last executing test programs: 11m29.209011367s ago: executing program 32 (id=6): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400a000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x8010) r2 = socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0xf1, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62eb, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200000102ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mq_notify(r0, &(0x7f0000000580)={0x0, 0xa, 0x0, @thr={&(0x7f00000004c0)="61b6bf027c9b75a4a90df2aa0f8eec6beabe13d7bfb2fd535c5216567b048d324f2f87896f928e3246a308d5469d50cffc053eb6b64ee7e94d46c2daad6b23d5", &(0x7f0000000500)="f791589f3c99694aedb29d75637925611738556220a2b76f8aeeb742d48faa0a7b255bfa750197da92ac772c9e1a18506f76599389095ba5783a3fe705963bf76ac18e25fc149482ef24abc69b5e0f947ace0b3193b365847da90afc55a796a37ae2f02d69"}}) stat(&(0x7f0000002b80)='./file1\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x140, 0x140, 0x140, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0x3a, 0x7, 0x7, 0x12}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x5, 0x9}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x10001, 0x8, 0x101, 0x8, 0x6, 0x10000, 0x7fff, 0x4]}}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xffffffff, 0xffffffff], 'veth1_to_hsr\x00', 'bond_slave_1\x00', {}, {0xff}, 0x5c, 0x6, 0x5, 0x2}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x40, 0x3, 0x0, [0x18a, 0x2, 0x9, 0x2, 0x8a, 0x3, 0x925b, 0x96, 0x10, 0x3, 0x4, 0x5, 0x515, 0xd28d, 0xf, 0x6], 0x7}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x7, 0x4}}}, {{@ipv6={@private2, @mcast2, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xff, 0xffffffff, 0xff], 'bridge_slave_1\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0x2, 0x3, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000480)={0x9, 0x7, 0xe, 0x7}, 0x10) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000940), 0x0, 0x5c8, &(0x7f0000000980)="$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") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000600)='--\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000001600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)=@newtclass={0xc0, 0x28, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xf}, {0xffff, 0x8}, {0x0, 0xb}}, [@c_atm={{0x8}, {0x20, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xfff3}}, @TCA_ATM_HDR={0x14, 0x3, "2471589efebd31b3b49f0748fc6d23ba"}]}}, @c_atm={{0x8}, {0x30, 0x2, [@TCA_ATM_HDR={0x4}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xffe9}}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8, 0x1, r3}]}}, @c_cbq={{0x8}, {0x34, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xfff1}, 0x4, 0x97}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x6, 0xe}, 0x9, 0x7fffffff}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0x9}, 0x80000001, 0x7}}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040850}, 0x11) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) connect$llc(r3, &(0x7f00000005c0)={0x1a, 0x206, 0x35, 0x2, 0x4a, 0x7, @multicast}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x2, 0x0, 0x0, 0xfffffffffe000001}) 11m27.620144436s ago: executing program 33 (id=15): r0 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_enter(r0, 0x100000, 0x2, 0xf, 0x0, 0x0) 10m57.65854865s ago: executing program 34 (id=183): bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x2, @empty, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)='P', 0x1}], 0x1}, 0x400c814) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) setns(0xffffffffffffffff, 0x24020000) r3 = creat(&(0x7f0000000140)='./file0\x00', 0xb0) close(r3) socket$packet(0x11, 0x2, 0x300) r4 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 10m50.895529818s ago: executing program 35 (id=226): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x2) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x10001, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3, 0x8000001, {"dbc63185839ec1c9fb1f28e7382240a7"}, 0x5b, 0x6, 0x8001}}}, 0xa0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) syz_open_dev$tty1(0xc, 0x4, 0x4) 9m44.37426728s ago: executing program 36 (id=891): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xe}, 0x8893, 0x800000, 0x2, 0x2, 0x20000009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x204000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r0, r1) 9m42.35258576s ago: executing program 37 (id=905): prctl$PR_MCE_KILL_GET(0x22) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x9, 0x7fff0000}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, r3, 0x1, 0x70bd2b, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x3ba56793248e83ab}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}, 0x2000) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 9m41.210542699s ago: executing program 38 (id=918): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m36.32369104s ago: executing program 39 (id=942): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) (async) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 7m30.601542422s ago: executing program 40 (id=3391): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) 7m6.88206283s ago: executing program 41 (id=3660): r0 = syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101381) 6m30.23299558s ago: executing program 42 (id=4170): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000440)='Man', 0x3) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0x2602) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000010000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000010800084000000001140000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01efffffffffffffff000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c000180060001"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 6m10.695600586s ago: executing program 43 (id=4435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$VT_DISALLOCATE(r2, 0x5608) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x3e, 0x1, 0x70bd25, 0x25dfdbff, {0x1c}, [@typed={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40a, 0x103) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a00010000060a010400000000000000000a0004050900020073797a320000000084000480800001800c000100636f756e74657200700002800c00024000000000000000030c00014018000000000000070c00014000000000000000090c00014000000000000000cd0c00024000000000000000030c00024000000000000000080c00014000000000000000020c00024000000000000000070c00014000000001000000000900010073797a31000000000c00064000"], 0x150}, 0x1, 0x0, 0x0, 0xf2abd262d7a8a7b}, 0x20000040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12000000}, 0x94) 5m49.365439355s ago: executing program 44 (id=4708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}}, 0x0) 5m47.738289225s ago: executing program 45 (id=4723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 5m7.243759261s ago: executing program 46 (id=5252): prctl$PR_MCE_KILL_GET(0x22) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$kcm(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}, 0x2000) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 4m41.312067095s ago: executing program 47 (id=5567): socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x3, 0x800, &(0x7f0000003640)="$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") socket$inet(0x2, 0x80001, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') socket(0x11, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x47, &(0x7f0000000d00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x3, 0x2, 0x39, 0x65, 0x0, 0x6f, 0x32, 0x0, @loopback, @loopback}, {0x4d2, 0x7df2a39, @cc={0x1, 0x0, 0x40, 0x7, 0x4, 0x40, 0x17}, "64c9d9", 0x3}}}}}, 0x0) 4m39.424207022s ago: executing program 48 (id=5581): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0}) (fail_nth: 2) 4m32.362997907s ago: executing program 49 (id=5631): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short}, 0x14) sendmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="f8b1", 0x2}, {0x0}], 0x2}}], 0x1, 0x400c010) 3m57.21515362s ago: executing program 50 (id=5954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "486d83c190db3e2a", "f6095f8c30ac7fcfc29ba578e69e54fe", "3a69d46b", "2136a54a23fb25a8"}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) (async, rerun: 32) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_clone(0x10048000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000040)={[{@block_validity}]}, 0x30, 0x531, &(0x7f0000000740)="$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") (async) lstat(&(0x7f0000000640)='./file0/file1\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', 0x0, 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={r4, 0xcc, 0xff, 0x6}, 0x10) (async) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x3ff, 0x21, 0x9, 0xa, 0x3, 0x2}) 3m47.893393601s ago: executing program 7 (id=6258): perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$kcm(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x2000) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3m47.815236094s ago: executing program 7 (id=6259): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000e00)='testhandle 2000000000 0 0', 0x19) 3m47.718837156s ago: executing program 7 (id=6262): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x14}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x7ffd, 0x8000, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000b40)="47e75e1c668267653c7cfb65875d62a2897c10da0bbbc3b76d6a077d24d901319b34e4fee798d8b68de8d29d07ea15c0ecc327a81b30446b9e180edb2d66f67bc59bed390d4e0415ce6da347af8b12c7b7839029b70000", 0x57}, {&(0x7f0000000240)="4aee4320baeb6eddf15148ef3d066d502fc9c002a1605b4458859cc6a543e06f41214c5d3071fd90ff79044d93a2c5af3d7424a3161d3055c62748f0bc5b4648d7e44e08a4440aa003d5098ea04c", 0x4e}, {&(0x7f0000000300)="b4400fd5663606d184bd9187dd98ae014533f3a3726fe86b2dc8d2a047f408bdfcbdd42dbb90882830b6a51b1d81abf62f0541dea6058ad1dd3371509c13368a8dc88de0816014d042982a8327b848837a863544da0d9cd649f262386663", 0x5e}, {&(0x7f0000000440)="5797083849bf5c8aec3fad0053a8738fcf1b3339269632ef5635e7c27f92bcbf602b2e4a", 0x24}], 0x4) 3m47.574599519s ago: executing program 7 (id=6264): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x5, 0x1, 0x3, 0xc, 0xf64, 0x4}, [@TCA_NETEM_RATE={0x14, 0x6, {0x41, 0x10000, 0x6, 0xfffffffb}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x0, 0x9}}]}}}]}, 0x6c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00', 0x2}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) close(0xffffffffffffffff) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x2, 0x4, 0x1, 0x7, 0x0, 0x9, 0x20000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x12, 0x1, 0x0, 0x3, 0x2d, 0xf3, 0x2, 0x0, 0x262b, 0x0, 0x2}, r7, 0x2, r0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m47.432027332s ago: executing program 7 (id=6266): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x48e, &(0x7f0000000240)={0x0, 0x2607, 0x2, 0x2, 0x29d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0) read(r1, &(0x7f0000000c00)=""/242, 0xf2) r2 = memfd_create(&(0x7f0000002bc0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}\xf3\xf8\xab\xbd\xf03L\xb0\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xae\x8dVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x1f\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf49\xd2\xfb\x9e\xef\xabR\x88\x13\x9et\xcb\x82\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10\x00'/355, 0x5) fallocate(r2, 0x10, 0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611150230000000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = syz_clone(0x4000, &(0x7f0000000000)="4b9646d0c9b7edb1b962dcb6b02262898c1e92661798d18c624f4d40f4742dfdeaec0c9da59e1d822981c3fc58079f5fd10a755446730fba103956fc05", 0x3d, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000540)="730909371636fb407820810a276c4bdfa4f1778548c7f4817bb07d33a755a5cbc3b0e6013c502bd1e0c943a571ff546f6302c40e0db5cf8325f8697c4652ac23b9cb96eb94c8570d2250805f9507700183e458e5312efd837244bbf0bfa6f84bb3c3acb4f3ee786726adbbad6829e5284edd3c432ef4aaf145de12cd156399857159e9a1") sched_getscheduler(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/instances/inst1/set_event\x00', 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000007600090702000000020000000702", @ANYBLOB='\f\x00'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000440)={&(0x7f0000002000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1, 0x3}, 0x1) 3m46.811288628s ago: executing program 7 (id=6271): sendmsg$sock(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000040)="9f7b846e86edc40b6edf8e6fd3183f0bb07389c8c4ca9d97108be3ad9a6addd35e1db518b1841a2d4d9c95e1d3a174c9a574bce80965509ba79167f65adcca0701", 0x41}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="4be78296302f6b2160b44dbb948b2d71f3604335b4d543645b14f0005cf57d7933bf939e6702bb4852178c56e9f56c8600e7b85829fb1cf3946d0a4d8f50f5c6d3f91ccc9206e69b2039295cb9a908b3019325006366c20e5f4ce75c572a01595504272d39658c32717fe2ca9423564e25611a048be51914c9f1d7659a0ff741ced4cadd5bd3ce1f9d293b923cdddf700565564c3d41e8c5edd0f264d0011a9289", 0xa1}], 0x3, &(0x7f0000001a00)=[@timestamping={{0x14, 0x1, 0x25, 0xf06}}], 0x18}, 0x48c1) 3m41.620504497s ago: executing program 8 (id=6315): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x14}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x7ffd, 0x8000, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x23, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}, 0x48) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000b40)="47e75e1c668267653c7cfb65875d62a2897c10da0bbbc3b76d6a077d24d901319b34e4fee798d8b68de8d29d07ea15c0ecc327a81b30446b9e180edb2d66f67bc59bed390d4e0415ce6da347af8b12c7b7839029b70000", 0x57}, {&(0x7f0000000240)="4aee4320baeb6eddf15148ef3d066d502fc9c002a1605b4458859cc6a543e06f41214c5d3071fd90ff79044d93a2c5af3d7424a3161d3055c62748f0bc5b4648d7e44e08a4440aa003d5098ea04c", 0x4e}, {&(0x7f0000000300)="b4400fd5663606d184bd9187dd98ae014533f3a3726fe86b2dc8d2a047f408bdfcbdd42dbb90882830b6a51b1d81abf62f0541dea6058ad1dd3371509c13368a8dc88de0816014d042982a8327b848837a863544da0d9cd649f262386663", 0x5e}, {&(0x7f0000000440)="5797083849bf5c8aec3fad0053a8738fcf1b3339269632ef5635e7c27f92bcbf602b2e4a", 0x24}], 0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000005c0), &(0x7f00000000c0)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0xe7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) unshare(0x62040200) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000) 3m40.622896812s ago: executing program 8 (id=6324): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x24040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffc, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x88}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000600)=0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000680)=0x3) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x40, 0x305, &(0x7f0000000200)="$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") connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socket$netlink(0x10, 0x3, 0x0) 3m39.001958822s ago: executing program 8 (id=6333): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800471000540065000002019078ac1e0001ac1414bb940c000000010100030590780006001f4ceb07ff00681ce2d92f0e5c64010100ac141436441c4c017f000001000000057f00000100000000ac1e000100000329"], 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000640)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944dde0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5eddd65f5734fb43644347e98af7eb6abe95dcb6ed1acc22c8abdd5ea116b12d5b7b2ecff3d9c635bce6a377112b4adbd75b71fcc8a6e3693c82ed7fd11ad63683cc89f0a3895661ee23f5a4266b20e0eab6e081341f804aa674e3ee7299b11c61bb99223d88f4f8128bb2ce0073d34dcd36699d83e20e58a094fa9f8cbc39157375b342bd84f01ddf03105e8f9b66ae63fbc1365191c5fd3cf2ad1eb80c3dfc96a4cca1b9a69d650a95e0abecc9c906154545b994b2fbf8c1ddb11be9300fa15246a2", 0x1af}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24044805) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000001c0)=[{0x0, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f0000001240)=[{}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11dc0, &(0x7f00000009c0)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000008000000000004800800180100002020642500000000002020207b1af8ff00000000bfa108559b00000147010000f6ffff2d509015f9b211b100b70300000000000085000000720000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 3m38.725926179s ago: executing program 8 (id=6338): prctl$PR_MCE_KILL_GET(0x22) io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$kcm(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0x2000) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3m38.656107421s ago: executing program 8 (id=6339): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x48e, &(0x7f0000000240)={0x0, 0x2607, 0x2, 0x2, 0x29d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0) read(r1, &(0x7f0000000c00)=""/242, 0xf2) r2 = memfd_create(&(0x7f0000002bc0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}\xf3\xf8\xab\xbd\xf03L\xb0\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xae\x8dVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x1f\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf49\xd2\xfb\x9e\xef\xabR\x88\x13\x9et\xcb\x82\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10\x00'/355, 0x5) fallocate(r2, 0x10, 0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611150230000000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = syz_clone(0x4000, &(0x7f0000000000)="4b9646d0c9b7edb1b962dcb6b02262898c1e92661798d18c624f4d40f4742dfdeaec0c9da59e1d822981c3fc58079f5fd10a755446730fba103956fc05", 0x3d, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000540)="730909371636fb407820810a276c4bdfa4f1778548c7f4817bb07d33a755a5cbc3b0e6013c502bd1e0c943a571ff546f6302c40e0db5cf8325f8697c4652ac23b9cb96eb94c8570d2250805f9507700183e458e5312efd837244bbf0bfa6f84bb3c3acb4f3ee786726adbbad6829e5284edd3c432ef4aaf145de12cd156399857159e9a1") sched_getscheduler(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/instances/inst1/set_event\x00', 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000760009070200000002000000070200", @ANYBLOB='\f\x00'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) 3m38.006154987s ago: executing program 8 (id=6347): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xff48) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d7930000000000000", @ANYRES32=r2], 0x3c}}, 0x8000) 3m36.304133949s ago: executing program 9 (id=6361): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xff48) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 3m36.008741336s ago: executing program 9 (id=6365): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x14}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x7ffd, 0x8000, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000b40)="47e75e1c668267653c7cfb65875d62a2897c10da0bbbc3b76d6a077d24d901319b34e4fee798d8b68de8d29d07ea15c0ecc327a81b30446b9e180edb2d66f67bc59bed390d4e0415ce6da347af8b12c7b7839029b70000", 0x57}, {&(0x7f0000000240)="4aee4320baeb6eddf15148ef3d066d502fc9c002a1605b4458859cc6a543e06f41214c5d3071fd90ff79044d93a2c5af3d7424a3161d3055c62748f0bc5b4648d7e44e08a4440aa003d5098ea04c", 0x4e}, {&(0x7f0000000300)="b4400fd5663606d184bd9187dd98ae014533f3a3726fe86b2dc8d2a047f408bdfcbdd42dbb90882830b6a51b1d81abf62f0541dea6058ad1dd3371509c13368a8dc88de0816014d042982a8327b848837a863544da0d9cd649f262386663", 0x5e}, {&(0x7f0000000440)="5797083849bf5c8aec3fad0053a8738fcf1b3339269632ef5635e7c27f92bcbf602b2e4a", 0x24}], 0x4) 3m35.650056665s ago: executing program 9 (id=6368): socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='6', 0x1) 3m35.600448097s ago: executing program 9 (id=6369): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$kcm(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x2000) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3m35.238768866s ago: executing program 9 (id=6371): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x48e, &(0x7f0000000240)={0x0, 0x2607, 0x2, 0x2, 0x29d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0) read(r1, &(0x7f0000000c00)=""/242, 0xf2) r2 = memfd_create(&(0x7f0000002bc0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}\xf3\xf8\xab\xbd\xf03L\xb0\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xae\x8dVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x1f\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf49\xd2\xfb\x9e\xef\xabR\x88\x13\x9et\xcb\x82\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10\x00'/355, 0x5) fallocate(r2, 0x10, 0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611150230000000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = syz_clone(0x4000, &(0x7f0000000000)="4b9646d0c9b7edb1b962dcb6b02262898c1e92661798d18c624f4d40f4742dfdeaec0c9da59e1d822981c3fc58079f5fd10a755446730fba103956fc05", 0x3d, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000540)="730909371636fb407820810a276c4bdfa4f1778548c7f4817bb07d33a755a5cbc3b0e6013c502bd1e0c943a571ff546f6302c40e0db5cf8325f8697c4652ac23b9cb96eb94c8570d2250805f9507700183e458e5312efd837244bbf0bfa6f84bb3c3acb4f3ee786726adbbad6829e5284edd3c432ef4aaf145de12cd156399857159e9a1") sched_getscheduler(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/instances/inst1/set_event\x00', 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000760009070200000002000000070200", @ANYBLOB='\f\x00'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x3}, 0x1) 3m34.595836342s ago: executing program 9 (id=6374): openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x68401, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m31.679473444s ago: executing program 51 (id=6271): sendmsg$sock(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000040)="9f7b846e86edc40b6edf8e6fd3183f0bb07389c8c4ca9d97108be3ad9a6addd35e1db518b1841a2d4d9c95e1d3a174c9a574bce80965509ba79167f65adcca0701", 0x41}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="4be78296302f6b2160b44dbb948b2d71f3604335b4d543645b14f0005cf57d7933bf939e6702bb4852178c56e9f56c8600e7b85829fb1cf3946d0a4d8f50f5c6d3f91ccc9206e69b2039295cb9a908b3019325006366c20e5f4ce75c572a01595504272d39658c32717fe2ca9423564e25611a048be51914c9f1d7659a0ff741ced4cadd5bd3ce1f9d293b923cdddf700565564c3d41e8c5edd0f264d0011a9289", 0xa1}], 0x3, &(0x7f0000001a00)=[@timestamping={{0x14, 0x1, 0x25, 0xf06}}], 0x18}, 0x48c1) 3m22.887847392s ago: executing program 52 (id=6347): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xff48) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d7930000000000000", @ANYRES32=r2], 0x3c}}, 0x8000) 3m19.543384075s ago: executing program 53 (id=6374): openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x68401, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m14.964446379s ago: executing program 5 (id=6543): r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000b40)="47e75e1c668267653c7cfb65875d62a2897c10da0bbbc3b76d6a077d24d901319b34e4fee798d8b68de8d29d07ea15c0ecc327a81b30446b9e180edb2d66f67bc59bed390d4e0415ce6da347af8b12c7b7839029b70000", 0x57}, {&(0x7f0000000240)="4aee4320baeb6eddf15148ef3d066d502fc9c002a1605b4458859cc6a543e06f41214c5d3071fd90ff79044d93a2c5af3d7424a3161d3055c62748f0bc5b4648d7e44e08a4440aa003d5098ea04c", 0x4e}, {&(0x7f0000000300)="b4400fd5663606d184bd9187dd98ae014533f3a3726fe86b2dc8d2a047f408bdfcbdd42dbb90882830b6a51b1d81abf62f0541dea6058ad1dd3371509c13368a8dc88de0816014d042982a8327b848837a863544da0d9cd649f262386663", 0x5e}, {&(0x7f0000000440)="5797083849bf5c8aec3fad0053a8738fcf1b3339269632ef5635e7c27f92bcbf602b2e4a", 0x24}], 0x4) 3m14.92194152s ago: executing program 5 (id=6544): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000280)=@req={0x8, 0x6, 0x100, 0xff}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xfffff001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, {0xa, 0x4e23, 0x6, @local}, 0xffffffffffffffff, 0x7}}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x3, 0x1, 0x401}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r5, &(0x7f0000000140)="00008847d100582a", 0x8) 3m14.734647345s ago: executing program 5 (id=6547): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x2000) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3m14.238035697s ago: executing program 5 (id=6551): r0 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@minixdf}]}, 0x9, 0x468, &(0x7f0000002a00)="$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") setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x1000007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0x8}, 0x1200, 0x1224, 0x5b16, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0080003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277c0700bace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x6) ppoll(&(0x7f00000000c0)=[{r5, 0x208}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x20d0034, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="000000000065727370616e000018000280040012000600030000030000003cd4ae2e66d1d2c5a1b5b415fe2275e3bdd1da4635823f92b6865330bd87"], 0x82}, 0x1, 0x0, 0x0, 0x100}, 0x4008004) 3m13.550838414s ago: executing program 5 (id=6558): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)={0x474b01, 0x4d4}, 0x6f) (async) r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x4a8, &(0x7f0000001300)="$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") ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3f7ffff0400000001800000000000005a00000000000000080000000000000000020000000000000000000000000000000000060000000000000000000000000600000057980000000100000000000041460000000000004d7e000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000036503432e78c6e01744a61523352d9c2cdc9bf3a0c731598ad01448ffd73785b46637ced47cb3bc6464fbf151042ba55f5f3a20f29d54ebb2ab08676ef7332227ecac2870d8d2f423c8d63f23045c17e57a5d6394fd48773965b33b3610274e5b51b5a"]) (async) r2 = socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$inet(0x2, 0x80000, 0xfffffffe) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (async) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) (async, rerun: 64) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) (rerun: 64) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) sendmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)="000000000000ff0000", 0x9}], 0x1}}], 0x1, 0x44845) (async, rerun: 64) connect$can_j1939(r6, &(0x7f0000004600)={0x1d, r7, 0x3, {0x1, 0xff, 0x3}, 0xff}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0x7, 0xfffa}, {0x7, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) sendto$inet(r8, 0x0, 0x0, 0x200007fd, 0x0, 0x8) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 3m12.934744369s ago: executing program 5 (id=6571): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000400)={[{@acl}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {}, {@delalloc}, {@usrjquota}, {@minixdf}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000029) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x200, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) fcntl$lock(r0, 0x0, &(0x7f00000003c0)={0x0, 0x4, 0xfffffffffffffd89, 0x1, r5}) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/895, @ANYRES8, @ANYBLOB="3314f54e5fd2edf68f060b6dc46e6726b43f6ee9ddde462c40e60f24007b2bab9e62e0cb8f8765d8cbe7f5463bcb92c74efb73ef0f526fe4056777ed73b012c79f7de0f43b0840ffd77dc59c2f080b4e37bbf7b0a7c58486ec28cc997fb50b582ce980b04cde0666cb1514340a36a20c20bc6ec73af2f34d53b12df083d642b8e66055ff69d88264abb6d6922fb288698e8bb5728002858a45c8"], 0x1, 0x2b1, &(0x7f0000000100)="$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") rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r7 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x8, 0x0, 0x9}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) fdatasync(r4) 3m12.90107914s ago: executing program 54 (id=6571): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000400)={[{@acl}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {}, {@delalloc}, {@usrjquota}, {@minixdf}]}, 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000029) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x200, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) fcntl$lock(r0, 0x0, &(0x7f00000003c0)={0x0, 0x4, 0xfffffffffffffd89, 0x1, r5}) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/895, @ANYRES8, @ANYBLOB="3314f54e5fd2edf68f060b6dc46e6726b43f6ee9ddde462c40e60f24007b2bab9e62e0cb8f8765d8cbe7f5463bcb92c74efb73ef0f526fe4056777ed73b012c79f7de0f43b0840ffd77dc59c2f080b4e37bbf7b0a7c58486ec28cc997fb50b582ce980b04cde0666cb1514340a36a20c20bc6ec73af2f34d53b12df083d642b8e66055ff69d88264abb6d6922fb288698e8bb5728002858a45c8"], 0x1, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r7 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x8, 0x0, 0x9}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) fdatasync(r4) 2m16.690786135s ago: executing program 4 (id=7663): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x56}}}}}}}, 0x0) setsockopt(r0, 0x81, 0xa, &(0x7f00000000c0)="c9e973d141777db9bd5d20e235b0887a6c83b593cfa2ab3d20f0710365a371836ae988887eff24e866c0261a310927204d8efc840182ac", 0x37) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x3000004, 0x2, 0x20) 2m16.659927816s ago: executing program 4 (id=7666): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000400)=r0}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xacd6a4e1331c235f, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0x3) 2m16.348469164s ago: executing program 4 (id=7669): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$pppoe(0x18, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x14, 0x1}) 2m15.955227884s ago: executing program 4 (id=7679): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000a40)="6a003adac8", 0x5}], 0x2}, 0x10060010) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/10, 0xa, 0x40018000, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fsopen(&(0x7f0000000100)='sockfs\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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") r2 = open(&(0x7f0000000040)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7]}, 0x8, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) signalfd4(r3, &(0x7f0000000100)={[0x1]}, 0x8, 0x80800) creat(&(0x7f0000000200)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000380)=0x20000300) finit_module(r2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24008060}, 0x8) 2m14.899541929s ago: executing program 4 (id=7691): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000700)=""/147, 0x79}], 0x1, 0x0, 0x2) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m14.740781334s ago: executing program 4 (id=7696): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x7}, 0x205, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) 2m14.698989795s ago: executing program 55 (id=7696): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x7}, 0x205, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) 3.779160906s ago: executing program 0 (id=9533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) (fail_nth: 1) 3.708972138s ago: executing program 0 (id=9534): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x100000, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 3.260441839s ago: executing program 0 (id=9539): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000680)={[], [{@fowner_eq}]}, 0x1, 0x527, &(0x7f0000001740)="$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") r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400a000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x8010) r2 = socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0xf1, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62eb, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200000102ffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mq_notify(r0, &(0x7f0000000580)={0x0, 0xa, 0x0, @thr={&(0x7f00000004c0)="61b6bf027c9b75a4a90df2aa0f8eec6beabe13d7bfb2fd535c5216567b048d324f2f87896f928e3246a308d5469d50cffc053eb6b64ee7e94d46c2daad6b23d5", &(0x7f0000000500)="f791589f3c99694aedb29d75637925611738556220a2b76f8aeeb742d48faa0a7b255bfa750197da92ac772c9e1a18506f76599389095ba5783a3fe705963bf76ac18e25fc149482ef24abc69b5e0f947ace0b3193b365847da90afc55a796a37ae2f02d69"}}) stat(&(0x7f0000002b80)='./file1\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x140, 0x140, 0x140, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0x3a, 0x7, 0x7, 0x12}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x5, 0x9}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x10001, 0x8, 0x101, 0x8, 0x6, 0x10000, 0x7fff, 0x4]}}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xffffffff, 0xffffffff], 'veth1_to_hsr\x00', 'bond_slave_1\x00', {}, {0xff}, 0x5c, 0x6, 0x5, 0x2}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x40, 0x3, 0x0, [0x18a, 0x2, 0x9, 0x2, 0x8a, 0x3, 0x925b, 0x96, 0x10, 0x3, 0x4, 0x5, 0x515, 0xd28d, 0xf, 0x6], 0x7}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x7, 0x4}}}, {{@ipv6={@private2, @mcast2, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xff, 0xffffffff, 0xff], 'bridge_slave_1\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0x2, 0x3, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000480)={0x9, 0x7, 0xe, 0x7}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149004001040800", 0x58}], 0x1) r4 = creat(&(0x7f0000000080)='./file1\x00', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000940), 0x0, 0x5c8, &(0x7f0000000980)="$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") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000600)='--\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000001600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)=@newtclass={0xc0, 0x28, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xf}, {0xffff, 0x8}, {0x0, 0xb}}, [@c_atm={{0x8}, {0x20, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xfff3}}, @TCA_ATM_HDR={0x14, 0x3, "2471589efebd31b3b49f0748fc6d23ba"}]}}, @c_atm={{0x8}, {0x30, 0x2, [@TCA_ATM_HDR={0x4}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xffe9}}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8, 0x1, r4}]}}, @c_cbq={{0x8}, {0x34, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xfff1}, 0x4, 0x97}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x6, 0xe}, 0x9, 0x7fffffff}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0x9}, 0x80000001, 0x7}}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040850}, 0x11) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/pm_debug_messages', 0x80, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) connect$llc(r4, &(0x7f00000005c0)={0x1a, 0x206, 0x35, 0x2, 0x4a, 0x7, @multicast}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r6}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x2, 0x0, 0x0, 0xfffffffffe000001}) 2.41490458s ago: executing program 2 (id=9552): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="1694ad704f13b4b0f08997b94919", 0xe}], 0x1}}], 0x1, 0x0) 2.41206894s ago: executing program 6 (id=9554): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) 2.351017661s ago: executing program 6 (id=9555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 2.350567421s ago: executing program 6 (id=9556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a0601010000000000000000030000090800a009800000010900020073797a310000000005000100070000000800094000000005880008800c00078008"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48894) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) 2.341735872s ago: executing program 6 (id=9557): r0 = getpgid(0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdc6ec7cc143196a1, @perf_bp={0x0, 0x2}, 0x201, 0x2, 0xfffffffe, 0xf, 0x20000000002, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000c90fa46fa3b62492", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x22) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff, '\x00', 0x0, 0x0}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x2c, 0x0, &(0x7f0000000200)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) writev(r5, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000000240)={{0x80, 0xbd}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x8001, 0x2, 0x1000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffff7, 0x6, 0xe1d9, 0x4, 0x3}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x800) read(r7, &(0x7f0000000000)=""/111, 0x6f) close_range(r6, r7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 2.327407842s ago: executing program 6 (id=9558): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {0x0, 0x8}, {0x7, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) 2.300475593s ago: executing program 0 (id=9559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000002000)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x14, 0x1, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "000000000000a5c3e0bf000000"}]}, 0x28}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r2, 0x80000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x7ab, &(0x7f00000001c0)="$eJzs3c1rXFUbAPDnTpImTdu3eUGwddOstFA6aWpsFQQjLkSwUNC1bZhMQ8wkUzKT0oQsWkQQRNDiQlAEVy78qDu3omv/Bjci0lI1rVZcyMidj2Sa76SZpG1+P7jJOfeeO+c8c+eee2buYSaAXas3/ZOJOBwR7ycRB+vrk4joqKbaIwZr5e7OzebSJYlK5bXfk2qZO3OzuWjaJ7WvnjkUEd+/HXEss7Te0vTM2FChkJ+s5/vK4xf7StMzx0fHh0byI/mJU/0DAydPP3P61NbF+tePM/tvfvDyU18P/vPW49ff+yGJwdhf39Ycx1bpjd76c9KRPoX3eGmrK9thyU43gE1JT8222lkeh+NgtFVTAMCjLL3+VwCAXSZx/QeAXabxOcCdudlcY9nZTyS2160XI6KrFn/j/mZtS3v9nl1X9T5o950k2uPz7sZ+W3W/qzciPvn2jS/TJVp0HxJgOVeuRsT5nt6l/X+yZM7CRp1YR5neRXn9H2yf79Lxz7PLjf8y8+OfmB//LOhc5tzdjN6IPc35ped/5sayO76wBZXXx3/P1+a2pYE2jf/mJ631tNVzB9LMkYgYLeTTvu1/EXE0OjovjBby/avUcfT2v7dX2tY8/vvj2ptfpPWn/xdKZG60d967z/BQeeh+Ym5262rEE+0Lc/vuLun/u6pj3cXHP113drUHPrKQfOW5dz5eqVgafxpvY1kaf2tVPot4MpaPvyFZdX5iX3r4T9T+Ll/HNz9/1L1S/c3HP13S+hvvBbZDevy7V4+/J2mer1na2vrXjn/51/+e5PVqutF5XB4qlyf7I/Ykry5df3Jh30a+UT6Nvxbp4vgzq77+0/eE59cZY/vN377afPzzWjLFMo1/eEPHf+OJ63fH2jYff3r8B6qpo/U16+n/1tvA+3nuAAAAAAAAAAAAAAAAAAAAAAAAAGC9MhGxP5JMdj6dyWSztd/wfiy6M4ViqXzsQnFqYjiqv5XdEx2ZxlddHqzl//w0ovr9pz21fJJuP7ko/3RE/D8iPuzcW81nc8XC8E4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1+1b4/f/Ur53zxfoP7FwTAYBW6FqzxO38PdlKpVJpYXsAgNZb+/oPADxqVrn+793OdgAA28f7fwDYfVz/AWD3cf0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgxc6eOZMulb/nZnNpfvjS9NRY8dLx4XxpLDs+lcvmipMXsyPF4kghn80Vx9d6vEKxeHEgJqYu95XzpXJfaXrm3HhxaqJ8bnR8aCR/Lt+xLVEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMaUpmfGhgqF/OQjkXg3Ih6AZrQikcQD0YzNJ65ExCZ3/+X4T4dWK3NtjZfx4E7H/jAmdrpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg4/BcAAP//xMwlsA==") 2.237071574s ago: executing program 1 (id=9560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 2.196494655s ago: executing program 1 (id=9561): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2204806, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xfa, 0x6a9, &(0x7f0000002100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, &(0x7f0000000080)=""/31, 0x1f) getdents(r0, 0x0, 0xbb) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f00000001c0)={[{@errors_remount}, {@barrier_val}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@delalloc}, {@jqfmt_vfsv0}], [{@obj_type}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x12}}]}, 0x80, 0x63c, &(0x7f0000001bc0)="$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") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000240)=0xc, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="65ed5b318677f478acdffe82377d80", 0xf, 0x24000000, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000100), &(0x7f0000000340)='./file0\x00', 0x8, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x4090) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = inotify_init1(0x0) read(r5, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) r6 = syz_open_pts(r1, 0x8182) r7 = dup3(r6, r1, 0x0) ioctl$TCFLSH(r7, 0x540b, 0x2) 2.150779906s ago: executing program 3 (id=9562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x154, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e26, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x6, 0x2, 0xffffffffffbffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x61, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xa8, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207"}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 2.148565216s ago: executing program 6 (id=9563): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4408b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x4, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) (async) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002102, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) (async) r4 = epoll_create1(0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syncfs(r5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="70010000ffffffffffdcaaaaaaaaaabb08004518001400002000002f9078ac1e0001e0000001f6"], 0xfdef) (async) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xffffffffffffff1c, &(0x7f0000ffd000/0x1000)=nil, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x1000) (async) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x1, &(0x7f0000000200)=""/216, &(0x7f0000000000)=0xd8) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 2.125808897s ago: executing program 2 (id=9564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) syz_emit_ethernet(0x47e, &(0x7f00000004c0)={@empty, @random="84acadd816bf", @void, {@mpls_uc={0x8847, {[{0x1}, {0x5, 0x0, 0x1}, {0xff}, {0xfffff, 0x0, 0x1}, {0x9}, {0x1d3}], @ipv6=@udp={0xb, 0x6, "5954f9", 0x430, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, {[@dstopts={0x8, 0x35, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x6, 0x7b, "d26624a47b8984a694009ab35db5ca69c957754fb410087ca69763599edd34f9d6363ba5adcac756196f13a53f44379784713fa3c272dacca7edaa22ea68c04d4f267753d8eec7bb982ac3a6d1de5b5205f7c12b73633641d1114830702328fb1d54854e6fdf7f6ea0c7de294a22b4a04056ab06b3ea756a535c89"}, @hao={0xc9, 0x10, @remote}, @pad1, @enc_lim={0x4, 0x1, 0xc9}, @enc_lim={0x4, 0x1, 0xc}, @pad1, @generic={0xff, 0xfa, "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"}, @pad1]}, @srh={0x3b, 0xe, 0x4, 0x7, 0x6, 0x20, 0x4, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @mcast2, @empty, @mcast1, @private1]}, @dstopts={0xff, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, @fragment={0x4, 0x0, 0x7, 0x0, 0x0, 0x4, 0x66}, @srh={0x0, 0x6, 0x4, 0x3, 0x1, 0x60, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x2e}]}, @routing={0x29, 0x8, 0x0, 0x23, 0x0, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast1]}, @srh={0x0, 0x6, 0x4, 0x3, 0x6, 0x30, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}, @fragment={0xd6, 0x0, 0x1, 0x1, 0x0, 0x3, 0x67}, @dstopts={0x2f, 0xf, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @pad1, @jumbo={0xc2, 0x4, 0x899}, @enc_lim={0x4, 0x1, 0xb8}, @calipso={0x7, 0x38, {0x3, 0xc, 0x3, 0x7, [0x9, 0x5, 0x6, 0x9, 0x85b, 0x7]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @pad1]}], {0x4e23, 0x4e21, 0x90, 0x0, @gue={{0x1, 0x1, 0x2, 0x3, 0x100, @void}, "d8975a7b32dd04257b1097abff10cbc0e8bbb01dbab8494ecd89cfc30b989c7cd698b57619d6d580fb8a1e9ac49ac9c62a8cbe104b8d89cd56d46bbd8d48f250b7f750d889560004f6c0a9526f266adce87ac9df087777dff71eca1a1dc902b6d41faa43b58591f6b695bb9c20923bc86cbfc212ed3239a4031944544a441aee5efb207e"}}}}}}}}, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xfc, 0x20000000, 0x1000, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1}, 0x10) 2.123115517s ago: executing program 0 (id=9565): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, &(0x7f0000000300), 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x200000, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0xc98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc68, 0x2, [@TCA_BASIC_POLICE={0xc64, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3, 0xf, 0x8, 0x5, 0x7, 0x29b3, 0xa, 0x8c, 0x4, 0xfff, 0x1, 0xffff1195, 0x7ff, 0x7, 0xdd01, 0xef2, 0x8001, 0x3, 0xcee, 0x5, 0x8, 0x2, 0x9, 0xa, 0x4099, 0xfffffff7, 0x0, 0x800, 0x6, 0xe, 0x101, 0x4, 0x9, 0x99e, 0x6, 0x3119, 0x3ce2, 0x1, 0x8, 0x0, 0x9, 0x4, 0x3, 0xbc, 0x8, 0x93, 0x7, 0x23200000, 0xd, 0x1ff, 0x8, 0x1000, 0x85580000, 0x8, 0x23, 0x5, 0xe7b, 0x4, 0x5, 0xffff, 0x1, 0x8, 0x8000, 0x8, 0x1, 0x94, 0x80000001, 0x3, 0x2, 0xf, 0x5, 0x6, 0x6, 0x80000000, 0x6, 0x200, 0x6, 0x8, 0x10, 0x3, 0x3, 0x3, 0x5, 0x6, 0x3, 0x10, 0x2367, 0x2, 0x1, 0x6, 0x100, 0x4, 0x6, 0x9, 0x0, 0x6, 0x8000, 0x6, 0x7f, 0x3ff, 0x8000, 0x4, 0x100, 0x400, 0x5, 0xe12d, 0x5, 0x8, 0xffff0000, 0x81, 0xfffffff8, 0xfffff800, 0xb0, 0x56, 0xffffffac, 0x6, 0x6, 0x5, 0x3ff, 0x3, 0x2, 0x6, 0x2, 0xa, 0x1c, 0x5, 0x81, 0xffffffff, 0x7fffffff, 0x1, 0xe00000, 0x9, 0xfffffffd, 0x7, 0x3, 0x3, 0x2, 0x7, 0x3, 0x80000000, 0x2, 0x5, 0x2, 0x4, 0x73, 0x3, 0x1, 0x4d64, 0x80, 0x80000000, 0x10, 0x9, 0x7, 0xd, 0x5, 0xff, 0xff77, 0x5, 0x3023, 0xffffff61, 0x0, 0x0, 0x4, 0x10, 0x4, 0x4, 0xe000, 0x3, 0x200, 0x4c, 0x7, 0x66, 0x5, 0x4, 0x200, 0x3, 0xffff, 0x7, 0x3, 0x88f, 0x8004, 0x9, 0x3, 0xa, 0x3ff, 0x2, 0x8, 0x800, 0x1ff, 0x10000, 0x9, 0x8, 0x754, 0x3, 0x0, 0x0, 0x2, 0x8, 0x1, 0x8, 0x7, 0x9, 0x5, 0x7, 0x7f, 0x0, 0x7, 0x7, 0x4, 0x5, 0x4, 0x0, 0x2, 0x3ff, 0x809, 0x200, 0xdf, 0x2, 0x7, 0xb6, 0x2, 0x6, 0x50, 0x4, 0xf, 0x0, 0xe, 0x8, 0x7, 0x0, 0x7, 0x1, 0xd, 0x1, 0xda23, 0x3, 0x8, 0x800, 0x0, 0xffff, 0xfffffff6, 0x7fffffff, 0x100, 0x400, 0x4, 0x101, 0x3, 0xd57, 0x7fff, 0x7, 0x7f, 0x3, 0x651a, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffff0ae, 0xce, 0xa, 0xfffffffb, 0x3, 0x8, 0x8, 0x8, 0x1, 0x200, 0x8, 0x3, 0x8, 0x2, 0x4, 0x76, 0xb4b00000, 0x5, 0x2, 0x4, 0x0, 0xd, 0x0, 0x6, 0x8, 0x5, 0x394, 0x80, 0x401, 0x6, 0xa, 0x5, 0x7, 0x100, 0x8, 0xa, 0xffffff7f, 0x8000, 0xe0000000, 0x7ff, 0x1, 0x8, 0x2, 0x7f, 0x6, 0x7, 0x8, 0x10, 0x0, 0x8, 0x9, 0x4, 0x0, 0x7fffffff, 0x7f, 0x9, 0x1, 0x3, 0x1000, 0x4, 0x1, 0xc, 0x401, 0x10001, 0x5, 0x2, 0x0, 0x8, 0xfffff2a9, 0x8, 0xc87f, 0x7f, 0x3, 0xf, 0x1000, 0x3, 0x11, 0x600, 0xffff7fff, 0xfffffffd, 0x4, 0x80, 0x9, 0x2, 0x4, 0x6, 0x8, 0xb, 0x0, 0x8, 0x9, 0x8, 0xffff, 0x5, 0x1ff, 0x3, 0x3, 0x8, 0xf10, 0x9, 0x2, 0x8, 0x7, 0x800, 0x8001, 0x6, 0x6, 0x0, 0x80000001, 0x207, 0x1, 0x80000000, 0x0, 0x1, 0xd, 0x7fff, 0x8, 0x4, 0x9, 0x5, 0xfc5f, 0xeb0, 0x7ff, 0x1, 0x9, 0x7f, 0x8000, 0x73, 0x0, 0x2, 0x3, 0xf, 0x400, 0xc, 0x2, 0x0, 0xb21c, 0x1, 0x1, 0x1, 0x1, 0x6, 0x7, 0x1, 0x1, 0x8, 0xe8, 0x9, 0x10, 0x2, 0x80000000, 0x6, 0x80000000, 0xc, 0x6f3, 0x2, 0x3, 0x3, 0x200, 0x10, 0x4, 0x8001, 0x5, 0xffffba9a, 0x0, 0xfffffffb, 0x8, 0x0, 0xfff, 0x200, 0x6, 0x3, 0x6, 0x2, 0xd, 0x0, 0x3, 0x81, 0x2, 0xff, 0x10000, 0x7, 0x7, 0x7, 0x101, 0x1, 0x6a, 0x6, 0x1, 0x9f, 0x0, 0x5, 0x2b0a, 0x2, 0x1, 0xaa59, 0x800, 0x6, 0x3, 0xbc, 0x7ff, 0xfffffffc, 0x28a, 0x7, 0x7b0, 0x4, 0x0, 0x9, 0x3ff, 0x5, 0x3, 0x5, 0x6, 0xe, 0x4, 0x3, 0xa, 0x5, 0x5, 0x68d7, 0x6, 0x5, 0x2, 0xc5a7, 0x800, 0x401, 0x7, 0x3, 0x8, 0x0, 0x1, 0x8, 0x32, 0x8, 0x6, 0xffff, 0x7, 0x2, 0xff, 0x4, 0xb, 0x5, 0x25, 0xc8c, 0x2, 0x4, 0x2, 0x8000, 0x3, 0x9, 0x8, 0xfffffffe, 0x4, 0x7, 0x401, 0x29a]}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x9, 0x8, 0xff, 0x8, 0x0, 0xb, 0x2, 0x80000000, 0x9, 0x59, 0x2, 0xfffffff9, 0xfffffffa, 0x0, 0x0, 0x200, 0x2, 0x5a93, 0x8, 0x2, 0x79022268, 0x2, 0x4ec, 0x1, 0x2, 0x5, 0xffff550b, 0x8, 0x3b, 0x7ff, 0x2, 0x6f9, 0x1, 0x7ff, 0x0, 0x1000, 0x2, 0x5, 0x6, 0x6, 0x2, 0x5, 0x5c, 0x0, 0x1445, 0xfffff230, 0x5, 0x0, 0xf0ec, 0x80000001, 0x5, 0x5eb7, 0x81a, 0xd, 0xf, 0x7, 0x5, 0xfffffffc, 0x3, 0x10000, 0x1, 0xc, 0x3ff, 0x8001, 0xe, 0x4, 0x1000, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x7, 0x5, 0x9, 0x2, 0xffffffff, 0x0, 0x9, 0xdf, 0x64e, 0xfffffff8, 0x928a, 0x80000000, 0x1000, 0x6, 0x0, 0x1, 0x7, 0xc, 0x3, 0x5, 0x7, 0xb4d, 0x8, 0x3, 0x7ff, 0x0, 0x0, 0x2, 0xff, 0x6, 0x6, 0x9, 0x8, 0x10, 0x7, 0x81, 0x7f0, 0x4df, 0xe, 0x8, 0x5, 0x3, 0x7, 0x0, 0x6, 0x10000, 0x7, 0x48a5, 0x0, 0x2, 0x1, 0x1, 0x10001, 0x0, 0x9, 0xf6c, 0x0, 0x4557c25f, 0xf, 0xe09, 0x101, 0x1, 0x6, 0x6, 0xfffffffd, 0x55, 0x2, 0x7fff, 0x6, 0xffffffff, 0xffffff01, 0xfff, 0xc45, 0x5, 0x2, 0x4, 0x6, 0x6, 0x5, 0xa5c, 0xc0d, 0x4, 0x0, 0xf, 0x1, 0x4, 0x9a7, 0x8, 0x40, 0x4, 0x2, 0x0, 0x1, 0x3ee0, 0x6, 0x7, 0x5, 0x101, 0x2fe5, 0x0, 0x9, 0x7fff, 0x7f, 0x1000, 0x4, 0x4, 0xfffffffe, 0xfffffff6, 0xe9, 0x8, 0x6, 0x9, 0x80, 0x8, 0x3, 0x9, 0x4, 0x6, 0xbb44, 0x4, 0x7, 0x3, 0x2ca1, 0x9f, 0xf, 0x3, 0xb570, 0x10, 0x0, 0xd3, 0x800, 0x3, 0x1, 0x5, 0x6295, 0x5, 0x3000, 0x3, 0x3d, 0x9, 0x9, 0x9, 0xd90, 0x10001, 0x3, 0x2, 0xffffff23, 0x9, 0x7, 0x0, 0xfffffffc, 0x4, 0x7, 0x400, 0x7, 0x7f, 0xc7, 0x8, 0x614, 0x1000, 0x2, 0x400, 0x6, 0x9, 0x5, 0xff, 0x1000, 0x0, 0xd11, 0x4, 0x3, 0x100, 0x4, 0x7, 0x0, 0x24, 0xfffffff8, 0x800, 0xe, 0x4, 0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x1, 0x7, 0x6, {0x9, 0x2, 0xdbf, 0x483, 0x8}, {0xff, 0x1, 0x5, 0x3ff, 0x6, 0xc}, 0x19, 0x200, 0x9}}]}]}}]}, 0xc98}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000300)={0xff, 0xfc}, 0x10) sendmsg$kcm(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 2.084108388s ago: executing program 56 (id=9563): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4408b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x4, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) (async) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002102, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) (async) r4 = epoll_create1(0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syncfs(r5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="70010000ffffffffffdcaaaaaaaaaabb08004518001400002000002f9078ac1e0001e0000001f6"], 0xfdef) (async) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xffffffffffffff1c, &(0x7f0000ffd000/0x1000)=nil, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x1000) (async) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x1, &(0x7f0000000200)=""/216, &(0x7f0000000000)=0xd8) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 1.990992281s ago: executing program 2 (id=9567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 1.891383973s ago: executing program 3 (id=9568): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xe83e, 0xc000, 0x2000008, 0x4c1}) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400000000001}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 1.665952829s ago: executing program 2 (id=9569): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x14000, &(0x7f0000000100), 0x22, 0x4d5, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d935898a959e86ec6dfea0301bad2615ec6bd613670abc27c3bf", @ANYRES16=r4, @ANYBLOB="595300000000fddbdf256b0000000c0099000700000069000000"], 0x20}, 0x1, 0x0, 0x0, 0x84a0}, 0x5ef768c147daadb0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6001}, 0x20040001) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201081e, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x459, &(0x7f0000000600)="$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") perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000b00), &(0x7f0000000b40)={[0xfffffffffffffff9]}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 1.497584133s ago: executing program 3 (id=9570): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$kcm(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.121639592s ago: executing program 3 (id=9571): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x39d) 986.985415ms ago: executing program 0 (id=9572): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = syz_open_dev$evdev(0x0, 0x3214, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xf4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xe0, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x2}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xb3, 0x20000001, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf4}}, 0x0) syz_usb_disconnect(r2) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000000400000004000000020002000000"], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1100}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40006) write$UHID_GET_REPORT_REPLY(r4, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 677.873783ms ago: executing program 1 (id=9573): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x22be5029da357f32, 0x0, 0xd, 0x2, [{0xc, 0x1}]}, @union={0x4001, 0x0, 0x0, 0x5, 0x0, 0xfffeda95}]}}, &(0x7f0000001f40)=""/4080, 0x12, 0xffffffffffffff41, 0x9, 0x7ff}, 0x28) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x11c0, 0x6) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x2, @remote, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)='P', 0x1}], 0x1}, 0x400c814) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x39d) 552.128956ms ago: executing program 1 (id=9574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x39, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x4000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/cpu_dma_latency\x00', 0x101042, 0x8) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c000000010a03000000000000000000030000000900010073797a30000000000900010073797a31000000000c000440000200000000000222000600fe1ce51abc720f91f81c7f68ba4bd395632a3eb51b596c19993ea85ceb1d00000c00044000000000000000021100060011a39f2c12e1a42345ade0b7c80000000c0004400000000000000005140006008c6bf9b478ba0a"], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 242.306994ms ago: executing program 3 (id=9575): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000000680)="17000000020001010001000000000088a2003208030373c214e691c8dd00ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59120ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007fce68bf17a6e0b488495124c55d6c875643650086948a312447e66fc1c3b314b0d04be1b67af8b404fab764c3652751019d06c374db33643f5ea6c8e0782d57a36412a5e634b5b8df739e3d21cfc3b52209399bcc3cda14cb7d9c4e8c8dbf333487954ce4e67579e1c020bb907fef29e9995875d77d140d20020000000000000072e481093e9500b72b1f8ed412c7b640b20a4080ef9cd814a373401316642537742f3e19a153ba8274518a866bae4558357c21bdeadcf40544872ebd1c838458ed43e9e7fb13945d4072263acef96ce329fd8964d42009d4265a9fe25f34bd6246f8f8c206be6fd2f81404364528a101432f7d51378fb16186d3ec55b333b1308c11be7735aa85f48376e272eb265fe8919f1a877e3d370f5a315c4b", 0x1c7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@remote, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @local}, {0x0, 0x0, 0x8}}}}}, 0x0) 174.849295ms ago: executing program 1 (id=9576): r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x48, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000340), 0x0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101000001ad", 0xb}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) 172.021905ms ago: executing program 1 (id=9577): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xf9, 0x51, 0xb5, 0xff, 0xbfd, 0x5, 0xe568, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x60, 0x5, "", [{{0x9, 0x4, 0x3, 0x7, 0x0, 0xac, 0x24, 0x0, 0x8}}]}}]}}, 0x0) 171.915725ms ago: executing program 3 (id=9578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 111.022187ms ago: executing program 2 (id=9579): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000220900020073797a310000000008000a40fffffffc0800084000000001140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 2 (id=9580): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$kcm(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): journal inode [ 708.031886][ T1622] syzkaller0: entered promiscuous mode [ 708.043877][ T1622] syzkaller0: entered allmulticast mode [ 708.044245][ T1618] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 708.044245][ T1618] program syz.2.9196 not setting count and/or reply_len properly [ 708.069375][ T1629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9200'. [ 708.078526][ T1629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9200'. [ 708.097156][ T1622] 9pnet_fd: Insufficient options for proto=fd [ 708.164296][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 708.164315][ T28] audit: type=1326 audit(1786971549.574:50413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.0.9205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 708.171060][ T1635] loop2: detected capacity change from 0 to 1024 [ 708.204001][ T1635] EXT4-fs: Ignoring removed i_version option [ 708.215112][ T28] audit: type=1326 audit(1786971549.624:50414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.0.9205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 708.241590][ T28] audit: type=1326 audit(1786971549.624:50415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.0.9205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 708.273623][ T28] audit: type=1326 audit(1786971549.624:50416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.0.9205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7053c8e90e code=0x7ffc0000 [ 708.274604][ T1635] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 708.304238][ T28] audit: type=1326 audit(1786971549.624:50417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.0.9205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 708.334205][ T1635] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 708.342057][ T1635] EXT4-fs (loop2): invalid journal inode [ 708.369964][ T28] audit: type=1326 audit(1786971549.624:50418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.0.9205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 708.422814][ T28] audit: type=1326 audit(1786971549.624:50419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.0.9205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 708.450879][ T28] audit: type=1326 audit(1786971549.624:50420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.0.9205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 708.481718][ T28] audit: type=1326 audit(1786971549.624:50421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.0.9205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 708.482542][ T1635] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 708.482542][ T1635] program syz.2.9204 not setting count and/or reply_len properly [ 708.507228][ T28] audit: type=1326 audit(1786971549.624:50422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1636 comm="syz.0.9205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 708.568359][ T1647] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 708.568359][ T1647] program syz.2.9208 not setting count and/or reply_len properly [ 708.577578][ T1641] validate_nla: 1 callbacks suppressed [ 708.577624][ T1641] netlink: 'syz.0.9206': attribute type 13 has an invalid length. [ 708.598485][ T1641] netlink: 'syz.0.9206': attribute type 27 has an invalid length. [ 708.657092][ T1653] netlink: 'syz.2.9211': attribute type 1 has an invalid length. [ 708.681131][ T1655] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9212'. [ 708.901191][ T1669] syzkaller0: entered promiscuous mode [ 708.906845][ T1669] syzkaller0: entered allmulticast mode [ 708.954187][ T1669] 9pnet_fd: Insufficient options for proto=fd [ 711.038557][ T1699] loop2: detected capacity change from 0 to 1024 [ 711.041679][ T1695] netlink: 'syz.0.9222': attribute type 1 has an invalid length. [ 711.054454][ T1699] EXT4-fs: Ignoring removed i_version option [ 711.065743][ T1698] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 711.065743][ T1698] program syz.6.9224 not setting count and/or reply_len properly [ 711.142233][ T1699] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 711.166991][ T1699] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 711.204170][ T1707] netlink: 'syz.0.9227': attribute type 13 has an invalid length. [ 711.212760][ T1707] netlink: 'syz.0.9227': attribute type 27 has an invalid length. [ 711.223147][ T1699] EXT4-fs (loop2): invalid journal inode [ 711.383365][ T1713] loop3: detected capacity change from 0 to 136 [ 711.392847][ T1713] __nla_validate_parse: 7 callbacks suppressed [ 711.392865][ T1713] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9230'. [ 711.423343][ T1714] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 711.423343][ T1714] program syz.2.9223 not setting count and/or reply_len properly [ 711.570353][ T1720] loop3: detected capacity change from 0 to 136 [ 711.601347][ T1720] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9233'. [ 711.750308][ T1733] netlink: 'syz.3.9238': attribute type 1 has an invalid length. [ 711.987546][ T1716] loop1: detected capacity change from 0 to 128 [ 712.001678][ T1716] FAT-fs (loop1): bogus number of reserved sectors [ 712.009722][ T1716] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 712.033205][ T1716] FAT-fs (loop1): Can't find a valid FAT filesystem [ 712.131986][ T1752] loop1: detected capacity change from 0 to 2048 [ 712.200076][ T1752] loop1: p2 < > p3 p4 [ 712.210838][ T1752] loop1: p3 start 65535 is beyond EOD, truncated [ 712.227033][ T1752] loop1: p4 size 8192 extends beyond EOD, truncated [ 712.394503][ T1738] loop2: detected capacity change from 0 to 128 [ 712.402009][ T1738] FAT-fs (loop2): bogus number of reserved sectors [ 712.408566][ T1738] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 712.418327][ T1738] FAT-fs (loop2): Can't find a valid FAT filesystem [ 712.621757][ T1776] loop0: detected capacity change from 0 to 1024 [ 712.636353][ T1776] EXT4-fs: Ignoring removed i_version option [ 712.664394][ T1776] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 712.674335][ T1776] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 712.685437][ T1779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9255'. [ 712.700821][ T1776] EXT4-fs (loop0): invalid journal inode [ 712.703918][ T1779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9255'. [ 712.734454][ T1779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9255'. [ 712.746028][ T1779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9255'. [ 712.905358][ T1789] loop0: detected capacity change from 0 to 136 [ 712.945719][ T1789] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9258'. [ 713.001050][ T1791] netlink: 'syz.3.9259': attribute type 13 has an invalid length. [ 713.018164][ T1791] netlink: 'syz.3.9259': attribute type 27 has an invalid length. [ 713.063285][ T1769] loop1: detected capacity change from 0 to 128 [ 713.070762][ T1769] FAT-fs (loop1): bogus number of reserved sectors [ 713.077303][ T1769] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 713.086606][ T1769] FAT-fs (loop1): Can't find a valid FAT filesystem [ 713.287921][ T1802] loop6: detected capacity change from 0 to 1024 [ 713.301224][ T1802] EXT4-fs: Ignoring removed i_version option [ 713.313723][ T1803] syzkaller0: entered promiscuous mode [ 713.314171][ T1802] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 713.330048][ T1803] syzkaller0: entered allmulticast mode [ 713.342590][ T1802] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 713.358824][ T1803] 9pnet_fd: Insufficient options for proto=fd [ 713.360271][ T1805] Cannot find set identified by id 0 to match [ 713.365265][ T1802] EXT4-fs (loop6): invalid journal inode [ 713.428612][ T1809] EXT4-fs: Ignoring removed i_version option [ 713.435092][ T1809] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 713.446529][ T1809] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 713.459121][ T1809] EXT4-fs (loop2): invalid journal inode [ 713.535495][ T1811] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 713.535495][ T1811] program syz.6.9264 not setting count and/or reply_len properly [ 713.561884][ T1805] loop1: p2 < > p3 p4 [ 713.562299][ T1807] loop0: p2 < > p3 p4 [ 713.572609][ T1805] loop1: p3 start 65535 is beyond EOD, truncated [ 713.579661][ T1805] loop1: p4 size 8192 extends beyond EOD, truncated [ 713.590639][ T1807] loop0: p3 start 65535 is beyond EOD, truncated [ 713.597027][ T1807] loop0: p4 size 8192 extends beyond EOD, truncated [ 713.697630][ T1822] EXT4-fs: Ignoring removed i_version option [ 713.704908][ T1822] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 713.714522][ T1822] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 713.728753][ T1822] EXT4-fs (loop1): invalid journal inode [ 713.809190][ T1829] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 713.809190][ T1829] program syz.1.9272 not setting count and/or reply_len properly [ 713.916513][ T1813] loop3: p2 < > p3 p4 [ 713.928649][ T1813] loop3: p3 start 65535 is beyond EOD, truncated [ 713.935086][ T1813] loop3: p4 size 8192 extends beyond EOD, truncated [ 714.089169][ T28] kauditd_printk_skb: 168 callbacks suppressed [ 714.089186][ T28] audit: type=1326 audit(1786971555.504:50591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.3.9278" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 714.158641][ T28] audit: type=1326 audit(1786971555.504:50592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.3.9278" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 714.227178][ T1842] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9278'. [ 714.229269][ T28] audit: type=1326 audit(1786971555.534:50593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.3.9278" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 714.270392][ T1848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9280'. [ 714.285986][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9280'. [ 714.295359][ T28] audit: type=1326 audit(1786971555.554:50594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.3.9278" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 714.321486][ T28] audit: type=1326 audit(1786971555.554:50595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.3.9278" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 714.347441][ T28] audit: type=1326 audit(1786971555.554:50596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.3.9278" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 714.373462][ T28] audit: type=1326 audit(1786971555.554:50597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.3.9278" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 714.408731][ T28] audit: type=1326 audit(1786971555.554:50598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.3.9278" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 714.444462][ T28] audit: type=1326 audit(1786971555.564:50599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.3.9278" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 714.481324][ T28] audit: type=1326 audit(1786971555.564:50600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.3.9278" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 714.704216][ T1831] FAT-fs (loop6): bogus number of reserved sectors [ 714.710803][ T1831] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 714.720114][ T1831] FAT-fs (loop6): Can't find a valid FAT filesystem [ 714.912122][ T1865] netlink: 'syz.6.9287': attribute type 13 has an invalid length. [ 714.936482][ T1866] netlink: 'syz.3.9286': attribute type 13 has an invalid length. [ 714.950040][ T1865] netlink: 'syz.6.9287': attribute type 27 has an invalid length. [ 714.965083][ T1866] netlink: 'syz.3.9286': attribute type 27 has an invalid length. [ 715.257662][ T1873] EXT4-fs: Ignoring removed i_version option [ 715.405077][ T1873] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 715.528532][ T1873] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 715.570657][ T1873] EXT4-fs (loop1): invalid journal inode [ 715.605979][ T1852] FAT-fs (loop0): bogus number of reserved sectors [ 715.613847][ T1852] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 715.625073][ T1852] FAT-fs (loop0): Can't find a valid FAT filesystem [ 715.728120][ T1882] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 715.728120][ T1882] program syz.1.9289 not setting count and/or reply_len properly [ 715.860825][ T1890] syzkaller0: entered promiscuous mode [ 715.866370][ T1890] syzkaller0: entered allmulticast mode [ 715.866861][ T1880] FAULT_INJECTION: forcing a failure. [ 715.866861][ T1880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 715.895855][ T1880] CPU: 0 UID: 0 PID: 1880 Comm: syz.0.9292 Not tainted syzkaller #0 PREEMPT(lazy) [ 715.895996][ T1880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 715.896010][ T1880] Call Trace: [ 715.896017][ T1880] [ 715.896025][ T1880] __dump_stack+0x1d/0x30 [ 715.896054][ T1880] dump_stack_lvl+0x95/0xd0 [ 715.896082][ T1880] dump_stack+0x15/0x1b [ 715.896164][ T1880] should_fail_ex+0x25e/0x270 [ 715.896218][ T1880] should_fail+0xb/0x20 [ 715.896256][ T1880] get_futex_key+0x12f/0xb10 [ 715.896294][ T1880] futex_wake+0x89/0x400 [ 715.896327][ T1880] do_futex+0x3f8/0x460 [ 715.896444][ T1880] mm_release+0x9f/0x180 [ 715.896466][ T1880] exit_mm_release+0x25/0x30 [ 715.896491][ T1880] exit_mm+0x37/0x1a0 [ 715.896543][ T1880] do_exit+0x438/0x1500 [ 715.896630][ T1880] ? mutex_unlock+0x81/0x90 [ 715.896670][ T1880] do_group_exit+0xfe/0x140 [ 715.896699][ T1880] ? get_signal+0xe00/0xf10 [ 715.896805][ T1880] get_signal+0xe07/0xf10 [ 715.896850][ T1880] arch_do_signal_or_restart+0x96/0x480 [ 715.896968][ T1880] exit_to_user_mode_loop+0x15d/0x8c0 [ 715.897007][ T1880] do_syscall_64+0x23c/0x3c0 [ 715.897093][ T1880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.897119][ T1880] RIP: 0033:0x7f7053cce0d9 [ 715.897137][ T1880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.897205][ T1880] RSP: 002b:00007f7052727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 715.897248][ T1880] RAX: fffffffffffffe00 RBX: 00007f7053f55fa0 RCX: 00007f7053cce0d9 [ 715.897269][ T1880] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 715.897283][ T1880] RBP: 00007f7052727090 R08: 0000000000000006 R09: 0000000000000000 [ 715.897297][ T1880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.897311][ T1880] R13: 00007f7053f56038 R14: 00007f7053f55fa0 R15: 00007fffb6764798 [ 715.897409][ T1880] [ 716.106803][ T1896] 9pnet_fd: Insufficient options for proto=fd [ 716.122804][ T1895] syzkaller0: entered promiscuous mode [ 716.134489][ T1895] syzkaller0: entered allmulticast mode [ 716.223477][ T1904] set_capacity_and_notify: 10 callbacks suppressed [ 716.223537][ T1904] loop1: detected capacity change from 0 to 136 [ 716.316137][ T1906] netlink: 'syz.6.9301': attribute type 13 has an invalid length. [ 716.325788][ T1906] netlink: 'syz.6.9301': attribute type 27 has an invalid length. [ 716.455659][ T1918] __nla_validate_parse: 6 callbacks suppressed [ 716.455675][ T1918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9305'. [ 716.870506][ T1927] loop1: detected capacity change from 0 to 1024 [ 716.881518][ T1927] EXT4-fs: Ignoring removed i_version option [ 716.894115][ T1927] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 716.910730][ T1930] FAULT_INJECTION: forcing a failure. [ 716.910730][ T1930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.914679][ T1927] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 716.937507][ T1927] EXT4-fs (loop1): invalid journal inode [ 716.943358][ T1930] CPU: 0 UID: 0 PID: 1930 Comm: syz.3.9309 Not tainted syzkaller #0 PREEMPT(lazy) [ 716.943384][ T1930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 716.943395][ T1930] Call Trace: [ 716.943401][ T1930] [ 716.943408][ T1930] __dump_stack+0x1d/0x30 [ 716.943494][ T1930] dump_stack_lvl+0x95/0xd0 [ 716.943579][ T1930] dump_stack+0x15/0x1b [ 716.943708][ T1930] should_fail_ex+0x25e/0x270 [ 716.943752][ T1930] should_fail+0xb/0x20 [ 716.943817][ T1930] should_fail_usercopy+0x1a/0x20 [ 716.943911][ T1930] _copy_from_iter+0xcc/0xe70 [ 716.943938][ T1930] ? __alloc_skb+0x511/0x6f0 [ 716.943994][ T1930] ? __alloc_skb+0x205/0x6f0 [ 716.944053][ T1930] netlink_sendmsg+0x4a4/0x6f0 [ 716.944171][ T1930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.944271][ T1930] ____sys_sendmsg+0x532/0x580 [ 716.944295][ T1930] ___sys_sendmsg+0x195/0x1e0 [ 716.944385][ T1930] __x64_sys_sendmsg+0xd4/0x160 [ 716.944465][ T1930] x64_sys_call+0x194c/0x3020 [ 716.944500][ T1930] do_syscall_64+0x136/0x3c0 [ 716.944538][ T1930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.944583][ T1930] RIP: 0033:0x7f5fc05fe0d9 [ 716.944600][ T1930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.944620][ T1930] RSP: 002b:00007f5fbf057028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.944649][ T1930] RAX: ffffffffffffffda RBX: 00007f5fc0885fa0 RCX: 00007f5fc05fe0d9 [ 716.944669][ T1930] RDX: 0000000000000080 RSI: 0000200000000540 RDI: 0000000000000003 [ 716.944689][ T1930] RBP: 00007f5fbf057090 R08: 0000000000000000 R09: 0000000000000000 [ 716.944763][ T1930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.944781][ T1930] R13: 00007f5fc0886038 R14: 00007f5fc0885fa0 R15: 00007ffe6d265578 [ 716.944809][ T1930] [ 717.294027][ T1931] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 717.294027][ T1931] program syz.1.9308 not setting count and/or reply_len properly [ 717.474566][ T1939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9312'. [ 717.587799][ T1943] loop3: detected capacity change from 0 to 136 [ 717.608769][ T1943] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9313'. [ 717.711039][ T1948] loop6: detected capacity change from 0 to 2048 [ 717.782628][ T1950] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 717.782628][ T1950] program syz.1.9316 not setting count and/or reply_len properly [ 717.852726][ T1948] loop6: p2 < > p3 p4 [ 717.857850][ T1948] loop6: p3 start 65535 is beyond EOD, truncated [ 717.869210][ T1948] loop6: p4 size 8192 extends beyond EOD, truncated [ 717.905141][ T1954] syzkaller0: entered promiscuous mode [ 717.924531][ T1956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9318'. [ 717.959065][ T1954] syzkaller0: entered allmulticast mode [ 718.104613][ T1936] loop0: detected capacity change from 0 to 128 [ 718.124596][ T1936] FAT-fs (loop0): bogus number of reserved sectors [ 718.135238][ T1936] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 718.149264][ T1936] FAT-fs (loop0): Can't find a valid FAT filesystem [ 718.168330][ T1966] loop2: detected capacity change from 0 to 136 [ 718.369067][ T1966] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9321'. [ 718.772597][ T1980] netlink: 'syz.2.9323': attribute type 21 has an invalid length. [ 718.780937][ T1980] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9323'. [ 718.845529][ T1979] loop0: detected capacity change from 0 to 136 [ 718.882580][ T1979] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9325'. [ 718.914878][ T1985] loop6: detected capacity change from 0 to 1024 [ 718.922844][ T1985] EXT4-fs: Ignoring removed i_version option [ 718.929522][ T1985] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 718.939549][ T1985] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 718.950440][ T1985] EXT4-fs (loop6): invalid journal inode [ 718.979724][ T1991] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9328'. [ 719.006136][ T1990] syzkaller0: entered promiscuous mode [ 719.011668][ T1990] syzkaller0: entered allmulticast mode [ 719.082774][ T1992] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 719.082774][ T1992] program syz.6.9327 not setting count and/or reply_len properly [ 719.102679][ T28] kauditd_printk_skb: 292 callbacks suppressed [ 719.102696][ T28] audit: type=1400 audit(1786971560.514:50893): avc: denied { prog_run } for pid=1984 comm="syz.6.9327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 719.196627][ T1998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9331'. [ 719.931619][ T2006] loop6: detected capacity change from 0 to 512 [ 719.965818][ T2006] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 720.002217][ T2011] loop1: detected capacity change from 0 to 512 [ 720.009981][ T2011] EXT4-fs: Ignoring removed oldalloc option [ 720.013959][ T2006] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.9334: iget: bad i_size value: 38620345925642 [ 720.071863][ T2011] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.9336: Parent and EA inode have the same ino 15 [ 720.086544][ T2006] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 720.086707][ T2006] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.9334: couldn't read orphan inode 15 (err -117) [ 720.095932][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 720.095968][ C0] EXT4-fs (loop6): initial error at time 1786971561: ext4_orphan_get:1399: inode 15 [ 720.096006][ C0] EXT4-fs (loop6): last error at time 1786971561: ext4_orphan_get:1399: inode 15 [ 720.121181][ T2011] loop1: lost filesystem error report for type 5 error -117 [ 720.129091][ T2006] loop6: lost filesystem error report for type 5 error -117 [ 720.140895][ T2006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.142608][ T2016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9335'. [ 720.170482][ T28] audit: type=1400 audit(1786971561.564:50894): avc: denied { write } for pid=2003 comm="syz.6.9334" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 720.192388][ T2011] EXT4-fs (loop1): Remounting filesystem read-only [ 720.198943][ T2011] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -30) [ 720.207909][ T2011] EXT4-fs (loop1): 1 orphan inode deleted [ 720.214056][ T2011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.258437][ T2007] netlink: 'syz.3.9335': attribute type 2 has an invalid length. [ 720.361363][T31692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.442247][T32406] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.479664][ T28] audit: type=1326 audit(1786971561.854:50895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2028 comm="syz.0.9339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 720.528270][ T2031] syzkaller0: entered promiscuous mode [ 720.533811][ T2031] syzkaller0: entered allmulticast mode [ 720.539736][ T28] audit: type=1326 audit(1786971561.854:50896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2028 comm="syz.0.9339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 720.599491][ T2034] 9p: Could not find request transport: fd0x0000000000000003 [ 720.609937][ T28] audit: type=1326 audit(1786971561.854:50897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2028 comm="syz.0.9339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 720.646554][ T2002] FAT-fs (loop2): bogus number of reserved sectors [ 720.681301][ T2002] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 720.697686][ T28] audit: type=1326 audit(1786971561.984:50898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2028 comm="syz.0.9339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 720.723296][ T2002] FAT-fs (loop2): Can't find a valid FAT filesystem [ 720.767986][ T28] audit: type=1326 audit(1786971561.984:50899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2028 comm="syz.0.9339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 720.815127][ T28] audit: type=1326 audit(1786971561.984:50900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2028 comm="syz.0.9339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 720.842070][ T28] audit: type=1326 audit(1786971561.984:50901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2028 comm="syz.0.9339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 720.867635][ T28] audit: type=1326 audit(1786971561.984:50902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2028 comm="syz.0.9339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053cce0d9 code=0x7ffc0000 [ 720.894407][ T2037] lo: Caught tx_queue_len zero misconfig [ 720.900121][ T2037] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 720.912544][ T2049] EXT4-fs: Ignoring removed i_version option [ 720.925968][ T2037] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 720.937922][ T2049] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 720.949947][ T2049] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 720.962842][ T2049] EXT4-fs (loop2): invalid journal inode [ 720.991324][ T2049] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 720.991324][ T2049] program syz.2.9345 not setting count and/or reply_len properly [ 721.062437][ T2057] FAULT_INJECTION: forcing a failure. [ 721.062437][ T2057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.085547][ T2057] CPU: 1 UID: 0 PID: 2057 Comm: syz.1.9349 Not tainted syzkaller #0 PREEMPT(lazy) [ 721.085586][ T2057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 721.085602][ T2057] Call Trace: [ 721.085610][ T2057] [ 721.085621][ T2057] __dump_stack+0x1d/0x30 [ 721.085723][ T2057] dump_stack_lvl+0x95/0xd0 [ 721.085743][ T2057] dump_stack+0x15/0x1b [ 721.085761][ T2057] should_fail_ex+0x25e/0x270 [ 721.085871][ T2057] should_fail+0xb/0x20 [ 721.085908][ T2057] should_fail_usercopy+0x1a/0x20 [ 721.085968][ T2057] _copy_from_iter+0xcc/0xe70 [ 721.086018][ T2057] ? __alloc_skb+0x511/0x6f0 [ 721.086060][ T2057] ? __alloc_skb+0x205/0x6f0 [ 721.086225][ T2057] netlink_sendmsg+0x4a4/0x6f0 [ 721.086270][ T2057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.086300][ T2057] ____sys_sendmsg+0x532/0x580 [ 721.086324][ T2057] ___sys_sendmsg+0x195/0x1e0 [ 721.086435][ T2057] __x64_sys_sendmsg+0xd4/0x160 [ 721.086469][ T2057] x64_sys_call+0x194c/0x3020 [ 721.086503][ T2057] do_syscall_64+0x136/0x3c0 [ 721.086562][ T2057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.086584][ T2057] RIP: 0033:0x7f32b6fee0d9 [ 721.086604][ T2057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.086659][ T2057] RSP: 002b:00007f32b5a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.086745][ T2057] RAX: ffffffffffffffda RBX: 00007f32b7275fa0 RCX: 00007f32b6fee0d9 [ 721.086763][ T2057] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 721.086777][ T2057] RBP: 00007f32b5a47090 R08: 0000000000000000 R09: 0000000000000000 [ 721.086815][ T2057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.086828][ T2057] R13: 00007f32b7276038 R14: 00007f32b7275fa0 R15: 00007ffe8b782758 [ 721.086866][ T2057] [ 721.291576][ T2059] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec028, mo2=0002] [ 721.319028][ T2059] System zones: 0-1, 3-12 [ 721.324008][ T2059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.353975][ T2059] SELinux: Context : is not valid (left unmapped). [ 721.448726][ T2074] set_capacity_and_notify: 5 callbacks suppressed [ 721.448740][ T2074] loop2: detected capacity change from 0 to 136 [ 721.463198][T32428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.516182][ T2074] __nla_validate_parse: 1 callbacks suppressed [ 721.516197][ T2074] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9352'. [ 721.768968][ T2086] loop6: detected capacity change from 0 to 2048 [ 722.222215][ T2086] loop6: p2 < > p3 p4 [ 722.227847][ T2086] loop6: p3 start 65535 is beyond EOD, truncated [ 722.246939][ T2086] loop6: p4 size 8192 extends beyond EOD, truncated [ 722.342339][ T2064] loop1: detected capacity change from 0 to 128 [ 722.353200][ T2064] FAT-fs (loop1): bogus number of reserved sectors [ 722.362813][ T2064] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 722.372519][ T2064] FAT-fs (loop1): Can't find a valid FAT filesystem [ 722.401337][ T2102] loop3: detected capacity change from 0 to 1024 [ 722.443525][ T2105] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 722.443525][ T2105] program syz.1.9362 not setting count and/or reply_len properly [ 722.461785][ T2102] EXT4-fs: Ignoring removed i_version option [ 722.472771][ T2102] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 722.497327][ T2102] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 722.516152][ T2102] EXT4-fs (loop3): invalid journal inode [ 722.539504][ T2112] loop0: detected capacity change from 0 to 512 [ 722.546197][ T2112] EXT4-fs: Ignoring removed nobh option [ 722.555100][ T2099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9359'. [ 722.564033][ T2099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9359'. [ 722.603238][ T2102] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 722.603238][ T2102] program syz.3.9361 not setting count and/or reply_len properly [ 722.692896][ T2112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.705607][ T2112] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 722.759330][ T2112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9364'. [ 722.768913][ T2122] netlink: 'syz.2.9367': attribute type 13 has an invalid length. [ 722.776978][ T2122] netlink: 'syz.2.9367': attribute type 27 has an invalid length. [ 722.786772][ T2112] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.9364: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 722.934922][T32428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.977439][ T2128] loop0: detected capacity change from 0 to 512 [ 722.998635][ T2128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.011381][ T2128] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.032222][ T2128] netlink: 'syz.0.9369': attribute type 2 has an invalid length. [ 723.121297][ T2132] loop3: detected capacity change from 0 to 2048 [ 723.277705][ T2128] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.9369: iget: bad i_size value: 2533274857506816 [ 723.309189][ T2132] loop3: p2 < > p3 p4 [ 723.314325][ T2132] loop3: p3 start 65535 is beyond EOD, truncated [ 723.327000][ T2132] loop3: p4 size 8192 extends beyond EOD, truncated [ 723.344748][ T2980] loop3: p2 < > p3 p4 [ 723.349600][ T2980] loop3: p3 start 65535 is beyond EOD, truncated [ 723.364480][ T2980] loop3: p4 size 8192 extends beyond EOD, truncated [ 723.398701][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 723.402654][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 723.428151][T32428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.448043][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 723.449488][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 723.844253][ T2159] FAULT_INJECTION: forcing a failure. [ 723.844253][ T2159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 723.861418][ T2175] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 723.874147][ T2159] CPU: 1 UID: 0 PID: 2159 Comm: syz.1.9373 Not tainted syzkaller #0 PREEMPT(lazy) [ 723.874186][ T2159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 723.874205][ T2159] Call Trace: [ 723.874231][ T2159] [ 723.874242][ T2159] __dump_stack+0x1d/0x30 [ 723.874277][ T2159] dump_stack_lvl+0x95/0xd0 [ 723.874308][ T2159] dump_stack+0x15/0x1b [ 723.874350][ T2159] should_fail_ex+0x25e/0x270 [ 723.874385][ T2159] should_fail_alloc_page+0xf2/0x100 [ 723.874421][ T2159] __alloc_frozen_pages_noprof+0x108/0x350 [ 723.874472][ T2159] alloc_pages_mpol+0xa9/0x1d0 [ 723.874575][ T2159] alloc_pages_noprof+0x8f/0x140 [ 723.874613][ T2159] alloc_skb_with_frags+0x1c9/0x3d0 [ 723.874668][ T2159] tls_decrypt_sg+0x233/0x1ad0 [ 723.874712][ T2159] ? skb_copy_bits+0x3d4/0x540 [ 723.874812][ T2159] ? __copy_skb_header+0x22f/0x2b0 [ 723.874841][ T2159] ? skb_copy_header+0x170/0x190 [ 723.874910][ T2159] ? tls_strp_load_anchor_with_queue+0x18e/0x1d0 [ 723.874936][ T2159] tls_decrypt_sw+0x4b/0x470 [ 723.874999][ T2159] tls_rx_one_record+0x112/0x7d0 [ 723.875047][ T2159] ? __pfx_woken_wake_function+0x10/0x10 [ 723.875152][ T2159] tls_sw_splice_read+0x1dc/0x3d0 [ 723.875183][ T2159] ? __pfx_tls_sw_splice_read+0x10/0x10 [ 723.875221][ T2159] sock_splice_read+0x76/0xb0 [ 723.875298][ T2159] ? __pfx_sock_splice_read+0x10/0x10 [ 723.875338][ T2159] splice_file_to_pipe+0x23f/0x390 [ 723.875373][ T2159] do_splice+0xc07/0x1050 [ 723.875488][ T2159] ? proc_fail_nth_write+0x13b/0x160 [ 723.875514][ T2159] ? __rcu_read_unlock+0x4e/0x70 [ 723.875577][ T2159] ? __fget_files+0x184/0x1c0 [ 723.875631][ T2159] __se_sys_splice+0x26c/0x3a0 [ 723.875687][ T2159] __x64_sys_splice+0x78/0x90 [ 723.875768][ T2159] x64_sys_call+0x16ef/0x3020 [ 723.875806][ T2159] do_syscall_64+0x136/0x3c0 [ 723.875865][ T2159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.875898][ T2159] RIP: 0033:0x7f32b6fee0d9 [ 723.875922][ T2159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.875944][ T2159] RSP: 002b:00007f32b5a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 723.875967][ T2159] RAX: ffffffffffffffda RBX: 00007f32b7275fa0 RCX: 00007f32b6fee0d9 [ 723.876094][ T2159] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 723.876109][ T2159] RBP: 00007f32b5a47090 R08: 0000000000000f3a R09: 0000000000000000 [ 723.876124][ T2159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.876138][ T2159] R13: 00007f32b7276038 R14: 00007f32b7275fa0 R15: 00007ffe8b782758 [ 723.876168][ T2159] [ 723.928928][ T2177] sctp: [Deprecated]: syz.0.9381 (pid 2177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 723.928928][ T2177] Use struct sctp_sack_info instead [ 724.191385][ T2183] FAULT_INJECTION: forcing a failure. [ 724.191385][ T2183] name failslab, interval 1, probability 0, space 0, times 0 [ 724.204492][ T2183] CPU: 0 UID: 0 PID: 2183 Comm: syz.3.9383 Not tainted syzkaller #0 PREEMPT(lazy) [ 724.204521][ T2183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.204584][ T2183] Call Trace: [ 724.204593][ T2183] [ 724.204603][ T2183] __dump_stack+0x1d/0x30 [ 724.204635][ T2183] dump_stack_lvl+0x95/0xd0 [ 724.204731][ T2183] dump_stack+0x15/0x1b [ 724.204758][ T2183] should_fail_ex+0x25e/0x270 [ 724.204874][ T2183] should_failslab+0x8c/0xb0 [ 724.204984][ T2183] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 724.205051][ T2183] ? task_exec_state_copy+0x5b/0x180 [ 724.205148][ T2183] ? task_exec_state_copy+0x5b/0x180 [ 724.205189][ T2183] ? mod_lruvec_state+0x10c/0x120 [ 724.205234][ T2183] task_exec_state_copy+0x5b/0x180 [ 724.205276][ T2183] copy_exec_state+0x36/0xd0 [ 724.205385][ T2183] copy_process+0x5b4/0x2310 [ 724.205414][ T2183] ? rb_insert_color+0x6e/0x2a0 [ 724.205459][ T2183] ? enqueue_hrtimer+0xa0/0x170 [ 724.205503][ T2183] kernel_clone+0x1c0/0x5f0 [ 724.205625][ T2183] __x64_sys_clone+0x143/0x180 [ 724.205670][ T2183] x64_sys_call+0x1222/0x3020 [ 724.205770][ T2183] do_syscall_64+0x136/0x3c0 [ 724.205809][ T2183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.205838][ T2183] RIP: 0033:0x7f5fc05fe0d9 [ 724.205900][ T2183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.205920][ T2183] RSP: 002b:00007f5fbf056fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 724.205957][ T2183] RAX: ffffffffffffffda RBX: 00007f5fc0885fa0 RCX: 00007f5fc05fe0d9 [ 724.205975][ T2183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040100000 [ 724.205990][ T2183] RBP: 00007f5fbf057090 R08: 0000000000000000 R09: 0000000000000000 [ 724.206027][ T2183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 724.206044][ T2183] R13: 00007f5fc0886038 R14: 00007f5fc0885fa0 R15: 00007ffe6d265578 [ 724.206073][ T2183] [ 724.411263][ T2188] Cannot find set identified by id 0 to match [ 724.417527][ T2185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9385'. [ 724.494204][ T2195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2195 comm=syz.2.9389 [ 724.526711][ T2191] lo speed is unknown, defaulting to 1000 [ 724.532789][ T2195] loop2: detected capacity change from 0 to 512 [ 724.542725][ T2195] EXT4-fs (loop2): orphan cleanup on readonly fs [ 724.549099][ T2195] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 724.557668][ T2195] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 724.572370][ T2195] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.9389: attempt to clear invalid blocks 33619980 len 1 [ 724.585860][ T2195] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 724.586070][ T2195] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.9389: invalid indirect mapped block 1819239214 (level 0) [ 724.609087][ T2195] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 724.609294][ T2195] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.9389: invalid indirect mapped block 1819239214 (level 1) [ 724.633346][ T2195] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 724.633585][ T2195] EXT4-fs (loop2): 1 truncate cleaned up [ 724.648436][ C1] EXT4-fs (loop2): error count since last fsck: 4 [ 724.648458][ C1] EXT4-fs (loop2): initial error at time 1786971565: ext4_mb_generate_buddy:1317 [ 724.648495][ C1] EXT4-fs (loop2): last error at time 1786971565: ext4_free_branches:1023: inode 13 [ 724.674144][ T2195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 724.753851][T29067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.786603][ T28] kauditd_printk_skb: 181 callbacks suppressed [ 724.786630][ T28] audit: type=1326 audit(1786971566.174:51084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.9393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164ca5e0d9 code=0x7ffc0000 [ 724.837815][ T28] audit: type=1326 audit(1786971566.174:51085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.9393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164ca5e0d9 code=0x7ffc0000 [ 724.852949][ T2209] loop2: detected capacity change from 0 to 128 [ 724.888338][ T2209] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 724.893874][ T28] audit: type=1326 audit(1786971566.174:51086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.9393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164ca5e0d9 code=0x7ffc0000 [ 724.900922][ T2209] ext4 filesystem being mounted at /348/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 724.940980][ T2209] tc_dump_action: action bad kind [ 724.943872][ T28] audit: type=1326 audit(1786971566.174:51087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.9393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f164ca1e90e code=0x7ffc0000 [ 724.971497][ T28] audit: type=1326 audit(1786971566.174:51088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.9393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164ca5e0d9 code=0x7ffc0000 [ 725.001614][ T28] audit: type=1326 audit(1786971566.174:51089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.9393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164ca5e0d9 code=0x7ffc0000 [ 725.027161][ T28] audit: type=1326 audit(1786971566.174:51090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.9393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164ca5e0d9 code=0x7ffc0000 [ 725.053106][ T28] audit: type=1326 audit(1786971566.174:51091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.9393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164ca5e0d9 code=0x7ffc0000 [ 725.078865][ T28] audit: type=1326 audit(1786971566.174:51092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.9393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f164ca5e0d9 code=0x7ffc0000 [ 725.104286][ T28] audit: type=1326 audit(1786971566.174:51093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.2.9393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164ca5e0d9 code=0x7ffc0000 [ 725.630350][T29067] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 725.663644][ T2217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9397'. [ 725.688577][ T2221] loop2: detected capacity change from 0 to 128 [ 725.723998][ T2223] Cannot find set identified by id 0 to match [ 725.735819][ T2221] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 725.771919][ T2221] ext4 filesystem being mounted at /349/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 725.790313][ T2221] tc_dump_action: action bad kind [ 725.821639][T29067] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 725.835114][ T2231] FAULT_INJECTION: forcing a failure. [ 725.835114][ T2231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.848249][ T2231] CPU: 1 UID: 0 PID: 2231 Comm: syz.1.9401 Not tainted syzkaller #0 PREEMPT(lazy) [ 725.848280][ T2231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 725.848293][ T2231] Call Trace: [ 725.848300][ T2231] [ 725.848308][ T2231] __dump_stack+0x1d/0x30 [ 725.848375][ T2231] dump_stack_lvl+0x95/0xd0 [ 725.848402][ T2231] dump_stack+0x15/0x1b [ 725.848422][ T2231] should_fail_ex+0x25e/0x270 [ 725.848538][ T2231] should_fail+0xb/0x20 [ 725.848704][ T2231] should_fail_usercopy+0x1a/0x20 [ 725.848810][ T2231] _copy_from_iter+0xcc/0xe70 [ 725.848865][ T2231] ? __alloc_skb+0x511/0x6f0 [ 725.848979][ T2231] ? __alloc_skb+0x205/0x6f0 [ 725.849021][ T2231] netlink_sendmsg+0x4a4/0x6f0 [ 725.849101][ T2231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.849142][ T2231] ____sys_sendmsg+0x532/0x580 [ 725.849175][ T2231] ___sys_sendmsg+0x195/0x1e0 [ 725.849215][ T2231] __x64_sys_sendmsg+0xd4/0x160 [ 725.849301][ T2231] x64_sys_call+0x194c/0x3020 [ 725.849355][ T2231] do_syscall_64+0x136/0x3c0 [ 725.849385][ T2231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.849478][ T2231] RIP: 0033:0x7f32b6fee0d9 [ 725.849509][ T2231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.849535][ T2231] RSP: 002b:00007f32b5a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.849563][ T2231] RAX: ffffffffffffffda RBX: 00007f32b7275fa0 RCX: 00007f32b6fee0d9 [ 725.849633][ T2231] RDX: ea5bc50b6199d77e RSI: 0000200000000000 RDI: 0000000000000003 [ 725.849648][ T2231] RBP: 00007f32b5a47090 R08: 0000000000000000 R09: 0000000000000000 [ 725.849664][ T2231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.849680][ T2231] R13: 00007f32b7276038 R14: 00007f32b7275fa0 R15: 00007ffe8b782758 [ 725.849739][ T2231] [ 726.094173][ T2242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9406'. [ 726.109245][ T2244] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9407'. [ 726.118398][ T2244] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9407'. [ 726.127367][ T2246] tunl0: Caught tx_queue_len zero misconfig [ 726.143757][ T2242] EXT4-fs: Ignoring removed nobh option [ 726.149458][ T2242] EXT4-fs: Ignoring removed bh option [ 726.154946][ T2242] EXT4-fs: Ignoring removed nobh option [ 726.162987][ T2242] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 726.298036][ T2242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.321604][ T2246] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9405'. [ 726.367877][T31692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.660646][ T2264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9412'. [ 726.776328][ T2269] FAULT_INJECTION: forcing a failure. [ 726.776328][ T2269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.797417][ T2269] CPU: 1 UID: 0 PID: 2269 Comm: syz.0.9414 Not tainted syzkaller #0 PREEMPT(lazy) [ 726.797529][ T2269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 726.797542][ T2269] Call Trace: [ 726.797548][ T2269] [ 726.797555][ T2269] __dump_stack+0x1d/0x30 [ 726.797645][ T2269] dump_stack_lvl+0x95/0xd0 [ 726.797671][ T2269] dump_stack+0x15/0x1b [ 726.797696][ T2269] should_fail_ex+0x25e/0x270 [ 726.797727][ T2269] should_fail+0xb/0x20 [ 726.797800][ T2269] should_fail_usercopy+0x1a/0x20 [ 726.797834][ T2269] _copy_from_iter+0xcc/0xe70 [ 726.797857][ T2269] ? __alloc_skb+0x511/0x6f0 [ 726.797900][ T2269] ? __alloc_skb+0x205/0x6f0 [ 726.797938][ T2269] netlink_sendmsg+0x4a4/0x6f0 [ 726.797967][ T2269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.798001][ T2269] ____sys_sendmsg+0x532/0x580 [ 726.798025][ T2269] ___sys_sendmsg+0x195/0x1e0 [ 726.798060][ T2269] __x64_sys_sendmsg+0xd4/0x160 [ 726.798123][ T2269] x64_sys_call+0x194c/0x3020 [ 726.798152][ T2269] do_syscall_64+0x136/0x3c0 [ 726.798175][ T2269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.798312][ T2269] RIP: 0033:0x7f7053cce0d9 [ 726.798330][ T2269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.798417][ T2269] RSP: 002b:00007f7052727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.798437][ T2269] RAX: ffffffffffffffda RBX: 00007f7053f55fa0 RCX: 00007f7053cce0d9 [ 726.798517][ T2269] RDX: 000000000000c050 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 726.798530][ T2269] RBP: 00007f7052727090 R08: 0000000000000000 R09: 0000000000000000 [ 726.798542][ T2269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.798553][ T2269] R13: 00007f7053f56038 R14: 00007f7053f55fa0 R15: 00007fffb6764798 [ 726.798571][ T2269] [ 727.000690][ T2271] set_capacity_and_notify: 1 callbacks suppressed [ 727.000705][ T2271] loop6: detected capacity change from 0 to 512 [ 727.018684][ T2271] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 727.072832][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.088382][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.109585][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.133227][ T2277] FAULT_INJECTION: forcing a failure. [ 727.133227][ T2277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.147858][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.172496][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.190625][ T2277] CPU: 0 UID: 0 PID: 2277 Comm: syz.3.9418 Not tainted syzkaller #0 PREEMPT(lazy) [ 727.190654][ T2277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 727.190666][ T2277] Call Trace: [ 727.190672][ T2277] [ 727.190679][ T2277] __dump_stack+0x1d/0x30 [ 727.190788][ T2277] dump_stack_lvl+0x95/0xd0 [ 727.190824][ T2277] dump_stack+0x15/0x1b [ 727.190842][ T2277] should_fail_ex+0x25e/0x270 [ 727.190923][ T2277] should_fail+0xb/0x20 [ 727.190951][ T2277] should_fail_usercopy+0x1a/0x20 [ 727.190989][ T2277] _copy_to_user+0x20/0xa0 [ 727.191090][ T2277] simple_read_from_buffer+0xb5/0x130 [ 727.191180][ T2277] proc_fail_nth_read+0x10e/0x150 [ 727.191210][ T2277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.191238][ T2277] vfs_read+0x18e/0x7c0 [ 727.191332][ T2277] ? __rcu_read_unlock+0x4e/0x70 [ 727.191364][ T2277] ? __fget_files+0x184/0x1c0 [ 727.191391][ T2277] ? mutex_lock+0x57/0x90 [ 727.191443][ T2277] ksys_read+0xdc/0x1a0 [ 727.191463][ T2277] __x64_sys_read+0x40/0x50 [ 727.191481][ T2277] x64_sys_call+0x2886/0x3020 [ 727.191505][ T2277] do_syscall_64+0x136/0x3c0 [ 727.191536][ T2277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.191589][ T2277] RIP: 0033:0x7f5fc05be90e [ 727.191606][ T2277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 727.191626][ T2277] RSP: 002b:00007f5fbf056fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 727.191647][ T2277] RAX: ffffffffffffffda RBX: 00007f5fbf0576c0 RCX: 00007f5fc05be90e [ 727.191694][ T2277] RDX: 000000000000000f RSI: 00007f5fbf0570a0 RDI: 0000000000000007 [ 727.191708][ T2277] RBP: 00007f5fbf057090 R08: 0000000000000000 R09: 0000000000000000 [ 727.191721][ T2277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.191735][ T2277] R13: 00007f5fc0886038 R14: 00007f5fc0885fa0 R15: 00007ffe6d265578 [ 727.191756][ T2277] [ 727.193743][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.407247][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.407400][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.407641][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.407762][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.408009][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.408083][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.408321][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.408406][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.408463][ T2271] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 727.408562][ T2271] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 727.689950][ T2290] FAULT_INJECTION: forcing a failure. [ 727.689950][ T2290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 727.811699][ T2290] CPU: 1 UID: 0 PID: 2290 Comm: syz.6.9421 Not tainted syzkaller #0 PREEMPT(lazy) [ 727.811820][ T2290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 727.811838][ T2290] Call Trace: [ 727.811847][ T2290] [ 727.811857][ T2290] __dump_stack+0x1d/0x30 [ 727.811896][ T2290] dump_stack_lvl+0x95/0xd0 [ 727.811968][ T2290] dump_stack+0x15/0x1b [ 727.811995][ T2290] should_fail_ex+0x25e/0x270 [ 727.812038][ T2290] should_fail_alloc_page+0xf2/0x100 [ 727.812128][ T2290] __alloc_frozen_pages_noprof+0x108/0x350 [ 727.812159][ T2290] alloc_pages_mpol+0xa9/0x1d0 [ 727.812233][ T2290] alloc_pages_noprof+0x8f/0x140 [ 727.812277][ T2290] __pud_alloc+0x47/0x460 [ 727.812318][ T2290] handle_mm_fault+0x1e22/0x2da0 [ 727.812365][ T2290] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 727.812443][ T2290] do_user_addr_fault+0x402/0x1060 [ 727.812640][ T2290] exc_page_fault+0x62/0xa0 [ 727.812659][ T2290] asm_exc_page_fault+0x26/0x30 [ 727.812678][ T2290] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 727.812801][ T2290] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 20 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 727.812820][ T2290] RSP: 0018:ffffc90002a8fd70 EFLAGS: 00050212 [ 727.812836][ T2290] RAX: ffff88810200adb0 RBX: 0000000000000010 RCX: 0000000000000010 [ 727.812849][ T2290] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffc90002a8fe00 [ 727.812882][ T2290] RBP: 0000000000000010 R08: 000000000000049f R09: 0000000000000000 [ 727.812910][ T2290] R10: 0001c90002a8fe00 R11: 0001c90002a8fe0f R12: 0000000000000010 [ 727.812934][ T2290] R13: 0000200000000200 R14: ffffc90002a8fe00 R15: 0000200000000200 [ 727.812960][ T2290] _copy_from_user+0x6f/0xb0 [ 727.812987][ T2290] __sys_sendto+0x1b5/0x470 [ 727.813037][ T2290] __x64_sys_sendto+0x76/0x90 [ 727.813099][ T2290] x64_sys_call+0x2d35/0x3020 [ 727.813126][ T2290] do_syscall_64+0x136/0x3c0 [ 727.813203][ T2290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.813230][ T2290] RIP: 0033:0x7ff0dc64e0d9 [ 727.813245][ T2290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.813284][ T2290] RSP: 002b:00007ff0db0a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 727.813306][ T2290] RAX: ffffffffffffffda RBX: 00007ff0dc8d5fa0 RCX: 00007ff0dc64e0d9 [ 727.813319][ T2290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 727.813330][ T2290] RBP: 00007ff0db0a7090 R08: 0000200000000200 R09: 0000000000000010 [ 727.813343][ T2290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.813354][ T2290] R13: 00007ff0dc8d6038 R14: 00007ff0dc8d5fa0 R15: 00007ffcdb2c4f08 [ 727.813375][ T2290] [ 728.099573][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9422'. [ 728.108688][ T2292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9422'. [ 728.132746][ T2292] loop2: detected capacity change from 0 to 128 [ 728.144368][ T2294] tmpfs: Bad value for 'mpol' [ 728.149788][ T2294] unsupported nlmsg_type 40 [ 728.160549][ T2294] loop3: detected capacity change from 0 to 1024 [ 728.170753][ T2292] syz.2.9422: attempt to access beyond end of device [ 728.170753][ T2292] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 728.206294][ T2292] syz.2.9422: attempt to access beyond end of device [ 728.206294][ T2292] loop2: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 728.225959][ T2292] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 728.236549][ T2294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 728.249211][ T2292] syz.2.9422: attempt to access beyond end of device [ 728.249211][ T2292] loop2: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 728.268501][ T2294] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.281532][ T2292] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 728.290122][ T2292] syz.2.9422: attempt to access beyond end of device [ 728.290122][ T2292] loop2: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 728.303952][ T2292] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 728.304406][ T2294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 728.312859][ T2292] syz.2.9422: attempt to access beyond end of device [ 728.312859][ T2292] loop2: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 728.387320][ T2308] FAULT_INJECTION: forcing a failure. [ 728.387320][ T2308] name failslab, interval 1, probability 0, space 0, times 0 [ 728.439190][ T2308] CPU: 0 UID: 0 PID: 2308 Comm: syz.1.9426 Not tainted syzkaller #0 PREEMPT(lazy) [ 728.439224][ T2308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 728.439257][ T2308] Call Trace: [ 728.439263][ T2308] [ 728.439270][ T2308] __dump_stack+0x1d/0x30 [ 728.439295][ T2308] dump_stack_lvl+0x95/0xd0 [ 728.439315][ T2308] dump_stack+0x15/0x1b [ 728.439334][ T2308] should_fail_ex+0x25e/0x270 [ 728.439382][ T2308] ? rxrpc_lookup_local+0x2a0/0xca0 [ 728.439418][ T2308] should_failslab+0x8c/0xb0 [ 728.439448][ T2308] __kmalloc_cache_noprof+0x7b/0x3d0 [ 728.439482][ T2308] ? rxrpc_lookup_local+0x2a0/0xca0 [ 728.439581][ T2308] rxrpc_lookup_local+0x2a0/0xca0 [ 728.439620][ T2308] ? selinux_socket_sendmsg+0x2e2/0x410 [ 728.439650][ T2308] ? lock_sock_nested+0x84/0x110 [ 728.439737][ T2308] rxrpc_sendmsg+0x2e2/0x580 [ 728.439772][ T2308] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 728.439807][ T2308] ____sys_sendmsg+0x532/0x580 [ 728.439835][ T2308] ___sys_sendmsg+0x195/0x1e0 [ 728.439924][ T2308] __x64_sys_sendmsg+0xd4/0x160 [ 728.440024][ T2308] x64_sys_call+0x194c/0x3020 [ 728.440049][ T2308] do_syscall_64+0x136/0x3c0 [ 728.440082][ T2308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.440166][ T2308] RIP: 0033:0x7f32b6fee0d9 [ 728.440182][ T2308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.440264][ T2308] RSP: 002b:00007f32b5a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.440284][ T2308] RAX: ffffffffffffffda RBX: 00007f32b7275fa0 RCX: 00007f32b6fee0d9 [ 728.440299][ T2308] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 728.440316][ T2308] RBP: 00007f32b5a47090 R08: 0000000000000000 R09: 0000000000000000 [ 728.440330][ T2308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.440341][ T2308] R13: 00007f32b7276038 R14: 00007f32b7275fa0 R15: 00007ffe8b782758 [ 728.440361][ T2308] [ 728.666002][ T2315] FAULT_INJECTION: forcing a failure. [ 728.666002][ T2315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.680643][ T2315] CPU: 0 UID: 0 PID: 2315 Comm: syz.1.9430 Not tainted syzkaller #0 PREEMPT(lazy) [ 728.680697][ T2315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 728.680709][ T2315] Call Trace: [ 728.680715][ T2315] [ 728.680722][ T2315] __dump_stack+0x1d/0x30 [ 728.680775][ T2315] dump_stack_lvl+0x95/0xd0 [ 728.680801][ T2315] dump_stack+0x15/0x1b [ 728.680824][ T2315] should_fail_ex+0x25e/0x270 [ 728.680860][ T2315] should_fail+0xb/0x20 [ 728.680960][ T2315] should_fail_usercopy+0x1a/0x20 [ 728.680997][ T2315] _copy_from_user+0x1c/0xb0 [ 728.681040][ T2315] ____sys_sendmsg+0x1c1/0x580 [ 728.681067][ T2315] ___sys_sendmsg+0x195/0x1e0 [ 728.681115][ T2315] __x64_sys_sendmsg+0xd4/0x160 [ 728.681146][ T2315] x64_sys_call+0x194c/0x3020 [ 728.681176][ T2315] do_syscall_64+0x136/0x3c0 [ 728.681202][ T2315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.681244][ T2315] RIP: 0033:0x7f32b6fee0d9 [ 728.681263][ T2315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.681286][ T2315] RSP: 002b:00007f32b5a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.681361][ T2315] RAX: ffffffffffffffda RBX: 00007f32b7275fa0 RCX: 00007f32b6fee0d9 [ 728.681375][ T2315] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 728.681387][ T2315] RBP: 00007f32b5a47090 R08: 0000000000000000 R09: 0000000000000000 [ 728.681466][ T2315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.681482][ T2315] R13: 00007f32b7276038 R14: 00007f32b7275fa0 R15: 00007ffe8b782758 [ 728.681507][ T2315] [ 728.894079][ T2319] loop1: detected capacity change from 0 to 512 [ 729.064264][ T2319] lo speed is unknown, defaulting to 1000 [ 729.073907][ T2326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9433'. [ 729.403582][ T2355] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 729.435718][ T2367] loop0: detected capacity change from 0 to 512 [ 729.453666][ T2355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9438'. [ 729.545596][ T2367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.561811][ T2378] loop3: detected capacity change from 0 to 512 [ 729.580932][ T2378] EXT4-fs: Ignoring removed mblk_io_submit option [ 729.630263][ T2378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 729.665252][ T2378] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 729.695191][ T2367] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.719766][ T2378] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 729.738565][ T2378] EXT4-fs (loop3): orphan cleanup on readonly fs [ 729.749876][ T2378] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.9442: Invalid block bitmap block 0 in block_group 0 [ 729.812976][ T2378] loop3: lost filesystem error report for type 5 error -117 [ 729.813223][ T2378] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.9442: Invalid block bitmap block 0 in block_group 0 [ 729.820706][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 729.820722][ C0] EXT4-fs (loop3): last error at time 1786971571: ext4_read_block_bitmap_nowait:483 [ 729.856152][ T28] kauditd_printk_skb: 320 callbacks suppressed [ 729.856170][ T28] audit: type=1400 audit(1786971571.264:51414): avc: denied { write } for pid=2366 comm="syz.0.9441" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 729.920120][ T2378] loop3: lost filesystem error report for type 5 error -117 [ 729.921492][ T2378] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.9442: Invalid block bitmap block 0 in block_group 0 [ 729.942235][ T2378] loop3: lost filesystem error report for type 5 error -117 [ 729.961848][ T2378] Quota error (device loop3): write_blk: dquota write failed [ 730.004372][ T28] audit: type=1400 audit(1786971571.414:51415): avc: denied { write } for pid=2389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.008819][ T2378] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 730.113511][ T2378] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.9442: Failed to acquire dquot type 1 [ 730.118477][ T28] audit: type=1400 audit(1786971571.534:51416): avc: denied { write } for pid=2411 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.214014][ T2378] loop3: lost filesystem error report for type 5 error -28 [ 730.214378][ T2378] EXT4-fs (loop3): 1 orphan inode deleted [ 730.245257][ T2415] loop6: detected capacity change from 0 to 512 [ 730.248389][ T9515] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 730.265750][ T2415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 730.287890][ T9515] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:16: Failed to release dquot type 1 [ 730.300685][ T9515] loop3: lost filesystem error report for type 5 error -117 [ 730.313491][ T2378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 730.400586][ T28] audit: type=1400 audit(1786971571.704:51417): avc: denied { write } for pid=2366 comm="syz.0.9441" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 730.462839][ T2415] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.9447: iget: bad i_size value: 38620345925642 [ 730.504288][ T2427] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.9442: deleted inode referenced: 12 [ 730.515834][ T2415] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 730.516997][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 730.532598][ C1] EXT4-fs (loop6): initial error at time 1786971571: ext4_orphan_get:1399: inode 15 [ 730.542047][ C1] EXT4-fs (loop6): last error at time 1786971571: ext4_orphan_get:1399: inode 15 [ 730.551336][ T2415] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.9447: couldn't read orphan inode 15 (err -117) [ 730.568575][ T2415] loop6: lost filesystem error report for type 5 error -117 [ 730.573537][ T2415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.595537][ T2378] IPv6: addrconf: prefix option has invalid lifetime [ 730.598845][ T2431] FAULT_INJECTION: forcing a failure. [ 730.598845][ T2431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.622556][ T2431] CPU: 0 UID: 0 PID: 2431 Comm: syz.0.9441 Not tainted syzkaller #0 PREEMPT(lazy) [ 730.622592][ T2431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.622610][ T2431] Call Trace: [ 730.622619][ T2431] [ 730.622628][ T2431] __dump_stack+0x1d/0x30 [ 730.622661][ T2431] dump_stack_lvl+0x95/0xd0 [ 730.622757][ T2431] dump_stack+0x15/0x1b [ 730.622785][ T2431] should_fail_ex+0x25e/0x270 [ 730.622828][ T2431] should_fail+0xb/0x20 [ 730.622867][ T2431] should_fail_usercopy+0x1a/0x20 [ 730.623013][ T2431] strncpy_from_user+0x27/0x250 [ 730.623052][ T2431] do_getname+0x59/0x1c0 [ 730.623112][ T2431] start_creating_user_path+0x27/0xf0 [ 730.623169][ T2431] bpf_obj_pin_user+0xdf/0x260 [ 730.623200][ T2431] bpf_obj_pin+0xac/0xd0 [ 730.623241][ T2431] __sys_bpf+0xb40/0xc30 [ 730.623344][ T2431] ? vfs_write+0x7f0/0x990 [ 730.623373][ T2431] __x64_sys_bpf+0x69/0x80 [ 730.623475][ T2431] x64_sys_call+0x10cb/0x3020 [ 730.623504][ T2431] do_syscall_64+0x136/0x3c0 [ 730.623536][ T2431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.623557][ T2431] RIP: 0033:0x7f7053cce0d9 [ 730.623574][ T2431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.623615][ T2431] RSP: 002b:00007f70526e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 730.623641][ T2431] RAX: ffffffffffffffda RBX: 00007f7053f56180 RCX: 00007f7053cce0d9 [ 730.623660][ T2431] RDX: 0000000000000018 RSI: 0000200000000180 RDI: 0000000000000006 [ 730.623756][ T2431] RBP: 00007f70526e5090 R08: 0000000000000000 R09: 0000000000000000 [ 730.623774][ T2431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.623816][ T2431] R13: 00007f7053f56218 R14: 00007f7053f56180 R15: 00007fffb6764798 [ 730.623837][ T2431] [ 730.819989][ T28] audit: type=1400 audit(1786971572.134:51418): avc: denied { write } for pid=2414 comm="syz.6.9447" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 730.857013][ T28] audit: type=1400 audit(1786971572.264:51419): avc: denied { write } for pid=2416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.888209][T31767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.908579][ T28] audit: type=1400 audit(1786971572.324:51420): avc: denied { write } for pid=2436 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.959264][ T2439] loop3: detected capacity change from 0 to 512 [ 730.991600][ T2439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 731.025265][ T2439] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.9448: iget: bad i_size value: 38620345925642 [ 731.031573][ T2441] loop1: detected capacity change from 0 to 512 [ 731.066579][ T2441] EXT4-fs: Ignoring removed bh option [ 731.091512][ T2441] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 731.107742][ T2439] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 731.107957][ T2439] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.9448: couldn't read orphan inode 15 (err -117) [ 731.117194][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 731.117215][ C0] EXT4-fs (loop3): initial error at time 1786971572: ext4_orphan_get:1399: inode 15 [ 731.117243][ C0] EXT4-fs (loop3): last error at time 1786971572: ext4_orphan_get:1399: inode 15 [ 731.136643][ T2441] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 731.145228][ T2439] loop3: lost filesystem error report for type 5 error -117 [ 731.172646][ T2439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.195178][ T2439] FAULT_INJECTION: forcing a failure. [ 731.195178][ T2439] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 731.210291][ T2444] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.9447: bg 0: block 5: invalid block bitmap [ 731.222857][ T2441] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.9449: Corrupt directory, running e2fsck is recommended [ 731.224409][ T2444] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 731.237480][ T2441] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 731.256694][ T2439] CPU: 0 UID: 0 PID: 2439 Comm: syz.3.9448 Not tainted syzkaller #0 PREEMPT(lazy) [ 731.256727][ T2439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 731.256743][ T2439] Call Trace: [ 731.256752][ T2439] [ 731.256762][ T2439] __dump_stack+0x1d/0x30 [ 731.256847][ T2439] dump_stack_lvl+0x95/0xd0 [ 731.256873][ T2439] dump_stack+0x15/0x1b [ 731.256927][ T2439] should_fail_ex+0x25e/0x270 [ 731.256963][ T2439] should_fail_alloc_page+0xf2/0x100 [ 731.256990][ T2439] __alloc_frozen_pages_noprof+0x108/0x350 [ 731.257032][ T2439] alloc_pages_mpol+0xa9/0x1d0 [ 731.257077][ T2439] folio_alloc_noprof+0x96/0x150 [ 731.257118][ T2439] filemap_alloc_folio_noprof+0x92/0x220 [ 731.257300][ T2439] __filemap_get_folio_mpol+0x2a0/0x840 [ 731.257351][ T2439] ext4_generic_write_inline_data+0x1b2/0x730 [ 731.257410][ T2439] ext4_da_write_begin+0x28f/0x690 [ 731.257548][ T2439] ? balance_dirty_pages_ratelimited_flags+0x41f/0x800 [ 731.257581][ T2439] generic_perform_write+0x186/0x490 [ 731.257716][ T2439] ext4_buffered_write_iter+0x2e2/0x480 [ 731.257751][ T2439] ext4_file_write_iter+0x38e/0xef0 [ 731.257821][ T2439] ? kstrtouint_from_user+0xa8/0xf0 [ 731.257863][ T2439] ? avc_policy_seqno+0x15/0x30 [ 731.257886][ T2439] ? selinux_file_permission+0x1dc/0x310 [ 731.257858][T32428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.258019][ T2439] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 731.258113][ T2439] vfs_write+0x57d/0x990 [ 731.258224][ T2439] ksys_write+0xdc/0x1a0 [ 731.258297][ T2439] __x64_sys_write+0x40/0x50 [ 731.258357][ T2439] x64_sys_call+0x27e1/0x3020 [ 731.258508][ T2439] do_syscall_64+0x136/0x3c0 [ 731.258592][ T2439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.258667][ T2439] RIP: 0033:0x7f5fc05fe0d9 [ 731.258824][ T2439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.258886][ T2439] RSP: 002b:00007f5fbf057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 731.258966][ T2439] RAX: ffffffffffffffda RBX: 00007f5fc0885fa0 RCX: 00007f5fc05fe0d9 [ 731.259010][ T2439] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000004 [ 731.259061][ T2439] RBP: 00007f5fbf057090 R08: 0000000000000000 R09: 0000000000000000 [ 731.259103][ T2439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.259146][ T2439] R13: 00007f5fc0886038 R14: 00007f5fc0885fa0 R15: 00007ffe6d265578 [ 731.259228][ T2439] [ 731.319215][ T2444] EXT4-fs (loop6): This should not happen!! Data will be lost [ 731.319215][ T2444] [ 731.359109][ T2446] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9451'. [ 731.363524][ T2441] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.9449: corrupted in-inode xattr: e_name out of bounds [ 731.547871][ T2441] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 731.549622][ T2441] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.9449: couldn't read orphan inode 15 (err -117) [ 731.559037][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 731.559064][ C1] EXT4-fs (loop1): initial error at time 1786971572: ext4_iget_extra_inode:5180: inode 15 [ 731.559098][ C1] EXT4-fs (loop1): last error at time 1786971572: ext4_iget_extra_inode:5180: inode 15 [ 731.576238][ T2444] EXT4-fs (loop6): Total free blocks count 0 [ 731.588815][ T2441] loop1: lost filesystem error report for type 5 error -117 [ 731.616137][ T2444] EXT4-fs (loop6): Free/Dirty block details [ 731.630927][ T2444] EXT4-fs (loop6): free_blocks=0 [ 731.636039][ T2444] EXT4-fs (loop6): dirty_blocks=3804 [ 731.641498][ T2444] EXT4-fs (loop6): Block reservation details [ 731.644097][ T2441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.650668][ T2444] EXT4-fs (loop6): i_reserved_data_blocks=3804 [ 731.683783][ T2450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9452'. [ 731.702107][ T2452] loop0: detected capacity change from 0 to 512 [ 731.711461][ T2441] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 731.729762][ T2441] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 731.741710][ T2452] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 731.751269][ T2441] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.9449: Corrupt directory, running e2fsck is recommended [ 731.758014][ T2452] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.9450: iget: bad i_size value: 38620345925642 [ 731.768386][ T2455] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 731.791930][ T2455] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 731.802571][ T2455] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.9449: Corrupt directory, running e2fsck is recommended [ 731.816464][ T2452] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 731.816980][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 731.819437][ T2441] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 731.826132][ C1] EXT4-fs (loop0): initial error at time 1786971573: ext4_orphan_get:1399: inode 15 [ 731.848910][T31767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.853623][ C1] EXT4-fs (loop0): last error at time 1786971573: ext4_orphan_get:1399: inode 15 [ 731.905931][ T2452] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.9450: couldn't read orphan inode 15 (err -117) [ 731.919914][ T2441] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 731.927422][ T2455] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 731.942874][ T2452] loop0: lost filesystem error report for type 5 error -117 [ 731.943457][ T2452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.964060][ T2441] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.9449: Corrupt directory, running e2fsck is recommended [ 731.988939][ T2455] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.9449: path /179/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 732.020250][ T2455] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.9449: path /179/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 732.047695][ T673] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1752 with error 28 [ 732.104807][ T2465] loop3: detected capacity change from 0 to 136 [ 732.118382][T32406] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 732.162706][T31692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.166806][ T2465] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9457'. [ 732.234310][ T2468] syzkaller0: entered promiscuous mode [ 732.240063][ T2468] syzkaller0: entered allmulticast mode [ 732.261024][ T2468] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 732.267730][ T2468] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 732.284605][ T2468] vhci_hcd vhci_hcd.0: Device attached [ 732.304102][ T2468] vhci_hcd vhci_hcd.0: port 0 already used [ 732.355134][ T2477] FAULT_INJECTION: forcing a failure. [ 732.355134][ T2477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.387030][ T2471] vhci_hcd: connection closed [ 732.389599][ T673] vhci_hcd vhci_hcd.6: stop threads [ 732.391783][ T2477] CPU: 1 UID: 0 PID: 2477 Comm: syz.3.9459 Not tainted syzkaller #0 PREEMPT(lazy) [ 732.391867][ T2477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.391911][ T2477] Call Trace: [ 732.391930][ T2477] [ 732.391957][ T2477] __dump_stack+0x1d/0x30 [ 732.392032][ T2477] dump_stack_lvl+0x95/0xd0 [ 732.392132][ T2477] dump_stack+0x15/0x1b [ 732.392203][ T2477] should_fail_ex+0x25e/0x270 [ 732.392335][ T2477] should_fail+0xb/0x20 [ 732.392410][ T2477] should_fail_usercopy+0x1a/0x20 [ 732.392545][ T2477] _copy_from_iter+0xcc/0xe70 [ 732.392668][ T2477] ? next_uptodate_folio+0x772/0x7f0 [ 732.392734][ T2477] ? percpu_counter_add_batch+0xb5/0x120 [ 732.392836][ T2477] ? mm_trace_rss_stat+0x1d/0xc0 [ 732.392938][ T2477] ? __rcu_read_unlock+0x4e/0x70 [ 732.393040][ T2477] copy_page_from_iter+0x15d/0x1f0 [ 732.393118][ T2477] anon_pipe_write+0x728/0xe50 [ 732.393238][ T2477] ? anon_pipe_write+0x171/0xe50 [ 732.393348][ T2477] ? __pfx_anon_pipe_write+0x10/0x10 [ 732.393460][ T2477] vfs_write+0x57d/0x990 [ 732.393525][ T2477] ksys_write+0xdc/0x1a0 [ 732.393582][ T2477] __x64_sys_write+0x40/0x50 [ 732.393645][ T2477] x64_sys_call+0x27e1/0x3020 [ 732.393789][ T2477] do_syscall_64+0x136/0x3c0 [ 732.393823][ T2477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.393859][ T2477] RIP: 0033:0x7f5fc05be90e [ 732.393919][ T2477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 732.393973][ T2477] RSP: 002b:00007f5fbf035ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 732.394054][ T2477] RAX: ffffffffffffffda RBX: 00007f5fbf0366c0 RCX: 00007f5fc05be90e [ 732.394141][ T2477] RDX: 0000000000000029 RSI: 00007f5fbf035e90 RDI: 0000000000000002 [ 732.394185][ T2477] RBP: 00007f5fbf035e90 R08: 0000000000000000 R09: 0000000000000000 [ 732.394241][ T2477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 732.394283][ T2477] R13: 00007f5fc08527a0 R14: 00007f5fc08494a0 R15: 0000000000000001 [ 732.394333][ T2477] [ 732.635238][ T2466] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.9450: bg 0: block 5: invalid block bitmap [ 732.643530][ T673] vhci_hcd vhci_hcd.6: release socket [ 732.653065][ T673] vhci_hcd vhci_hcd.6: disconnect device [ 732.695680][ T2466] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 732.709390][ T2466] EXT4-fs (loop0): This should not happen!! Data will be lost [ 732.709390][ T2466] [ 732.719570][ T2466] EXT4-fs (loop0): Total free blocks count 0 [ 732.725759][ T2466] EXT4-fs (loop0): Free/Dirty block details [ 732.744984][ T2466] EXT4-fs (loop0): free_blocks=0 [ 732.760475][ T2466] EXT4-fs (loop0): dirty_blocks=4512 [ 732.774765][ T2466] EXT4-fs (loop0): Block reservation details [ 732.786904][ T2466] EXT4-fs (loop0): i_reserved_data_blocks=4512 [ 733.061649][ T30] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 733.087039][T32428] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 733.226206][ T2482] loop1: detected capacity change from 0 to 128 [ 733.238749][ T2482] FAT-fs (loop1): bogus number of reserved sectors [ 733.245372][ T2482] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 733.254726][ T2482] FAT-fs (loop1): Can't find a valid FAT filesystem [ 733.293514][ T2504] FAULT_INJECTION: forcing a failure. [ 733.293514][ T2504] name failslab, interval 1, probability 0, space 0, times 0 [ 733.306302][ T2504] CPU: 0 UID: 0 PID: 2504 Comm: syz.0.9468 Not tainted syzkaller #0 PREEMPT(lazy) [ 733.306352][ T2504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 733.306370][ T2504] Call Trace: [ 733.306377][ T2504] [ 733.306386][ T2504] __dump_stack+0x1d/0x30 [ 733.306415][ T2504] dump_stack_lvl+0x95/0xd0 [ 733.306440][ T2504] dump_stack+0x15/0x1b [ 733.306462][ T2504] should_fail_ex+0x25e/0x270 [ 733.306625][ T2504] should_failslab+0x8c/0xb0 [ 733.306654][ T2504] __kvmalloc_node_noprof+0x15b/0x590 [ 733.306688][ T2504] ? file_tty_write+0x1ae/0x690 [ 733.306737][ T2504] ? file_tty_write+0x1ae/0x690 [ 733.306784][ T2504] ? mutex_trylock+0x81/0xc0 [ 733.306894][ T2504] file_tty_write+0x1ae/0x690 [ 733.307027][ T2504] ? __pfx_tty_write+0x10/0x10 [ 733.307065][ T2504] tty_write+0x25/0x30 [ 733.307152][ T2504] vfs_write+0x57d/0x990 [ 733.307186][ T2504] ksys_write+0xdc/0x1a0 [ 733.307290][ T2504] __x64_sys_write+0x40/0x50 [ 733.307312][ T2504] x64_sys_call+0x27e1/0x3020 [ 733.307339][ T2504] do_syscall_64+0x136/0x3c0 [ 733.307366][ T2504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.307469][ T2504] RIP: 0033:0x7f7053cce0d9 [ 733.307486][ T2504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.307561][ T2504] RSP: 002b:00007f7052727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 733.307583][ T2504] RAX: ffffffffffffffda RBX: 00007f7053f55fa0 RCX: 00007f7053cce0d9 [ 733.307598][ T2504] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000004 [ 733.307612][ T2504] RBP: 00007f7052727090 R08: 0000000000000000 R09: 0000000000000000 [ 733.307705][ T2504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.307719][ T2504] R13: 00007f7053f56038 R14: 00007f7053f55fa0 R15: 00007fffb6764798 [ 733.307741][ T2504] [ 733.398734][ T2510] loop6: detected capacity change from 0 to 128 [ 733.415887][ T2510] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 733.416093][ T2510] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 733.663195][ T2521] FAULT_INJECTION: forcing a failure. [ 733.663195][ T2521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.663221][ T2521] CPU: 0 UID: 0 PID: 2521 Comm: syz.1.9474 Not tainted syzkaller #0 PREEMPT(lazy) [ 733.663247][ T2521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 733.663263][ T2521] Call Trace: [ 733.663269][ T2521] [ 733.663276][ T2521] __dump_stack+0x1d/0x30 [ 733.663308][ T2521] dump_stack_lvl+0x95/0xd0 [ 733.663331][ T2521] dump_stack+0x15/0x1b [ 733.663354][ T2521] should_fail_ex+0x25e/0x270 [ 733.663439][ T2521] should_fail+0xb/0x20 [ 733.663465][ T2521] should_fail_usercopy+0x1a/0x20 [ 733.663500][ T2521] _copy_from_user+0x1c/0xb0 [ 733.663526][ T2521] ___sys_sendmsg+0xc1/0x1e0 [ 733.663622][ T2521] __x64_sys_sendmsg+0xd4/0x160 [ 733.663653][ T2521] x64_sys_call+0x194c/0x3020 [ 733.663683][ T2521] do_syscall_64+0x136/0x3c0 [ 733.663709][ T2521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.663795][ T2521] RIP: 0033:0x7f32b6fee0d9 [ 733.663814][ T2521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.663836][ T2521] RSP: 002b:00007f32b5a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.663861][ T2521] RAX: ffffffffffffffda RBX: 00007f32b7275fa0 RCX: 00007f32b6fee0d9 [ 733.663879][ T2521] RDX: 00000000340080c4 RSI: 0000200000000140 RDI: 0000000000000003 [ 733.663895][ T2521] RBP: 00007f32b5a47090 R08: 0000000000000000 R09: 0000000000000000 [ 733.663911][ T2521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.663927][ T2521] R13: 00007f32b7276038 R14: 00007f32b7275fa0 R15: 00007ffe8b782758 [ 733.663951][ T2521] [ 733.671382][ T2519] FAULT_INJECTION: forcing a failure. [ 733.671382][ T2519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.671418][ T2519] CPU: 1 UID: 0 PID: 2519 Comm: syz.3.9473 Not tainted syzkaller #0 PREEMPT(lazy) [ 733.671441][ T2519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 733.671456][ T2519] Call Trace: [ 733.671463][ T2519] [ 733.671470][ T2519] __dump_stack+0x1d/0x30 [ 733.671498][ T2519] dump_stack_lvl+0x95/0xd0 [ 733.671563][ T2519] dump_stack+0x15/0x1b [ 733.671581][ T2519] should_fail_ex+0x25e/0x270 [ 733.671616][ T2519] should_fail+0xb/0x20 [ 733.671711][ T2519] should_fail_usercopy+0x1a/0x20 [ 733.671750][ T2519] _copy_from_user+0x1c/0xb0 [ 733.671777][ T2519] io_register_zcrx+0xd2/0x980 [ 733.671873][ T2519] __se_sys_io_uring_register+0x96b/0x1330 [ 733.671909][ T2519] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 733.672015][ T2519] __x64_sys_io_uring_register+0x55/0x70 [ 733.672124][ T2519] x64_sys_call+0x2be0/0x3020 [ 733.672155][ T2519] do_syscall_64+0x136/0x3c0 [ 733.672207][ T2519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.672234][ T2519] RIP: 0033:0x7f5fc05fe0d9 [ 733.672254][ T2519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.672342][ T2519] RSP: 002b:00007f5fbf057028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 733.672368][ T2519] RAX: ffffffffffffffda RBX: 00007f5fc0885fa0 RCX: 00007f5fc05fe0d9 [ 733.672387][ T2519] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000005 [ 733.672402][ T2519] RBP: 00007f5fbf057090 R08: 0000000000000000 R09: 0000000000000000 [ 733.672415][ T2519] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 733.672465][ T2519] R13: 00007f5fc0886038 R14: 00007f5fc0885fa0 R15: 00007ffe6d265578 [ 733.672566][ T2519] [ 733.714249][ T2524] loop1: detected capacity change from 0 to 1024 [ 733.950626][ T2530] netlink: 'syz.0.9477': attribute type 1 has an invalid length. [ 733.962983][ T2524] EXT4-fs: Ignoring removed i_version option [ 734.070412][ T2524] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 734.080335][ T2524] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 734.091344][ T2524] EXT4-fs (loop1): invalid journal inode [ 734.101444][ T2532] gretap1: entered promiscuous mode [ 734.144328][T32406] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 734.172736][ T2524] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 734.172736][ T2524] program syz.1.9475 not setting count and/or reply_len properly [ 734.194694][ T2530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.299162][ T2545] loop1: detected capacity change from 0 to 1024 [ 734.355437][ T2547] FAULT_INJECTION: forcing a failure. [ 734.355437][ T2547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.368952][ T2547] CPU: 0 UID: 0 PID: 2547 Comm: syz.2.9482 Not tainted syzkaller #0 PREEMPT(lazy) [ 734.368979][ T2547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 734.369004][ T2547] Call Trace: [ 734.369019][ T2547] [ 734.369030][ T2547] __dump_stack+0x1d/0x30 [ 734.369113][ T2547] dump_stack_lvl+0x95/0xd0 [ 734.369142][ T2547] dump_stack+0x15/0x1b [ 734.369167][ T2547] should_fail_ex+0x25e/0x270 [ 734.369205][ T2547] should_fail+0xb/0x20 [ 734.369295][ T2547] should_fail_usercopy+0x1a/0x20 [ 734.369348][ T2547] _copy_to_user+0x20/0xa0 [ 734.369468][ T2547] simple_read_from_buffer+0xb5/0x130 [ 734.369586][ T2547] proc_fail_nth_read+0x10e/0x150 [ 734.369620][ T2547] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.369725][ T2547] vfs_read+0x18e/0x7c0 [ 734.369830][ T2547] ? __rcu_read_unlock+0x4e/0x70 [ 734.369865][ T2547] ? __fget_files+0x184/0x1c0 [ 734.369902][ T2547] ? mutex_lock+0x57/0x90 [ 734.369949][ T2547] ksys_read+0xdc/0x1a0 [ 734.370015][ T2547] __x64_sys_read+0x40/0x50 [ 734.370041][ T2547] x64_sys_call+0x2886/0x3020 [ 734.370086][ T2547] do_syscall_64+0x136/0x3c0 [ 734.370121][ T2547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.370210][ T2547] RIP: 0033:0x7f164ca1e90e [ 734.370248][ T2547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 734.370273][ T2547] RSP: 002b:00007f164b4b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 734.370299][ T2547] RAX: ffffffffffffffda RBX: 00007f164b4b76c0 RCX: 00007f164ca1e90e [ 734.370319][ T2547] RDX: 000000000000000f RSI: 00007f164b4b70a0 RDI: 0000000000000005 [ 734.370337][ T2547] RBP: 00007f164b4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 734.370354][ T2547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.370443][ T2547] R13: 00007f164cce6038 R14: 00007f164cce5fa0 R15: 00007ffd078435f8 [ 734.370470][ T2547] [ 734.589392][ T2545] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec028, mo2=0002] [ 734.609969][ T2555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9485'. [ 734.621990][ T2545] System zones: 0-1, 3-12 [ 734.636177][ T2545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.705309][T31692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.725965][ T2560] FAULT_INJECTION: forcing a failure. [ 734.725965][ T2560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.739072][ T2560] CPU: 0 UID: 0 PID: 2560 Comm: syz.3.9487 Not tainted syzkaller #0 PREEMPT(lazy) [ 734.739163][ T2560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 734.739178][ T2560] Call Trace: [ 734.739234][ T2560] [ 734.739243][ T2560] __dump_stack+0x1d/0x30 [ 734.739270][ T2560] dump_stack_lvl+0x95/0xd0 [ 734.739295][ T2560] dump_stack+0x15/0x1b [ 734.739373][ T2560] should_fail_ex+0x25e/0x270 [ 734.739409][ T2560] should_fail+0xb/0x20 [ 734.739464][ T2560] should_fail_usercopy+0x1a/0x20 [ 734.739548][ T2560] _copy_to_user+0x20/0xa0 [ 734.739574][ T2560] simple_read_from_buffer+0xb5/0x130 [ 734.739603][ T2560] proc_fail_nth_read+0x10e/0x150 [ 734.739668][ T2560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.739695][ T2560] vfs_read+0x18e/0x7c0 [ 734.739716][ T2560] ? __rcu_read_unlock+0x4e/0x70 [ 734.739748][ T2560] ? __fget_files+0x184/0x1c0 [ 734.739774][ T2560] ? mutex_lock+0x57/0x90 [ 734.739823][ T2560] ksys_read+0xdc/0x1a0 [ 734.739896][ T2560] __x64_sys_read+0x40/0x50 [ 734.739919][ T2560] x64_sys_call+0x2886/0x3020 [ 734.739999][ T2560] do_syscall_64+0x136/0x3c0 [ 734.740024][ T2560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.740080][ T2560] RIP: 0033:0x7f5fc05be90e [ 734.740098][ T2560] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 734.740118][ T2560] RSP: 002b:00007f5fbf056fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 734.740141][ T2560] RAX: ffffffffffffffda RBX: 00007f5fbf0576c0 RCX: 00007f5fc05be90e [ 734.740159][ T2560] RDX: 000000000000000f RSI: 00007f5fbf0570a0 RDI: 0000000000000007 [ 734.740180][ T2560] RBP: 00007f5fbf057090 R08: 0000000000000000 R09: 0000000000000000 [ 734.740191][ T2560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.740202][ T2560] R13: 00007f5fc0886038 R14: 00007f5fc0885fa0 R15: 00007ffe6d265578 [ 734.740281][ T2560] [ 734.803757][ T2567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9491'. [ 734.905385][ T2571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9485'. [ 735.069440][ T2569] loop1: detected capacity change from 0 to 1024 [ 735.113296][ T2569] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec028, mo2=0002] [ 735.222517][ T2569] System zones: 0-1, 3-12 [ 735.260684][ T2569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.295329][ T2575] FAULT_INJECTION: forcing a failure. [ 735.295329][ T2575] name failslab, interval 1, probability 0, space 0, times 0 [ 735.367138][ T28] kauditd_printk_skb: 423 callbacks suppressed [ 735.367170][ T28] audit: type=1400 audit(1786971576.754:51844): avc: denied { write } for pid=2568 comm="syz.1.9489" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 735.511769][ T2572] loop3: detected capacity change from 0 to 2048 [ 735.525356][T31692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.536533][ T2575] CPU: 0 UID: 0 PID: 2575 Comm: syz.3.9492 Not tainted syzkaller #0 PREEMPT(lazy) [ 735.536567][ T2575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.536584][ T2575] Call Trace: [ 735.536660][ T2575] [ 735.536670][ T2575] __dump_stack+0x1d/0x30 [ 735.536701][ T2575] dump_stack_lvl+0x95/0xd0 [ 735.536737][ T2575] dump_stack+0x15/0x1b [ 735.536756][ T2575] should_fail_ex+0x25e/0x270 [ 735.536787][ T2575] should_failslab+0x8c/0xb0 [ 735.536816][ T2575] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 735.536922][ T2575] ? do_getname+0x2e/0x1c0 [ 735.536988][ T2575] ? do_getname+0x2e/0x1c0 [ 735.537020][ T2575] ? vfs_write+0x848/0x990 [ 735.537060][ T2575] do_getname+0x2e/0x1c0 [ 735.537157][ T2575] getname_flags+0x1d/0x30 [ 735.537187][ T2575] do_sys_openat2+0x6c/0x130 [ 735.537228][ T2575] __x64_sys_openat+0xf2/0x120 [ 735.537266][ T2575] x64_sys_call+0x1e39/0x3020 [ 735.537293][ T2575] do_syscall_64+0x136/0x3c0 [ 735.537384][ T2575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.537460][ T2575] RIP: 0033:0x7f5fc05fe0d9 [ 735.537481][ T2575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.537505][ T2575] RSP: 002b:00007f5fb6c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 735.537532][ T2575] RAX: ffffffffffffffda RBX: 00007f5fc0886090 RCX: 00007f5fc05fe0d9 [ 735.537551][ T2575] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00000000ffffff9c [ 735.537568][ T2575] RBP: 00007f5fb6c36090 R08: 0000000000000000 R09: 0000000000000000 [ 735.537641][ T2575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.537658][ T2575] R13: 00007f5fc0886128 R14: 00007f5fc0886090 R15: 00007ffe6d265578 [ 735.537686][ T2575] [ 735.720073][ T2578] loop6: detected capacity change from 0 to 128 [ 735.726928][ T2578] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 735.749095][ T2578] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 735.754051][ T2580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9495'. [ 735.767567][ T2572] loop3: p3 p4 < > [ 735.771563][ T2572] loop3: p3 size 201326592 extends beyond EOD, truncated [ 735.788277][ T12] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 735.821528][ T2578] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 735.846224][ T2582] loop1: detected capacity change from 0 to 2048 [ 735.906771][ T2588] loop2: detected capacity change from 0 to 512 [ 735.946652][ T2582] loop1: p3 p4 < > [ 735.950880][ T2582] loop1: p3 size 201326592 extends beyond EOD, truncated [ 735.991081][ T2588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.022642][ T2588] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.037948][ T2588] netlink: 'syz.2.9497': attribute type 2 has an invalid length. [ 736.102747][ T28] audit: type=1326 audit(1786971577.514:51845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2599 comm="syz.3.9502" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 736.131699][ T28] audit: type=1326 audit(1786971577.514:51846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2599 comm="syz.3.9502" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 736.172092][ T28] audit: type=1326 audit(1786971577.514:51847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2599 comm="syz.3.9502" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 736.205220][ T28] audit: type=1326 audit(1786971577.514:51848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2599 comm="syz.3.9502" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5fc05be90e code=0x7ffc0000 [ 736.232636][ T28] audit: type=1326 audit(1786971577.514:51849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2599 comm="syz.3.9502" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 736.261431][ T28] audit: type=1326 audit(1786971577.514:51850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2599 comm="syz.3.9502" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 736.288096][ T28] audit: type=1326 audit(1786971577.514:51851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2599 comm="syz.3.9502" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 736.317925][ T28] audit: type=1326 audit(1786971577.514:51852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2599 comm="syz.3.9502" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 736.379977][ T2610] sctp: [Deprecated]: syz.6.9501 (pid 2610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 736.379977][ T2610] Use struct sctp_sack_info instead [ 736.396784][ T28] audit: type=1326 audit(1786971577.514:51853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2599 comm="syz.3.9502" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5fc05fe0d9 code=0x7ffc0000 [ 736.509949][ T2588] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.9497: iget: bad i_size value: 2533274857506816 [ 736.585854][T29067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.676080][ T2624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 736.692564][ T2628] Cannot find set identified by id 0 to match [ 736.699984][ T2608] lo speed is unknown, defaulting to 1000 [ 736.734384][ T2630] FAULT_INJECTION: forcing a failure. [ 736.734384][ T2630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.757663][ T2630] CPU: 0 UID: 0 PID: 2630 Comm: syz.1.9511 Not tainted syzkaller #0 PREEMPT(lazy) [ 736.757734][ T2630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.757751][ T2630] Call Trace: [ 736.757760][ T2630] [ 736.757770][ T2630] __dump_stack+0x1d/0x30 [ 736.757811][ T2630] dump_stack_lvl+0x95/0xd0 [ 736.757968][ T2630] dump_stack+0x15/0x1b [ 736.758063][ T2630] should_fail_ex+0x25e/0x270 [ 736.758101][ T2630] should_fail+0xb/0x20 [ 736.758137][ T2630] should_fail_usercopy+0x1a/0x20 [ 736.758216][ T2630] _copy_from_user+0x1c/0xb0 [ 736.758246][ T2630] ___sys_sendmsg+0xc1/0x1e0 [ 736.758287][ T2630] __x64_sys_sendmsg+0xd4/0x160 [ 736.758444][ T2630] x64_sys_call+0x194c/0x3020 [ 736.758474][ T2630] do_syscall_64+0x136/0x3c0 [ 736.758501][ T2630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.758592][ T2630] RIP: 0033:0x7f32b6fee0d9 [ 736.758613][ T2630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.758639][ T2630] RSP: 002b:00007f32b5a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.758676][ T2630] RAX: ffffffffffffffda RBX: 00007f32b7275fa0 RCX: 00007f32b6fee0d9 [ 736.758695][ T2630] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 736.758713][ T2630] RBP: 00007f32b5a47090 R08: 0000000000000000 R09: 0000000000000000 [ 736.758755][ T2630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.758772][ T2630] R13: 00007f32b7276038 R14: 00007f32b7275fa0 R15: 00007ffe8b782758 [ 736.758822][ T2630] [ 736.816048][ T2621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.956119][ T2621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.057783][ T2621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.066356][ T2621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.440010][ T2652] set_capacity_and_notify: 1 callbacks suppressed [ 737.440097][ T2652] loop3: detected capacity change from 0 to 136 [ 737.459590][ T2643] loop1: p3 p4 < > [ 737.465873][ T2643] loop1: p3 size 201326592 extends beyond EOD, truncated [ 737.515526][ T2980] loop1: p3 p4 < > [ 737.519613][ T2980] loop1: p3 size 201326592 extends beyond EOD, truncated [ 737.587456][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 737.611699][ T2652] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9517'. [ 737.654780][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 737.685029][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 738.258467][ T2665] loop0: detected capacity change from 0 to 136 [ 738.327236][ T2665] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9521'. [ 738.623349][ T2677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9526'. [ 738.647173][ T2677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9526'. [ 738.660101][ T2679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9527'. [ 738.747663][ T2683] FAULT_INJECTION: forcing a failure. [ 738.747663][ T2683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.760798][ T2683] CPU: 1 UID: 0 PID: 2683 Comm: syz.3.9529 Not tainted syzkaller #0 PREEMPT(lazy) [ 738.760825][ T2683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.760838][ T2683] Call Trace: [ 738.760894][ T2683] [ 738.760902][ T2683] __dump_stack+0x1d/0x30 [ 738.760929][ T2683] dump_stack_lvl+0x95/0xd0 [ 738.760957][ T2683] dump_stack+0x15/0x1b [ 738.760976][ T2683] should_fail_ex+0x25e/0x270 [ 738.761088][ T2683] should_fail+0xb/0x20 [ 738.761116][ T2683] should_fail_usercopy+0x1a/0x20 [ 738.761162][ T2683] _copy_from_user+0x1c/0xb0 [ 738.761186][ T2683] __sys_bpf+0x1e2/0xc30 [ 738.761237][ T2683] ? get_pid_task+0x92/0xc0 [ 738.761263][ T2683] ? vfs_write+0x7f0/0x990 [ 738.761298][ T2683] __x64_sys_bpf+0x69/0x80 [ 738.761344][ T2683] x64_sys_call+0x10cb/0x3020 [ 738.761369][ T2683] do_syscall_64+0x136/0x3c0 [ 738.761403][ T2683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.761454][ T2683] RIP: 0033:0x7f5fc05fe0d9 [ 738.761476][ T2683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.761499][ T2683] RSP: 002b:00007f5fbf057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 738.761519][ T2683] RAX: ffffffffffffffda RBX: 00007f5fc0885fa0 RCX: 00007f5fc05fe0d9 [ 738.761534][ T2683] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 738.761547][ T2683] RBP: 00007f5fbf057090 R08: 0000000000000000 R09: 0000000000000000 [ 738.761629][ T2683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.761646][ T2683] R13: 00007f5fc0886038 R14: 00007f5fc0885fa0 R15: 00007ffe6d265578 [ 738.761667][ T2683] [ 738.999237][ T2683] lo speed is unknown, defaulting to 1000 [ 739.601327][ T2696] FAULT_INJECTION: forcing a failure. [ 739.601327][ T2696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.614437][ T2696] CPU: 0 UID: 0 PID: 2696 Comm: syz.0.9533 Not tainted syzkaller #0 PREEMPT(lazy) [ 739.614579][ T2696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 739.614674][ T2696] Call Trace: [ 739.614682][ T2696] [ 739.614691][ T2696] __dump_stack+0x1d/0x30 [ 739.614733][ T2696] dump_stack_lvl+0x95/0xd0 [ 739.614796][ T2696] dump_stack+0x15/0x1b [ 739.614814][ T2696] should_fail_ex+0x25e/0x270 [ 739.614853][ T2696] should_fail+0xb/0x20 [ 739.614885][ T2696] should_fail_usercopy+0x1a/0x20 [ 739.614988][ T2696] _copy_from_user+0x1c/0xb0 [ 739.615090][ T2696] ___sys_sendmsg+0xc1/0x1e0 [ 739.615134][ T2696] __x64_sys_sendmsg+0xd4/0x160 [ 739.615210][ T2696] x64_sys_call+0x194c/0x3020 [ 739.615237][ T2696] do_syscall_64+0x136/0x3c0 [ 739.615269][ T2696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.615295][ T2696] RIP: 0033:0x7f7053cce0d9 [ 739.615362][ T2696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.615384][ T2696] RSP: 002b:00007f7052727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.615409][ T2696] RAX: ffffffffffffffda RBX: 00007f7053f55fa0 RCX: 00007f7053cce0d9 [ 739.615504][ T2696] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 739.615578][ T2696] RBP: 00007f7052727090 R08: 0000000000000000 R09: 0000000000000000 [ 739.615595][ T2696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.615610][ T2696] R13: 00007f7053f56038 R14: 00007f7053f55fa0 R15: 00007fffb6764798 [ 739.615637][ T2696] [ 739.673483][ T2698] Cannot find set identified by id 0 to match [ 739.845437][ T2704] FAULT_INJECTION: forcing a failure. [ 739.845437][ T2704] name failslab, interval 1, probability 0, space 0, times 0 [ 739.858684][ T2704] CPU: 1 UID: 0 PID: 2704 Comm: syz.2.9537 Not tainted syzkaller #0 PREEMPT(lazy) [ 739.858706][ T2704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 739.858718][ T2704] Call Trace: [ 739.858724][ T2704] [ 739.858730][ T2704] __dump_stack+0x1d/0x30 [ 739.858830][ T2704] dump_stack_lvl+0x95/0xd0 [ 739.858880][ T2704] dump_stack+0x15/0x1b [ 739.858903][ T2704] should_fail_ex+0x25e/0x270 [ 739.858939][ T2704] should_failslab+0x8c/0xb0 [ 739.859017][ T2704] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 739.859110][ T2704] ? __alloc_skb+0x2db/0x6f0 [ 739.859145][ T2704] ? __alloc_skb+0x2db/0x6f0 [ 739.859174][ T2704] __alloc_skb+0x2db/0x6f0 [ 739.859201][ T2704] ? __alloc_skb+0x205/0x6f0 [ 739.859258][ T2704] ppp_write+0x87/0x310 [ 739.859353][ T2704] ? vfs_write+0x23b/0x990 [ 739.859374][ T2704] ? __pfx_ppp_write+0x10/0x10 [ 739.859406][ T2704] vfs_write+0x252/0x990 [ 739.859430][ T2704] ? __fget_files+0x184/0x1c0 [ 739.859522][ T2704] ksys_write+0xdc/0x1a0 [ 739.859540][ T2704] __x64_sys_write+0x40/0x50 [ 739.859609][ T2704] x64_sys_call+0x27e1/0x3020 [ 739.859638][ T2704] do_syscall_64+0x136/0x3c0 [ 739.859688][ T2704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.859726][ T2704] RIP: 0033:0x7f164ca5e0d9 [ 739.859782][ T2704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.859805][ T2704] RSP: 002b:00007f164b4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 739.859830][ T2704] RAX: ffffffffffffffda RBX: 00007f164cce5fa0 RCX: 00007f164ca5e0d9 [ 739.859849][ T2704] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000004 [ 739.859863][ T2704] RBP: 00007f164b4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 739.859876][ T2704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.859889][ T2704] R13: 00007f164cce6038 R14: 00007f164cce5fa0 R15: 00007ffd078435f8 [ 739.859967][ T2704] [ 740.076333][ T2706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9538'. [ 740.126287][ T2710] loop0: detected capacity change from 0 to 512 [ 740.134962][ T2710] ext4: Unknown parameter 'fowner' [ 740.142973][ T2710] netlink: 'syz.0.9539': attribute type 2 has an invalid length. [ 740.226504][ T2710] loop0: detected capacity change from 0 to 1024 [ 740.294698][ T2710] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 740.307392][ T2710] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 740.324660][ T2710] JBD2: no valid journal superblock found [ 740.353280][ T2710] EXT4-fs (loop0): Could not load journal inode [ 740.386391][ T2715] netlink: 'syz.2.9542': attribute type 13 has an invalid length. [ 740.394239][ T2715] netlink: 'syz.2.9542': attribute type 27 has an invalid length. [ 740.556311][ T2724] netlink: 'syz.1.9546': attribute type 10 has an invalid length. [ 740.567746][ T2724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 740.585523][ T2724] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 740.613431][ T2730] FAULT_INJECTION: forcing a failure. [ 740.613431][ T2730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.626608][ T2730] CPU: 0 UID: 0 PID: 2730 Comm: syz.2.9547 Not tainted syzkaller #0 PREEMPT(lazy) [ 740.626640][ T2730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 740.626654][ T2730] Call Trace: [ 740.626660][ T2730] [ 740.626668][ T2730] __dump_stack+0x1d/0x30 [ 740.626700][ T2730] dump_stack_lvl+0x95/0xd0 [ 740.626797][ T2730] dump_stack+0x15/0x1b [ 740.626822][ T2730] should_fail_ex+0x25e/0x270 [ 740.626893][ T2730] should_fail+0xb/0x20 [ 740.626927][ T2730] should_fail_usercopy+0x1a/0x20 [ 740.627043][ T2730] _copy_from_user+0x1c/0xb0 [ 740.627071][ T2730] ___sys_sendmsg+0xc1/0x1e0 [ 740.627174][ T2730] __x64_sys_sendmsg+0xd4/0x160 [ 740.627203][ T2730] x64_sys_call+0x194c/0x3020 [ 740.627273][ T2730] do_syscall_64+0x136/0x3c0 [ 740.627362][ T2730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.627384][ T2730] RIP: 0033:0x7f164ca5e0d9 [ 740.627402][ T2730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.627466][ T2730] RSP: 002b:00007f164b4b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.627491][ T2730] RAX: ffffffffffffffda RBX: 00007f164cce5fa0 RCX: 00007f164ca5e0d9 [ 740.627509][ T2730] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 740.627531][ T2730] RBP: 00007f164b4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 740.627547][ T2730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.627632][ T2730] R13: 00007f164cce6038 R14: 00007f164cce5fa0 R15: 00007ffd078435f8 [ 740.627659][ T2730] [ 740.810368][ T2734] Cannot find set identified by id 0 to match [ 740.845342][ T2702] loop3: detected capacity change from 0 to 128 [ 740.867825][ T2702] FAT-fs (loop3): bogus number of reserved sectors [ 740.878309][ T2702] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 740.890233][ T2702] FAT-fs (loop3): Can't find a valid FAT filesystem [ 741.003525][ T2755] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9556'. [ 741.078034][ T2761] loop0: detected capacity change from 0 to 2048 [ 741.091861][ T2761] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.9559: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 741.111756][ T2761] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 741.111899][ T2761] EXT4-fs (loop0): get root inode failed [ 741.120970][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 741.120988][ C1] EXT4-fs (loop0): initial error at time 1786971582: ext4_ext_check_inode:521: inode 2 [ 741.121024][ C1] EXT4-fs (loop0): last error at time 1786971582: ext4_ext_check_inode:521: inode 2 [ 741.177681][ T2761] EXT4-fs (loop0): mount failed [ 741.199304][ T2770] loop1: detected capacity change from 0 to 164 [ 741.253618][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.288695][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.310467][ T2782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9565'. [ 741.461779][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.489686][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.552299][ T2801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9565'. [ 741.744834][ T2785] lo speed is unknown, defaulting to 1000 [ 741.796603][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.837360][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.933233][ T2806] loop2: detected capacity change from 0 to 512 [ 742.096054][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.183267][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.229558][ T2806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.245472][ T2806] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.264731][ T28] kauditd_printk_skb: 194 callbacks suppressed [ 742.264877][ T28] audit: type=1400 audit(1786971583.674:52048): avc: denied { write } for pid=2804 comm="syz.2.9569" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 742.317530][ T28] audit: type=1400 audit(1786971583.704:52049): avc: denied { write } for pid=2804 comm="syz.2.9569" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 742.405566][ T2805] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 742.424820][ T2817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9572'. [ 742.437737][ T2805] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 742.455852][ T12] bridge_slave_1: left allmulticast mode [ 742.467934][ T2805] EXT4-fs (loop2): This should not happen!! Data will be lost [ 742.467934][ T2805] [ 742.474597][ T12] bridge_slave_1: left promiscuous mode [ 742.491372][ T2805] EXT4-fs (loop2): Total free blocks count 0 [ 742.497445][ T2805] EXT4-fs (loop2): Free/Dirty block details [ 742.503425][ T2805] EXT4-fs (loop2): free_blocks=65280 [ 742.508789][ T2805] EXT4-fs (loop2): dirty_blocks=23 [ 742.513947][ T2805] EXT4-fs (loop2): Block reservation details [ 742.519967][ T2805] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 742.534626][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.568051][ T12] bridge_slave_0: left allmulticast mode [ 742.582513][ T12] bridge_slave_0: left promiscuous mode [ 742.597426][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.606706][ T28] audit: type=1400 audit(1786971584.014:52050): avc: denied { write } for pid=2819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.664310][ T2817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.673876][ T2817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.685186][ T28] audit: type=1400 audit(1786971584.094:52051): avc: denied { write } for pid=2830 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.796291][ T2835] __nla_validate_parse: 1 callbacks suppressed [ 742.796307][ T2835] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9574'. [ 742.813647][ T2835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9574'. [ 742.927756][ T28] audit: type=1400 audit(1786971584.344:52052): avc: denied { read write } for pid=2834 comm="syz.1.9574" name="cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 742.953431][ T28] audit: type=1400 audit(1786971584.344:52053): avc: denied { open } for pid=2834 comm="syz.1.9574" path="/201/dev/cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 743.084856][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.098531][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.116568][ T12] bond0 (unregistering): Released all slaves [ 743.147648][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 743.219278][ T2843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.234695][ T2843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.245286][ T2805] syz.2.9569 (2805) used greatest stack depth: 9056 bytes left [ 743.261019][T29067] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 743.279493][T29067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.291038][ T12] hsr_slave_0: left promiscuous mode [ 743.296817][ T12] hsr_slave_1: left promiscuous mode [ 743.302932][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.310725][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.322649][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.333298][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.353309][ T12] veth1_macvtap: left promiscuous mode [ 743.359117][ T12] veth0_macvtap: left promiscuous mode [ 743.364755][ T12] veth1_vlan: left promiscuous mode [ 743.370289][ T12] veth0_vlan: left promiscuous mode [ 743.370481][ T2969] ================================================================== [ 743.383630][ T2969] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 743.390623][ T2969] [ 743.392960][ T2969] write to 0xffffffff86c6cbf8 of 8 bytes by task 12 on cpu 0: [ 743.400462][ T2969] data_alloc+0x2fc/0x380 [ 743.404803][ T2969] prb_reserve+0x8e3/0xaf0 [ 743.409231][ T2969] vprintk_store+0x54a/0x910 [ 743.413875][ T2969] vprintk_emit+0x1a4/0x600 [ 743.418409][ T2969] vprintk_default+0x26/0x30 [ 743.423026][ T2969] vprintk+0x1d/0x30 [ 743.426953][ T2969] _printk+0x79/0xa0 [ 743.430891][ T2969] __netdev_printk+0x310/0x370 [ 743.435684][ T2969] netdev_info+0xa6/0xd0 [ 743.439952][ T2969] __dev_set_promiscuity+0x1e5/0x3c0 [ 743.445261][ T2969] __dev_set_rx_mode+0x1e4/0x220 [ 743.450318][ T2969] dev_uc_del+0x144/0x160 [ 743.454678][ T2969] vlan_dev_stop+0xcc/0x120 [ 743.459221][ T2969] __dev_close_many+0x24d/0x460 [ 743.464090][ T2969] netif_close_many+0x101/0x2d0 [ 743.468965][ T2969] unregister_netdevice_many_notify+0x500/0x1560 [ 743.475319][ T2969] default_device_exit_batch+0x5d7/0x630 [ 743.480973][ T2969] ops_undo_list+0x2ca/0x420 [ 743.485594][ T2969] cleanup_net+0x37c/0x5b0 [ 743.490033][ T2969] process_scheduled_works+0x4d4/0x9a0 [ 743.495514][ T2969] worker_thread+0x569/0x750 [ 743.500150][ T2969] kthread+0x221/0x270 [ 743.504224][ T2969] ret_from_fork+0x146/0x330 [ 743.508837][ T2969] ret_from_fork_asm+0x1a/0x30 [ 743.513622][ T2969] [ 743.515951][ T2969] read to 0xffffffff86c6cbf8 of 16 bytes by task 2969 on cpu 1: [ 743.523589][ T2969] _prb_read_valid+0x183/0x930 [ 743.528361][ T2969] prb_read_valid+0x3c/0x60 [ 743.532884][ T2969] syslog_print+0x164/0x560 [ 743.537417][ T2969] do_syslog+0x52b/0x7f0 [ 743.541681][ T2969] __x64_sys_syslog+0x41/0x50 [ 743.546379][ T2969] x64_sys_call+0x2b9e/0x3020 [ 743.551076][ T2969] do_syscall_64+0x136/0x3c0 [ 743.555683][ T2969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.561589][ T2969] [ 743.563923][ T2969] Reported by Kernel Concurrency Sanitizer on: [ 743.570080][ T2969] CPU: 1 UID: 0 PID: 2969 Comm: klogd Not tainted syzkaller #0 PREEMPT(lazy) [ 743.578952][ T2969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 743.589021][ T2969] ================================================================== [ 743.610392][ T2860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9578'. [ 743.640768][ T28] audit: type=1400 audit(1786971585.054:52054): avc: denied { write } for pid=2847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.686858][ T28] audit: type=1400 audit(1786971585.084:52055): avc: denied { write } for pid=2867 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.711646][ T12] team0 (unregistering): Port device team_slave_1 removed [ 743.722254][ T12] team0 (unregistering): Port device team_slave_0 removed [ 743.765719][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 743.849853][ T2785] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.857010][ T2785] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.864629][ T2785] bridge_slave_0: entered allmulticast mode [ 743.871543][ T2785] bridge_slave_0: entered promiscuous mode [ 743.883468][ T2785] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.890734][ T2785] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.898065][ T2785] bridge_slave_1: entered allmulticast mode [ 743.904801][ T2785] bridge_slave_1: entered promiscuous mode [ 743.924643][ T2785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.936267][ T2785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.978565][ T28] audit: type=1400 audit(1786971585.394:52056): avc: denied { write } for pid=2876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.024627][ T2785] team0: Port device team_slave_0 added [ 744.030522][ T28] audit: type=1400 audit(1786971585.424:52057): avc: denied { write } for pid=2887 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.035352][ T2785] team0: Port device team_slave_1 added [ 744.058724][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 744.082182][ T2785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.089227][ T2785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.115421][ T2785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.127414][ T2785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.134384][ T2785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.160387][ T2785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.189126][ T2785] hsr_slave_0: entered promiscuous mode [ 744.195517][ T2785] hsr_slave_1: entered promiscuous mode [ 744.201560][ T2785] debugfs: 'hsr0' already exists in 'hsr' [ 744.207352][ T2785] Cannot create hsr debugfs directory [ 744.325041][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 744.740201][ T2785] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 744.750087][ T2785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.760197][ T2785] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 744.770300][ T2785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 744.778673][ T2785] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 744.789305][ T2785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.798426][ T2785] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 744.809609][ T2785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.852251][ T2785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.865271][ T2785] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.876078][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.883193][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.895844][ T9515] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.902975][ T9515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.043657][ T2785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.180745][ T2785] veth0_vlan: entered promiscuous mode [ 745.189831][ T2785] veth1_vlan: entered promiscuous mode [ 745.208583][ T2785] veth0_macvtap: entered promiscuous mode [ 745.216433][ T2785] veth1_macvtap: entered promiscuous mode [ 745.230832][ T2785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.245334][ T2785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.288013][ T305] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.298666][ T305] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.337212][T31523] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.346419][T31523] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0