 [ 460.503550][T12723] rtnetlink_rcv_msg+0x64b/0x720 [ 460.503582][T12723] netlink_rcv_skb+0x123/0x220 [ 460.503688][T12723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 460.503766][T12723] rtnetlink_rcv+0x1c/0x30 [ 460.503829][T12723] netlink_unicast+0x5c0/0x690 [ 460.503850][T12723] netlink_sendmsg+0x5c8/0x6f0 [ 460.503888][T12723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.503962][T12723] ____sys_sendmsg+0x5af/0x600 [ 460.503987][T12723] ___sys_sendmsg+0x195/0x1e0 [ 460.504063][T12723] __x64_sys_sendmsg+0xd4/0x160 [ 460.504111][T12723] x64_sys_call+0x194c/0x3020 [ 460.504139][T12723] do_syscall_64+0x12c/0x370 [ 460.504228][T12723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.504319][T12723] RIP: 0033:0x7ff3f2b9c629 [ 460.504402][T12723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.504418][T12723] RSP: 002b:00007ff3f15ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.504436][T12723] RAX: ffffffffffffffda RBX: 00007ff3f2e15fa0 RCX: 00007ff3f2b9c629 [ 460.504448][T12723] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000004 [ 460.504459][T12723] RBP: 00007ff3f15ef090 R08: 0000000000000000 R09: 0000000000000000 [ 460.504471][T12723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.504517][T12723] R13: 00007ff3f2e16038 R14: 00007ff3f2e15fa0 R15: 00007fff2cb94348 [ 460.504534][T12723] [ 460.784115][T12727] netlink: 'syz.5.2593': attribute type 4 has an invalid length. [ 460.800484][ T28] audit: type=1400 audit(1772055539.899:1072): avc: denied { mounton } for pid=12728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 460.852244][T12731] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 460.871803][ T28] audit: type=1400 audit(1772055539.949:1073): avc: denied { map } for pid=12730 comm="syz.0.2592" path="socket:[40167]" dev="sockfs" ino=40167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 460.900684][ T28] audit: type=1400 audit(1772055539.949:1074): avc: denied { read } for pid=12730 comm="syz.0.2592" path="socket:[40167]" dev="sockfs" ino=40167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 460.934972][T12708] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2583: couldn't read orphan inode 26 (err -116) [ 460.969978][T12708] loop6: lost filesystem error report for type 5 error -116 [ 460.982592][T12708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.006229][T12708] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.018803][ T28] audit: type=1400 audit(1772055540.099:1075): avc: denied { ioctl } for pid=12747 comm="syz.0.2597" path="socket:[40227]" dev="sockfs" ino=40227 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 461.076367][ T309] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.090147][T12708] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.2583: corrupted inode contents [ 461.107999][T12708] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #3: comm syz.6.2583: mark_inode_dirty error [ 461.131874][T12728] chnl_net:caif_netlink_parms(): no params data found [ 461.143594][T12708] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2583: bg 0: block 64: padding at end of block bitmap is not set [ 461.159962][T12708] Quota error (device loop6): write_blk: dquota write failed [ 461.169263][T12708] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 461.185206][T12708] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2583: Failed to acquire dquot type 0 [ 461.242767][ T309] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.301065][T12728] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.309240][T12728] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.317125][T12728] bridge_slave_0: entered allmulticast mode [ 461.323862][T12728] bridge_slave_0: entered promiscuous mode [ 461.350177][ T309] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.368236][ T4260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.381478][T12728] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.415596][T12728] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.423721][T12728] bridge_slave_1: entered allmulticast mode [ 461.453964][T12728] bridge_slave_1: entered promiscuous mode [ 461.495814][T12774] netlink: 'syz.6.2602': attribute type 4 has an invalid length. [ 461.514331][T12728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.544630][T12728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.556808][T12781] netlink: 'syz.6.2602': attribute type 4 has an invalid length. [ 461.679651][T12786] netlink: 'syz.5.2607': attribute type 1 has an invalid length. [ 461.745697][T12728] team0: Port device team_slave_0 added [ 461.752961][T12728] team0: Port device team_slave_1 added [ 461.753422][ T28] audit: type=1400 audit(1772055540.839:1076): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 461.808906][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2607'. [ 461.873334][T12788] veth5: entered promiscuous mode [ 462.046511][ T309] bridge_slave_1: left allmulticast mode [ 462.218198][ T309] bridge_slave_1: left promiscuous mode [ 462.475012][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.669479][ T309] bridge_slave_0: left allmulticast mode [ 462.721692][ T309] bridge_slave_0: left promiscuous mode [ 462.802746][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.903150][T12805] loop2: detected capacity change from 0 to 4096 [ 462.924031][T12805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.126006][ T309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.147181][ T309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.168260][T12830] loop6: detected capacity change from 0 to 256 [ 463.168945][ T309] bond0 (unregistering): Released all slaves [ 463.192525][ T309] bond1 (unregistering): (slave veth3): Releasing backup interface [ 463.207873][ T309] bond1 (unregistering): Released all slaves [ 463.227429][ T309] bond2 (unregistering): Released all slaves [ 463.238755][T12830] FAT-fs (loop6): Directory bread(block 64) failed [ 463.254600][T12728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.281757][T12830] FAT-fs (loop6): Directory bread(block 65) failed [ 463.288120][T12728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.304955][T12830] FAT-fs (loop6): Directory bread(block 66) failed [ 463.329333][T12836] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2618'. [ 463.356895][T12830] FAT-fs (loop6): Directory bread(block 67) failed [ 463.366851][T12830] FAT-fs (loop6): Directory bread(block 68) failed [ 463.380770][T12830] FAT-fs (loop6): Directory bread(block 69) failed [ 463.387110][T12728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.406456][T12728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.453439][T12728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.491677][T12830] FAT-fs (loop6): Directory bread(block 70) failed [ 463.505845][ T28] audit: type=1400 audit(1772055542.539:1077): avc: denied { write } for pid=12835 comm="syz.0.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 463.540463][T12728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.546289][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.563464][T12830] FAT-fs (loop6): Directory bread(block 71) failed [ 463.570640][ T309] hsr_slave_0: left promiscuous mode [ 463.577204][ T309] hsr_slave_1: left promiscuous mode [ 463.583129][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.593545][T12830] FAT-fs (loop6): Directory bread(block 72) failed [ 463.596393][ T309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.640878][T12830] FAT-fs (loop6): Directory bread(block 73) failed [ 463.664754][ T28] audit: type=1400 audit(1772055542.749:1078): avc: denied { bind } for pid=12835 comm="syz.0.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 463.728925][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.737271][ T309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.172049][T12857] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2620'. [ 464.182364][T12857] netlink: zone id is out of range [ 464.189492][T12857] netlink: zone id is out of range [ 464.197933][T12857] netlink: zone id is out of range [ 464.277645][T12857] netlink: set zone limit has 8 unknown bytes [ 464.305932][ T309] veth1_macvtap: left promiscuous mode [ 464.371111][ T309] veth0_macvtap: left promiscuous mode [ 464.398764][ T309] veth1_vlan: left promiscuous mode [ 464.448369][ T309] veth0_vlan: left promiscuous mode [ 464.535643][T12861] loop2: detected capacity change from 0 to 256 [ 464.679858][T12861] FAT-fs (loop2): Directory bread(block 64) failed [ 464.691807][T12861] FAT-fs (loop2): Directory bread(block 65) failed [ 464.725767][T12861] FAT-fs (loop2): Directory bread(block 66) failed [ 464.737344][ T309] team0 (unregistering): Port device team_slave_1 removed [ 464.757595][T12861] FAT-fs (loop2): Directory bread(block 67) failed [ 464.769105][ T309] team0 (unregistering): Port device team_slave_0 removed [ 464.785712][T12861] FAT-fs (loop2): Directory bread(block 68) failed [ 464.802463][T12861] FAT-fs (loop2): Directory bread(block 69) failed [ 464.820357][T12868] netlink: 'syz.0.2621': attribute type 4 has an invalid length. [ 464.846634][T12861] FAT-fs (loop2): Directory bread(block 70) failed [ 464.866825][T12728] hsr_slave_0: entered promiscuous mode [ 464.872585][T12869] netlink: 'syz.0.2621': attribute type 4 has an invalid length. [ 464.892841][T12861] FAT-fs (loop2): Directory bread(block 71) failed [ 464.899884][T12728] hsr_slave_1: entered promiscuous mode [ 464.919832][T12728] debugfs: 'hsr0' already exists in 'hsr' [ 464.926101][T12861] FAT-fs (loop2): Directory bread(block 72) failed [ 464.928716][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 464.943058][T12728] Cannot create hsr debugfs directory [ 464.948837][T12861] FAT-fs (loop2): Directory bread(block 73) failed [ 465.158977][T12728] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 465.229373][T12728] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 465.253443][T12728] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 465.286855][T12728] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 465.386005][T12728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.443918][T12728] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.470495][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.478341][ T4544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.509652][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.516829][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.706348][T12728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.047497][T12728] veth0_vlan: entered promiscuous mode [ 466.084493][T12728] veth1_vlan: entered promiscuous mode [ 466.127491][T12728] veth0_macvtap: entered promiscuous mode [ 466.150125][T12728] veth1_macvtap: entered promiscuous mode [ 466.174061][T12728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.210494][T12728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.246922][ T4544] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.255884][ T4544] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.285408][ T4544] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.319258][ T4544] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.377562][ T28] audit: type=1400 audit(1772055545.469:1079): avc: denied { mounton } for pid=12728 comm="syz-executor" path="/root/syzkaller.nINeyO/syz-tmp" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 466.474602][ T28] audit: type=1400 audit(1772055545.499:1080): avc: denied { mounton } for pid=12728 comm="syz-executor" path="/root/syzkaller.nINeyO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 466.568396][T12942] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2591'. [ 466.570746][ T28] audit: type=1400 audit(1772055545.499:1081): avc: denied { mounton } for pid=12728 comm="syz-executor" path="/root/syzkaller.nINeyO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 466.690397][ T28] audit: type=1400 audit(1772055545.509:1082): avc: denied { mounton } for pid=12728 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 466.722991][T12944] loop9: detected capacity change from 0 to 164 [ 466.823896][ T28] audit: type=1400 audit(1772055545.509:1083): avc: denied { mount } for pid=12728 comm="syz-executor" name="/" dev="gadgetfs" ino=3753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 467.056295][T12953] loop9: detected capacity change from 0 to 1024 [ 467.090022][T12953] EXT4-fs: inline encryption not supported [ 467.150637][T12953] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.301466][T12728] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.311507][ T28] audit: type=1400 audit(1772055546.389:1084): avc: denied { ioctl } for pid=12952 comm="syz.9.2630" path="/3/file1/bus" dev="loop9" ino=18 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 467.516954][T12967] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 468.523693][T12985] mmap: syz.0.2640 (12985): VmData 29196288 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 468.768806][ T8681] kworker/u8:10: attempt to access beyond end of device [ 468.768806][ T8681] loop6: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 468.885543][ T8681] kworker/u8:10: attempt to access beyond end of device [ 468.885543][ T8681] loop6: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 469.117126][ T8681] kworker/u8:10: attempt to access beyond end of device [ 469.117126][ T8681] loop6: rw=1, sector=1960, nr_sectors = 14304 limit=256 [ 469.159311][ T8681] kworker/u8:10: attempt to access beyond end of device [ 469.159311][ T8681] loop6: rw=1, sector=16264, nr_sectors = 680 limit=256 [ 469.360707][ T3300] ================================================================== [ 469.369178][ T3300] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 469.376473][ T3300] [ 469.378968][ T3300] write to 0xffff888103d83544 of 4 bytes by task 3290 on cpu 1: [ 469.386853][ T3300] shmem_mknod+0x143/0x170 [ 469.391274][ T3300] shmem_create+0x34/0x50 [ 469.395710][ T3300] path_openat+0xd75/0x2050 [ 469.400399][ T3300] do_file_open+0x16c/0x290 [ 469.404996][ T3300] do_sys_openat2+0x94/0x130 [ 469.409586][ T3300] __x64_sys_openat+0xf2/0x120 [ 469.414519][ T3300] x64_sys_call+0x1e39/0x3020 [ 469.419450][ T3300] do_syscall_64+0x12c/0x370 [ 469.424301][ T3300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.430444][ T3300] [ 469.432754][ T3300] read to 0xffff888103d83544 of 4 bytes by task 3300 on cpu 0: [ 469.440285][ T3300] fill_mg_cmtime+0x5b/0x270 [ 469.445213][ T3300] generic_fillattr+0x24a/0x340 [ 469.450253][ T3300] shmem_getattr+0x181/0x200 [ 469.455307][ T3300] vfs_getattr_nosec+0x146/0x1e0 [ 469.460329][ T3300] vfs_getattr+0x48/0x60 [ 469.464832][ T3300] vfs_statx_path+0x28/0x140 [ 469.469589][ T3300] vfs_statx+0xc4/0x170 [ 469.474095][ T3300] vfs_fstatat+0x118/0x170 [ 469.478604][ T3300] __se_sys_newfstatat+0x55/0x3e0 [ 469.483625][ T3300] __x64_sys_newfstatat+0x55/0x70 [ 469.488741][ T3300] x64_sys_call+0x2c64/0x3020 [ 469.493610][ T3300] do_syscall_64+0x12c/0x370 [ 469.498374][ T3300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.504554][ T3300] [ 469.506950][ T3300] value changed: 0x15f06421 -> 0x1b63e81f [ 469.513183][ T3300] [ 469.515506][ T3300] Reported by Kernel Concurrency Sanitizer on: [ 469.521894][ T3300] CPU: 0 UID: 0 PID: 3300 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 469.532486][ T3300] Tainted: [W]=WARN [ 469.536276][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.546531][ T3300] ================================================================== [ 469.813024][ T372] kworker/u8:7: attempt to access beyond end of device [ 469.813024][ T372] loop2: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 469.827542][ T372] kworker/u8:7: attempt to access beyond end of device [ 469.827542][ T372] loop2: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 469.843691][ T372] kworker/u8:7: attempt to access beyond end of device [ 469.843691][ T372] loop2: rw=1, sector=1960, nr_sectors = 2072 limit=256 [ 469.860737][ T372] kworker/u8:7: attempt to access beyond end of device [ 469.860737][ T372] loop2: rw=1, sector=4032, nr_sectors = 2112 limit=256 [ 469.877371][ T372] kworker/u8:7: attempt to access beyond end of device [ 469.877371][ T372] loop2: rw=1, sector=6144, nr_sectors = 2056 limit=256 [ 469.894067][ T372] kworker/u8:7: attempt to access beyond end of device [ 469.894067][ T372] loop2: rw=1, sector=8200, nr_sectors = 2192 limit=256