last executing test programs: 2m42.652603054s ago: executing program 32 (id=204): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x651, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'wlc\x00', 0x28, 0xa7e, 0x2f}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000100)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492c, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0x6310, 0x2}}, 0x44) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) timer_delete(r3) sendmsg$sock(r2, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000640)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x42200, 0x0) read(r4, &(0x7f0000000240)=""/27, 0x1b) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000380)={[{@noquota}, {@noblock_validity}, {@data_err_ignore}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000001000)="$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") 2m37.009036964s ago: executing program 33 (id=232): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x189802, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000000", 0x3a}], 0x1}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x200000ffd000) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000500)) read(r2, &(0x7f0000000340)=""/265, 0x109) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0x1, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) unshare(0x2040400) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x0) 2m31.08027898s ago: executing program 34 (id=279): r0 = socket(0x2, 0x80805, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xb}, 0x116414, 0x4, 0xfffffff9, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x40c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) shmctl$IPC_RMID(0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x39, 0x39, 0x65, 0x34, 0x39, 0x31, 0x35, 0x38, 0x30, 0x30, 0x63, 0x31, 0x66, 0x62, 0x36, 0x35]}, &(0x7f0000000540)={0x0, "70889ea6fb8256f753b211597c9cfb5a9cbbe861f7d52473de0b59a5c7857010b6a88a28ad5d06072dadf5310a6ea29be483f7966c60744c19abc8b436718acd", 0x23}, 0x48, 0xfffffffffffffffd) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000005c0), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d0000000000000000170000000800"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8971, 0x0) 2m28.211118907s ago: executing program 2 (id=291): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='7', 0x1) flistxattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2m26.942708896s ago: executing program 2 (id=297): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @local, @loopback}, 0xc) r6 = io_uring_setup(0x1dd, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xe, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000300)=[0x2, 0x6, 0x101, 0x1]}, 0x20) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000000380)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x2b, 0x80801, 0x1) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x8002, 0x10003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffe}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x9, 0x0, 0x6, 0xb, 0x0, 0x401, 0x40480, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000280)}, 0x0, 0x8000000000000000, 0x7, 0x4, 0xfffffffffffffffc, 0x10, 0x0, 0x0, 0xffff, 0x0, 0x3}, 0x0, 0x5, r7, 0x2) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) getgid() fcntl$setpipe(r0, 0x407, 0x100000) 2m26.458000267s ago: executing program 4 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0x207, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000004a80)="05031c00d1fd140000", 0x9, 0x4, &(0x7f0000004ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) perf_event_open(&(0x7f0000004b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) lsm_list_modules(0x0, &(0x7f0000004b80), 0x0) sendmsg$nl_route(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e40)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004ec0)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000004640)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1d0, 0xc8, 0x8, 0x1d0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x168, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x1, {0x80000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x7ffffffe, 'snmp\x00', 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000700)=[{&(0x7f0000005040)="99a82b7ca6a7e841d4c1b7df1799e8c9b404f5f1cbcc913fff1759abbcfd9d0f16915f6549c6a1fd9a5f520fd6b0e96928b2859b3fe57153c7c2248d397f2746d91a08be3ac7e3b2f2d90ba6fe91a46d7d109a4c2708e5422c2b6b500fa765aa61bd914b3d", 0x65}], 0x1, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000005100)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, 0x0, 0x0, 0x4008440) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005180)={&(0x7f00000051c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r7 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000005200)={0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000005280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f00000052c0)="11c9064268e9", 0x6}], 0x2}, 0x8040050) 2m25.843889851s ago: executing program 2 (id=303): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='7', 0x1) flistxattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2m25.44577903s ago: executing program 4 (id=305): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2m24.973611041s ago: executing program 2 (id=307): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301003, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x30) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x1, @perf_bp={0x0}, 0x10ecc8, 0x1224, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r4, 0x0, &(0x7f00000008c0)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x406, r5) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000180)={0xa0000002}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000001980)={0x30000009}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0xe0000003}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) 2m24.654377538s ago: executing program 2 (id=309): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2m24.348903835s ago: executing program 4 (id=311): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) 2m24.173445619s ago: executing program 2 (id=313): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301003, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x30) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x1, @perf_bp={0x0}, 0x10ecc8, 0x1224, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x406, r6) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000180)={0xa0000002}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000001980)={0x30000009}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)={0xe0000003}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r8, 0xc0406619, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) 2m24.172986759s ago: executing program 35 (id=313): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301003, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x30) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x1, @perf_bp={0x0}, 0x10ecc8, 0x1224, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x406, r6) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000180)={0xa0000002}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000001980)={0x30000009}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)={0xe0000003}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r8, 0xc0406619, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) 2m23.349377688s ago: executing program 4 (id=320): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301003, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x30) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x1, @perf_bp={0x0}, 0x10ecc8, 0x1224, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r4, 0x0, &(0x7f00000008c0)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x406, r5) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000180)={0xa0000002}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000001980)={0x30000009}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0xe0000003}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) 2m22.815784451s ago: executing program 4 (id=323): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2m22.125484516s ago: executing program 4 (id=327): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x189802, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000000", 0x3a}], 0x1}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x200000ffd000) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000500)) read(r2, &(0x7f0000000340)=""/265, 0x109) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0x1, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) unshare(0x2040400) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x0) 2m22.121584387s ago: executing program 36 (id=327): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x189802, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000000", 0x3a}], 0x1}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x200000ffd000) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000500)) read(r2, &(0x7f0000000340)=""/265, 0x109) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0x1, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) unshare(0x2040400) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x0) 1m46.073784327s ago: executing program 8 (id=492): perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x2a, 0x1, 0x0, 0x4, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1687, 0x2, @perf_bp={&(0x7f0000000740), 0x4}, 0x100140, 0x800000, 0x2, 0x3, 0x40f, 0x7, 0x0, 0x0, 0x3, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup(r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f2, &(0x7f00000000c0)={'sit0\x00', @random="5600230d1100"}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000800)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000000}, 0x50) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$hiddev(r9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000400), &(0x7f0000000440)=r7}, 0x20) poll(&(0x7f0000000480), 0x20000000000000b5, 0x9) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6a010000009c110120010000000000000000000000000001ff0200000000000000000000000000014e1e4e20009c90"], 0x0) write(r0, &(0x7f0000000300)="040000000000", 0x6) 1m44.556806122s ago: executing program 8 (id=497): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0xffffff5d}], 0x1, 0x5412, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1223, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0xfe44, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002100)={0xb, {"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", 0x1000}}, 0x1006) mkdirat(r3, 0x0, 0x4) mount(0x0, 0x0, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000240)={0x8, 0x3, 0x1, '\x00', 0x7}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="a5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000240)={0x84, @broadcast, 0x4e20, 0x3, 'ovf\x00', 0x2, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000440)={{0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0xec}, {@private=0xa010100, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4ea0, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 1m42.592006697s ago: executing program 8 (id=506): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x8000, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0x4e23, 0x0, 0x2, 0x0, 0x2, 0xe0, 0x20}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@loopback, @in=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) cachestat(r1, &(0x7f0000000500)={0x405}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x140a, 0x1, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$nl_route(r0, 0x0, 0x4044080) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x10000d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x18, 0x40}}], 0x1, 0x804) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xf) sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f0000000d40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x10, 0x3fb, 0x1, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc040}, 0x8004) syz_emit_ethernet(0x32, &(0x7f0000000cc0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000fc0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, 0x0) syz_emit_ethernet(0x7b, &(0x7f0000001340)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x6d, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x59, 0x0, @opaque="7fc0d409fb7529bf0df8d2cd6e27e187e57d30639979f422e0c92f3416672e6a228bb3220a9f6a266ddb2dd396185f30fd99d0d1bb8384a83baf2667e38e59fe6d67dd2670f22e03e25fe5de4acdfe0964"}}}}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="20010000120013070000000000000000e00000010000000000", @ANYRESDEC=r0, @ANYRES32, @ANYBLOB], 0x120}}, 0x100) 1m42.196698496s ago: executing program 8 (id=508): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301003, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x30) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x1, @perf_bp={0x0}, 0x10ecc8, 0x1224, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x406, r6) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000180)={0xa0000002}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000001980)={0x30000009}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)={0xe0000003}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r8, 0xc0406619, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) 1m41.711817467s ago: executing program 5 (id=510): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 1m41.637955489s ago: executing program 8 (id=511): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000030090000000000000000000008000000000b00ac73c292d216b89fe06fae6d09000001000013010000000c0000000800000004000000100000000000000c"], 0x0, 0x51, 0x0, 0x1, 0xfffffffe}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, 0xffffffffffffffff, 0x403000) perf_event_open(&(0x7f0000000480)={0x1, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x80, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa4, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x3a, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901010803", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0x4}, 0x50) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x14) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2ec01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpid() ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000740)={0x2, 0x0, @local}, 0x6b) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x4, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f000046a000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000140)=0x101, 0x7, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000680001040000000000000000020000000000000008000100010000000800050001"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000006800010400000000000000000000000000000000080001000300000014000200010000000000000002"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000018000104000000000000000002180000fe0300010000000008000100c000020008001e0003"], 0x2c}}, 0x0) 1m41.073255782s ago: executing program 8 (id=515): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) write(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@mcast1, 0x3, 0x7, 0x4e23, 0x4, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3502, 0x0, 0x3, 0xd, 0x5, 0x7, 0x3}}, 0xe8) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) write(r5, &(0x7f0000000300)='1', 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x1, 0x1) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000340)='./proc\x00', 0xc55, &(0x7f0000000380)=ANY=[], 0x0, 0x2f7, &(0x7f00000004c0)="$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") r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000007c0)=[{{&(0x7f0000000840)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000008c0)="18", 0x1}], 0x1}}, {{&(0x7f0000000900)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000980)="a8", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000009c0)={0x0, 0xf1e}, 0x8) 1m40.848840777s ago: executing program 37 (id=515): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) write(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@mcast1, 0x3, 0x7, 0x4e23, 0x4, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3502, 0x0, 0x3, 0xd, 0x5, 0x7, 0x3}}, 0xe8) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) write(r5, &(0x7f0000000300)='1', 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x1, 0x1) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000340)='./proc\x00', 0xc55, &(0x7f0000000380)=ANY=[], 0x0, 0x2f7, &(0x7f00000004c0)="$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") r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000007c0)=[{{&(0x7f0000000840)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000008c0)="18", 0x1}], 0x1}}, {{&(0x7f0000000900)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000980)="a8", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000009c0)={0x0, 0xf1e}, 0x8) 1m40.652683222s ago: executing program 5 (id=517): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0xffffff5d}], 0x1, 0x5412, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1223, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB], 0xfe44, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002100)={0xb, {"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", 0x1000}}, 0x1006) mkdirat(r3, 0x0, 0x4) mount(0x0, 0x0, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000240)={0x8, 0x3, 0x1, '\x00', 0x7}, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="a5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000240)={0x84, @broadcast, 0x4e20, 0x3, 'ovf\x00', 0x2, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000440)={{0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0xec}, {@private=0xa010100, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4ea0, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 1m39.138551647s ago: executing program 5 (id=523): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x8028, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=@ipv6_newnexthop={0x84, 0x68, 0x8, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x3, 0x0, 0xd}, [@NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x99}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf52a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc89}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@empty}, @NHA_GROUP_TYPE={0x6}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x4000) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x40000000015, 0x5, 0x4) r4 = socket$kcm(0x2, 0x3, 0x2) mq_open(&(0x7f00000002c0)=']\x00', 0x40, 0x80, &(0x7f0000000300)={0x2, 0x5, 0x6, 0x3}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) munlockall() sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000ac0)={0x3, 0x1, 0x1, 0x1b, 0x182, &(0x7f00000006c0)}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000440)=@req3={0x8000, 0x6, 0x32, 0x6, 0x1}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000480)=0x46, &(0x7f00000004c0)=0x101) 1m38.824814093s ago: executing program 5 (id=524): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @empty}}}], 0x20}, 0x2000e900) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000900)='GPL\x00'}, 0x48) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000940)=r1, 0x4) r3 = syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000ac0)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000b80)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000001000)={@id={0x2, 0x0, @a}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000001140)=""/222, &(0x7f0000001240)=0x61637876) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001300)={0x700, 0x0, 0x0}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mkdir(&(0x7f0000001340)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000001380)='./my_sys\x00', &(0x7f00000013c0)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write$binfmt_script(r8, &(0x7f0000001440)={'#! ', './my_sys/bus/pci/devices/0000:00:01.0/config', [], 0xa, "e24c8abc1a24"}, 0x36) sendfile(r8, r8, 0x0, 0x6) copy_file_range(r7, &(0x7f0000001480)=0x9, r7, 0x0, 0x8, 0x1100000000000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000014c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x6d788443, '\x00', 0x0, r7, 0x4, 0x1}, 0x50) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = perf_event_open(&(0x7f0000001540)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r5, r9, 0x7, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) write$cgroup_subtree(r0, &(0x7f0000000980)=ANY=[], 0xfe33) syz_ublk_setup_io_uring(0x21a, &(0x7f0000000000)={0x0, 0xb5a0, 0x4000, 0x1, 0x1c7}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 1m38.451584692s ago: executing program 5 (id=525): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 1m38.281336777s ago: executing program 5 (id=526): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x16) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000240)=0x10001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000400), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) connect$inet(r1, &(0x7f0000000500)={0x2, 0x4, @multicast2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24008044) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000640)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xd, 0x8, 0xcdc, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0xa, 0xffffff4a}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000800)={0x50, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c800}, 0x40000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000000980), 0x800001d, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, 0x0, 0x0) 1m38.280877946s ago: executing program 38 (id=526): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x16) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000240)=0x10001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000400), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) connect$inet(r1, &(0x7f0000000500)={0x2, 0x4, @multicast2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24008044) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000640)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xd, 0x8, 0xcdc, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0xa, 0xffffff4a}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000800)={0x50, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c800}, 0x40000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000000980), 0x800001d, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, 0x0, 0x0) 1m15.174774408s ago: executing program 9 (id=641): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0xf}, 0x4958, 0x0, 0x0, 0x1, 0x2, 0xfffffffd, 0x10, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x222, 0x3, 0x1010, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) msgsnd(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x8, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) msgrcv(r1, 0x0, 0x0, 0x969edffe39095fd4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffffa4, 0x0, 0x0, 0x0, 0x52}, 0x6}], 0x360, 0x61, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r5, 0xffffffffffffffff, 0x2f, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000) 1m14.802167097s ago: executing program 9 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) writev(r10, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f0000000240)={0x5}, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a00000600010005b6000008000b"], 0x3c}}, 0x20000034) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r11, 0xc138fd03, &(0x7f0000000280)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e2e70f97b61") sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {0x8}, {0x2, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0x73, 0x1, 0x1, 0x79}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m14.589989012s ago: executing program 9 (id=647): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x189802, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000000", 0x3a}], 0x1}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x200000ffd000) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000500)) read(r2, &(0x7f0000000340)=""/265, 0x109) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0x1, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) 1m14.155392732s ago: executing program 9 (id=651): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301003, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x30) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x1, @perf_bp={0x0}, 0x10ecc8, 0x1224, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@acl}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x406, r6) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000180)={0xa0000002}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)={0xe0000003}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r8, 0xc0406619, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) 1m13.525530187s ago: executing program 9 (id=658): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 1m12.745444225s ago: executing program 9 (id=662): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r5, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r5, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='7', 0x1) flistxattr(r6, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 1m12.737480295s ago: executing program 39 (id=662): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r5, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r5, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='7', 0x1) flistxattr(r6, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 6.448812431s ago: executing program 3 (id=1110): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 6.436091781s ago: executing program 7 (id=1111): perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x2a, 0x1, 0x0, 0x4, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1687, 0x2, @perf_bp={&(0x7f0000000740), 0x4}, 0x100140, 0x800000, 0x2, 0x3, 0x40f, 0x7, 0x0, 0x0, 0x3, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup(r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f2, &(0x7f00000000c0)={'sit0\x00', @random="5600230d1100"}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000000}, 0x50) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$hiddev(r8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000400), &(0x7f0000000440)=r6}, 0x20) poll(&(0x7f0000000480), 0x20000000000000b5, 0x9) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6a010000009c110120010000000000000000000000000001ff0200000000000000000000000000014e1e4e20009c90"], 0x0) write(r0, &(0x7f0000000300)="040000000000", 0x6) 6.431131262s ago: executing program 6 (id=1112): perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x2a, 0x1, 0x0, 0x4, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1687, 0x2, @perf_bp={&(0x7f0000000740), 0x4}, 0x100140, 0x800000, 0x2, 0x3, 0x40f, 0x7, 0x0, 0x0, 0x3, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup(r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f2, &(0x7f00000000c0)={'sit0\x00', @random="5600230d1100"}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000800)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$hiddev(r8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000400), &(0x7f0000000440)=r7}, 0x20) poll(&(0x7f0000000480), 0x20000000000000b5, 0x9) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6a010000009c110120010000000000000000000000000001ff0200000000000000000000000000014e1e4e20009c90"], 0x0) write(r0, &(0x7f0000000300)="040000000000", 0x6) 5.577793771s ago: executing program 3 (id=1116): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000c80)=0x6, 0x12) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x2000c046, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0x47437f72a9da0ea3, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket(0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) munlockall() sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={0x0, 0xcd0}}, 0x0) 5.577431821s ago: executing program 7 (id=1117): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x844, &(0x7f00000001c0)=ANY=[], 0x1, 0x267, &(0x7f0000000200)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000500)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x12, [0x0, 0xc, 0x0, 0x9, 0x8, 0xc, 0xa, 0x9, 0x5, 0x2, 0x2, 0xd, 0x8, 0xc, 0x6, 0x10], 0x4, [0x0, 0x3, 0xd, 0x6, 0x5, 0xf, 0x7, 0x1fc, 0x2, 0xfb42, 0xc4b, 0x7ff, 0xffff, 0x0, 0xa, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x8, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48c0}, 0x8840) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000580), 0xffffff6a) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x406, r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f00000000c0)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) eventfd2(0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x107}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) set_mempolicy(0x2, 0x0, 0x6) shmctl$SHM_UNLOCK(0x0, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) 5.575812181s ago: executing program 6 (id=1119): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x5c) 4.694031221s ago: executing program 6 (id=1121): r0 = fsopen(&(0x7f0000000480)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xefe, &(0x7f0000000380)={0x0, 0xfffffffe, 0x8, 0x5, 0x3af}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000500)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x1000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x7, 0x4) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) close(r3) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 4.483965276s ago: executing program 6 (id=1122): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x13, 0x9c58d, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0xa}, 0x1410d, 0x6, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, 0xffffffffffffffff, 0x3, 0x1}, 0x20) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x98}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x240c, 0x1224, 0xfffffff9, 0x8, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x300, 0x1000000}}], 0x14, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x20) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 4.449509797s ago: executing program 7 (id=1123): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 3.949642959s ago: executing program 3 (id=1125): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000680)='syzkaller\x00'}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000d80)=0x1, 0x4) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x20008800) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000dc0)=0x1f6, 0x4) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{&(0x7f0000000e40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='4', 0xffe3}], 0x1}}], 0x1, 0x24000804) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x5, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x50) r3 = epoll_create1(0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000900)={[{@grpjquota}, {@dioread_lock}, {@nobarrier}]}, 0xfe, 0x244, &(0x7f0000000940)="$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") setxattr$system_posix_acl(&(0x7f0000000bc0)='.\x00', &(0x7f0000000c00)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="020000000100020000080000040000000000000010000000000000002000000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000c80)='./control\x00', 0x0) rmdir(&(0x7f0000000cc0)='./control\x00') r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24008040}, 0x41) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0x20002010}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) gettid() io_uring_setup(0xbf6, &(0x7f00000002c0)={0x0, 0x4ae8, 0x400, 0x3, 0x2ce}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.949021069s ago: executing program 1 (id=1127): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 3.717407864s ago: executing program 1 (id=1128): r0 = fsopen(&(0x7f0000000480)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xefe, &(0x7f0000000380)={0x0, 0xfffffffe, 0x8, 0x5, 0x3af}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000500)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x1000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x7, 0x4) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) close(r3) 3.03105604s ago: executing program 7 (id=1130): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2.973934811s ago: executing program 1 (id=1131): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2.481057313s ago: executing program 3 (id=1132): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d00)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_256={{0x303}, "44682d1658abeaef", "6e44b85987bc955b2505f787cc2c89e5a1f37f01b65a3c77fa9fc92425e107ff", "096de778", "2a6948e8685a03b9"}, 0x38) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1223, 0x0, 0x0, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc03, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x1d, 0x2, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4041040}, 0x400c4) r2 = socket$l2tp(0x2, 0x2, 0x73) close_range(r0, r1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='bond_slave_0\x00', 0x10) bind$inet(r3, &(0x7f0000000480)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000004c0)='veth1\x00', 0x10) bind$inet(r4, &(0x7f0000000500)={0x2, 0x4e25, @multicast1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000580)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000780)={0x0, 0xfffffff5, &(0x7f00000007c0)=[{&(0x7f0000000800)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_int(r5, 0x1, 0x4c, &(0x7f0000000840)=0x9, 0x4) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.440434173s ago: executing program 0 (id=1133): r0 = fsopen(&(0x7f0000000480)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xefe, &(0x7f0000000380)={0x0, 0xfffffffe, 0x8, 0x5, 0x3af}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000500)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x1000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x7, 0x4) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) close(r3) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 2.248982398s ago: executing program 0 (id=1134): io_setup(0x81, &(0x7f0000000000)=0x0) r1 = eventfd2(0x10, 0x801) read$eventfd(r1, &(0x7f0000000140), 0x8) io_pgetevents(r0, 0x20000000005, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="050000007400000043000000020000000000000044b14f489acfa54be78d4f3f929b3ac75be22f79f76177ab0cfccbd64ab64a0800000000000000e4b088a7bca762d7f9dd941bf5ef680cbac311c4e77a840699d008d2d7fc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x38}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x6a, &(0x7f0000000e00)={@local, @random="fad1e04d716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "3ce7b9286b574dc2720ef6057772f09df9d3421eee34e003", "047b90670593e17881953d1e429031066797feb6632a4cea988cc9256fe11df4"}}}}}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0xfffffffe, r3}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x9, &(0x7f00000006c0)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1, 0x0, 0x12}, @exit], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl(r2, 0xc138fd05, &(0x7f0000000280)="0400000002000000000000007e0100003801") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00bae0cb2f0104000000000000000000004000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x84) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000400)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendto$packet(r7, &(0x7f0000000480)="05031600d3fc140000004788031c0910", 0x10, 0x4, &(0x7f00000004c0)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000019c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x13c0e8, 0xfffffffffffffffc, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x10005, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x160341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f00000000c0)) 2.13688495s ago: executing program 7 (id=1135): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000c80)=0x6, 0x12) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x2000c046, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0x47437f72a9da0ea3, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket(0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) munlockall() sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={0x0, 0xcd0}}, 0x0) 2.080865592s ago: executing program 1 (id=1136): socket$packet(0x11, 0xa, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x100636d, &(0x7f0000000640)={0x0, 0xee35, 0x800, 0x1, 0xa6}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) fchdir(0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000340)={&(0x7f00000001c0)="bef351b83c9d3eb91350846914", 0xd}, 0x1, 0x0, 0x0, 0x44090}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getdents64(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x400c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)={[{'addr=127.0.0.1'}, {'timeo=1'}, {'retrans=1'}, {'sec=krb5'}]}) 1.846261137s ago: executing program 0 (id=1137): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x2, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1.72926482s ago: executing program 0 (id=1138): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x9}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000010901000000ffdbdf2502180000ff0000080000000208000100ac141400de5215ffa8deddc8329dc91393e5cc52866bcd7f9bc83a32912c6d60caea871f6a8d20406b624d5d86698b6de074215ce1eebb33f6f85f2e111cb1cc3fd9f21064e7210d7d310288cb7b2af2567fa20d01b064e2e906489a882ad248eeb25cbf138d48f19634c3a051bfb1ba4c43f09d06b4028edc3bdbab815c46cf70eedc34bfc5fbc4fcd8c8f51e6d8b16e5ea694c23941581352a752dcd262fafbca8c6e8abf0a42c5e7ee0c6"], 0x24}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$iso9660(&(0x7f0000001100), &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000001ac0)=ANY=[@ANYRES8, @ANYBLOB="382ac0212c56a7fbe3afafb2eaaa05a431c4138e7e10dfb765518e3092ee8f717e99c14c4f2f467c910abcf35a7b8b9faa56a350d2ba174571b018dd97f2e2107d0c2ec85edd0891d6a417be86964d6b72d943ae8e32261bf424dae50db0538aeb64b61481af050e91b65cc3c3f880d2eadc0f593991709dd46069539cc6b011c175a4732a56b95a8597580c521f30ae8801fb9c2f2ff66111549093894394308ad65f6952fecd5b2ce75bfceb7dbf06613e9ae6f37afef56606f822cddb3033062d63714d399cb5fb8c8b71a13ee6e5a9d176563146664b06ea6873cf94eb90090a6de85cede7d8a7a0ed25c6790f7322ddb6dfb0e54802d8ed6c898ef39057c50ff95b03eb2e420380f5cd97c0bdb17c252c8ba7a0cdd4dac25835900729683a0867033c667313178ad323c795296108f310d5b5c75ebd56b6a2c5b741767734854b21d9a9d04e5aa2be212aa475426f90116d812ce1b3753c7b4b8695541d846202969cb320d62d63b2a31027fb7f1cb0815e492a9ebb162cad8c761d07cc02b1f24a4393999fa3da9f828181c542c984d2b18f01b21d57ab3570b485cc9fb6a70a58d8ebb0e3a112172f496e5dc797893d05ef0fff504c0183b58a08ee81ce1b41f213e9de05f26495c5a2315b5a642accda6ffeb67f9ece6a98c3aa0152dad644fc64b3ea473a6f6d9c69a0f3254c50bd135da813fa00c5e9fba450c709f7e4996894e3ed5a31e449f96c542e4a713bdc302edb2e5c8774ab3ccb1859cd1668fa0cbf8bec6227310634cb85cf9e3ee40d0142e08c994d3352048681a9a005ef1360cb68804102f4d1ecd23a30523d33de5efd6be2007d29be1f5eea9dad6c30b23ec32927c56325ee65f58c3a85e197f080a67b6b8628bb9444929f987a18defdd08e8fa630c6d21f080701bdb122a602c4045bd90a4fbbb837756392434ff84c308f989288c26e69bb0601f13f78f955988bfe07a5077cf724e09df8492c4e9ebeb4f51e9007a9c547ad0bdbd95ddd757b848487b2665cb7318b52431dd0099df73028583b16f7dbbcb7f3598954d673732c5a15fb9ccb03f7e0fed17dfbabba0f122b033fe25cc2d4786357284891ca8ce293d853602a0716d59d883477d4ac2a69ca9029e812e64d7ab2fd029e8dbe2c5225d6f34c8fa4d5c9b716d9a9abcc69ef29b834393a58187e95f4cb7dbbcfc345146b582f6f7e5fe06291f562378fe2492baee58172f655e01b9b1ad399bb5ade91fd0287bb5b7f6d1ef4758e489b2de61a8f8310fcde5cdabb01a16d29b3b298ed4cfce66897d6497e78f1366ec7dc6ed5aa33ad0edde2dbeaa501d46065ce5d714b08c53db9f0515a1f75a27b8ff14cabd53409b91f084bdc1c15f9adade7e953b134bdb4353b64b5d7dd8b4f28b90e1d232a8d05de38b350950da1a3ba2df8e346afe64b67904284930f315e2e4b5fdd3db60eb3fa4d653dc6680738b0a91f117c504165124cdd66e526448984de75c198cbb8f5efa94830f8ed5f44ae1b281f4a2ff852aaa9f77b04d8d9e28a22df3c6c1163b92c0e76bcdc622a66bf2a110224b9fa2335fd69469fecaf172464a6326e9d3c7869eab40ead02303f67bdbd7787355a2cafc16d39e8b282cda57be5cbf324338eef26053cbd33599b4add0e73b3dcb6630065dd835c079080897f1b182e4ff1b755691079d1b62515ccc44751d6275c6b2e3bcd79971231869e28f78536ae2eb4a3af7c8be0010d92fb366cb831fdf09dfdb2a7e45634f3f67d3b778f837706dcbc3d3c2267f9838d142d14e72873e6453c539c4594e405eed34ac58a6c081e50066e9233c40c0986f6b9496682453305d7daea5d87f2b6a6f7659f3da283f906acc057b8404304b9050862fd74ff276f277bfc8c4dc8f6fd3bdf44805b6027d30e629d510558ae4c56b67df43809dc66b00c0d473ad80de476d15515420615bcf7ae61c16ee77d7aa307f77e86cfc7448f3e883c4225d7dd69d0884da17047407929736b3c874040faf8a0bbbe3fb4d863b8de1b1666df26053a07c6a8ec160f7c7efbd24edac25f44cf9486705ebf6f1735cca16f33edb4f716eff637579a53c10e5769936aabede07db9f487be69893310ce71006f49a8c0e150fc3b42facef9d76da985c45ea7a91628c48c6ae09eb206bbb5139e674a698302be1bd681c328183d424668446abc31bb10933146d74158c9b1a86687997843651f9b8bfe530e23b70673809f638ee0b850715f382f4211762e96cb932c7313268628010405a8dacb9199ef6bb12a33c38a3042ac8f6450e6316136b6dd97b693bbab46bcd7b4164ad3b04111be8e95e3d165836b2808d51546e7b371025819c8904a3ec5b6edd86f8029a16986f992efd27d99c2f2ea71a57844156aca63d9340dcd21f9e0e6d975bb7e40cd9e51163d2b80a20f4c0ce5c59abefef1e7c3ea020323add7295acb4379a4a0725572b48e772b918449142f48401b15385168c648ac19bb4c59b0394d8ca55a0b9485ce5503d8f2a5fb34d75ac9b01644e826c42e57137d223507c3808c6b39b3340fb1d4d9e67742affff692d55478eee392b3b6f1bec1e6ea87bee3a9b2b5f883d0e5fb961d8b28fc05b5080d3b66771d9f05703cc8783cf56d7f33dd281958a85987fb4ef90e474159451f60759edd3ffbf0be2f934e92b3fdf784aa3d6abcad97e11d1600de4c94b29f74d1c566e809232dd385545f8a18e8608e558aeb6c760abb173c8f71aeec31ea64bc491f9ea4663d124b33a46dd15487c2abd0f362c181e1ce6d17aa88aaecf421af938c24436fa62b7f32965f07fa6ea634813c7895eeba6988d2eaf16767e207869e7c7ddc26fa022fe873d2fe73889b84c75c563349098206ebcd94af128e5463f3848110ce8d95fdf0ef02217a2faaa9a3737588b7ba4a9fb6d3ec396bd465efc059eeaa4affa70b3181ca03be565f25400066cf614ba83daf284b1afa552fe419fc5db96420e137d8175a22d4725e8ed1990d2034c8cafca7a816effb2934477b9064c22b5c4617257bd2705a978766c8ba089a70b6005161da26d40bc6a82c10c50435f1fc01b8a2ff325ab869a5e75265ca76eadc7e45e58c8fcc2a5e8e24201d18df8a31413f3e947757c7fd7cfeabb4d1c9d729c8428de033d2223ab824e187d0fa77159d7ab3d3813dc036c7d1f1a54ab2d8527791039ebe68dd0fb58ee7f23ed0aeb74bb3c797a1df3fd76231280702766e16cd7fc9aa65bc6f1900df9a3226ba0d7e174f28e5ad7a89874ad3a4c022d2260bb815a0003c0f063fc969a7955a3973babd6e4c8dfc4705af4e099033af605ed877d39db5cbdf3206967b3b7951cf96a9f8c1f9fb82fb5348e2d53f2490e387b924b92a7d138ef92f3c0fa4168234e56220dd7ac9dd1eb27bb6a0812ec47474ff352d8e672bd166ec6cdcdeb79e9a4d26a7bf1347c4ad92ef705be20948d41aed921e44cafb3710c077e14dc9836a7c5a1946bd2181fc4b5d3cb73e79c5726785803b4d85d6d09ce65df29c89f4ccb995595b91209330c9a6e5f68f9e3567db942b9e59ff6834dc34088d38d9ae6ee0acd8ccf18db6a7c86b653f7a5468498cc5f3db257584d2c9a493ab51c7ac69b481610024377cb94332c4d1d3fcf3a89bdbeb2ef9b18f996eaa36de5fc8039179528beaabff08367dad734aa51f2a48f4dd4290583ef464290d35ec850d10d55b61085f4670b33e68ce8b5ed792ac9bd818b0e48f8dab948aa8abd559c1345f701db715a92c9f8dbda3d8e082199f3aef3002d6b1670349f2176b76fa6fd90e731c0b67ae596aea27c512addc458700e6f66457e85e62be03c2d489583fc2adf5fb246b369eedd0aa6f4e497b5be9b7334657c0efd4117d2680a5b747a33bf0ceae9da5b620f63167234d26aca4236582bae7bb36b7f49ff772d3f5bb93d32664dd4dcd9d8b5a209d811c5af20350994a5ff1bd59815ae1065790855c9234f27acd05326f9ccc4bd045a23f60229083927cc4eee058099ff4fc56a659a3f66bbd39569e027bee4fd0367b2783aa7bdce4f1e48e896a67e646323b5a3de4f0d8ff3f910928f91d343b8c3e5ef488847eeb28e0d10aab2c235768ad2691fe4cb919f067d9c93c08351cd47b50957b945b6a29325716e53ba6cc860c7f75dc5213f4ac9e4e63adae08f84121fba9a9d037e7eaefa91c79399df0be414d272e141daadfb85e536a5ab507e59714ade8234a671ab54fe9492de6ffe67ef260fd8fce195324d189cdf2c3f9dc2026e60b17b0f004db2c0ce2f15c1dd4ff2cdd4b3f718c2a79fa03fa64878e67cdb5ff0468ed13f6fb919899c26ae115636923756dcdf464a6aedfdb7da63e420ecffe21049b78fa0853b8466d68322e373ec954ee4a19ecd8550f7488d246d9f2e6448e0bd200e9d7b09e6aafca84d9c3b40132185c88bcbdd61c3f112f51ac71b6afa62e7d9ef31ab67fadcce7d8cf379025a0f139004c280508866570561c3a802284a6e895041f618a58d677df52b2da19980d0daef614de561e1cb85340d1b29f9f2546f0373df78c5811d7152e2ea709ba7e2b98ef493519d0b8a16b7c1c18e0d3c9ed355ac347ebffffe45db2baf0d5e24894671e305e7b88d7ea8ad7c7000cff387efe1b29d5398d16e5db64521a96bf1a8bccfc6b8a8577cc19223081dc71654b2668f082625965b9684963f025f5c2b25ee93862313085696cd9305edec40d2da1134b249583f058a326e4f955723a12d34a159fbf73ae77d48c7f54e4e3ecb9710400a70e0c0413804419cfae7918b570af4db7743bf98b4d4ca033b5b751cb63bb7a7a175777211786e231cd48e398a84aa4268a524cf99d2c7b0f98b2b62484b5c43b095d1226596cadc2932419f06421eca321dd78a8a7ad5b7a36849475f1fe93849d48be0463eb8f9b0e9790782586814166f0aa8d4d63548c222f8e38695379c053e145f40f0a19a2ae172c8de3dd9d348c83f3341bb9d8034f6c693eb3bd9a764643b72ea37197573ddd5f132c2b9d6a8d83e7950e26fc5ffcc466f70175bba58803bf14bdd7637da90a8582f505204fd5ccb31ac04de0779e0e180d19789e874b7b5d6c68535722bedc54dc46f4381dae6275b4517f470adf608aea03d72541aca2640a94a98bab3230235e459b7efbaa09718ba2e712cfceb2e206c866abdf500efe636c62af0a572b251ebfc761295af2d51d5f5995b130ef4d7f11a353f7ded0c0b52bcb64bad8eca1003d708e1a4b7de6e46c325e93062230ecf04df89c428c8c432c8070107b689df0feaebc69a0dd5aed560f5c454ab4c50d1719a038c013bd91661c9be4b2c321c739b67c7ec9da46b64a2c459ac533bd1523e8fcffbfe4596b146e6cb31ce87977eda9d278cc655f6f81e44349f6dd02a604646894f7e695beaa3c54a369b642928ff0bff1bf59bb618039f47b5d7dd472b850c9683ad4cc98787307d14d8157ad7538a9fc03d35248f63f1b582fbe14d2db621e0e563b785b8fb6d262a19f7a15b6ff42afc7236e7d2cc42b671d977b4ac6361ee0550fc2d9d405d738c4916540ef01c8dd10d6776b3d9cc18ecf6558c6320becf6ac4b4b78444453ea236b0220c92743136a8d479441ab20499ec5a613043e189c274f90662986020d0c1fd7a09c3e056dd73b17da8fcdb426c7cd3400ac7829d4c017fe717438402a8e2d4d6e58bb3f2a8a0d0c5abee12c339768e8a57dfdf286dcdb00a022f7eed9bfdf2321370f8b1edc388d011870e8a238b05d6b76812d70c18a6ac25a117f51e18755", @ANYBLOB="0c2ec34edb42fe4f2c1b0000000000000000000000c188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES8, @ANYBLOB="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", @ANYRESOCT, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be04627c64a6", @ANYRESHEX, @ANYRESOCT, @ANYRESDEC], 0x2, 0x585, &(0x7f0000001500)="$eJzs3d1v01YfwPGfSwtRHqnPo4cJoa7AoWxSkUpwEgiKuJg85yQ1JHZkO6i9QhVNUUUKE2XS2hvWG7ZJ29Vudssu90fsz9kd2uUuO/klfc0LpaXtuu+nKsexT8752bXOD7fxsQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHsimnmDak7bmtO9WdXfK+x/TJ9974VcnNXMaBfESP6lkxGLierLn+yvflS9M+UTCavJiUTFRlZ/8+l/92/ODrSff+AgA/k1w9saXVt/dlCp9N+eVSBnEJXLvTfVtOuE3hOw6pp5QSeKpdK5u3ZaqCqTl0H80GoG8r2tRV6vpq2b6p8uVxUOjfvtdxaxarr7sp7twqmWVIPck1t+YHn3n6QC+xZp1533FpcJ9oc1bkXnYgPnVCF2mootbTcaReH7UBUKf8+lQrDKhXMQiGfLxTypbvlu/dMc3TfCnMP2Vfj6E5a/DMd4egNHM5Imv+lLo640pI5UT2/bKmIL540+mxPdfP/57f1wH535v9ulr+8vXlC4vx/NXl1tV/+7xPL8X2typqsyzNZkI50pC0vTzyi4/2qiRZXHAnEE0caYsVrVLpGSVlKUhJTHsusVMeiH2JVHKmLlkDmJZBQdHxG2eKLFktC8cQXJdNiy01RkpeylKUoSrTkZF48aYkrNamIFbeyJMvxcS+KMvZH98tff3wan0BJpXzf3ch2z7u2FAbs7Qfl/3Np0+R/xJLT4ecjGLyBQ9rs5n8AAAAAAHBmGfFv38fi7yvx66pT1+ZJhwUAAAAAAI5Q/Jf/yaiIP511RQyu/wEAAAAAOGuM+B47Q0Syci1ZWhIjvl1qxy8Bzp9kiAAAAAAA4JDiv/9fjYrs4hfJqu6cKnwIAAAAAACAM+L7oXPsB80Lxu9/iu+PGRvNuc+MlXhuXmslndf03N4Ww+qEMZ42EhelpBgdtfWkkUkqbc0X/C4tlobFYWwHYG0F8O1BArg4Kj/K9aTO9cWkXEy3/DfpJVt16jpne/X7ebGs8ZFQz4VfP1/+RuLd/8FtjBsZWe60c09edBbjWDaiVjZW0gkU982jOCCWV/F8C/E9Fz33eCy+ESPtN2vI0nKnbTbnLqQtWysjycLI7h5fjw/o841MJbWm0hlvs90tSZ+ZqM98rt/ep1HkD7nnb+RGUufG9I2k6BFFYVgUhZ1R9D4Wh4+iOCyK4iGjAICTsjQkCxmyL+9+wCi3J7tHw957ZHc5YHZ/I9NJnemJeGAdnegxopvDRnRza0Tf3NzcTBo8SHb7bd8zkPrl2Kjfn/Zk1bfRG972zapBvWBEh/Dcq5Wv5NLq2vqt5ZWFp+2n7eeFQrFk3jHNuwUZi3cjLcg9AIAedj5jx+iZ/wc9hWdzM8rdd9Kr6o29V9Vpxvv/1kcKcvJEXkhHFmUmvttARK71/n9HdsfHEGaGXLVm4zSZPOFlZsBV3fn4Loduu4WBdXfHUDyOHwUAAMdmakgeHpz/k2v3mSHX3btz+eCr4+26+WM+EgAA/Hto/52RDb8zfN9pPs6Xy3krnNXK9+yHyncqNa0cN9S+PWu5Na2avhd6tlePFh45FR2ooNVsen6oqp6vml7gzMXTB6r00e+Bblhu6NhBs66tQCvbc0PLDlXFCWzVbH1Zd4JZ7cdvDpradqqObYWO56rAa/m2zikVaL2jolPRbuhUnWjRVU3faVh+Rj3y6q2GVhUd2L7TDL2kwW5fjlv1/EbcbO6kDzYAAKfE6tr6s4VOp/3yIy707Dhz7LsKAABSQ7I0AAAAAAAAAAAAAAAAAAAAAAA4BY7j/j8WzvhCdyro0xIPC0ewMHToeP3RBycAH9XfAQAA//9x/FTN") syz_emit_ethernet(0x3e, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) unshare(0x64000600) unshare(0x2c020400) sched_setscheduler(0x0, 0x1, 0x0) unshare(0x4c050700) 920.858799ms ago: executing program 1 (id=1139): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x11c0ad, 0x0, 0x5, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) madvise(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) wait4(r0, 0x0, 0x60000000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x1d, &(0x7f0000000940)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r1], 0x0, 0x10, 0x101}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000009c0)={0x1, &(0x7f0000000a00)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRES8=r2], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) listen(r4, 0xec) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 903.212209ms ago: executing program 3 (id=1140): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x7}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000004c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_targets\x00') pread64(r1, &(0x7f0000000180)=""/185, 0xb9, 0x5) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000400)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x32600) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000440)=0xa, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000500)='./file0\x00', 0xc9028ba210c11f8b) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./bus\x00', 0x14002, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYBLOB="0e756ae02c8b41209e0e3a0b59f9397944d77072f565944f5227713955b4b5bbb44d89f444a9a9f51b088506be4cd6372c721e6505e6954a4514c0f17ba2ef8a56dd23416184b1c3675e0fdd0e6f4e426adcb7f88cb62f2123bd58c827ab8c9c821dad2bf93eebc0a1d2fb541e8a3aceb362c808eb3e9ac4e7ed9c3c125e411d5ace0322d664dd43", @ANYBLOB="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", @ANYRESOCT], 0x4, 0x2cc, &(0x7f0000000840)="$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") r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000b40)=0x4085018) bind$inet6(r3, &(0x7f0000000b80)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000bc0)=0x8, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x48, 0x24, 0x405, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x2, {0x2, 0x1}, {0x10, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "0000ea0300000000c61634a000"}}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000d40)='./tracing\x00', &(0x7f0000000d80)='tracefs\x00', 0x0, 0x0) r4 = add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000ec0)="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", 0x559, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001440)={r4}, &(0x7f0000001480)={'enc=', 'oaep', ' hash=', {'xcbc(des3_ede-asm)\x00'}}, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000e00)='e&my_read_msr1 msr/read_msr', 0x1b) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./trace/uprobe_events\x00', 0x40702, 0x0) io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x40, 0xfffffffe, 0x235}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 853.92318ms ago: executing program 6 (id=1141): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 796.057881ms ago: executing program 0 (id=1142): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/tcp\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a00000001f500004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x404c040) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) mq_open(&(0x7f0000000140)='&\x00', 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x144) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000180)) setgid(0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x6, 0x1e, 0xfffffffffffffffd, &(0x7f0000000380)=0x2000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000200)=0x25) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x5, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x5f, 0x2e, 0x2e]}}, 0x0, 0x2e, 0x0, 0x1, 0x8001}, 0x28) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x8, &(0x7f0000000680)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f0000000880)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file1\x00', 0xc42, 0x0) pwritev2(r5, 0x0, 0x0, 0x2, 0x0, 0xa1) write$P9_RCREATE(r5, &(0x7f0000000e80)={0x18, 0x73, 0x2, {{0x20, 0x0, 0x7}, 0xe7}}, 0x18) 482.330269ms ago: executing program 7 (id=1143): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 423.74466ms ago: executing program 0 (id=1144): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 365.792852ms ago: executing program 1 (id=1145): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 322.485282ms ago: executing program 3 (id=1146): signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x14552, &(0x7f0000000100)=ANY=[], 0x7b, 0x11ff, &(0x7f0000001980)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r2 = openat(0xffffffffffffff9c, &(0x7f0000002b80)='./bus\x00', 0x40, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002bc0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000002c00)=ANY=[], 0x32600) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000002c40)={'HL\x00'}, &(0x7f0000002c80)=0x1e) r4 = openat(0xffffffffffffff9c, &(0x7f0000002cc0)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000002d00)="c7", 0x1) sendfile(r4, r2, 0x0, 0x2fffe) accept4(r1, 0x0, 0x0, 0x80800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000002d40)='ext4\x00', &(0x7f0000002d80)='./file0\x00', 0x200000, &(0x7f0000002dc0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000002e80)="$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") setxattr$trusted_overlay_upper(0x0, &(0x7f0000003400), 0x0, 0x835, 0x0) creat(&(0x7f0000003440)='./bus\x00', 0x41) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000003480), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) syz_mount_image$msdos(&(0x7f00000034c0), &(0x7f0000003500)='./file1\x00', 0x180c8, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], 0x1, 0x24d, &(0x7f0000003680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003900)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$selinux_load(r0, &(0x7f0000003940)=ANY=[], 0x12100) unlinkat(0xffffffffffffff9c, &(0x7f0000003980)='./file0\x00', 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000100180100002020782500000000cb0000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000100b703000000000040850000000c00000095"], &(0x7f0000000100)='GPL\x00', 0xa, 0xfe7, &(0x7f0000000900)=""/4071, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r6 = socket(0x2, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) sendto$inet(r6, &(0x7f0000000880)="8ce2ad4d4f95e087a7846d3f81", 0xfdef, 0x1008, &(0x7f0000001940)={0x2, 0x0, @multicast2}, 0x10) 0s ago: executing program 6 (id=1147): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) kernel console output (not intermixed with test programs): 559 [ 202.011485][ T9045] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 202.011498][ T9045] RBP: 00007f3f1f856b20 R08: 0000000000000000 R09: 0000000000000000 [ 202.011525][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.011552][ T9045] R13: 00007f3f1fa46128 R14: 00007f3f1fa46090 R15: 00007ffc33f07c48 [ 202.011581][ T9045] [ 202.356502][ T9054] FAULT_INJECTION: forcing a failure. [ 202.356502][ T9054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.356609][ T9054] CPU: 0 UID: 0 PID: 9054 Comm: syz.6.849 Not tainted syzkaller #0 PREEMPT(lazy) [ 202.356645][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 202.356664][ T9054] Call Trace: [ 202.356674][ T9054] [ 202.356685][ T9054] __dump_stack+0x1d/0x30 [ 202.356719][ T9054] dump_stack_lvl+0x95/0xd0 [ 202.356776][ T9054] dump_stack+0x15/0x1b [ 202.356839][ T9054] should_fail_ex+0x262/0x280 [ 202.356882][ T9054] should_fail+0xb/0x20 [ 202.356918][ T9054] should_fail_usercopy+0x1a/0x20 [ 202.356959][ T9054] _copy_from_iter+0xcc/0xe70 [ 202.357072][ T9054] ? __alloc_skb+0x516/0x6f0 [ 202.357159][ T9054] ? __alloc_skb+0x209/0x6f0 [ 202.357186][ T9054] netlink_sendmsg+0x4d6/0x740 [ 202.357224][ T9054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.357256][ T9054] ____sys_sendmsg+0x532/0x580 [ 202.357333][ T9054] ___sys_sendmsg+0x195/0x1e0 [ 202.357369][ T9054] ? __send_signal_locked+0xd0/0x7a0 [ 202.357431][ T9054] __x64_sys_sendmsg+0xd4/0x160 [ 202.357512][ T9054] x64_sys_call+0x22ab/0x2550 [ 202.357540][ T9054] do_syscall_64+0x112/0x360 [ 202.357569][ T9054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.357622][ T9054] RIP: 0033:0x7fd6b711f559 [ 202.357645][ T9054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.357670][ T9054] RSP: 002b:00007fd6b5b4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.357697][ T9054] RAX: ffffffffffffffda RBX: 00007fd6b73a6090 RCX: 00007fd6b711f559 [ 202.357773][ T9054] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 202.357791][ T9054] RBP: 00007fd6b71b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 202.357809][ T9054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.357826][ T9054] R13: 00007fd6b73a6128 R14: 00007fd6b73a6090 R15: 00007ffd124d3728 [ 202.357902][ T9054] [ 202.449616][ T9056] vlan3: entered promiscuous mode [ 202.449675][ T9056] hsr0: entered promiscuous mode [ 202.451153][ T9056] vlan3: entered allmulticast mode [ 202.451187][ T9056] hsr0: entered allmulticast mode [ 202.451316][ T9056] hsr_slave_0: entered allmulticast mode [ 202.451378][ T9056] hsr_slave_1: entered allmulticast mode [ 202.533453][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 202.537131][ T9056] hsr_slave_0: left promiscuous mode [ 202.546798][ T9056] hsr_slave_1: left promiscuous mode [ 202.735095][ T9060] loop3: detected capacity change from 0 to 512 [ 202.832713][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 202.832734][ T29] audit: type=1400 audit(1792564572.475:6498): avc: denied { write } for pid=9063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.847025][ T9060] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.847101][ T9060] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 202.875634][ T9060] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 202.876179][ T9060] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 202.876340][ T9060] System zones: 0-2, 18-18, 34-34 [ 202.877011][ T9060] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.852: bad orphan inode 15 [ 202.877566][ T9060] ext4_test_bit(bit=14, block=18) = 1 [ 202.877607][ T9060] is_bad_inode(inode)=0 [ 202.877634][ T9060] NEXT_ORPHAN(inode)=2264924160 [ 202.877657][ T9060] max_ino=32 [ 202.877679][ T9060] i_nlink=0 [ 202.877936][ T9060] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #15: comm syz.3.852: corrupted inode contents [ 202.878036][ T9060] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.878653][ T9060] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #15: comm syz.3.852: mark_inode_dirty error [ 202.878721][ T9060] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.879205][ T9060] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #15: comm syz.3.852: corrupted inode contents [ 202.879289][ T9060] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.879655][ C0] EXT4-fs (loop3): error count since last fsck: 4 [ 202.879717][ C0] EXT4-fs (loop3): initial error at time 1792564572: ext4_orphan_get:1429 [ 202.879801][ C0] EXT4-fs (loop3): last error at time 1792564572: ext4_do_update_inode:5801: inode 15 [ 202.882301][ T9060] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.852: mark_inode_dirty error [ 202.882375][ T9060] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.883672][ T9060] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2965: inode #15: comm syz.3.852: mark inode dirty (error -117) [ 202.883753][ T9060] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.884125][ T9060] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 202.885118][ T9060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.124831][ T29] audit: type=1400 audit(1792564572.765:6499): avc: denied { write } for pid=9087 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.241938][ T9084] FAULT_INJECTION: forcing a failure. [ 203.241938][ T9084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.242044][ T9084] CPU: 0 UID: 0 PID: 9084 Comm: syz.1.856 Not tainted syzkaller #0 PREEMPT(lazy) [ 203.242078][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 203.242092][ T9084] Call Trace: [ 203.242101][ T9084] [ 203.242112][ T9084] __dump_stack+0x1d/0x30 [ 203.242159][ T9084] dump_stack_lvl+0x95/0xd0 [ 203.242201][ T9084] dump_stack+0x15/0x1b [ 203.242229][ T9084] should_fail_ex+0x262/0x280 [ 203.242276][ T9084] should_fail+0xb/0x20 [ 203.242334][ T9084] should_fail_usercopy+0x1a/0x20 [ 203.242376][ T9084] _copy_from_iter+0xcc/0xe70 [ 203.242417][ T9084] ? __alloc_skb+0x516/0x6f0 [ 203.242484][ T9084] ? __alloc_skb+0x209/0x6f0 [ 203.242517][ T9084] netlink_sendmsg+0x4d6/0x740 [ 203.242573][ T9084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.242608][ T9084] ____sys_sendmsg+0x532/0x580 [ 203.242740][ T9084] ___sys_sendmsg+0x195/0x1e0 [ 203.242775][ T9084] ? __send_signal_locked+0xd0/0x7a0 [ 203.242841][ T9084] __x64_sys_sendmsg+0xd4/0x160 [ 203.242931][ T9084] x64_sys_call+0x22ab/0x2550 [ 203.242969][ T9084] do_syscall_64+0x112/0x360 [ 203.243009][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.243192][ T9084] RIP: 0033:0x7f844019f559 [ 203.243214][ T9084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.243312][ T9084] RSP: 002b:00007f843ebf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.243336][ T9084] RAX: ffffffffffffffda RBX: 00007f8440425fa0 RCX: 00007f844019f559 [ 203.243356][ T9084] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 203.243373][ T9084] RBP: 00007f8440236b20 R08: 0000000000000000 R09: 0000000000000000 [ 203.243390][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.243431][ T9084] R13: 00007f8440426038 R14: 00007f8440425fa0 R15: 00007ffe5e357e78 [ 203.243459][ T9084] [ 203.269177][ T9094] netlink: 96 bytes leftover after parsing attributes in process `syz.0.858'. [ 203.309856][ T6959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.593661][ T9107] loop6: detected capacity change from 0 to 1024 [ 203.636810][ T9107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 203.636956][ T9107] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.664980][ T29] audit: type=1400 audit(1792564573.305:6500): avc: denied { write } for pid=9106 comm="syz.6.861" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.668731][ T29] audit: type=1400 audit(1792564573.305:6501): avc: denied { read } for pid=9106 comm="syz.6.861" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 203.686822][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.6.861'. [ 203.691294][ T29] audit: type=1400 audit(1792564573.305:6502): avc: denied { open } for pid=9106 comm="syz.6.861" path="/122/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 203.713736][ T29] audit: type=1400 audit(1792564573.335:6503): avc: denied { create } for pid=9106 comm="syz.6.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 203.713767][ T29] audit: type=1400 audit(1792564573.335:6504): avc: denied { bind } for pid=9106 comm="syz.6.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 203.723943][ T29] audit: type=1400 audit(1792564573.355:6505): avc: denied { listen } for pid=9106 comm="syz.6.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 203.748258][ T29] audit: type=1400 audit(1792564573.365:6506): avc: denied { write } for pid=9106 comm="syz.6.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 203.810956][ T4809] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.842159][ T9117] loop7: detected capacity change from 0 to 512 [ 203.842806][ T9117] EXT4-fs: Ignoring removed bh option [ 203.842826][ T9117] EXT4-fs: Ignoring removed i_version option [ 203.843960][ T9117] EXT4-fs (loop7): failed to initialize system zone (-117) [ 203.843993][ T9117] EXT4-fs (loop7): mount failed [ 203.917466][ T9122] loop6: detected capacity change from 0 to 512 [ 203.927998][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 203.928068][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.873'. [ 203.973511][ T29] audit: type=1400 audit(1792564573.535:6507): avc: denied { bind } for pid=9121 comm="syz.6.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.008222][ T9120] loop3: detected capacity change from 0 to 512 [ 204.040089][ T9120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.040168][ T9120] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.046500][ T9122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.064612][ T9120] EXT4-fs error (device loop3): __ext4_add_entry:2414: inode #12: comm syz.3.873: Directory hole found for htree leaf block 0 [ 204.073029][ T9120] EXT4-fs (loop3): Remounting filesystem read-only [ 204.110386][ T9122] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.881873][ T6959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.890622][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 204.890753][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 205.118416][ T9159] netlink: 96 bytes leftover after parsing attributes in process `syz.0.870'. [ 205.158953][ T9157] FAULT_INJECTION: forcing a failure. [ 205.158953][ T9157] name failslab, interval 1, probability 0, space 0, times 0 [ 205.159008][ T9157] CPU: 1 UID: 0 PID: 9157 Comm: syz.3.868 Not tainted syzkaller #0 PREEMPT(lazy) [ 205.159040][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 205.159056][ T9157] Call Trace: [ 205.159139][ T9157] [ 205.159149][ T9157] __dump_stack+0x1d/0x30 [ 205.159183][ T9157] dump_stack_lvl+0x95/0xd0 [ 205.159211][ T9157] dump_stack+0x15/0x1b [ 205.159289][ T9157] should_fail_ex+0x262/0x280 [ 205.159331][ T9157] ? skb_clone+0x151/0x1f0 [ 205.159364][ T9157] should_failslab+0x8c/0xb0 [ 205.159451][ T9157] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 205.159575][ T9157] ? skb_clone+0x151/0x1f0 [ 205.159636][ T9157] skb_clone+0x151/0x1f0 [ 205.159671][ T9157] __netlink_deliver_tap+0x2be/0x510 [ 205.159710][ T9157] netlink_unicast+0x712/0x740 [ 205.159799][ T9157] netlink_sendmsg+0x5ef/0x740 [ 205.159837][ T9157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.159868][ T9157] ____sys_sendmsg+0x532/0x580 [ 205.159905][ T9157] ___sys_sendmsg+0x195/0x1e0 [ 205.160040][ T9157] __x64_sys_sendmsg+0xd4/0x160 [ 205.160083][ T9157] x64_sys_call+0x22ab/0x2550 [ 205.160117][ T9157] do_syscall_64+0x112/0x360 [ 205.160203][ T9157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.160226][ T9157] RIP: 0033:0x7fefb389f559 [ 205.160243][ T9157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.160312][ T9157] RSP: 002b:00007fefb22d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.160341][ T9157] RAX: ffffffffffffffda RBX: 00007fefb3b26090 RCX: 00007fefb389f559 [ 205.160360][ T9157] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 205.160379][ T9157] RBP: 00007fefb3936b20 R08: 0000000000000000 R09: 0000000000000000 [ 205.160397][ T9157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.160465][ T9157] R13: 00007fefb3b26128 R14: 00007fefb3b26090 R15: 00007ffe3b86ba08 [ 205.160493][ T9157] [ 205.464397][ T9163] FAULT_INJECTION: forcing a failure. [ 205.464397][ T9163] name failslab, interval 1, probability 0, space 0, times 0 [ 205.464475][ T9163] CPU: 0 UID: 0 PID: 9163 Comm: syz.0.871 Not tainted syzkaller #0 PREEMPT(lazy) [ 205.464550][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 205.464568][ T9163] Call Trace: [ 205.464578][ T9163] [ 205.464589][ T9163] __dump_stack+0x1d/0x30 [ 205.464631][ T9163] dump_stack_lvl+0x95/0xd0 [ 205.464663][ T9163] dump_stack+0x15/0x1b [ 205.464691][ T9163] should_fail_ex+0x262/0x280 [ 205.464752][ T9163] ? skb_clone+0x151/0x1f0 [ 205.464787][ T9163] should_failslab+0x8c/0xb0 [ 205.464830][ T9163] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 205.464944][ T9163] ? skb_clone+0x151/0x1f0 [ 205.464983][ T9163] skb_clone+0x151/0x1f0 [ 205.465018][ T9163] __netlink_deliver_tap+0x2be/0x510 [ 205.465052][ T9163] netlink_unicast+0x712/0x740 [ 205.465147][ T9163] netlink_sendmsg+0x5ef/0x740 [ 205.465185][ T9163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.465282][ T9163] ____sys_sendmsg+0x532/0x580 [ 205.465352][ T9163] ___sys_sendmsg+0x195/0x1e0 [ 205.465463][ T9163] ? __send_signal_locked+0xd0/0x7a0 [ 205.465517][ T9163] __x64_sys_sendmsg+0xd4/0x160 [ 205.465559][ T9163] x64_sys_call+0x22ab/0x2550 [ 205.465595][ T9163] do_syscall_64+0x112/0x360 [ 205.465648][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.465677][ T9163] RIP: 0033:0x7f6f6564f559 [ 205.465697][ T9163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.465722][ T9163] RSP: 002b:00007f6f6409f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.465750][ T9163] RAX: ffffffffffffffda RBX: 00007f6f658d5fa0 RCX: 00007f6f6564f559 [ 205.465837][ T9163] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 205.465853][ T9163] RBP: 00007f6f656e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 205.465872][ T9163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.465888][ T9163] R13: 00007f6f658d6038 R14: 00007f6f658d5fa0 R15: 00007fff4de7dbf8 [ 205.465935][ T9163] [ 205.479837][ T9163] __nla_validate_parse: 1 callbacks suppressed [ 205.479909][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 205.727672][ T4809] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.193179][ T9186] netlink: 96 bytes leftover after parsing attributes in process `syz.3.878'. [ 207.557389][ T9212] loop6: detected capacity change from 0 to 512 [ 207.557721][ T9212] EXT4-fs: quotafile must be on filesystem root [ 207.982560][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 207.982592][ T29] audit: type=1400 audit(1792564577.585:6638): avc: denied { create } for pid=9221 comm="syz.7.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.031101][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.889'. [ 208.031159][ T9241] FAULT_INJECTION: forcing a failure. [ 208.031159][ T9241] name failslab, interval 1, probability 0, space 0, times 0 [ 208.031250][ T9241] CPU: 0 UID: 0 PID: 9241 Comm: syz.6.889 Not tainted syzkaller #0 PREEMPT(lazy) [ 208.031286][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 208.031305][ T9241] Call Trace: [ 208.031314][ T9241] [ 208.031324][ T9241] __dump_stack+0x1d/0x30 [ 208.031420][ T9241] dump_stack_lvl+0x95/0xd0 [ 208.031463][ T9241] dump_stack+0x15/0x1b [ 208.031492][ T9241] should_fail_ex+0x262/0x280 [ 208.031630][ T9241] ? __alloc_skb+0x2e0/0x6f0 [ 208.031655][ T9241] should_failslab+0x8c/0xb0 [ 208.031726][ T9241] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 208.031776][ T9241] ? __alloc_skb+0x2e0/0x6f0 [ 208.031809][ T9241] __alloc_skb+0x2e0/0x6f0 [ 208.031840][ T9241] ? __alloc_skb+0x209/0x6f0 [ 208.031866][ T9241] netlink_ack+0xfd/0x530 [ 208.031899][ T9241] netlink_rcv_skb+0x18d/0x220 [ 208.031921][ T9241] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.031963][ T9241] rtnetlink_rcv+0x1c/0x30 [ 208.032027][ T9241] netlink_unicast+0x665/0x740 [ 208.032059][ T9241] netlink_sendmsg+0x5ef/0x740 [ 208.032095][ T9241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.032128][ T9241] ____sys_sendmsg+0x532/0x580 [ 208.032228][ T9241] ___sys_sendmsg+0x195/0x1e0 [ 208.032314][ T9241] __x64_sys_sendmsg+0xd4/0x160 [ 208.032410][ T9241] x64_sys_call+0x22ab/0x2550 [ 208.032446][ T9241] do_syscall_64+0x112/0x360 [ 208.032561][ T9241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.032589][ T9241] RIP: 0033:0x7fd6b711f559 [ 208.032605][ T9241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.032651][ T9241] RSP: 002b:00007fd6b5b2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.032680][ T9241] RAX: ffffffffffffffda RBX: 00007fd6b73a6180 RCX: 00007fd6b711f559 [ 208.032699][ T9241] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 208.032716][ T9241] RBP: 00007fd6b71b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 208.032730][ T9241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.032754][ T9241] R13: 00007fd6b73a6218 R14: 00007fd6b73a6180 R15: 00007ffd124d3728 [ 208.032834][ T9241] [ 208.306100][ T9246] netlink: 96 bytes leftover after parsing attributes in process `syz.0.891'. [ 208.634090][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 208.676567][ T9256] netlink: 96 bytes leftover after parsing attributes in process `syz.7.894'. [ 208.825517][ T9272] FAULT_INJECTION: forcing a failure. [ 208.825517][ T9272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.825571][ T9272] CPU: 1 UID: 0 PID: 9272 Comm: syz.7.896 Not tainted syzkaller #0 PREEMPT(lazy) [ 208.825613][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 208.825631][ T9272] Call Trace: [ 208.825640][ T9272] [ 208.825648][ T9272] __dump_stack+0x1d/0x30 [ 208.825677][ T9272] dump_stack_lvl+0x95/0xd0 [ 208.825700][ T9272] dump_stack+0x15/0x1b [ 208.825741][ T9272] should_fail_ex+0x262/0x280 [ 208.825803][ T9272] should_fail+0xb/0x20 [ 208.825829][ T9272] should_fail_usercopy+0x1a/0x20 [ 208.825866][ T9272] _copy_from_iter+0xcc/0xe70 [ 208.825946][ T9272] ? __alloc_skb+0x516/0x6f0 [ 208.826027][ T9272] ? __alloc_skb+0x209/0x6f0 [ 208.826054][ T9272] netlink_sendmsg+0x4d6/0x740 [ 208.826082][ T9272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.826137][ T9272] ____sys_sendmsg+0x532/0x580 [ 208.826178][ T9272] ___sys_sendmsg+0x195/0x1e0 [ 208.826280][ T9272] ? __send_signal_locked+0xd0/0x7a0 [ 208.826333][ T9272] __x64_sys_sendmsg+0xd4/0x160 [ 208.826370][ T9272] x64_sys_call+0x22ab/0x2550 [ 208.826432][ T9272] do_syscall_64+0x112/0x360 [ 208.826535][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.826557][ T9272] RIP: 0033:0x7f3f1f7bf559 [ 208.826607][ T9272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.826633][ T9272] RSP: 002b:00007f3f1e1ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.826658][ T9272] RAX: ffffffffffffffda RBX: 00007f3f1fa46090 RCX: 00007f3f1f7bf559 [ 208.826679][ T9272] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 208.826697][ T9272] RBP: 00007f3f1f856b20 R08: 0000000000000000 R09: 0000000000000000 [ 208.826785][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.826803][ T9272] R13: 00007f3f1fa46128 R14: 00007f3f1fa46090 R15: 00007ffc33f07c48 [ 208.826826][ T9272] [ 208.827486][ T9274] loop6: detected capacity change from 0 to 128 [ 209.064832][ T29] audit: type=1400 audit(1792564578.705:6639): avc: denied { write } for pid=9273 comm="syz.6.898" name="tcp" dev="proc" ino=4026532679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 209.217037][ T9280] loop6: detected capacity change from 0 to 512 [ 209.262376][ T9280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.262707][ T9280] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.266247][ T29] audit: type=1400 audit(1792564578.905:6640): avc: denied { write } for pid=9279 comm="syz.6.900" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.281963][ T29] audit: type=1400 audit(1792564578.915:6641): avc: denied { write } for pid=9279 comm="syz.6.900" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.282073][ T29] audit: type=1400 audit(1792564578.915:6642): avc: denied { write } for pid=9279 comm="syz.6.900" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 209.282198][ T29] audit: type=1400 audit(1792564578.915:6643): avc: denied { ioctl } for pid=9279 comm="syz.6.900" path="/133/bus/file1" dev="loop6" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 209.821611][ T4809] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.014775][ T9293] netlink: 96 bytes leftover after parsing attributes in process `syz.7.903'. [ 210.062447][ T29] audit: type=1400 audit(1792564579.705:6644): avc: denied { kexec_image_load } for pid=9294 comm="syz.6.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 210.126172][ T29] audit: type=1326 audit(1792564579.765:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.1.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 210.126216][ T29] audit: type=1326 audit(1792564579.765:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.1.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 210.126338][ T29] audit: type=1326 audit(1792564579.765:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.1.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 210.186686][ T9302] netlink: 96 bytes leftover after parsing attributes in process `syz.7.906'. [ 210.392328][ T9320] loop6: detected capacity change from 0 to 256 [ 210.732776][ T9327] loop7: detected capacity change from 0 to 512 [ 210.943090][ T9327] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.946875][ T9327] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.026355][ T9330] loop3: detected capacity change from 0 to 512 [ 211.308532][ T9330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.322160][ T32] kworker/u8:1: attempt to access beyond end of device [ 211.322160][ T32] loop6: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 211.322312][ T32] kworker/u8:1: attempt to access beyond end of device [ 211.322312][ T32] loop6: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 211.322577][ T32] kworker/u8:1: attempt to access beyond end of device [ 211.322577][ T32] loop6: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 211.322812][ T32] kworker/u8:1: attempt to access beyond end of device [ 211.322812][ T32] loop6: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 211.323035][ T32] kworker/u8:1: attempt to access beyond end of device [ 211.323035][ T32] loop6: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 211.323309][ T32] kworker/u8:1: attempt to access beyond end of device [ 211.323309][ T32] loop6: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 211.323581][ T32] kworker/u8:1: attempt to access beyond end of device [ 211.323581][ T32] loop6: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 211.323846][ T32] kworker/u8:1: attempt to access beyond end of device [ 211.323846][ T32] loop6: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 211.324096][ T32] kworker/u8:1: attempt to access beyond end of device [ 211.324096][ T32] loop6: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 211.324263][ T32] kworker/u8:1: attempt to access beyond end of device [ 211.324263][ T32] loop6: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 211.480644][ T9337] smpboot: CPU 1 is now offline [ 211.507644][ T9330] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.528467][ T9339] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 211.622180][ T9345] netlink: 96 bytes leftover after parsing attributes in process `syz.6.916'. [ 212.041660][ T9352] netlink: 96 bytes leftover after parsing attributes in process `syz.6.917'. [ 212.101003][ T6959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.263252][ T9355] FAULT_INJECTION: forcing a failure. [ 212.263252][ T9355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.263292][ T9355] CPU: 0 UID: 0 PID: 9355 Comm: syz.1.918 Not tainted syzkaller #0 PREEMPT(lazy) [ 212.263371][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 212.263389][ T9355] Call Trace: [ 212.263399][ T9355] [ 212.263409][ T9355] __dump_stack+0x1d/0x30 [ 212.263487][ T9355] dump_stack_lvl+0x95/0xd0 [ 212.263595][ T9355] dump_stack+0x15/0x1b [ 212.263696][ T9355] should_fail_ex+0x262/0x280 [ 212.263792][ T9355] should_fail+0xb/0x20 [ 212.263842][ T9355] should_fail_usercopy+0x1a/0x20 [ 212.263895][ T9355] _copy_from_iter+0xcc/0xe70 [ 212.264000][ T9355] ? __alloc_skb+0x516/0x6f0 [ 212.264092][ T9355] ? __alloc_skb+0x209/0x6f0 [ 212.264194][ T9355] netlink_sendmsg+0x4d6/0x740 [ 212.264276][ T9355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.264309][ T9355] ____sys_sendmsg+0x532/0x580 [ 212.264358][ T9355] ___sys_sendmsg+0x195/0x1e0 [ 212.264411][ T9355] __x64_sys_sendmsg+0xd4/0x160 [ 212.264463][ T9355] x64_sys_call+0x22ab/0x2550 [ 212.264500][ T9355] do_syscall_64+0x112/0x360 [ 212.264541][ T9355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.264583][ T9355] RIP: 0033:0x7f844019f559 [ 212.264605][ T9355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.264645][ T9355] RSP: 002b:00007f843ebf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.264731][ T9355] RAX: ffffffffffffffda RBX: 00007f8440425fa0 RCX: 00007f844019f559 [ 212.264842][ T9355] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 212.264895][ T9355] RBP: 00007f8440236b20 R08: 0000000000000000 R09: 0000000000000000 [ 212.264963][ T9355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.265000][ T9355] R13: 00007f8440426038 R14: 00007f8440425fa0 R15: 00007ffe5e357e78 [ 212.265029][ T9355] [ 212.654328][ T9371] vlan2: entered promiscuous mode [ 212.654353][ T9371] hsr0: entered promiscuous mode [ 212.654658][ T9371] vlan2: entered allmulticast mode [ 212.654692][ T9371] hsr0: entered allmulticast mode [ 212.654766][ T9371] hsr_slave_0: entered allmulticast mode [ 212.654787][ T9371] hsr_slave_1: entered allmulticast mode [ 212.907042][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 212.908770][ T9371] hsr_slave_0: left promiscuous mode [ 212.910746][ T9371] hsr_slave_1: left promiscuous mode [ 213.020179][ T9382] FAULT_INJECTION: forcing a failure. [ 213.020179][ T9382] name failslab, interval 1, probability 0, space 0, times 0 [ 213.020774][ T9382] CPU: 0 UID: 0 PID: 9382 Comm: syz.3.925 Not tainted syzkaller #0 PREEMPT(lazy) [ 213.020841][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.020854][ T9382] Call Trace: [ 213.020862][ T9382] [ 213.020870][ T9382] __dump_stack+0x1d/0x30 [ 213.020907][ T9382] dump_stack_lvl+0x95/0xd0 [ 213.020935][ T9382] dump_stack+0x15/0x1b [ 213.020959][ T9382] should_fail_ex+0x262/0x280 [ 213.021033][ T9382] ? skb_clone+0x151/0x1f0 [ 213.021060][ T9382] should_failslab+0x8c/0xb0 [ 213.021102][ T9382] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 213.021163][ T9382] ? skb_clone+0x151/0x1f0 [ 213.021192][ T9382] skb_clone+0x151/0x1f0 [ 213.021227][ T9382] __netlink_deliver_tap+0x2be/0x510 [ 213.021322][ T9382] netlink_unicast+0x712/0x740 [ 213.021388][ T9382] netlink_sendmsg+0x5ef/0x740 [ 213.021416][ T9382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.021439][ T9382] ____sys_sendmsg+0x532/0x580 [ 213.021475][ T9382] ___sys_sendmsg+0x195/0x1e0 [ 213.021545][ T9382] __x64_sys_sendmsg+0xd4/0x160 [ 213.021586][ T9382] x64_sys_call+0x22ab/0x2550 [ 213.021683][ T9382] do_syscall_64+0x112/0x360 [ 213.021712][ T9382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.021750][ T9382] RIP: 0033:0x7fefb389f559 [ 213.021842][ T9382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.021861][ T9382] RSP: 002b:00007fefb1e92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.021885][ T9382] RAX: ffffffffffffffda RBX: 00007fefb3b26270 RCX: 00007fefb389f559 [ 213.021905][ T9382] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 213.021919][ T9382] RBP: 00007fefb3936b20 R08: 0000000000000000 R09: 0000000000000000 [ 213.021932][ T9382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.021961][ T9382] R13: 00007fefb3b26308 R14: 00007fefb3b26270 R15: 00007ffe3b86ba08 [ 213.021988][ T9382] [ 213.046985][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 213.936045][ T9390] netlink: 96 bytes leftover after parsing attributes in process `syz.1.927'. [ 214.058672][ T5089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.297216][ T9410] FAULT_INJECTION: forcing a failure. [ 214.297216][ T9410] name failslab, interval 1, probability 0, space 0, times 0 [ 214.297274][ T9410] CPU: 1 UID: 0 PID: 9410 Comm: syz.3.940 Not tainted syzkaller #0 PREEMPT(lazy) [ 214.297382][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.297400][ T9410] Call Trace: [ 214.297408][ T9410] [ 214.297420][ T9410] __dump_stack+0x1d/0x30 [ 214.297453][ T9410] dump_stack_lvl+0x95/0xd0 [ 214.297519][ T9410] dump_stack+0x15/0x1b [ 214.297546][ T9410] should_fail_ex+0x262/0x280 [ 214.297640][ T9410] ? skb_clone+0x151/0x1f0 [ 214.297683][ T9410] should_failslab+0x8c/0xb0 [ 214.297766][ T9410] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 214.297813][ T9410] ? skb_clone+0x151/0x1f0 [ 214.297847][ T9410] skb_clone+0x151/0x1f0 [ 214.297881][ T9410] __netlink_deliver_tap+0x2be/0x510 [ 214.297968][ T9410] netlink_unicast+0x712/0x740 [ 214.298061][ T9410] netlink_sendmsg+0x5ef/0x740 [ 214.298154][ T9410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.298198][ T9410] ____sys_sendmsg+0x532/0x580 [ 214.298297][ T9410] ___sys_sendmsg+0x195/0x1e0 [ 214.298333][ T9410] ? __send_signal_locked+0xd0/0x7a0 [ 214.298392][ T9410] __x64_sys_sendmsg+0xd4/0x160 [ 214.298510][ T9410] x64_sys_call+0x22ab/0x2550 [ 214.298547][ T9410] do_syscall_64+0x112/0x360 [ 214.298579][ T9410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.298630][ T9410] RIP: 0033:0x7fefb389f559 [ 214.298653][ T9410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.298685][ T9410] RSP: 002b:00007fefb22d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.298714][ T9410] RAX: ffffffffffffffda RBX: 00007fefb3b26090 RCX: 00007fefb389f559 [ 214.298830][ T9410] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 214.298848][ T9410] RBP: 00007fefb3936b20 R08: 0000000000000000 R09: 0000000000000000 [ 214.298943][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.298970][ T9410] R13: 00007fefb3b26128 R14: 00007fefb3b26090 R15: 00007ffe3b86ba08 [ 214.298992][ T9410] [ 214.299249][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.940'. [ 214.475546][ T9423] sd 0:0:1:0: PR command failed: 1026 [ 214.475647][ T9423] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 214.475720][ T9423] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 214.571224][ T9415] FAULT_INJECTION: forcing a failure. [ 214.571224][ T9415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.571385][ T9415] CPU: 1 UID: 0 PID: 9415 Comm: syz.6.932 Not tainted syzkaller #0 PREEMPT(lazy) [ 214.571411][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.571429][ T9415] Call Trace: [ 214.571438][ T9415] [ 214.571448][ T9415] __dump_stack+0x1d/0x30 [ 214.571551][ T9415] dump_stack_lvl+0x95/0xd0 [ 214.571578][ T9415] dump_stack+0x15/0x1b [ 214.571605][ T9415] should_fail_ex+0x262/0x280 [ 214.571696][ T9415] should_fail+0xb/0x20 [ 214.571723][ T9415] should_fail_usercopy+0x1a/0x20 [ 214.571776][ T9415] _copy_from_iter+0xcc/0xe70 [ 214.571813][ T9415] ? __alloc_skb+0x516/0x6f0 [ 214.571904][ T9415] ? __alloc_skb+0x209/0x6f0 [ 214.571937][ T9415] netlink_sendmsg+0x4d6/0x740 [ 214.571975][ T9415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.572007][ T9415] ____sys_sendmsg+0x532/0x580 [ 214.572084][ T9415] ___sys_sendmsg+0x195/0x1e0 [ 214.572117][ T9415] ? __send_signal_locked+0xd0/0x7a0 [ 214.572177][ T9415] __x64_sys_sendmsg+0xd4/0x160 [ 214.572219][ T9415] x64_sys_call+0x22ab/0x2550 [ 214.572282][ T9415] do_syscall_64+0x112/0x360 [ 214.572321][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.572405][ T9415] RIP: 0033:0x7fd6b711f559 [ 214.572422][ T9415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.572445][ T9415] RSP: 002b:00007fd6b5b6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.572470][ T9415] RAX: ffffffffffffffda RBX: 00007fd6b73a5fa0 RCX: 00007fd6b711f559 [ 214.572547][ T9415] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 214.572566][ T9415] RBP: 00007fd6b71b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 214.572584][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.572601][ T9415] R13: 00007fd6b73a6038 R14: 00007fd6b73a5fa0 R15: 00007ffd124d3728 [ 214.572629][ T9415] [ 214.623726][ T9426] loop7: detected capacity change from 0 to 128 [ 214.665712][ T9426] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.666377][ T9426] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.968734][ T5089] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.127592][ T9440] netlink: 'syz.1.936': attribute type 10 has an invalid length. [ 215.136807][ T9440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.141688][ T9440] team0: Port device bond0 added [ 215.232472][ T9447] loop7: detected capacity change from 0 to 164 [ 215.233983][ T9447] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 215.235061][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 215.235077][ T29] audit: type=1400 audit(1792564584.875:6764): avc: denied { mount } for pid=9445 comm="syz.7.939" name="/" dev="loop7" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 215.295927][ T9447] vlan3: entered promiscuous mode [ 215.295946][ T9447] hsr0: entered promiscuous mode [ 215.296040][ T9447] vlan3: entered allmulticast mode [ 215.296057][ T9447] hsr0: entered allmulticast mode [ 215.296073][ T9447] hsr_slave_0: entered allmulticast mode [ 215.296091][ T9447] hsr_slave_1: entered allmulticast mode [ 215.337089][ T9449] netlink: 96 bytes leftover after parsing attributes in process `syz.6.941'. [ 215.348661][ T9447] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 215.351844][ T9447] Symlink component flag not implemented [ 215.352473][ T9447] Symlink component flag not implemented (7) [ 215.387027][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.7.939'. [ 215.387206][ T9447] hsr_slave_0: left promiscuous mode [ 215.387906][ T9447] hsr_slave_1: left promiscuous mode [ 215.605334][ T9459] netlink: 2 bytes leftover after parsing attributes in process `syz.6.944'. [ 215.652842][ T29] audit: type=1400 audit(1792564585.295:6765): avc: denied { unmount } for pid=5089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 215.827557][ T29] audit: type=1400 audit(1792564585.465:6766): avc: denied { bind } for pid=9455 comm="syz.6.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.827669][ T29] audit: type=1400 audit(1792564585.465:6767): avc: denied { node_bind } for pid=9455 comm="syz.6.944" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 215.830397][ T29] audit: type=1400 audit(1792564585.475:6768): avc: denied { name_bind } for pid=9455 comm="syz.6.944" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 215.834590][ T29] audit: type=1400 audit(1792564585.475:6769): avc: denied { read } for pid=9455 comm="syz.6.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.884056][ T29] audit: type=1400 audit(1792564585.525:6770): avc: denied { write } for pid=9455 comm="syz.6.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.964911][ T29] audit: type=1400 audit(1792564585.605:6771): avc: denied { setopt } for pid=9455 comm="syz.6.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 217.403702][ T9477] netlink: 96 bytes leftover after parsing attributes in process `syz.0.947'. [ 217.425063][ T9487] FAULT_INJECTION: forcing a failure. [ 217.425063][ T9487] name failslab, interval 1, probability 0, space 0, times 0 [ 217.425120][ T9487] CPU: 1 UID: 0 PID: 9487 Comm: syz.3.956 Not tainted syzkaller #0 PREEMPT(lazy) [ 217.425236][ T9487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 217.425252][ T9487] Call Trace: [ 217.425260][ T9487] [ 217.425269][ T9487] __dump_stack+0x1d/0x30 [ 217.425303][ T9487] dump_stack_lvl+0x95/0xd0 [ 217.425398][ T9487] dump_stack+0x15/0x1b [ 217.425426][ T9487] should_fail_ex+0x262/0x280 [ 217.425467][ T9487] ? skb_clone+0x151/0x1f0 [ 217.425575][ T9487] should_failslab+0x8c/0xb0 [ 217.425632][ T9487] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 217.425679][ T9487] ? skb_clone+0x151/0x1f0 [ 217.425719][ T9487] skb_clone+0x151/0x1f0 [ 217.425811][ T9487] __netlink_deliver_tap+0x2be/0x510 [ 217.425860][ T9487] netlink_unicast+0x712/0x740 [ 217.425910][ T9487] netlink_sendmsg+0x5ef/0x740 [ 217.425963][ T9487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.425995][ T9487] ____sys_sendmsg+0x532/0x580 [ 217.426117][ T9487] ___sys_sendmsg+0x195/0x1e0 [ 217.426172][ T9487] __x64_sys_sendmsg+0xd4/0x160 [ 217.426244][ T9487] x64_sys_call+0x22ab/0x2550 [ 217.426324][ T9487] do_syscall_64+0x112/0x360 [ 217.426432][ T9487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.426533][ T9487] RIP: 0033:0x7fefb389f559 [ 217.426556][ T9487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.426619][ T9487] RSP: 002b:00007fefb22d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.426639][ T9487] RAX: ffffffffffffffda RBX: 00007fefb3b26090 RCX: 00007fefb389f559 [ 217.426670][ T9487] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 217.426749][ T9487] RBP: 00007fefb3936b20 R08: 0000000000000000 R09: 0000000000000000 [ 217.426768][ T9487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.426785][ T9487] R13: 00007fefb3b26128 R14: 00007fefb3b26090 R15: 00007ffe3b86ba08 [ 217.426810][ T9487] [ 217.428887][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.956'. [ 217.433457][ T9481] loop7: detected capacity change from 0 to 512 [ 217.493728][ T9481] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.494004][ T9481] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.510826][ T29] audit: type=1400 audit(1792564587.155:6772): avc: denied { write } for pid=9480 comm="syz.7.946" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.538788][ T29] audit: type=1400 audit(1792564587.175:6773): avc: denied { write } for pid=9480 comm="syz.7.946" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.643872][ T9493] FAULT_INJECTION: forcing a failure. [ 217.643872][ T9493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.643993][ T9493] CPU: 0 UID: 0 PID: 9493 Comm: syz.6.949 Not tainted syzkaller #0 PREEMPT(lazy) [ 217.644071][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 217.644201][ T9493] Call Trace: [ 217.644226][ T9493] [ 217.644252][ T9493] __dump_stack+0x1d/0x30 [ 217.644293][ T9493] dump_stack_lvl+0x95/0xd0 [ 217.644381][ T9493] dump_stack+0x15/0x1b [ 217.644453][ T9493] should_fail_ex+0x262/0x280 [ 217.644645][ T9493] should_fail+0xb/0x20 [ 217.644747][ T9493] should_fail_usercopy+0x1a/0x20 [ 217.644885][ T9493] _copy_from_iter+0xcc/0xe70 [ 217.645000][ T9493] ? __alloc_skb+0x516/0x6f0 [ 217.645142][ T9493] ? __alloc_skb+0x209/0x6f0 [ 217.645305][ T9493] netlink_sendmsg+0x4d6/0x740 [ 217.645409][ T9493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.645502][ T9493] ____sys_sendmsg+0x532/0x580 [ 217.645701][ T9493] ___sys_sendmsg+0x195/0x1e0 [ 217.645851][ T9493] __x64_sys_sendmsg+0xd4/0x160 [ 217.645998][ T9493] x64_sys_call+0x22ab/0x2550 [ 217.646093][ T9493] do_syscall_64+0x112/0x360 [ 217.646197][ T9493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.646281][ T9493] RIP: 0033:0x7fd6b711f559 [ 217.646354][ T9493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.646426][ T9493] RSP: 002b:00007fd6b5b2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.646516][ T9493] RAX: ffffffffffffffda RBX: 00007fd6b73a6180 RCX: 00007fd6b711f559 [ 217.646540][ T9493] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 217.646589][ T9493] RBP: 00007fd6b71b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 217.646637][ T9493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.646683][ T9493] R13: 00007fd6b73a6218 R14: 00007fd6b73a6180 R15: 00007ffd124d3728 [ 217.646764][ T9493] [ 217.790782][ T5089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.877313][ T9496] FAULT_INJECTION: forcing a failure. [ 217.877313][ T9496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.877433][ T9496] CPU: 0 UID: 0 PID: 9496 Comm: syz.0.950 Not tainted syzkaller #0 PREEMPT(lazy) [ 217.877518][ T9496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 217.877567][ T9496] Call Trace: [ 217.877589][ T9496] [ 217.877620][ T9496] __dump_stack+0x1d/0x30 [ 217.877698][ T9496] dump_stack_lvl+0x95/0xd0 [ 217.877852][ T9496] dump_stack+0x15/0x1b [ 217.877935][ T9496] should_fail_ex+0x262/0x280 [ 217.878033][ T9496] should_fail+0xb/0x20 [ 217.878141][ T9496] should_fail_usercopy+0x1a/0x20 [ 217.878274][ T9496] _copy_from_iter+0xcc/0xe70 [ 217.878371][ T9496] ? __alloc_skb+0x516/0x6f0 [ 217.878450][ T9496] ? __alloc_skb+0x209/0x6f0 [ 217.878526][ T9496] netlink_sendmsg+0x4d6/0x740 [ 217.878619][ T9496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.878724][ T9496] ____sys_sendmsg+0x532/0x580 [ 217.878827][ T9496] ___sys_sendmsg+0x195/0x1e0 [ 217.878961][ T9496] __x64_sys_sendmsg+0xd4/0x160 [ 217.879084][ T9496] x64_sys_call+0x22ab/0x2550 [ 217.879172][ T9496] do_syscall_64+0x112/0x360 [ 217.879274][ T9496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.879348][ T9496] RIP: 0033:0x7f6f6564f559 [ 217.879395][ T9496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.879465][ T9496] RSP: 002b:00007f6f6409f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.879620][ T9496] RAX: ffffffffffffffda RBX: 00007f6f658d5fa0 RCX: 00007f6f6564f559 [ 217.879665][ T9496] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 217.879713][ T9496] RBP: 00007f6f656e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 217.879755][ T9496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.879798][ T9496] R13: 00007f6f658d6038 R14: 00007f6f658d5fa0 R15: 00007fff4de7dbf8 [ 217.879931][ T9496] [ 218.539982][ T9521] loop6: detected capacity change from 0 to 512 [ 218.649855][ T9521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.651315][ T9521] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.141167][ T4809] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.301123][ T9537] netlink: 96 bytes leftover after parsing attributes in process `syz.6.961'. [ 219.519033][ T9551] FAULT_INJECTION: forcing a failure. [ 219.519033][ T9551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.519190][ T9551] CPU: 0 UID: 0 PID: 9551 Comm: syz.7.963 Not tainted syzkaller #0 PREEMPT(lazy) [ 219.519225][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.519243][ T9551] Call Trace: [ 219.519252][ T9551] [ 219.519262][ T9551] __dump_stack+0x1d/0x30 [ 219.519435][ T9551] dump_stack_lvl+0x95/0xd0 [ 219.519467][ T9551] dump_stack+0x15/0x1b [ 219.519501][ T9551] should_fail_ex+0x262/0x280 [ 219.519613][ T9551] should_fail+0xb/0x20 [ 219.519648][ T9551] should_fail_usercopy+0x1a/0x20 [ 219.519761][ T9551] _copy_from_iter+0xcc/0xe70 [ 219.519802][ T9551] ? __alloc_skb+0x516/0x6f0 [ 219.519838][ T9551] ? __alloc_skb+0x209/0x6f0 [ 219.519871][ T9551] netlink_sendmsg+0x4d6/0x740 [ 219.519911][ T9551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.519945][ T9551] ____sys_sendmsg+0x532/0x580 [ 219.520004][ T9551] ___sys_sendmsg+0x195/0x1e0 [ 219.520040][ T9551] ? __send_signal_locked+0xd0/0x7a0 [ 219.520112][ T9551] __x64_sys_sendmsg+0xd4/0x160 [ 219.520183][ T9551] x64_sys_call+0x22ab/0x2550 [ 219.520221][ T9551] do_syscall_64+0x112/0x360 [ 219.520344][ T9551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.520375][ T9551] RIP: 0033:0x7f3f1f7bf559 [ 219.520397][ T9551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.520423][ T9551] RSP: 002b:00007f3f1e1ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.520452][ T9551] RAX: ffffffffffffffda RBX: 00007f3f1fa46090 RCX: 00007f3f1f7bf559 [ 219.520547][ T9551] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 219.520565][ T9551] RBP: 00007f3f1f856b20 R08: 0000000000000000 R09: 0000000000000000 [ 219.520584][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.520601][ T9551] R13: 00007f3f1fa46128 R14: 00007f3f1fa46090 R15: 00007ffc33f07c48 [ 219.520630][ T9551] [ 219.583505][ T9532] loop3: detected capacity change from 0 to 1024 [ 219.955883][ T9561] FAULT_INJECTION: forcing a failure. [ 219.955883][ T9561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.955939][ T9561] CPU: 1 UID: 0 PID: 9561 Comm: syz.1.965 Not tainted syzkaller #0 PREEMPT(lazy) [ 219.956040][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.956058][ T9561] Call Trace: [ 219.956068][ T9561] [ 219.956078][ T9561] __dump_stack+0x1d/0x30 [ 219.956112][ T9561] dump_stack_lvl+0x95/0xd0 [ 219.956186][ T9561] dump_stack+0x15/0x1b [ 219.956278][ T9561] should_fail_ex+0x262/0x280 [ 219.956327][ T9561] should_fail+0xb/0x20 [ 219.956363][ T9561] should_fail_usercopy+0x1a/0x20 [ 219.956407][ T9561] _copy_from_iter+0xcc/0xe70 [ 219.956524][ T9561] ? __alloc_skb+0x516/0x6f0 [ 219.956549][ T9561] ? __alloc_skb+0x209/0x6f0 [ 219.956582][ T9561] netlink_sendmsg+0x4d6/0x740 [ 219.956706][ T9561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.956762][ T9561] ____sys_sendmsg+0x532/0x580 [ 219.956805][ T9561] ___sys_sendmsg+0x195/0x1e0 [ 219.956916][ T9561] ? __send_signal_locked+0xd0/0x7a0 [ 219.956997][ T9561] __x64_sys_sendmsg+0xd4/0x160 [ 219.957085][ T9561] x64_sys_call+0x22ab/0x2550 [ 219.957114][ T9561] do_syscall_64+0x112/0x360 [ 219.957198][ T9561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.957229][ T9561] RIP: 0033:0x7f844019f559 [ 219.957252][ T9561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.957315][ T9561] RSP: 002b:00007f843ebb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.957344][ T9561] RAX: ffffffffffffffda RBX: 00007f8440426180 RCX: 00007f844019f559 [ 219.957364][ T9561] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 219.957382][ T9561] RBP: 00007f8440236b20 R08: 0000000000000000 R09: 0000000000000000 [ 219.957395][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.957410][ T9561] R13: 00007f8440426218 R14: 00007f8440426180 R15: 00007ffe5e357e78 [ 219.957439][ T9561] [ 220.279773][ T9574] loop6: detected capacity change from 0 to 128 [ 220.295699][ T9574] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.296017][ T9574] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.404113][ T4809] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.671497][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 220.671516][ T29] audit: type=1326 audit(1792564590.315:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.1.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 220.671558][ T29] audit: type=1326 audit(1792564590.315:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.1.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 220.671768][ T29] audit: type=1326 audit(1792564590.315:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.1.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 220.671801][ T29] audit: type=1326 audit(1792564590.315:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.1.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 220.671840][ T29] audit: type=1326 audit(1792564590.315:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.1.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 220.671952][ T29] audit: type=1326 audit(1792564590.315:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.1.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 220.672050][ T29] audit: type=1326 audit(1792564590.315:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.1.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 220.672266][ T29] audit: type=1326 audit(1792564590.315:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.1.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 220.672352][ T29] audit: type=1326 audit(1792564590.315:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.1.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 220.672388][ T29] audit: type=1326 audit(1792564590.315:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.1.971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 221.072371][ T9592] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.198047][ T9596] netlink: 96 bytes leftover after parsing attributes in process `syz.7.974'. [ 221.260593][ T9598] capability: warning: `syz.1.976' uses deprecated v2 capabilities in a way that may be insecure [ 222.326045][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 222.358348][ T9614] loop7: detected capacity change from 0 to 1764 [ 222.376083][ T9614] netlink: 48 bytes leftover after parsing attributes in process `syz.7.981'. [ 222.376146][ T9614] lo: Caught tx_queue_len zero misconfig [ 222.423037][ T9611] netlink: 96 bytes leftover after parsing attributes in process `syz.6.982'. [ 222.472284][ T9624] loop7: detected capacity change from 0 to 512 [ 222.495891][ T9624] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.495973][ T9624] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.512153][ T9622] FAULT_INJECTION: forcing a failure. [ 222.512153][ T9622] name failslab, interval 1, probability 0, space 0, times 0 [ 222.512216][ T9622] CPU: 1 UID: 0 PID: 9622 Comm: syz.0.983 Not tainted syzkaller #0 PREEMPT(lazy) [ 222.512248][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 222.512266][ T9622] Call Trace: [ 222.512275][ T9622] [ 222.512352][ T9622] __dump_stack+0x1d/0x30 [ 222.512378][ T9622] dump_stack_lvl+0x95/0xd0 [ 222.512478][ T9622] dump_stack+0x15/0x1b [ 222.512596][ T9622] should_fail_ex+0x262/0x280 [ 222.512639][ T9622] ? skb_clone+0x151/0x1f0 [ 222.512721][ T9622] should_failslab+0x8c/0xb0 [ 222.512766][ T9622] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 222.512812][ T9622] ? skb_clone+0x151/0x1f0 [ 222.512956][ T9622] skb_clone+0x151/0x1f0 [ 222.513085][ T9622] __netlink_deliver_tap+0x2be/0x510 [ 222.513195][ T9622] netlink_unicast+0x712/0x740 [ 222.513270][ T9622] netlink_sendmsg+0x5ef/0x740 [ 222.513399][ T9622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.513482][ T9622] ____sys_sendmsg+0x532/0x580 [ 222.513587][ T9622] ___sys_sendmsg+0x195/0x1e0 [ 222.513671][ T9622] ? __send_signal_locked+0xd0/0x7a0 [ 222.513816][ T9622] __x64_sys_sendmsg+0xd4/0x160 [ 222.513926][ T9622] x64_sys_call+0x22ab/0x2550 [ 222.514058][ T9622] do_syscall_64+0x112/0x360 [ 222.514153][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.514233][ T9622] RIP: 0033:0x7f6f6564f559 [ 222.514306][ T9622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.514377][ T9622] RSP: 002b:00007f6f6407e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.514453][ T9622] RAX: ffffffffffffffda RBX: 00007f6f658d6090 RCX: 00007f6f6564f559 [ 222.514529][ T9622] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 222.514571][ T9622] RBP: 00007f6f656e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 222.514621][ T9622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.514724][ T9622] R13: 00007f6f658d6128 R14: 00007f6f658d6090 R15: 00007fff4de7dbf8 [ 222.514795][ T9622] [ 222.515385][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 222.874811][ T9631] FAULT_INJECTION: forcing a failure. [ 222.874811][ T9631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.874868][ T9631] CPU: 1 UID: 0 PID: 9631 Comm: syz.6.986 Not tainted syzkaller #0 PREEMPT(lazy) [ 222.874972][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 222.874990][ T9631] Call Trace: [ 222.875000][ T9631] [ 222.875011][ T9631] __dump_stack+0x1d/0x30 [ 222.875043][ T9631] dump_stack_lvl+0x95/0xd0 [ 222.875135][ T9631] dump_stack+0x15/0x1b [ 222.875164][ T9631] should_fail_ex+0x262/0x280 [ 222.875207][ T9631] should_fail+0xb/0x20 [ 222.875308][ T9631] should_fail_usercopy+0x1a/0x20 [ 222.875351][ T9631] _copy_from_iter+0xcc/0xe70 [ 222.875393][ T9631] ? __alloc_skb+0x516/0x6f0 [ 222.875481][ T9631] ? __alloc_skb+0x209/0x6f0 [ 222.875509][ T9631] netlink_sendmsg+0x4d6/0x740 [ 222.875547][ T9631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.875577][ T9631] ____sys_sendmsg+0x532/0x580 [ 222.875682][ T9631] ___sys_sendmsg+0x195/0x1e0 [ 222.875769][ T9631] ? __send_signal_locked+0xd0/0x7a0 [ 222.875826][ T9631] __x64_sys_sendmsg+0xd4/0x160 [ 222.875870][ T9631] x64_sys_call+0x22ab/0x2550 [ 222.875948][ T9631] do_syscall_64+0x112/0x360 [ 222.875987][ T9631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.876018][ T9631] RIP: 0033:0x7fd6b711f559 [ 222.876040][ T9631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.876082][ T9631] RSP: 002b:00007fd6b5b6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.876109][ T9631] RAX: ffffffffffffffda RBX: 00007fd6b73a5fa0 RCX: 00007fd6b711f559 [ 222.876168][ T9631] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 222.876187][ T9631] RBP: 00007fd6b71b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 222.876281][ T9631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.876298][ T9631] R13: 00007fd6b73a6038 R14: 00007fd6b73a5fa0 R15: 00007ffd124d3728 [ 222.876324][ T9631] [ 223.354681][ T9649] netlink: 96 bytes leftover after parsing attributes in process `syz.0.989'. [ 223.411782][ T9652] loop3: detected capacity change from 0 to 1024 [ 223.529665][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 223.529704][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'. [ 223.626565][ T9652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 223.626650][ T9652] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.633630][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 224.126342][ T6959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 224.188610][ T5089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.274867][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 224.344241][ T9674] batadv_slave_0: Caught tx_queue_len zero misconfig [ 224.370625][ T9663] FAULT_INJECTION: forcing a failure. [ 224.370625][ T9663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.370848][ T9663] CPU: 0 UID: 0 PID: 9663 Comm: syz.3.1003 Not tainted syzkaller #0 PREEMPT(lazy) [ 224.370882][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 224.370896][ T9663] Call Trace: [ 224.370902][ T9663] [ 224.370989][ T9663] __dump_stack+0x1d/0x30 [ 224.371024][ T9663] dump_stack_lvl+0x95/0xd0 [ 224.371056][ T9663] dump_stack+0x15/0x1b [ 224.371085][ T9663] should_fail_ex+0x262/0x280 [ 224.371170][ T9663] should_fail+0xb/0x20 [ 224.371261][ T9663] should_fail_usercopy+0x1a/0x20 [ 224.371342][ T9663] _copy_from_iter+0xcc/0xe70 [ 224.371387][ T9663] ? __alloc_skb+0x516/0x6f0 [ 224.371418][ T9663] ? __alloc_skb+0x209/0x6f0 [ 224.371487][ T9663] netlink_sendmsg+0x4d6/0x740 [ 224.371599][ T9663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.371634][ T9663] ____sys_sendmsg+0x532/0x580 [ 224.371676][ T9663] ___sys_sendmsg+0x195/0x1e0 [ 224.371778][ T9663] ? __send_signal_locked+0xd0/0x7a0 [ 224.371840][ T9663] __x64_sys_sendmsg+0xd4/0x160 [ 224.371943][ T9663] x64_sys_call+0x22ab/0x2550 [ 224.371979][ T9663] do_syscall_64+0x112/0x360 [ 224.372009][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.372060][ T9663] RIP: 0033:0x7fefb389f559 [ 224.372082][ T9663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.372107][ T9663] RSP: 002b:00007fefb22f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.372136][ T9663] RAX: ffffffffffffffda RBX: 00007fefb3b25fa0 RCX: 00007fefb389f559 [ 224.372156][ T9663] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 224.372173][ T9663] RBP: 00007fefb3936b20 R08: 0000000000000000 R09: 0000000000000000 [ 224.372214][ T9663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.372227][ T9663] R13: 00007fefb3b26038 R14: 00007fefb3b25fa0 R15: 00007ffe3b86ba08 [ 224.372247][ T9663] [ 224.538949][ T9679] netlink: 96 bytes leftover after parsing attributes in process `syz.1.996'. [ 224.805677][ T9687] FAULT_INJECTION: forcing a failure. [ 224.805677][ T9687] name failslab, interval 1, probability 0, space 0, times 0 [ 224.805719][ T9687] CPU: 0 UID: 0 PID: 9687 Comm: syz.1.997 Not tainted syzkaller #0 PREEMPT(lazy) [ 224.805752][ T9687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 224.805771][ T9687] Call Trace: [ 224.805813][ T9687] [ 224.805822][ T9687] __dump_stack+0x1d/0x30 [ 224.805910][ T9687] dump_stack_lvl+0x95/0xd0 [ 224.805986][ T9687] dump_stack+0x15/0x1b [ 224.806017][ T9687] should_fail_ex+0x262/0x280 [ 224.806057][ T9687] ? skb_clone+0x151/0x1f0 [ 224.806114][ T9687] should_failslab+0x8c/0xb0 [ 224.806161][ T9687] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 224.806220][ T9687] ? skb_clone+0x151/0x1f0 [ 224.806269][ T9687] skb_clone+0x151/0x1f0 [ 224.806305][ T9687] __netlink_deliver_tap+0x2be/0x510 [ 224.806340][ T9687] netlink_unicast+0x712/0x740 [ 224.806370][ T9687] netlink_sendmsg+0x5ef/0x740 [ 224.806406][ T9687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.806501][ T9687] ____sys_sendmsg+0x532/0x580 [ 224.806586][ T9687] ___sys_sendmsg+0x195/0x1e0 [ 224.806633][ T9687] __x64_sys_sendmsg+0xd4/0x160 [ 224.806675][ T9687] x64_sys_call+0x22ab/0x2550 [ 224.806744][ T9687] do_syscall_64+0x112/0x360 [ 224.806784][ T9687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.806816][ T9687] RIP: 0033:0x7f844019f559 [ 224.806901][ T9687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.806928][ T9687] RSP: 002b:00007f843e792028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.806956][ T9687] RAX: ffffffffffffffda RBX: 00007f8440426270 RCX: 00007f844019f559 [ 224.806975][ T9687] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 224.806993][ T9687] RBP: 00007f8440236b20 R08: 0000000000000000 R09: 0000000000000000 [ 224.807011][ T9687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.807065][ T9687] R13: 00007f8440426308 R14: 00007f8440426270 R15: 00007ffe5e357e78 [ 224.807093][ T9687] [ 224.807276][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 225.348656][ T9690] bond0: (slave dummy0): Error: Slave does not support XDP [ 225.623737][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1005'. [ 225.771767][ T9712] loop7: detected capacity change from 0 to 512 [ 225.799425][ T9698] ip_tables: iptables: counters copy to user failed while replacing table [ 225.860948][ T9711] ip_tables: iptables: counters copy to user failed while replacing table [ 225.918818][ T9712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.935158][ T9712] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.979415][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 225.979443][ T29] audit: type=1400 audit(1792564595.625:6910): avc: denied { write } for pid=9710 comm="syz.7.1005" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.982175][ T29] audit: type=1400 audit(1792564595.625:6911): avc: denied { write } for pid=9710 comm="syz.7.1005" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.058584][ T9712] EXT4-fs error (device loop7): __ext4_add_entry:2414: inode #12: comm syz.7.1005: Directory hole found for htree leaf block 0 [ 226.063003][ T9712] EXT4-fs (loop7): Remounting filesystem read-only [ 226.280850][ T9726] ip6tnl1: entered allmulticast mode [ 226.351041][ T29] audit: type=1326 audit(1792564595.995:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 226.351641][ T29] audit: type=1326 audit(1792564595.995:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 226.351946][ T29] audit: type=1326 audit(1792564595.995:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 226.352128][ T29] audit: type=1326 audit(1792564595.995:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 226.353816][ T29] audit: type=1326 audit(1792564595.995:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f844019f559 code=0x7ffc0000 [ 226.353994][ T29] audit: type=1326 audit(1792564595.995:6917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f844019f2c2 code=0x7ffc0000 [ 226.358928][ T29] audit: type=1326 audit(1792564595.995:6918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.1.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f844015fd8e code=0x7ffc0000 [ 226.386354][ T29] audit: type=1400 audit(1792564596.005:6919): avc: denied { create } for pid=9720 comm="syz.6.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.672312][ T5089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.681914][ T176] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 226.682048][ T176] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 226.887942][ T9738] ip_tables: iptables: counters copy to user failed while replacing table [ 227.006202][ T9748] rxe_eth0 speed is unknown, defaulting to 1000 [ 227.145761][ T9749] rxe_eth0 speed is unknown, defaulting to 1000 [ 228.137908][ T9770] ip_tables: iptables: counters copy to user failed while replacing table [ 228.243030][ T9776] loop3: detected capacity change from 0 to 4096 [ 228.274848][ T9776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.369949][ T9789] __nla_validate_parse: 2 callbacks suppressed [ 228.369973][ T9789] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1021'. [ 228.394685][ T9785] ip_tables: iptables: counters copy to user failed while replacing table [ 228.497099][ T9790] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 228.670012][ T9798] FAULT_INJECTION: forcing a failure. [ 228.670012][ T9798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.670067][ T9798] CPU: 0 UID: 0 PID: 9798 Comm: syz.7.1025 Not tainted syzkaller #0 PREEMPT(lazy) [ 228.670094][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 228.670107][ T9798] Call Trace: [ 228.670114][ T9798] [ 228.670121][ T9798] __dump_stack+0x1d/0x30 [ 228.670226][ T9798] dump_stack_lvl+0x95/0xd0 [ 228.670259][ T9798] dump_stack+0x15/0x1b [ 228.670284][ T9798] should_fail_ex+0x262/0x280 [ 228.670316][ T9798] should_fail+0xb/0x20 [ 228.670423][ T9798] should_fail_usercopy+0x1a/0x20 [ 228.670455][ T9798] _copy_from_iter+0xcc/0xe70 [ 228.670527][ T9798] ? __alloc_skb+0x516/0x6f0 [ 228.670554][ T9798] ? __alloc_skb+0x209/0x6f0 [ 228.670577][ T9798] netlink_sendmsg+0x4d6/0x740 [ 228.670639][ T9798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.670667][ T9798] ____sys_sendmsg+0x532/0x580 [ 228.670698][ T9798] ___sys_sendmsg+0x195/0x1e0 [ 228.670750][ T9798] ? _raw_spin_unlock+0x9/0x30 [ 228.670830][ T9798] __x64_sys_sendmsg+0xd4/0x160 [ 228.670866][ T9798] x64_sys_call+0x22ab/0x2550 [ 228.670953][ T9798] do_syscall_64+0x112/0x360 [ 228.670993][ T9798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.671061][ T9798] RIP: 0033:0x7f3f1f7bf559 [ 228.671082][ T9798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.671108][ T9798] RSP: 002b:00007f3f1e1ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.671131][ T9798] RAX: ffffffffffffffda RBX: 00007f3f1fa46090 RCX: 00007f3f1f7bf559 [ 228.671157][ T9798] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 228.671226][ T9798] RBP: 00007f3f1f856b20 R08: 0000000000000000 R09: 0000000000000000 [ 228.671246][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.671265][ T9798] R13: 00007f3f1fa46128 R14: 00007f3f1fa46090 R15: 00007ffc33f07c48 [ 228.671294][ T9798] [ 228.783849][ T9792] syz_tun: entered allmulticast mode [ 229.273641][ T6959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.321066][ T9813] syz_tun: entered allmulticast mode [ 229.332441][ T9812] syz_tun: left allmulticast mode [ 229.346939][ T9815] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1029'. [ 229.576890][ T9834] FAULT_INJECTION: forcing a failure. [ 229.576890][ T9834] name failslab, interval 1, probability 0, space 0, times 0 [ 229.576977][ T9834] CPU: 1 UID: 0 PID: 9834 Comm: syz.7.1032 Not tainted syzkaller #0 PREEMPT(lazy) [ 229.577011][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.577072][ T9834] Call Trace: [ 229.577081][ T9834] [ 229.577090][ T9834] __dump_stack+0x1d/0x30 [ 229.577123][ T9834] dump_stack_lvl+0x95/0xd0 [ 229.577151][ T9834] dump_stack+0x15/0x1b [ 229.577291][ T9834] should_fail_ex+0x262/0x280 [ 229.577410][ T9834] ? skb_clone+0x151/0x1f0 [ 229.577446][ T9834] should_failslab+0x8c/0xb0 [ 229.577492][ T9834] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 229.577568][ T9834] ? skb_clone+0x151/0x1f0 [ 229.577663][ T9834] skb_clone+0x151/0x1f0 [ 229.577691][ T9834] __netlink_deliver_tap+0x2be/0x510 [ 229.577802][ T9834] netlink_unicast+0x712/0x740 [ 229.577887][ T9834] netlink_sendmsg+0x5ef/0x740 [ 229.577915][ T9834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.577969][ T9834] ____sys_sendmsg+0x532/0x580 [ 229.578007][ T9834] ___sys_sendmsg+0x195/0x1e0 [ 229.578077][ T9834] ? __send_signal_locked+0xd0/0x7a0 [ 229.578136][ T9834] __x64_sys_sendmsg+0xd4/0x160 [ 229.578211][ T9834] x64_sys_call+0x22ab/0x2550 [ 229.578242][ T9834] do_syscall_64+0x112/0x360 [ 229.578283][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.578361][ T9834] RIP: 0033:0x7f3f1f7bf559 [ 229.578383][ T9834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.578408][ T9834] RSP: 002b:00007f3f1e1ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.578512][ T9834] RAX: ffffffffffffffda RBX: 00007f3f1fa46090 RCX: 00007f3f1f7bf559 [ 229.578532][ T9834] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 229.578558][ T9834] RBP: 00007f3f1f856b20 R08: 0000000000000000 R09: 0000000000000000 [ 229.578576][ T9834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.578594][ T9834] R13: 00007f3f1fa46128 R14: 00007f3f1fa46090 R15: 00007ffc33f07c48 [ 229.578622][ T9834] [ 229.666189][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1032'. [ 229.684147][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1033'. [ 229.684223][ T9838] FAULT_INJECTION: forcing a failure. [ 229.684223][ T9838] name failslab, interval 1, probability 0, space 0, times 0 [ 229.684316][ T9838] CPU: 0 UID: 0 PID: 9838 Comm: syz.6.1033 Not tainted syzkaller #0 PREEMPT(lazy) [ 229.684426][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.684471][ T9838] Call Trace: [ 229.684494][ T9838] [ 229.684524][ T9838] __dump_stack+0x1d/0x30 [ 229.684648][ T9838] dump_stack_lvl+0x95/0xd0 [ 229.684729][ T9838] dump_stack+0x15/0x1b [ 229.684801][ T9838] should_fail_ex+0x262/0x280 [ 229.684905][ T9838] ? __alloc_skb+0x2e0/0x6f0 [ 229.684989][ T9838] should_failslab+0x8c/0xb0 [ 229.685126][ T9838] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 229.685215][ T9838] ? selinux_capable+0x31/0x40 [ 229.685423][ T9838] ? __alloc_skb+0x2e0/0x6f0 [ 229.685577][ T9838] __alloc_skb+0x2e0/0x6f0 [ 229.685663][ T9838] ? __alloc_skb+0x209/0x6f0 [ 229.685710][ T9838] netlink_ack+0xfd/0x530 [ 229.685796][ T9838] netlink_rcv_skb+0x18d/0x220 [ 229.685942][ T9838] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 229.686082][ T9838] rtnetlink_rcv+0x1c/0x30 [ 229.686198][ T9838] netlink_unicast+0x665/0x740 [ 229.686279][ T9838] netlink_sendmsg+0x5ef/0x740 [ 229.686375][ T9838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.686453][ T9838] ____sys_sendmsg+0x532/0x580 [ 229.686597][ T9838] ___sys_sendmsg+0x195/0x1e0 [ 229.686729][ T9838] __x64_sys_sendmsg+0xd4/0x160 [ 229.686844][ T9838] x64_sys_call+0x22ab/0x2550 [ 229.687028][ T9838] do_syscall_64+0x112/0x360 [ 229.687130][ T9838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.687214][ T9838] RIP: 0033:0x7fd6b711f559 [ 229.687279][ T9838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.687342][ T9838] RSP: 002b:00007fd6b5b4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.687416][ T9838] RAX: ffffffffffffffda RBX: 00007fd6b73a6090 RCX: 00007fd6b711f559 [ 229.687467][ T9838] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 229.687518][ T9838] RBP: 00007fd6b71b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 229.687561][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.687645][ T9838] R13: 00007fd6b73a6128 R14: 00007fd6b73a6090 R15: 00007ffd124d3728 [ 229.687705][ T9838] [ 229.701088][ T9836] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1035'. [ 230.327319][ T9851] loop3: detected capacity change from 0 to 512 [ 230.634370][ T9858] netlink: 'syz.0.1039': attribute type 1 has an invalid length. [ 230.817404][ T9858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.844173][ T9856] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 230.919565][ T136] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 231.005993][ T9867] rxe_eth0 speed is unknown, defaulting to 1000 [ 231.029484][ T38] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 231.046307][ T9866] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1042'. [ 231.082607][ T9862] loop7: detected capacity change from 0 to 512 [ 231.211101][ T9873] FAULT_INJECTION: forcing a failure. [ 231.211101][ T9873] name failslab, interval 1, probability 0, space 0, times 0 [ 231.211222][ T9873] CPU: 1 UID: 0 PID: 9873 Comm: syz.3.1043 Not tainted syzkaller #0 PREEMPT(lazy) [ 231.211334][ T9873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.211355][ T9873] Call Trace: [ 231.211364][ T9873] [ 231.211376][ T9873] __dump_stack+0x1d/0x30 [ 231.211421][ T9873] dump_stack_lvl+0x95/0xd0 [ 231.211557][ T9873] dump_stack+0x15/0x1b [ 231.211585][ T9873] should_fail_ex+0x262/0x280 [ 231.211632][ T9873] ? skb_clone+0x151/0x1f0 [ 231.211673][ T9873] should_failslab+0x8c/0xb0 [ 231.211767][ T9873] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 231.211871][ T9873] ? skb_clone+0x151/0x1f0 [ 231.211984][ T9873] skb_clone+0x151/0x1f0 [ 231.212022][ T9873] __netlink_deliver_tap+0x2be/0x510 [ 231.212132][ T9873] netlink_unicast+0x712/0x740 [ 231.212161][ T9873] netlink_sendmsg+0x5ef/0x740 [ 231.212200][ T9873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.212238][ T9873] ____sys_sendmsg+0x532/0x580 [ 231.212362][ T9873] ___sys_sendmsg+0x195/0x1e0 [ 231.212460][ T9873] ? _raw_spin_unlock+0x9/0x30 [ 231.212528][ T9873] __x64_sys_sendmsg+0xd4/0x160 [ 231.212654][ T9873] x64_sys_call+0x22ab/0x2550 [ 231.212696][ T9873] do_syscall_64+0x112/0x360 [ 231.212794][ T9873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.212829][ T9873] RIP: 0033:0x7fefb389f559 [ 231.212879][ T9873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.212907][ T9873] RSP: 002b:00007fefb22d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.212939][ T9873] RAX: ffffffffffffffda RBX: 00007fefb3b26090 RCX: 00007fefb389f559 [ 231.212963][ T9873] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 231.212983][ T9873] RBP: 00007fefb3936b20 R08: 0000000000000000 R09: 0000000000000000 [ 231.213001][ T9873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.213018][ T9873] R13: 00007fefb3b26128 R14: 00007fefb3b26090 R15: 00007ffe3b86ba08 [ 231.213071][ T9873] [ 231.220492][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 231.281689][ T9862] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.282012][ T9862] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.361260][ T9882] FAULT_INJECTION: forcing a failure. [ 231.361260][ T9882] name failslab, interval 1, probability 0, space 0, times 0 [ 231.361430][ T9882] CPU: 1 UID: 0 PID: 9882 Comm: syz.1.1045 Not tainted syzkaller #0 PREEMPT(lazy) [ 231.361532][ T9882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.361596][ T9882] Call Trace: [ 231.361628][ T9882] [ 231.361687][ T9882] __dump_stack+0x1d/0x30 [ 231.361790][ T9882] dump_stack_lvl+0x95/0xd0 [ 231.361875][ T9882] dump_stack+0x15/0x1b [ 231.361948][ T9882] should_fail_ex+0x262/0x280 [ 231.362211][ T9882] ? skb_clone+0x151/0x1f0 [ 231.362316][ T9882] should_failslab+0x8c/0xb0 [ 231.362448][ T9882] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 231.362635][ T9882] ? skb_clone+0x151/0x1f0 [ 231.362741][ T9882] skb_clone+0x151/0x1f0 [ 231.362879][ T9882] __netlink_deliver_tap+0x2be/0x510 [ 231.362979][ T9882] netlink_unicast+0x712/0x740 [ 231.363052][ T9882] netlink_sendmsg+0x5ef/0x740 [ 231.363100][ T9882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.363133][ T9882] ____sys_sendmsg+0x532/0x580 [ 231.363205][ T9882] ___sys_sendmsg+0x195/0x1e0 [ 231.363311][ T9882] ? __send_signal_locked+0xd0/0x7a0 [ 231.363624][ T9882] __x64_sys_sendmsg+0xd4/0x160 [ 231.363740][ T9882] x64_sys_call+0x22ab/0x2550 [ 231.363844][ T9882] do_syscall_64+0x112/0x360 [ 231.363936][ T9882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.364083][ T9882] RIP: 0033:0x7f844019f559 [ 231.364143][ T9882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.364213][ T9882] RSP: 002b:00007f843ebd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.364374][ T9882] RAX: ffffffffffffffda RBX: 00007f8440426090 RCX: 00007f844019f559 [ 231.364442][ T9882] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 231.364490][ T9882] RBP: 00007f8440236b20 R08: 0000000000000000 R09: 0000000000000000 [ 231.364549][ T9882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.364597][ T9882] R13: 00007f8440426128 R14: 00007f8440426090 R15: 00007ffe5e357e78 [ 231.364689][ T9882] [ 231.382112][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 231.487369][ T9862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.617973][ T9888] loop7: detected capacity change from 0 to 128 [ 231.889127][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 231.889142][ T29] audit: type=1326 audit(1792564601.525:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb389f559 code=0x7ffc0000 [ 231.889232][ T29] audit: type=1326 audit(1792564601.525:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb389f559 code=0x7ffc0000 [ 231.889271][ T29] audit: type=1326 audit(1792564601.525:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb389f559 code=0x7ffc0000 [ 231.889307][ T29] audit: type=1326 audit(1792564601.525:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefb389f559 code=0x7ffc0000 [ 231.889347][ T29] audit: type=1326 audit(1792564601.525:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb389f559 code=0x7ffc0000 [ 231.889384][ T29] audit: type=1326 audit(1792564601.535:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb389f559 code=0x7ffc0000 [ 231.889450][ T29] audit: type=1326 audit(1792564601.535:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb389f559 code=0x7ffc0000 [ 231.889573][ T29] audit: type=1326 audit(1792564601.535:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb389f559 code=0x7ffc0000 [ 231.891979][ T29] audit: type=1326 audit(1792564601.535:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefb389f559 code=0x7ffc0000 [ 231.892021][ T29] audit: type=1326 audit(1792564601.535:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb389f559 code=0x7ffc0000 [ 233.141807][ T9917] FAULT_INJECTION: forcing a failure. [ 233.141807][ T9917] name failslab, interval 1, probability 0, space 0, times 0 [ 233.141857][ T9917] CPU: 1 UID: 0 PID: 9917 Comm: syz.3.1053 Not tainted syzkaller #0 PREEMPT(lazy) [ 233.141891][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.141910][ T9917] Call Trace: [ 233.141918][ T9917] [ 233.142035][ T9917] __dump_stack+0x1d/0x30 [ 233.142070][ T9917] dump_stack_lvl+0x95/0xd0 [ 233.142102][ T9917] dump_stack+0x15/0x1b [ 233.142130][ T9917] should_fail_ex+0x262/0x280 [ 233.142197][ T9917] ? skb_clone+0x151/0x1f0 [ 233.142234][ T9917] should_failslab+0x8c/0xb0 [ 233.142313][ T9917] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 233.142360][ T9917] ? skb_clone+0x151/0x1f0 [ 233.142398][ T9917] skb_clone+0x151/0x1f0 [ 233.142506][ T9917] __netlink_deliver_tap+0x2be/0x510 [ 233.142540][ T9917] netlink_unicast+0x712/0x740 [ 233.142612][ T9917] netlink_sendmsg+0x5ef/0x740 [ 233.142639][ T9917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.142669][ T9917] ____sys_sendmsg+0x532/0x580 [ 233.142735][ T9917] ___sys_sendmsg+0x195/0x1e0 [ 233.142785][ T9917] __x64_sys_sendmsg+0xd4/0x160 [ 233.142866][ T9917] x64_sys_call+0x22ab/0x2550 [ 233.142907][ T9917] do_syscall_64+0x112/0x360 [ 233.142941][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.143026][ T9917] RIP: 0033:0x7fefb389f559 [ 233.143049][ T9917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.143074][ T9917] RSP: 002b:00007fefb22b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.143130][ T9917] RAX: ffffffffffffffda RBX: 00007fefb3b26180 RCX: 00007fefb389f559 [ 233.143146][ T9917] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 233.143159][ T9917] RBP: 00007fefb3936b20 R08: 0000000000000000 R09: 0000000000000000 [ 233.143172][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.143226][ T9917] R13: 00007fefb3b26218 R14: 00007fefb3b26180 R15: 00007ffe3b86ba08 [ 233.143255][ T9917] [ 233.147840][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1053'. [ 233.993972][ T9924] loop3: detected capacity change from 0 to 128 [ 234.014816][ T9924] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 234.015134][ T9924] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.096123][ T9924] sd 0:0:1:0: PR command failed: 1026 [ 234.096153][ T9924] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 234.096181][ T9924] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 234.347343][ T9928] FAULT_INJECTION: forcing a failure. [ 234.347343][ T9928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.347402][ T9928] CPU: 0 UID: 0 PID: 9928 Comm: syz.0.1057 Not tainted syzkaller #0 PREEMPT(lazy) [ 234.347454][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 234.347472][ T9928] Call Trace: [ 234.347563][ T9928] [ 234.347573][ T9928] __dump_stack+0x1d/0x30 [ 234.347607][ T9928] dump_stack_lvl+0x95/0xd0 [ 234.347686][ T9928] dump_stack+0x15/0x1b [ 234.347715][ T9928] should_fail_ex+0x262/0x280 [ 234.347758][ T9928] should_fail+0xb/0x20 [ 234.347855][ T9928] should_fail_usercopy+0x1a/0x20 [ 234.347897][ T9928] _copy_from_iter+0xcc/0xe70 [ 234.347944][ T9928] ? __alloc_skb+0x516/0x6f0 [ 234.348018][ T9928] ? __alloc_skb+0x209/0x6f0 [ 234.348051][ T9928] netlink_sendmsg+0x4d6/0x740 [ 234.348088][ T9928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.348167][ T9928] ____sys_sendmsg+0x532/0x580 [ 234.348212][ T9928] ___sys_sendmsg+0x195/0x1e0 [ 234.348283][ T9928] __x64_sys_sendmsg+0xd4/0x160 [ 234.348331][ T9928] x64_sys_call+0x22ab/0x2550 [ 234.348416][ T9928] do_syscall_64+0x112/0x360 [ 234.348457][ T9928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.348488][ T9928] RIP: 0033:0x7f6f6564f559 [ 234.348510][ T9928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.348599][ T9928] RSP: 002b:00007f6f6409f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.348625][ T9928] RAX: ffffffffffffffda RBX: 00007f6f658d5fa0 RCX: 00007f6f6564f559 [ 234.348643][ T9928] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 234.348706][ T9928] RBP: 00007f6f656e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 234.348799][ T9928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.348817][ T9928] R13: 00007f6f658d6038 R14: 00007f6f658d5fa0 R15: 00007fff4de7dbf8 [ 234.348847][ T9928] [ 234.928370][ T6959] FAT-fs (loop3): error, invalid access to FAT (entry 0xffff0000) [ 234.928752][ T6959] FAT-fs (loop3): Filesystem has been set read-only [ 234.960598][ T6959] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 235.141935][ T9949] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1059'. [ 235.170124][ T9934] FAULT_INJECTION: forcing a failure. [ 235.170124][ T9934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.170156][ T9934] CPU: 0 UID: 0 PID: 9934 Comm: syz.1.1058 Not tainted syzkaller #0 PREEMPT(lazy) [ 235.170190][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.170208][ T9934] Call Trace: [ 235.170218][ T9934] [ 235.170283][ T9934] __dump_stack+0x1d/0x30 [ 235.170325][ T9934] dump_stack_lvl+0x95/0xd0 [ 235.170356][ T9934] dump_stack+0x15/0x1b [ 235.170386][ T9934] should_fail_ex+0x262/0x280 [ 235.170491][ T9934] should_fail+0xb/0x20 [ 235.170585][ T9934] should_fail_usercopy+0x1a/0x20 [ 235.170629][ T9934] _copy_from_iter+0xcc/0xe70 [ 235.170672][ T9934] ? __alloc_skb+0x516/0x6f0 [ 235.170778][ T9934] ? __alloc_skb+0x209/0x6f0 [ 235.170801][ T9934] netlink_sendmsg+0x4d6/0x740 [ 235.170833][ T9934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.170903][ T9934] ____sys_sendmsg+0x532/0x580 [ 235.170944][ T9934] ___sys_sendmsg+0x195/0x1e0 [ 235.171000][ T9934] __x64_sys_sendmsg+0xd4/0x160 [ 235.171040][ T9934] x64_sys_call+0x22ab/0x2550 [ 235.171116][ T9934] do_syscall_64+0x112/0x360 [ 235.171156][ T9934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.171187][ T9934] RIP: 0033:0x7f844019f559 [ 235.171208][ T9934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.171281][ T9934] RSP: 002b:00007f843ebd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.171311][ T9934] RAX: ffffffffffffffda RBX: 00007f8440426090 RCX: 00007f844019f559 [ 235.171401][ T9934] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 235.171421][ T9934] RBP: 00007f8440236b20 R08: 0000000000000000 R09: 0000000000000000 [ 235.171439][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.171457][ T9934] R13: 00007f8440426128 R14: 00007f8440426090 R15: 00007ffe5e357e78 [ 235.171492][ T9934] [ 235.174326][ T9950] FAULT_INJECTION: forcing a failure. [ 235.174326][ T9950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.174389][ T9950] CPU: 0 UID: 0 PID: 9950 Comm: syz.0.1060 Not tainted syzkaller #0 PREEMPT(lazy) [ 235.174420][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.174437][ T9950] Call Trace: [ 235.174445][ T9950] [ 235.174453][ T9950] __dump_stack+0x1d/0x30 [ 235.174525][ T9950] dump_stack_lvl+0x95/0xd0 [ 235.174555][ T9950] dump_stack+0x15/0x1b [ 235.174582][ T9950] should_fail_ex+0x262/0x280 [ 235.174675][ T9950] should_fail+0xb/0x20 [ 235.174707][ T9950] should_fail_usercopy+0x1a/0x20 [ 235.174812][ T9950] _copy_from_iter+0xcc/0xe70 [ 235.174854][ T9950] ? __alloc_skb+0x516/0x6f0 [ 235.174906][ T9950] ? __alloc_skb+0x209/0x6f0 [ 235.174941][ T9950] netlink_sendmsg+0x4d6/0x740 [ 235.175042][ T9950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.175076][ T9950] ____sys_sendmsg+0x532/0x580 [ 235.175115][ T9953] smc: removing ib device rxe0 [ 235.175114][ T9950] ___sys_sendmsg+0x195/0x1e0 [ 235.175268][ T9950] __x64_sys_sendmsg+0xd4/0x160 [ 235.175302][ T9950] x64_sys_call+0x22ab/0x2550 [ 235.175369][ T9950] do_syscall_64+0x112/0x360 [ 235.175400][ T9950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.175422][ T9950] RIP: 0033:0x7f6f6564f559 [ 235.175493][ T9950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.175520][ T9950] RSP: 002b:00007f6f6405d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.175549][ T9950] RAX: ffffffffffffffda RBX: 00007f6f658d6180 RCX: 00007f6f6564f559 [ 235.175571][ T9950] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 235.175589][ T9950] RBP: 00007f6f656e6b20 R08: 0000000000000000 R09: 0000000000000000 [ 235.175649][ T9950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.175708][ T9950] R13: 00007f6f658d6218 R14: 00007f6f658d6180 R15: 00007fff4de7dbf8 [ 235.175807][ T9950] [ 235.278634][ T9954] loop6: detected capacity change from 0 to 512 [ 235.292160][ T9954] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 235.292176][ T9954] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 235.311969][ T9954] EXT4-fs (loop6): 1 truncate cleaned up [ 235.319910][ T9954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.721607][ T9966] loop3: detected capacity change from 0 to 128 [ 235.727015][ T9966] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 235.852816][ T9966] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.853136][ T9966] ext2 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.104773][ T4809] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.283797][ T6959] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.378327][ T9988] loop6: detected capacity change from 0 to 512 [ 236.468225][ T9992] FAULT_INJECTION: forcing a failure. [ 236.468225][ T9992] name failslab, interval 1, probability 0, space 0, times 0 [ 236.468350][ T9992] CPU: 0 UID: 0 PID: 9992 Comm: syz.7.1071 Not tainted syzkaller #0 PREEMPT(lazy) [ 236.468385][ T9992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 236.468403][ T9992] Call Trace: [ 236.468413][ T9992] [ 236.468423][ T9992] __dump_stack+0x1d/0x30 [ 236.468484][ T9992] dump_stack_lvl+0x95/0xd0 [ 236.468517][ T9992] dump_stack+0x15/0x1b [ 236.468545][ T9992] should_fail_ex+0x262/0x280 [ 236.468580][ T9992] ? skb_clone+0x151/0x1f0 [ 236.468678][ T9992] should_failslab+0x8c/0xb0 [ 236.468726][ T9992] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 236.468838][ T9992] ? skb_clone+0x151/0x1f0 [ 236.468903][ T9992] skb_clone+0x151/0x1f0 [ 236.468977][ T9992] __netlink_deliver_tap+0x2be/0x510 [ 236.469016][ T9992] netlink_unicast+0x712/0x740 [ 236.469053][ T9992] netlink_sendmsg+0x5ef/0x740 [ 236.469087][ T9992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.469121][ T9992] ____sys_sendmsg+0x532/0x580 [ 236.469224][ T9992] ___sys_sendmsg+0x195/0x1e0 [ 236.469280][ T9992] __x64_sys_sendmsg+0xd4/0x160 [ 236.469323][ T9992] x64_sys_call+0x22ab/0x2550 [ 236.469363][ T9992] do_syscall_64+0x112/0x360 [ 236.469403][ T9992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.469435][ T9992] RIP: 0033:0x7f3f1f7bf559 [ 236.469456][ T9992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.469552][ T9992] RSP: 002b:00007f3f1e20f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.469573][ T9992] RAX: ffffffffffffffda RBX: 00007f3f1fa45fa0 RCX: 00007f3f1f7bf559 [ 236.469590][ T9992] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 236.469607][ T9992] RBP: 00007f3f1f856b20 R08: 0000000000000000 R09: 0000000000000000 [ 236.469625][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.469690][ T9992] R13: 00007f3f1fa46038 R14: 00007f3f1fa45fa0 R15: 00007ffc33f07c48 [ 236.469711][ T9992] [ 236.476134][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1071'. [ 236.504579][ T9988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.504808][ T9988] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.727842][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 236.888016][T10009] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1074'. [ 237.220953][T10027] loop3: detected capacity change from 0 to 512 [ 237.254218][T10027] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 237.254239][T10027] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.258085][T10027] EXT4-fs (loop3): 1 truncate cleaned up [ 237.261616][T10027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.320085][ T6959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.344371][ T4809] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.493853][T10030] loop7: detected capacity change from 0 to 512 [ 237.515175][T10030] vfat: Unknown parameter '' [ 238.064111][T10068] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1088'. [ 239.282665][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 239.423212][T10109] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1101'. [ 241.047053][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1115'. [ 241.084091][T10124] loop6: detected capacity change from 0 to 128 [ 241.227801][T10124] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.228672][T10124] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.340574][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 241.340601][ T29] audit: type=1400 audit(1792564610.885:7304): avc: denied { write } for pid=10122 comm="syz.6.1105" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.340629][ T29] audit: type=1400 audit(1792564610.905:7305): avc: denied { write } for pid=10122 comm="syz.6.1105" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.478568][T10143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1109'. [ 241.493387][T10143] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.493603][T10143] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.521551][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 241.811322][ T4809] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.015542][T10145] FAULT_INJECTION: forcing a failure. [ 242.015542][T10145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.015598][T10145] CPU: 1 UID: 0 PID: 10145 Comm: syz.3.1110 Not tainted syzkaller #0 PREEMPT(lazy) [ 242.015639][T10145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.015702][T10145] Call Trace: [ 242.015711][T10145] [ 242.015722][T10145] __dump_stack+0x1d/0x30 [ 242.015824][T10145] dump_stack_lvl+0x95/0xd0 [ 242.015850][T10145] dump_stack+0x15/0x1b [ 242.015878][T10145] should_fail_ex+0x262/0x280 [ 242.015917][T10145] should_fail+0xb/0x20 [ 242.015994][T10145] should_fail_usercopy+0x1a/0x20 [ 242.016038][T10145] _copy_from_iter+0xcc/0xe70 [ 242.016111][T10145] ? __alloc_skb+0x516/0x6f0 [ 242.016138][T10145] ? __alloc_skb+0x209/0x6f0 [ 242.016162][T10145] netlink_sendmsg+0x4d6/0x740 [ 242.016262][T10145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.016295][T10145] ____sys_sendmsg+0x532/0x580 [ 242.016338][T10145] ___sys_sendmsg+0x195/0x1e0 [ 242.016417][T10145] __x64_sys_sendmsg+0xd4/0x160 [ 242.016461][T10145] x64_sys_call+0x22ab/0x2550 [ 242.016569][T10145] do_syscall_64+0x112/0x360 [ 242.016608][T10145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.016637][T10145] RIP: 0033:0x7fefb389f559 [ 242.016660][T10145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.016729][T10145] RSP: 002b:00007fefb22f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.016756][T10145] RAX: ffffffffffffffda RBX: 00007fefb3b25fa0 RCX: 00007fefb389f559 [ 242.016776][T10145] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 242.016862][T10145] RBP: 00007fefb3936b20 R08: 0000000000000000 R09: 0000000000000000 [ 242.016878][T10145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.016921][T10145] R13: 00007fefb3b26038 R14: 00007fefb3b25fa0 R15: 00007ffe3b86ba08 [ 242.017028][T10145] [ 242.674274][T10170] loop7: detected capacity change from 0 to 256 [ 242.748166][T10170] veth0_to_team: Caught tx_queue_len zero misconfig [ 242.865385][T10180] loop3: detected capacity change from 0 to 512 [ 242.895228][T10180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.895316][T10180] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.558393][T10191] FAULT_INJECTION: forcing a failure. [ 243.558393][T10191] name failslab, interval 1, probability 0, space 0, times 0 [ 243.558599][T10191] CPU: 1 UID: 0 PID: 10191 Comm: syz.1.1120 Not tainted syzkaller #0 PREEMPT(lazy) [ 243.558634][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.558654][T10191] Call Trace: [ 243.558664][T10191] [ 243.558674][T10191] __dump_stack+0x1d/0x30 [ 243.558873][T10191] dump_stack_lvl+0x95/0xd0 [ 243.558928][T10191] dump_stack+0x15/0x1b [ 243.558951][T10191] should_fail_ex+0x262/0x280 [ 243.558984][T10191] ? skb_clone+0x151/0x1f0 [ 243.559013][T10191] should_failslab+0x8c/0xb0 [ 243.559095][T10191] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 243.559133][T10191] ? skb_clone+0x151/0x1f0 [ 243.559164][T10191] skb_clone+0x151/0x1f0 [ 243.559194][T10191] __netlink_deliver_tap+0x2be/0x510 [ 243.559233][T10191] netlink_unicast+0x712/0x740 [ 243.559257][T10191] netlink_sendmsg+0x5ef/0x740 [ 243.559288][T10191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.559337][T10191] ____sys_sendmsg+0x532/0x580 [ 243.559377][T10191] ___sys_sendmsg+0x195/0x1e0 [ 243.559404][T10191] ? __send_signal_locked+0xd0/0x7a0 [ 243.559512][T10191] __x64_sys_sendmsg+0xd4/0x160 [ 243.559547][T10191] x64_sys_call+0x22ab/0x2550 [ 243.559575][T10191] do_syscall_64+0x112/0x360 [ 243.559685][T10191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.559817][T10191] RIP: 0033:0x7f844019f559 [ 243.559836][T10191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.559858][T10191] RSP: 002b:00007f843ebd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.559882][T10191] RAX: ffffffffffffffda RBX: 00007f8440426090 RCX: 00007f844019f559 [ 243.559899][T10191] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 243.559938][T10191] RBP: 00007f8440236b20 R08: 0000000000000000 R09: 0000000000000000 [ 243.559952][T10191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.559966][T10191] R13: 00007f8440426128 R14: 00007f8440426090 R15: 00007ffe5e357e78 [ 243.560043][T10191] [ 243.563248][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 243.783515][ T38] bio_check_eod: 9 callbacks suppressed [ 243.783598][ T38] kworker/u8:2: attempt to access beyond end of device [ 243.783598][ T38] loop7: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 243.783935][ T38] kworker/u8:2: attempt to access beyond end of device [ 243.783935][ T38] loop7: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 243.784164][ T38] kworker/u8:2: attempt to access beyond end of device [ 243.784164][ T38] loop7: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 243.784402][ T38] kworker/u8:2: attempt to access beyond end of device [ 243.784402][ T38] loop7: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 243.784696][ T38] kworker/u8:2: attempt to access beyond end of device [ 243.784696][ T38] loop7: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 243.784893][ T38] kworker/u8:2: attempt to access beyond end of device [ 243.784893][ T38] loop7: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 243.785186][ T38] kworker/u8:2: attempt to access beyond end of device [ 243.785186][ T38] loop7: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 243.785556][ T38] kworker/u8:2: attempt to access beyond end of device [ 243.785556][ T38] loop7: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 243.785849][ T38] kworker/u8:2: attempt to access beyond end of device [ 243.785849][ T38] loop7: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 243.785994][ T38] kworker/u8:2: attempt to access beyond end of device [ 243.785994][ T38] loop7: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 244.021633][T10197] FAULT_INJECTION: forcing a failure. [ 244.021633][T10197] name failslab, interval 1, probability 0, space 0, times 0 [ 244.021689][T10197] CPU: 1 UID: 0 PID: 10197 Comm: syz.7.1123 Not tainted syzkaller #0 PREEMPT(lazy) [ 244.021729][T10197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 244.021827][T10197] Call Trace: [ 244.021836][T10197] [ 244.021846][T10197] __dump_stack+0x1d/0x30 [ 244.021881][T10197] dump_stack_lvl+0x95/0xd0 [ 244.021908][T10197] dump_stack+0x15/0x1b [ 244.021935][T10197] should_fail_ex+0x262/0x280 [ 244.022055][T10197] ? skb_clone+0x151/0x1f0 [ 244.022091][T10197] should_failslab+0x8c/0xb0 [ 244.022167][T10197] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 244.022217][T10197] ? skb_clone+0x151/0x1f0 [ 244.022264][T10197] skb_clone+0x151/0x1f0 [ 244.022302][T10197] __netlink_deliver_tap+0x2be/0x510 [ 244.022339][T10197] netlink_unicast+0x712/0x740 [ 244.022395][T10197] netlink_sendmsg+0x5ef/0x740 [ 244.022431][T10197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.022516][T10197] ____sys_sendmsg+0x532/0x580 [ 244.022562][T10197] ___sys_sendmsg+0x195/0x1e0 [ 244.022595][T10197] ? __send_signal_locked+0xd0/0x7a0 [ 244.022686][T10197] __x64_sys_sendmsg+0xd4/0x160 [ 244.022734][T10197] x64_sys_call+0x22ab/0x2550 [ 244.022843][T10197] do_syscall_64+0x112/0x360 [ 244.022883][T10197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.022915][T10197] RIP: 0033:0x7f3f1f7bf559 [ 244.022938][T10197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.022987][T10197] RSP: 002b:00007f3f1e20f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.023038][T10197] RAX: ffffffffffffffda RBX: 00007f3f1fa45fa0 RCX: 00007f3f1f7bf559 [ 244.023055][T10197] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 244.023073][T10197] RBP: 00007f3f1f856b20 R08: 0000000000000000 R09: 0000000000000000 [ 244.023145][T10197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.023162][T10197] R13: 00007f3f1fa46038 R14: 00007f3f1fa45fa0 R15: 00007ffc33f07c48 [ 244.023189][T10197] [ 244.025048][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1123'. [ 244.400386][ T6959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.461901][T10208] FAULT_INJECTION: forcing a failure. [ 244.461901][T10208] name failslab, interval 1, probability 0, space 0, times 0 [ 244.461934][T10208] CPU: 1 UID: 0 PID: 10208 Comm: syz.1.1127 Not tainted syzkaller #0 PREEMPT(lazy) [ 244.461983][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 244.462001][T10208] Call Trace: [ 244.462010][T10208] [ 244.462021][T10208] __dump_stack+0x1d/0x30 [ 244.462050][T10208] dump_stack_lvl+0x95/0xd0 [ 244.462081][T10208] dump_stack+0x15/0x1b [ 244.462131][T10208] should_fail_ex+0x262/0x280 [ 244.462245][T10208] ? skb_clone+0x151/0x1f0 [ 244.462340][T10208] should_failslab+0x8c/0xb0 [ 244.462383][T10208] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 244.462487][T10208] ? skb_clone+0x151/0x1f0 [ 244.462532][T10208] skb_clone+0x151/0x1f0 [ 244.462569][T10208] __netlink_deliver_tap+0x2be/0x510 [ 244.462643][T10208] netlink_unicast+0x712/0x740 [ 244.462674][T10208] netlink_sendmsg+0x5ef/0x740 [ 244.462762][T10208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.462787][T10208] ____sys_sendmsg+0x532/0x580 [ 244.462908][T10208] ___sys_sendmsg+0x195/0x1e0 [ 244.462964][T10208] __x64_sys_sendmsg+0xd4/0x160 [ 244.463034][T10208] x64_sys_call+0x22ab/0x2550 [ 244.463066][T10208] do_syscall_64+0x112/0x360 [ 244.463100][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.463188][T10208] RIP: 0033:0x7f844019f559 [ 244.463233][T10208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.463255][T10208] RSP: 002b:00007f843ebf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.463298][T10208] RAX: ffffffffffffffda RBX: 00007f8440425fa0 RCX: 00007f844019f559 [ 244.463314][T10208] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 244.463332][T10208] RBP: 00007f8440236b20 R08: 0000000000000000 R09: 0000000000000000 [ 244.463350][T10208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.463368][T10208] R13: 00007f8440426038 R14: 00007f8440425fa0 R15: 00007ffe5e357e78 [ 244.463461][T10208] [ 244.464129][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 244.508047][T10211] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1126'. [ 245.028076][T10214] loop3: detected capacity change from 0 to 128 [ 245.304233][T10214] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.321457][T10214] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 245.374270][ T29] audit: type=1400 audit(1792564615.015:7306): avc: denied { write } for pid=10213 comm="syz.3.1125" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.425107][T10229] FAULT_INJECTION: forcing a failure. [ 245.425107][T10229] name failslab, interval 1, probability 0, space 0, times 0 [ 245.425164][T10229] CPU: 0 UID: 0 PID: 10229 Comm: syz.7.1130 Not tainted syzkaller #0 PREEMPT(lazy) [ 245.425230][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 245.425245][T10229] Call Trace: [ 245.425255][T10229] [ 245.425277][T10229] __dump_stack+0x1d/0x30 [ 245.425320][T10229] dump_stack_lvl+0x95/0xd0 [ 245.425350][T10229] dump_stack+0x15/0x1b [ 245.425371][T10229] should_fail_ex+0x262/0x280 [ 245.425402][T10229] ? skb_clone+0x151/0x1f0 [ 245.425431][T10229] should_failslab+0x8c/0xb0 [ 245.425622][T10229] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 245.425657][T10229] ? skb_clone+0x151/0x1f0 [ 245.425695][T10229] skb_clone+0x151/0x1f0 [ 245.425731][T10229] __netlink_deliver_tap+0x2be/0x510 [ 245.425759][T10229] netlink_unicast+0x712/0x740 [ 245.425782][T10229] netlink_sendmsg+0x5ef/0x740 [ 245.425812][T10229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.425861][T10229] ____sys_sendmsg+0x532/0x580 [ 245.425902][T10229] ___sys_sendmsg+0x195/0x1e0 [ 245.425938][T10229] ? __send_signal_locked+0xd0/0x7a0 [ 245.425998][T10229] __x64_sys_sendmsg+0xd4/0x160 [ 245.426072][T10229] x64_sys_call+0x22ab/0x2550 [ 245.426108][T10229] do_syscall_64+0x112/0x360 [ 245.426149][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.426250][T10229] RIP: 0033:0x7f3f1f7bf559 [ 245.426273][T10229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.426295][T10229] RSP: 002b:00007f3f1e1ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.426325][T10229] RAX: ffffffffffffffda RBX: 00007f3f1fa46090 RCX: 00007f3f1f7bf559 [ 245.426345][T10229] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 245.426472][T10229] RBP: 00007f3f1f856b20 R08: 0000000000000000 R09: 0000000000000000 [ 245.426490][T10229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.426507][T10229] R13: 00007f3f1fa46128 R14: 00007f3f1fa46090 R15: 00007ffc33f07c48 [ 245.426535][T10229] [ 245.441196][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1130'. [ 245.482388][ T29] audit: type=1400 audit(1792564615.125:7307): avc: denied { write } for pid=10213 comm="syz.3.1125" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.608737][ T29] audit: type=1400 audit(1792564615.245:7308): avc: denied { write } for pid=10219 comm="syz.0.1129" name="instances" dev="tracefs" ino=2276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 245.608779][ T29] audit: type=1400 audit(1792564615.245:7309): avc: denied { add_name } for pid=10219 comm="syz.0.1129" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 245.608810][ T29] audit: type=1400 audit(1792564615.245:7310): avc: denied { create } for pid=10219 comm="syz.0.1129" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 245.764531][ T6959] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.812697][T10236] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1132'. [ 246.117655][T10242] ip_tables: iptables: counters copy to user failed while replacing table [ 246.136013][T10242] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 246.178773][T10242] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 246.465368][T10245] loop7: detected capacity change from 0 to 512 [ 246.695636][T10245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.695720][T10245] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.438005][ T29] audit: type=1400 audit(1792564617.075:7311): avc: denied { getopt } for pid=10265 comm="syz.3.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 247.545197][T10266] loop3: detected capacity change from 0 to 128 [ 247.554749][T10266] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 247.555550][T10266] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 247.592945][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1141'. [ 247.592968][T10277] FAULT_INJECTION: forcing a failure. [ 247.592968][T10277] name failslab, interval 1, probability 0, space 0, times 0 [ 247.593051][T10277] CPU: 1 UID: 0 PID: 10277 Comm: syz.6.1141 Not tainted syzkaller #0 PREEMPT(lazy) [ 247.593110][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 247.593123][T10277] Call Trace: [ 247.593131][T10277] [ 247.593139][T10277] __dump_stack+0x1d/0x30 [ 247.593165][T10277] dump_stack_lvl+0x95/0xd0 [ 247.593196][T10277] dump_stack+0x15/0x1b [ 247.593217][T10277] should_fail_ex+0x262/0x280 [ 247.593284][T10277] ? __alloc_skb+0x2e0/0x6f0 [ 247.593315][T10277] should_failslab+0x8c/0xb0 [ 247.593388][T10277] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 247.593461][T10277] ? selinux_capable+0x31/0x40 [ 247.593502][T10277] ? __alloc_skb+0x2e0/0x6f0 [ 247.593532][T10277] __alloc_skb+0x2e0/0x6f0 [ 247.593560][T10277] ? __alloc_skb+0x209/0x6f0 [ 247.593657][T10277] netlink_ack+0xfd/0x530 [ 247.593690][T10277] netlink_rcv_skb+0x18d/0x220 [ 247.593712][T10277] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 247.593787][T10277] rtnetlink_rcv+0x1c/0x30 [ 247.593894][T10277] netlink_unicast+0x665/0x740 [ 247.593934][T10277] netlink_sendmsg+0x5ef/0x740 [ 247.593995][T10277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.594030][T10277] ____sys_sendmsg+0x532/0x580 [ 247.594076][T10277] ___sys_sendmsg+0x195/0x1e0 [ 247.594158][T10277] __x64_sys_sendmsg+0xd4/0x160 [ 247.594211][T10277] x64_sys_call+0x22ab/0x2550 [ 247.594237][T10277] do_syscall_64+0x112/0x360 [ 247.594274][T10277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.594337][T10277] RIP: 0033:0x7fd6b711f559 [ 247.594423][T10277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.594470][T10277] RSP: 002b:00007fd6b5b2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.594491][T10277] RAX: ffffffffffffffda RBX: 00007fd6b73a6180 RCX: 00007fd6b711f559 [ 247.594526][T10277] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 247.594545][T10277] RBP: 00007fd6b71b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 247.594564][T10277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.594581][T10277] R13: 00007fd6b73a6218 R14: 00007fd6b73a6180 R15: 00007ffd124d3728 [ 247.594667][T10277] [ 247.761774][ T5089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.917366][ T6959] FAT-fs (loop3): error, invalid access to FAT (entry 0xffff0000) [ 247.917397][ T6959] FAT-fs (loop3): Filesystem has been set read-only [ 247.919410][ T6959] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 247.988080][T10296] FAULT_INJECTION: forcing a failure. [ 247.988080][T10296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.988205][T10296] CPU: 1 UID: 0 PID: 10296 Comm: syz.1.1145 Not tainted syzkaller #0 PREEMPT(lazy) [ 247.988231][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 247.988244][T10296] Call Trace: [ 247.988253][T10296] [ 247.988261][T10296] __dump_stack+0x1d/0x30 [ 247.988294][T10296] dump_stack_lvl+0x95/0xd0 [ 247.988338][T10296] dump_stack+0x15/0x1b [ 247.988367][T10296] should_fail_ex+0x262/0x280 [ 247.988437][T10296] should_fail+0xb/0x20 [ 247.988463][T10296] should_fail_usercopy+0x1a/0x20 [ 247.988555][T10296] _copy_from_iter+0xcc/0xe70 [ 247.988597][T10296] ? netlink_sendmsg+0x4c3/0x740 [ 247.988634][T10296] netlink_sendmsg+0x4d6/0x740 [ 247.988696][T10296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.988729][T10296] ____sys_sendmsg+0x532/0x580 [ 247.988780][T10296] ___sys_sendmsg+0x195/0x1e0 [ 247.988913][T10296] __x64_sys_sendmsg+0xd4/0x160 [ 247.988947][T10296] x64_sys_call+0x22ab/0x2550 [ 247.988980][T10296] do_syscall_64+0x112/0x360 [ 247.989021][T10296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.989117][T10296] RIP: 0033:0x7f844019f559 [ 247.989138][T10296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.989171][T10296] RSP: 002b:00007f843ebd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.989242][T10296] RAX: ffffffffffffffda RBX: 00007f8440426090 RCX: 00007f844019f559 [ 247.989259][T10296] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 247.989275][T10296] RBP: 00007f8440236b20 R08: 0000000000000000 R09: 0000000000000000 [ 247.989336][T10296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.989349][T10296] R13: 00007f8440426128 R14: 00007f8440426090 R15: 00007ffe5e357e78 [ 247.989372][T10296] [ 248.004402][T10292] loop3: detected capacity change from 0 to 8192 [ 248.304941][ T29] audit: type=1400 audit(1792564617.945:7312): avc: denied { load_policy } for pid=10291 comm="syz.3.1146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 248.305183][T10297] SELinux: policydb magic number 0x1000000 does not match expected magic number 0xf97cff8c [ 248.305330][T10297] SELinux: failed to load policy [ 248.359728][T10298] raw_sendmsg: syz.3.1146 forgot to set AF_INET. Fix it! [ 248.385610][T10297] ================================================================== [ 248.385654][T10297] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 248.385709][T10297] [ 248.385715][T10297] write to 0xffff88811d27061a of 2 bytes by task 10292 on cpu 0: [ 248.385731][T10297] fat16_ent_put+0x28/0x60 [ 248.385747][T10297] fat_ent_write+0x6c/0xe0 [ 248.385776][T10297] fat_chain_add+0x170/0x4c0 [ 248.385799][T10297] fat_get_block+0x468/0x5e0 [ 248.385818][T10297] __block_write_begin_int+0x421/0x1060 [ 248.385850][T10297] cont_write_begin+0x5bf/0x920 [ 248.385866][T10297] fat_write_begin+0x52/0xe0 [ 248.385887][T10297] generic_perform_write+0x186/0x490 [ 248.385916][T10297] __generic_file_write_iter+0x9e/0x120 [ 248.385945][T10297] generic_file_write_iter+0x77/0x1f0 [ 248.385974][T10297] vfs_write+0x57a/0x990 [ 248.386003][T10297] ksys_write+0xdc/0x1a0 [ 248.386031][T10297] __x64_sys_write+0x40/0x50 [ 248.386061][T10297] x64_sys_call+0x154e/0x2550 [ 248.386085][T10297] do_syscall_64+0x112/0x360 [ 248.386113][T10297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.386133][T10297] [ 248.386138][T10297] read to 0xffff88811d270600 of 512 bytes by task 10297 on cpu 1: [ 248.386176][T10297] fat_mirror_bhs+0x1da/0x320 [ 248.386219][T10297] fat_ent_write+0xd0/0xe0 [ 248.386259][T10297] fat_chain_add+0x170/0x4c0 [ 248.386291][T10297] fat_get_block+0x468/0x5e0 [ 248.386329][T10297] __block_write_begin_int+0x421/0x1060 [ 248.386374][T10297] cont_write_begin+0x5bf/0x920 [ 248.386396][T10297] fat_write_begin+0x52/0xe0 [ 248.386427][T10297] generic_perform_write+0x186/0x490 [ 248.386461][T10297] __generic_file_write_iter+0x9e/0x120 [ 248.386490][T10297] generic_file_write_iter+0x77/0x1f0 [ 248.386518][T10297] vfs_write+0x57a/0x990 [ 248.386545][T10297] ksys_write+0xdc/0x1a0 [ 248.386574][T10297] __x64_sys_write+0x40/0x50 [ 248.386603][T10297] x64_sys_call+0x154e/0x2550 [ 248.386626][T10297] do_syscall_64+0x112/0x360 [ 248.386648][T10297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.386667][T10297] [ 248.386671][T10297] Reported by Kernel Concurrency Sanitizer on: [ 248.386681][T10297] CPU: 1 UID: 0 PID: 10297 Comm: syz.3.1146 Not tainted syzkaller #0 PREEMPT(lazy) [ 248.386708][T10297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 248.386720][T10297] ==================================================================