last executing test programs: 7m46.688963377s ago: executing program 32 (id=61): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x5, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 7m23.632579402s ago: executing program 33 (id=176): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x8000000000000000, 0xf794}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@grpquota}, {@lazytime}, {@bh}, {@errors_remount}]}, 0x1, 0x563, &(0x7f0000001340)="$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") madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x61, 0x0, &(0x7f0000000240)) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r3) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xd9ff, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x48880}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x50000048) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000004c0)='./file0\x00') 7m21.450075492s ago: executing program 34 (id=187): r0 = socket$netlink(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a440000000c0a010100000000800000000a0000070900020073797a31000000000900010073797a31000000001800038014000080040001800c000540000000000000050f140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x24000850}, 0x4040040) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) (async) bind$netlink(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) (async) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x1) (async) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f00000002c0)=[{0xff, 0xfc, 0x0, 0x6, @time={0x7, 0x79}, {}, {0x0, 0x4}, @quote={{0xc6, 0x3}, 0x5}}, {0x0, 0x0, 0x6, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @ext={0x0, 0x0}}], 0x38) (async) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) (async) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000000)=0xc, 0x4) (async) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000380)=""/231) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f00000000c0)={0x2, 0x80010, 0x238, 0xb, 0x3, "ff04ddf0ffa64d7feb190e0000000200", 0x2000006, 0xfffffffd}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0xff) 6m14.070562303s ago: executing program 7 (id=481): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedsend(r0, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001a600)=""/102385, 0x2000, 0x0, 0x0) 6m13.491075574s ago: executing program 35 (id=483): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000000)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@data_journal}, {@usrjquota}, {}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file2\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file2\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup=r1, 0x14, 0x0, 0x695, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680), &(0x7f00000006c0)=[0x0], 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) socket$xdp(0x2c, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda350", 0x1f) recvmmsg(r4, &(0x7f000001a480)=[{{&(0x7f0000000880)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000900)=""/233, 0xe9}, {&(0x7f0000000a00)=""/217, 0xd9}, {&(0x7f0000000680)=""/18, 0x12}, {&(0x7f0000000b00)=""/203, 0xcb}, {&(0x7f0000000c00)=""/150, 0x96}, {&(0x7f0000000cc0)=""/42, 0xfffffffffffffffe}, {&(0x7f0000000d00)=""/91, 0x5b}, {&(0x7f0000000d80)=""/211, 0xd3}], 0x8, &(0x7f0000000f00)=""/221, 0xdd}, 0xe}, {{&(0x7f0000001000)=@un=@abs, 0x80, &(0x7f000001a440)=[{&(0x7f0000001080)=""/166, 0xa6}, {&(0x7f0000001140)=""/224, 0xe0}, {&(0x7f000001a240)=""/226, 0xe2}, {&(0x7f000001a340)=""/247, 0xf7}], 0x4}, 0xf09}], 0x2, 0x2, &(0x7f00000001c0)={0x77359400}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0xa) r8 = syz_pidfd_open(0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r9, 0x4b4a, &(0x7f0000002f80)=""/61) pidfd_getfd(r8, r8, 0x0) fsmount(r6, 0x1, 0x70) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x8, 0xe, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x0, 0x7800, 0xfffffffc, 0x4}}) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff, 0x36, 0x0, @void}, 0x10) r12 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r12, 0x402, 0x29) r13 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/unix\x00') read$char_usb(r13, &(0x7f0000000080)=""/50, 0x32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f000001a680)=ANY=[@ANYRES32=r10, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESHEX=r11, @ANYRES32=r11, @ANYRES16=r12, @ANYRES64=r2], 0x20) 6m12.498523697s ago: executing program 7 (id=487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$eJzs3MtvG8UfAPCv7Th9/+JfKY+WFkILouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCloO5YgqcUcckfgLuFAuCDghcUICiSNCqlAvLZyM1t5NXcdO7MSxA/58JCcznlnNfHd37PGs1wEMrNHkTy5ie0T8EhEjtey9FUZr/+7cujz9163L07moVF7/M1etd/vW5emsarbdtlqmUlmm3WtvRUyVy7MX0vz4wrl3x+cvXnr2zLmp07OnZ89PHj9+5PC+4WOTR7sSZxLX7T0fzO3d/fKb11+dPnn97e+/TPq7PS2vj6NbRmt7t6knut1Yn+2oS+eG+tgROlKIiORwFavjfyQKsWWxbCRe+qivnQPWVaWSr2xqXXylAvyHJRN1YBBlb/TJ59/s0aOpx4Zw80QsrmPcSR+1kqHIp3WK6Wek9TAaESev/P1Z8oh1WocAAKh340REPNNs/pePB+rq/S+9hlKKiP9HxM6IuC8idkXE/RHVug9GxEMdtt94hWTp/KcysqrA2pTM/55Pr23dO//LZn9RKqS5HdX4i7lTZ8qzh9J9cjCKm5L8xDJtfPPiT5+0Kquf/yWPpP1sLpj244+hhgW6mamFqbXEXO/m1Yg9Q83izy3OeZP58e6I2LPKNs489cXeVmWlFeNfRhcm5ZXPI56sHf8r0RB/Jtfy+uTEc8cmj45vjvLsofHsrFjqhx+vvdaq/ZWP//q6eaMSWxvO/4bdWsptjpi/eOls9XrtfIcN/Bxx7dePW36mWe35P5x7o5oeTp97f2ph4cJExHDulaXPT97dNstn9ZPz/+CB5uN/Z7pNcvwfjojkJN4XEY9ExKNp3x+LiP0RcWCZXfDdC4+/03n8y6zKd1ES/0zT17/F87+UpO4e/84ThbPfftV5/Imt6fE/Us0dTLdp5/Wv3Q6udf8BAADAv0G++h34XH5sMZ3Pj43VvsO/K7bmy3PzC0+fmnvv/Eztu/KlKOazla6RuvXQiXQtL8tPNuQPp+vGnxa2VPNj03PlmX4HDwNuW4vxn/i9UPv/W197CKwr92vB4DL+YXAZ/zC4jH8YXMY/DK5m4//DPvQD6L0V3v+39KofQO+Z/8PgMv5hcK00/vf35l5koLda3hufX9Mt/xJ9Snw9vLbfamg/EfkNEvIGTRTaqHM1HYW1Z4rRtPJQ2z9mcU8ie1NfufKmpkV9fFECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoon8CAAD///T43is=") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000000400000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r2], 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x390, 0x2e8, 0x218, 0xfeffffff, 0x2e8, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x2e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r7 = dup(r6) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m8.999554791s ago: executing program 7 (id=493): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) statfs(0x0, &(0x7f0000000300)=""/220) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r4 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r4, r4, 0x0, 0x1000000201005) 6m7.745309006s ago: executing program 7 (id=495): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') setuid(0xee00) r1 = getpid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000a001, 0x7fffffff, 0xc265, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x1ff, 0x2, 0x6, 0x8918, 0x0, 0x3, 0x4, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x107a, 0x5, 0x5, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x80000001, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0x80ff, 0x1400, 0x7, 0x3, 0x7ff, 0x807fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x3ff8000, 0x3, 0x57, 0x8, 0x7fff, 0x4f, 0x0, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0x100, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x103, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x9, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0xffffffff, 0x5, 0x0, 0x6, 0xa0, 0x7, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x3, 0x6335, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x4, 0x3, 0x80000001, 0x7fffffff, 0x408, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff8d, 0xfff, 0x3, 0x9, 0x5, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x6, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x9, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0x401, 0x20000006, 0x9982, 0x5, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x4, 0x200, 0x100000c8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x4000006}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r8 = socket$qrtr(0x2a, 0x2, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r10, 0x7}}, 0x48) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r12, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r12, 0x7}}, 0x48) connect$qrtr(r8, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc) bind$qrtr(r8, &(0x7f0000000080)={0x2a, 0x1, 0x4000}, 0xc) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 6m7.142012332s ago: executing program 7 (id=498): r0 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) unshare(0x2a020400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) 6m6.970120631s ago: executing program 7 (id=500): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$eJzs3MtvG8UfAPCv7Th9/+JfKY+WFkILouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCloO5YgqcUcckfgLuFAuCDghcUICiSNCqlAvLZyM1t5NXcdO7MSxA/58JCcznlnNfHd37PGs1wEMrNHkTy5ie0T8EhEjtey9FUZr/+7cujz9163L07moVF7/M1etd/vW5emsarbdtlqmUlmm3WtvRUyVy7MX0vz4wrl3x+cvXnr2zLmp07OnZ89PHj9+5PC+4WOTR7sSZxLX7T0fzO3d/fKb11+dPnn97e+/TPq7PS2vj6NbRmt7t6knut1Yn+2oS+eG+tgROlKIiORwFavjfyQKsWWxbCRe+qivnQPWVaWSr2xqXXylAvyHJRN1YBBlb/TJ59/s0aOpx4Zw80QsrmPcSR+1kqHIp3WK6Wek9TAaESev/P1Z8oh1WocAAKh340REPNNs/pePB+rq/S+9hlKKiP9HxM6IuC8idkXE/RHVug9GxEMdtt94hWTp/KcysqrA2pTM/55Pr23dO//LZn9RKqS5HdX4i7lTZ8qzh9J9cjCKm5L8xDJtfPPiT5+0Kquf/yWPpP1sLpj244+hhgW6mamFqbXEXO/m1Yg9Q83izy3OeZP58e6I2LPKNs489cXeVmWlFeNfRhcm5ZXPI56sHf8r0RB/Jtfy+uTEc8cmj45vjvLsofHsrFjqhx+vvdaq/ZWP//q6eaMSWxvO/4bdWsptjpi/eOls9XrtfIcN/Bxx7dePW36mWe35P5x7o5oeTp97f2ph4cJExHDulaXPT97dNstn9ZPz/+CB5uN/Z7pNcvwfjojkJN4XEY9ExKNp3x+LiP0RcWCZXfDdC4+/03n8y6zKd1ES/0zT17/F87+UpO4e/84ThbPfftV5/Imt6fE/Us0dTLdp5/Wv3Q6udf8BAADAv0G++h34XH5sMZ3Pj43VvsO/K7bmy3PzC0+fmnvv/Eztu/KlKOazla6RuvXQiXQtL8tPNuQPp+vGnxa2VPNj03PlmX4HDwNuW4vxn/i9UPv/W197CKwr92vB4DL+YXAZ/zC4jH8YXMY/DK5m4//DPvQD6L0V3v+39KofQO+Z/8PgMv5hcK00/vf35l5koLda3hufX9Mt/xJ9Snw9vLbfamg/EfkNEvIGTRTaqHM1HYW1Z4rRtPJQ2z9mcU8ie1NfufKmpkV9fFECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoon8CAAD///T43is=") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x48) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) dup(r3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m52.263139012s ago: executing program 36 (id=497): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000000)={[{@delalloc}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x800003d, 0x7ff) write$cgroup_type(r1, &(0x7f0000000000), 0x9) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000140)=0x4) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket(0x400000000010, 0x3, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000240)=""/52, 0x34}], 0x2, 0x4, 0xffffff7c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@deltaction={0x48, 0x18, 0x1, 0x70bd26, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 5m51.132212839s ago: executing program 37 (id=502): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000440)={r3, r4, 0x0, 0xd2, &(0x7f0000000340)="647712899342784af2908ca467232f847ad44ac90fe5410092a71d007ed2e5257733b19b0b7345e7485dacf439398ee558b4d38f5f50ca4c76f8b8a4c9ef1e28ad7229f766cbed92241afe7020f31f4fb1557fa467b312fcef19362221c1c48f12c4f3a4f8cac5ece71158054e0c1e22917a2c378e45a3f6be585d2d901342426f95448f0a7cff68df65e67a45a5304bbba2f5e865c978ae94f5a175f7d7f396e83701e1e25a8a535fb912e49bfaad98eb81ad056810a22e17158746143226218d766084a9f5bfdba8d51fb4f6bf8fdbe2a6", 0x2, 0xfb, 0x6, 0x9, 0x2, 0x1, 0x8, 'syz1\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)={0x8000203d}) lseek(r0, 0xf5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@nobh}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 5m51.009721546s ago: executing program 38 (id=499): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x10}, 0x4, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xbe}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x40010) close(r3) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0xfe}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000200)=[{0x2, 0x1, {0x0, 0xf0, 0x4}, {0x0, 0xff, 0x2}, 0x7e}, {0x0, 0x1, {0x0, 0x0, 0x3}, {0x2, 0xff, 0x2}, 0x3}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xffff, 0x8}, {0xfff1, 0x9}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4008800) r6 = syz_socket_connect_nvme_tcp() r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000800000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x1e}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004001}, 0x10) recvmsg$inet_nvme(r6, &(0x7f0000001640)={&(0x7f0000000240)=@nfc, 0x80, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000000000)=""/57, 0x39}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f00000014c0)=""/222, 0xde}], 0x6, &(0x7f00000001c0)=""/51, 0x33}, 0x22) socket$l2tp(0x2, 0x2, 0x73) 5m50.976544281s ago: executing program 39 (id=500): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x48) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) dup(r3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m1.818205649s ago: executing program 1 (id=679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4d68f, 0x40}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24}}}]}, 0x50}}, 0x4) 5m1.724380211s ago: executing program 1 (id=682): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000400)=0x10, 0x80000) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f00000002c0), 0x4) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x1c, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) recvmsg$kcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/174, 0xae}], 0x1}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0) 5m0.722797803s ago: executing program 1 (id=691): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x78) close(r0) io_uring_setup(0x59b6, &(0x7f0000000140)={0x0, 0x1b43, 0x20, 0x2, 0x146}) r1 = syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x3ed9, 0xfc8af5b88f3ece47, 0x2, 0x2a2, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000000c0)=@phonet={0x23, 0x6, 0x6}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) move_mount(r0, &(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x180) 5m0.692227107s ago: executing program 1 (id=693): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000100)='=', 0xfffffd4a, 0x4fed3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000890}, 0x404c800) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xff10, 0x8000c61) syz_usbip_server_init(0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') exit(0x80000000) read$eventfd(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000006) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073015b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee12f200daf7a4936ce7110ff4117639c2eb4b78c660e677df701905b9aa0339a2884b3e5728a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2d0, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) 4m59.708193063s ago: executing program 0 (id=702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x28, 0x1, 0x0, 0xfffff018}, {0x6, 0xfc, 0x2, 0x4}]}, 0x10) syz_clone(0x48180000, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 4m59.429589671s ago: executing program 0 (id=704): unshare(0x2a020400) r0 = memfd_create(&(0x7f0000000280)='\x03\x00\x00\x00\x00\x00\x00\x00 ', 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b9a6, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r3, 0xc}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000280)="a7359d968b6438a75ce0ed61dcef850e15623c7299c5b4670334b596b7e7bb97ee55c81f307ed3a7", 0x28}], 0x1}, 0x4) cachestat(r0, &(0x7f0000000040)={0x4, 0x7fff}, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m58.884395808s ago: executing program 1 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00 \x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c"], 0x38}}, 0x0) 4m58.790757491s ago: executing program 0 (id=711): r0 = syz_pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x1}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000010428bd70000000000000030000", @ANYRES32=0x0, @ANYBLOB="0000000000040000300012800b00010067656e657665000020000280080001000100000014000700000000000000000000000000000000161400030067656e65766531"], 0x64}}, 0x800) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") pidfd_getfd(r0, r1, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = syz_open_dev$rtc(&(0x7f0000000100), 0x7, 0x24200) write(r6, &(0x7f0000000300)="d936f9f6d4059e473de6a278040fe8e5fc2168f34a4219976c9be2f527b02fb522a341862fcb0da8d6971204361e9b645d656b8717df4d422e5dfeab3754ee4e18d0aea7ec5cf97b1851eba0f21b347b244fb2f9dfaa9f44417b0813156846a7a39d1c9ba021aee8efae3419033eeaa7b42a3ec0bedb4d5593db5907492fc8ccccb3919077b31cd37fc5d901c3580ff088abd434d24c6f01a0ab966f1f17a0fe6d138f39e65393e20f49fbd5810bcf73240c877d242ec659ad54e4e51bdbc4d3152465c59d916b98e527f02b15420f4a043d677777c9d15b", 0xd8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 4m57.98665075s ago: executing program 1 (id=714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10143, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="8106010007940000140012800b000100627269646765000004000280185b91e7f66159e48df0032949581b6e1c581cc7471e90d92e294f47e07c953dd4dfb0b702b445ba4b2c44c4f56ee954538b232de8832f771886126c417914d4139204d6fb9ca139255650de4c848087cb60696666344d330c4f2aad5d5b869c1ce590183f2d21103b6afc450669e33c930fd21a6b47b4ad427506ff83a2431debbf8b65addef24accc773251e23c96666596666e878b7e903a4c9583bc10042de79408f64dd88c2c96e0a"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20044002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) close_range(r5, r5, 0x6) r6 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001400b59500000000fedbdf250a400000", @ANYRES32=r2, @ANYBLOB="14000200fe5b"], 0x2c}}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) msync(&(0x7f0000654000/0x2000)=nil, 0x2000, 0x3) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r8, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) r9 = socket$inet6(0x10, 0x2, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x3, 0xb, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bind$packet(r10, &(0x7f0000000000)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r10, &(0x7f0000000280)="02042800ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d13", 0x32, 0x20008840, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000080)="4c00000015001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 4m57.98614066s ago: executing program 40 (id=714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10143, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="8106010007940000140012800b000100627269646765000004000280185b91e7f66159e48df0032949581b6e1c581cc7471e90d92e294f47e07c953dd4dfb0b702b445ba4b2c44c4f56ee954538b232de8832f771886126c417914d4139204d6fb9ca139255650de4c848087cb60696666344d330c4f2aad5d5b869c1ce590183f2d21103b6afc450669e33c930fd21a6b47b4ad427506ff83a2431debbf8b65addef24accc773251e23c96666596666e878b7e903a4c9583bc10042de79408f64dd88c2c96e0a"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20044002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) close_range(r5, r5, 0x6) r6 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001400b59500000000fedbdf250a400000", @ANYRES32=r2, @ANYBLOB="14000200fe5b"], 0x2c}}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) msync(&(0x7f0000654000/0x2000)=nil, 0x2000, 0x3) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r8, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) r9 = socket$inet6(0x10, 0x2, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x3, 0xb, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bind$packet(r10, &(0x7f0000000000)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r10, &(0x7f0000000280)="02042800ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d13", 0x32, 0x20008840, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000080)="4c00000015001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 4m57.457441441s ago: executing program 0 (id=719): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xa2ed0000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) statfs(0x0, &(0x7f0000000300)=""/220) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r2 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r2, r2, 0x0, 0x1000000201005) 4m56.725877653s ago: executing program 0 (id=725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x5) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m56.424491117s ago: executing program 0 (id=727): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x4, &(0x7f0000006680)) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x123dc9b, 0x0, 0x5, 0x0, &(0x7f0000000240)) r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0xfffc, 0x20, 0xfff3}) pidfd_getfd(r2, r2, 0x0) process_mrelease(r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000001100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5, r4}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010069ba70000000000000000000", @ANYRES32=0x0, @ANYBLOB="46f2040000000000140003006e657464657673696d3000000000000014001680100001800c0005000900000000040000"], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000480)={r8, 0x961c, 0x2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000006c0)={r8, 0x7, 0xf}) 4m41.109000234s ago: executing program 41 (id=727): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x4, &(0x7f0000006680)) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x123dc9b, 0x0, 0x5, 0x0, &(0x7f0000000240)) r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0xfffc, 0x20, 0xfff3}) pidfd_getfd(r2, r2, 0x0) process_mrelease(r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000001100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5, r4}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010069ba70000000000000000000", @ANYRES32=0x0, @ANYBLOB="46f2040000000000140003006e657464657673696d3000000000000014001680100001800c0005000900000000040000"], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000480)={r8, 0x961c, 0x2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000006c0)={r8, 0x7, 0xf}) 2m38.010354002s ago: executing program 9 (id=1658): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/mem_sleep', 0x149a42, 0x1a0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$cgroup_int(r1, &(0x7f0000000040)=0x80080004, 0xfc1c) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000040)=0x101) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f00000001c0)={0x1, 0x9, 0x23, 0x0, 0x0, 0xffffa, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000240)={{{@in=@private, @in6=@private2}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000140)=0xe8) 2m36.699666406s ago: executing program 9 (id=1666): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@authinfo={0x18, 0x84, 0x6, {0x1}}], 0x18, 0x8040}], 0x1, 0x8800) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_io_uring_setup(0xc79, &(0x7f0000000000)={0x0, 0x192c, 0x8, 0x2, 0x3db}, &(0x7f00000000c0), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x3a, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000003900093af036d6760000000004000000040000000c0001800600060086dd"], 0x24}}, 0x10) 2m34.798787119s ago: executing program 9 (id=1670): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x190) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000010c0)={0xc, {"a2e3ad21ed0d52f91b5d320987f70e06d038e7ff7fc6e5539b356d298b089b0708374b090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c30501cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) socketpair(0x28, 0x5, 0x28, &(0x7f00000002c0)) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x9, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000100080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2m34.543995271s ago: executing program 9 (id=1675): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f00000000c0)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000020) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open$dir(&(0x7f0000000240)='./bus\x00', 0x900, 0x13) r6 = open$dir(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x101) unshare(0x400) tee(r6, r7, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x2c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}}, 0x24040800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000325000/0x3000)=nil, 0x3000) 2m34.135127025s ago: executing program 9 (id=1679): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/mem_sleep', 0x149a42, 0x1a0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$cgroup_int(r1, &(0x7f0000000040)=0x80080004, 0xfc1c) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000040)=0x101) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f00000001c0)={0x1, 0x9, 0x23, 0x0, 0x0, 0xffffa, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@empty, @in=@local, 0x4e20, 0x400, 0x4e20, 0x7, 0x2, 0xa0, 0x20, 0x0, 0x0, r9}, {0xae, 0x2, 0xe, 0x2, 0x4, 0x9, 0x5, 0x5e}, {0x8, 0x3, 0x200, 0x400}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0x2, @in=@loopback, 0x34ff, 0x0, 0x2, 0x0, 0x8, 0x8, 0x7}}, 0xe8) 2m32.954527573s ago: executing program 9 (id=1684): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_open_dev$loop(0x0, 0x7, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x6161, 0x0, 0x0) r2 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x6, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r2, 0x2afd, 0x308b, 0xc, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2m32.953881333s ago: executing program 42 (id=1684): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_open_dev$loop(0x0, 0x7, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x6161, 0x0, 0x0) r2 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x6, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r2, 0x2afd, 0x308b, 0xc, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 54.661403824s ago: executing program 4 (id=2347): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r3, 0x0, 0x7}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/209, 0xd1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @loopback, @remote, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 53.575630251s ago: executing program 4 (id=2352): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000000400000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r2], 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x390, 0x2e8, 0x218, 0xfeffffff, 0x2e8, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x2e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r7 = dup(r6) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 52.366792554s ago: executing program 4 (id=2355): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/mem_sleep', 0x149a42, 0x1a0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$cgroup_int(r1, &(0x7f0000000040)=0x80080004, 0xfc1c) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000040)=0x101) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f00000001c0)={0x1, 0x9, 0x23, 0x0, 0x0, 0xffffa, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@empty, @in=@local, 0x4e20, 0x400, 0x4e20, 0x7, 0x2, 0xa0, 0x20, 0x0, 0x0, r8}, {0xae, 0x2, 0xe, 0x2, 0x4, 0x9, 0x5, 0x5e}, {0x8, 0x3, 0x200, 0x400}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0x2, @in=@loopback, 0x34ff, 0x0, 0x2, 0x0, 0x8, 0x8, 0x7}}, 0xe8) 51.345730712s ago: executing program 4 (id=2368): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2e3, &(0x7f0000000d40)="$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") r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000840)='./file0\x00', 0x5210, &(0x7f0000000880)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xdd, 0x2e9, &(0x7f0000000a40)="$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") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000900)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000940)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}, {&(0x7f0000001040)="815281f6650597aa51b3c58eb4532c88afaab4eb021bbfc5ca57db43f63434ce99f543517988ac3292029514b3b061c2c7d4165b1197c60e2e3a565ce228bd097f7614a583f3bb81c4bdb5f4eaef5a0750151c0e0e9270fc12cd948e1419e7d85ed5d6d2eea86a6d558b8a4afcc10864c30c06f19ffe5e72172dd9b051d708c5983d0c5d3cfbf92bd3c9616892e2ae1b23abb83af3e824bbfbb9dad298a43b1062a8a430d575da8a82294dd2cec4c9dca907dc5185be5f44ad07d4385ed8e208159a72f4324ac840a6a06b1259", 0xcd}, {&(0x7f0000001140)="7fcf43f38c42198cfa466850631dbb17163854cb5aff8cbe10c2f6fc220c27be5eaba3f5e982cd834a6c7ff879cae271e692fa643d2de56b666a06d5a5665dfb901aa69ae91bbc8f5772e8659c7c914adf9828d04366f5a1c7414c556472e2f03a9a76da3dc4fba5970b8875cbe67b998ab28b138184355e471afc9df832de5e9645cd2adcbb2981eebb4e7ab63c46a3bed5b44f2fc0d9a18308a22f088646b44ccee9601a41257c6c222f0d4c79afb7e47ef4f6892535679b75338725", 0xbd}], 0x3}, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000a00)={[0x3]}, 0x8) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000001c0)='M', &(0x7f00000009c0)='./file2\x00', r6) 50.662394214s ago: executing program 4 (id=2371): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e344d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e397dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f96191", 0x5e, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r6, r5, 0x4, r4}, 0x10) 49.674370269s ago: executing program 4 (id=2378): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x7}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/209, 0xd1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @loopback, @remote, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 49.673769099s ago: executing program 43 (id=2378): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x7}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/209, 0xd1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @loopback, @remote, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 7.501546638s ago: executing program 5 (id=2646): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x22020400) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0xfcf3) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000100)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0x1, 0x214, &(0x7f0000000840)="$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") mq_open(&(0x7f0000000040)='.9', 0x800, 0x98, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x148) 7.261872293s ago: executing program 5 (id=2649): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000440)={0x0, "bb2bf22eda4faeaf3f17fa236d27134a160e8878c37443a4a0d6b77f14ccca5254acf3ca5e8d47d05670c3f57e4d6f9ea9cb4bb968d0c7d9b8dbfb8de75881d8", 0x3e}, 0x48, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000003c0)=@chain={'key_or_keyring:', r2}) symlink(0x0, &(0x7f00000017c0)='./file0\x00') file_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x20, 0x3, 0x0, 0x0, 0x4}, 0x18, 0x1000) socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@nombcache}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x147042, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read(r5, &(0x7f0000001400)=""/4096, 0x1000) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r4, &(0x7f0000000180)="8995b3c271bfb84f6e861cd28301f2e02519276836b2ab14baa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce60bd4af9b8cf0b15eab7ab7a92eb2bad756f12238f6649d204a1065dad7cffef082a59ee2b8735d83669614e4eb5b9be7e4e76b2bb0c", 0xffffffffffffff55, 0x4040, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 6.50129536s ago: executing program 5 (id=2651): r0 = syz_io_uring_setup(0x237, &(0x7f00000000c0)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x7a, 0x0, @fd=r0, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x20) 6.050966076s ago: executing program 5 (id=2653): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) unshare(0x2040400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_usb_disconnect(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000000)=0x20) unshare(0x4060000) syz_usb_connect(0x6, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085504, 0x0) r2 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @local, 0x3, 0x4}, 0x80, &(0x7f0000000100)=[{0x0, 0x21}], 0x1}, 0x4804) ptrace(0x10, r2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) unshare(0x100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x14, &(0x7f0000000040), 0x4) 5.59471114s ago: executing program 6 (id=2656): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="2e00903900000000"], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000000)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="000000005c5200b70200e9ffffff000500008251000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5.589860839s ago: executing program 6 (id=2657): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x1}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="0000800000000000180034"], 0x38}, 0x1, 0x300, 0x0, 0x404c810}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000002c0)=r2, 0x4) syz_io_uring_setup(0x152, &(0x7f0000000140)={0x0, 0x40003f31, 0x400, 0x43, 0x26}, 0x0, 0x0) 5.216358789s ago: executing program 6 (id=2660): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x100, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953ed", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0xb97e8e946f9f2f19, 0x32, 0x43a1bd76, 0x1, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x48, 0x0, 0x40, 0x3}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x26, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x7, 0x2}]}}, {{0xfffd, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000013c0)={0x1e4, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r7}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x40, 0x7f, 0x869}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000881}, 0x404c004) ioctl$TCSETS(r0, 0x40045431, 0x0) r8 = syz_open_pts(r0, 0x0) syz_clone3(&(0x7f0000001340)={0x2000000, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x32}, &(0x7f0000000240)=""/245, 0xf5, &(0x7f0000000340)=""/4096, &(0x7f00000001c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x7, 0x87, 0x1, 0x0, 0x9, 0x0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_config_ext={0x8, 0x7f}, 0x6001, 0x40, 0x421, 0x1, 0x3, 0x1, 0x8, 0x0, 0xc1, 0x0, 0x1}, r9, 0x3, 0xffffffffffffffff, 0x1) accept(r3, &(0x7f00000015c0)=@generic, &(0x7f0000001640)=0x80) r10 = dup3(r8, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000200)=0x17) 4.872292584s ago: executing program 3 (id=2663): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r0, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x600, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x3c}}, 0x0) 4.73874501s ago: executing program 2 (id=2665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/mem_sleep', 0x149a42, 0x1a0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$cgroup_int(r1, &(0x7f0000000040)=0x80080004, 0xfc1c) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000040)=0x101) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f00000001c0)={0x1, 0x9, 0x23, 0x0, 0x0, 0xffffa, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@empty, @in=@local, 0x4e20, 0x400, 0x4e20, 0x7, 0x2, 0xa0, 0x20, 0x0, 0x0, r9}, {0xae, 0x2, 0xe, 0x2, 0x4, 0x9, 0x5, 0x5e}, {0x8, 0x3, 0x200, 0x400}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0x2, @in=@loopback, 0x34ff, 0x0, 0x2, 0x0, 0x8, 0x8, 0x7}}, 0xe8) 4.336103834s ago: executing program 6 (id=2666): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000180)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000700)={{0xffffffffffffffff, &(0x7f0000000040)=':\x00', 0x8000, &(0x7f0000000100)={@_ha_fsid={[0x8, 0x85a]}, {0xffff, 0x9, 0x4}}, 0x4, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000002c0)=0x7ff}, 0x3, &(0x7f0000000680)=[{0x1, 0x95, &(0x7f0000000300)='\x00', &(0x7f0000000340), 0x0, 0x1a}, {0x2, 0x5, &(0x7f0000000380)='q,\'-[[\x00', &(0x7f00000003c0)="d4d9ebdf0cff638c9034b85742bd38aeac26e79e8ef64068da87587a03a0ae72c8bea11e1a40126396b564337b7a34ef5a56ad95b6b8382f779c3f6f309043b81f9307028f1aa2786438383360c4eeb571966ffe9f925f02a282ea0d86c8187f5e9b6d57262853955c5cf62b93bb9de3c586eece98ec9281ce18997e4bddbd85ab4921a966aa4270c2ebef65ff5ce447e7abc1b8de3a8878ca475fdac87eaddab3917ff7c6dd863033103be0c7e57d6ef606f71c58685ba910f70969ce59218ce37f02c5fd2a508fecbf23cfeef54cf0e388ef65b1", 0xd5, 0x12}, {0x2, 0x1, &(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0, 0x20}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000b00)={'sit0\x00', 0x0, 0x7800, 0x10, 0xffe00000, 0x800, {{0x3a, 0x4, 0x3, 0x5, 0xe8, 0x68, 0x0, 0x4, 0x2f, 0x0, @empty, @remote, {[@noop, @timestamp_addr={0x44, 0x24, 0x31, 0x1, 0x8, [{@multicast2, 0x4}, {@empty, 0xf34}, {@local, 0x7ff}, {@empty, 0x10001}]}, @timestamp_addr={0x44, 0x24, 0x88, 0x1, 0x0, [{@loopback, 0x3}, {@empty, 0xbf38}, {@rand_addr=0x64010100, 0xa7}, {@empty, 0x6}]}, @timestamp_prespec={0x44, 0xc, 0x85, 0x3, 0x7, [{@remote, 0x3}]}, @timestamp={0x44, 0x18, 0xbb, 0x0, 0x8, [0x39, 0x6, 0xf, 0x3, 0xffff3d70]}, @timestamp_addr={0x44, 0x1c, 0x71, 0x1, 0x8, [{@loopback}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}, {@remote, 0x4}]}, @cipso={0x86, 0x38, 0x1, [{0x6, 0x11, "bb51fe0eb6b527e497822d835bf3c5"}, {0x5, 0x8, "6ed2c4161fd6"}, {0x1, 0xd, "286a503f651d1e2e36401d"}, {0x0, 0x8, "4acbe15bdca1"}, {0x5, 0x4, "9f32"}]}, @end, @lsrr={0x83, 0xf, 0x78, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x9, 0xfff3}, {0xe, 0x1}, {0x19}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x20048000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) timer_create(0x7, &(0x7f0000000800)={0x0, 0xc, 0x2, @tid=r7}, &(0x7f0000000840)) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0x40505331, &(0x7f0000000240)={{0xa, 0x5}, {0x9, 0x1}, 0x4, 0x3, 0x3}) unshare(0x6a040000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x204980, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r9, 0x94eb2000) read$ptp(0xffffffffffffffff, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x815}, 0x408c4) sendto$inet_nvme_icreq_pdu(r3, &(0x7f0000000c40)={{0x0, 0x0, 0x80, 0xc9}}, 0x80, 0x0, 0x0, 0x0) 4.141307987s ago: executing program 3 (id=2669): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x10001, 0x2, 0x100, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000180)=""/14, 0xfffffffffffffee4}], &(0x7f00000005c0), 0x2}, 0x20) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000000280)={0x81, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f0000000300)=""/158, 0x9e}], &(0x7f00000000c0)=[0x100, 0x1], 0x2}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) 4.054595641s ago: executing program 3 (id=2671): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x14, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x800}, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0x4000032f}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, 'gre0\x00'}}, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r9, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r10 = syz_pidfd_open(0x0, 0x0) fsetxattr$trusted_overlay_nlink(r10, &(0x7f00000018c0), 0x0, 0x0, 0x1) fremovexattr(r10, 0x0) recvmmsg(r9, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) mlock2(&(0x7f00006b9000/0x2000)=nil, 0x2000, 0x6b9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.884984069s ago: executing program 2 (id=2672): r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="2b70576a83d78a5b638a4e24ce0aa21fdec02be37c04bf3d8a3d05aef1c3dad928c3fcb23d4eb34c584f0e952eaef799f03fdb0a0c36253935452f4d24b5d52f3d2a34302eeabc3a25280300740a89"], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0x8000) 3.824680208s ago: executing program 2 (id=2673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100626174616476004288cf69ef083248cd46cbf610383e4400040002800a0001000180c2000001000051020125e10bdb3b661c050e693ea47a0ae96f7a548a0fc2"], 0x40}}, 0x0) 3.72862272s ago: executing program 5 (id=2674): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000"], 0x0, 0x56}, 0x28) getgroups(0x1, &(0x7f0000000180)=[0xee00]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5560}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x6000, 0x4, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000000940)='./file0\x00', r4, r5, 0x1000) setregid(r2, r5) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x6}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x6b, 0x11, 0x3c}, [@call={0x85, 0x0, 0x0, 0xd4}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 3.72742012s ago: executing program 2 (id=2675): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0xb8b, @loopback={0xfec0ffffffffffff}, 0xfffffffb}, 0x80, 0x0}, 0x8010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r0, r1, 0x0, 0xffffffff004) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000008e000000004b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x80001, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8) getsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, &(0x7f00000002c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000180)={0x2, [0x0, 0x0]}) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x1000, {{0xa, 0x2, 0x4, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x113, 0x2) 3.472197462s ago: executing program 3 (id=2676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x800}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$qrtr(0x2a, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket(0x27, 0x80000, 0x0) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) unshare(0x22020400) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c26249812000194d7f663828e23e43e30f19f494daf5b6ddf0a03000000fedbdf"], 0x14}}, 0x20040890) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r11, 0x0, 0x0}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000180)="448b7cff000000000000108a15df0953fdd7b0a35041b9ff1f1d4c", 0x1b}], 0x2) 2.688550345s ago: executing program 2 (id=2677): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) listen(r0, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum={0x8}, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x4, 0x1, 0x2000000}]}]}, {0x0, [0x5f, 0x61, 0x5f, 0x5f, 0x0, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x46, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) msgsnd(0x0, &(0x7f0000000380)={0x1, "760abe0b4c170d6598f69ab2a46601c34c400383309bfb7c7803c86392f19898e37c68337892732303d77b63acc9eed8d9cced297d4829788bc0b789fab75d161ba321751906c4656030ffebb64bcb7da34b56af3d9974d2d219f496b2782e0b3783ca30558b4b871f733fd27fee45ec009c6cfcb9917e3a69f36549a1aa4e5bf4eaad50ee9d20c397d46ab0d6664abf578949774fa08eaf0068a450e4ff351b27b985f9b8cad0e7eb2d0e6b9e376a9cff89d88d4f83a5ccdc408170ab71b5d8b376c78aadb944f5ae9f387a"}, 0xd4, 0x800) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@jqfmt_vfsold}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r5 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000088) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0), 0x12) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 2.517310973s ago: executing program 8 (id=2678): r0 = socket(0x2d, 0x2, 0x0) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x7e2b, 0x20, 0x0, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000300)="44fb94d1bf09ffff3759bb3333b65e1620cede383e0f1c7dd3164ec18e2af04583170ab80b018a1371aa884704faaa5b4ef95edd22d78e0471e92aeda669a7e97e92d2f5584a252d6253e932ef083376f0628f7a5dcfc3c53c5ec8ce034387ec9171a4b6be8e72c6beda08ea5fbb69d9b649ac64fd20b921200cd8ff0eeb25cac25f83b48435f0f5ef9dee7133a283b26bb2a621ea46dcc672cacfe8d7abdce393359e536ee4e3e15ee7c39e5f30cd4a8cdb42b8b60a4caa05bb2bad5312762676", 0xc1) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) clock_settime(0x1ed5d7403, &(0x7f0000000180)) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) unshare(0x6a040000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40c002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x30, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x3}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}]}, 0x30}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getneigh={0x14, 0x1e, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x804) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x6}, 0x1) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0), 0x0, 0x0, 0x30}, 0x0) 701.293012ms ago: executing program 8 (id=2679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 614.602956ms ago: executing program 8 (id=2680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r3, 0x30}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syslog(0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x4}, 0x107200, 0x10004, 0x20da, 0x5, 0xc, 0x20005, 0xb, 0x0, 0x1a3e, 0x0, 0x20000006}, 0x0, 0xfffffffffeffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000100)={0xff9c, 0x8001}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x40000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000000701030000000000000000000000000900000073797a3000000000"], 0x20}}, 0x20) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xfffc}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20044800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) 510.596826ms ago: executing program 3 (id=2681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r3, 0x30}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syslog(0x4, &(0x7f0000000040)=""/38, 0x26) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x4}, 0x107200, 0x10004, 0x20da, 0x5, 0xc, 0x20005, 0xb, 0x0, 0x1a3e, 0x0, 0x20000006}, 0x0, 0xfffffffffeffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000100)={0xff9c, 0x8001}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x40000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000000701030000000000000000000000000900000073797a3000000000"], 0x20}}, 0x20) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xfffc}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20044800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) 490.202683ms ago: executing program 8 (id=2682): r0 = socket(0x10, 0x3, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000006400000000000000ffffffff85000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff24}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x3e9, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x20008054) 424.58208ms ago: executing program 8 (id=2683): r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="2b70576a83d78a5b638a4e24ce0aa21fdec02be37c04bf3d8a3d05aef1c3dad928c3fcb23d4eb34c584f0e952eaef799f03fdb0a0c36253935452f4d24b5d52f3d2a34302eeabc3a25280300740a89"], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0x8000) 423.09157ms ago: executing program 6 (id=2684): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0x5}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0x3) ioctl$VT_WAITACTIVE(r0, 0x5607) r6 = socket$kcm(0x11, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000380)=0xc) setresuid(0x0, r7, r7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000280)={[{@i_version}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@errors_remount}, {@acl}, {@grpquota}], [{@euid_lt={'euid<', r7}}, {@appraise_type}]}, 0x0, 0x47b, &(0x7f0000000700)="$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") ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000000c0)=""/137) 421.71615ms ago: executing program 5 (id=2685): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000001300)={0xa, 0x4e23, 0x7, @mcast2, 0x4}, 0x1c) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, 0x0, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1f, &(0x7f0000000900)=""/4096, &(0x7f0000000440)=0x1000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, &(0x7f0000000280)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r6, 0x0) 411.362728ms ago: executing program 2 (id=2686): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/mem_sleep', 0x149a42, 0x1a0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$cgroup_int(r1, &(0x7f0000000040)=0x80080004, 0xfc1c) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f0000000040)=0x101) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f00000001c0)={0x1, 0x9, 0x23, 0x0, 0x0, 0xffffa, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@empty, @in=@local, 0x4e20, 0x400, 0x4e20, 0x7, 0x2, 0xa0, 0x20, 0x0, 0x0, r7}, {0xae, 0x2, 0xe, 0x2, 0x4, 0x9, 0x5, 0x5e}, {0x8, 0x3, 0x200, 0x400}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0x2, @in=@loopback, 0x34ff, 0x0, 0x2, 0x0, 0x8, 0x8, 0x7}}, 0xe8) 333.658763ms ago: executing program 8 (id=2687): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0xb8b, @loopback={0xfec0ffffffffffff}, 0xfffffffb}, 0x80, 0x0}, 0x8010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r0, r1, 0x0, 0xffffffff004) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000008e000000004b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x80001, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8) getsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, &(0x7f00000002c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000180)={0x2, [0x0, 0x0]}) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x1000, {{0xa, 0x2, 0x4, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x113, 0x2) 63.063882ms ago: executing program 3 (id=2688): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x47ba, 0x100, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000080)=0x5, 0x4) open(&(0x7f0000000300)='./cgroup\x00', 0x8000, 0xb2) socket$caif_stream(0x25, 0x1, 0x1) connect$caif(0xffffffffffffffff, &(0x7f0000005b00)=@rfm={0x25, 0x9, "045b549c8e22ffbd2927f472a91f3d69"}, 0x18) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000500)={0x1, r9, 0x700, {0x5, 0x7}, 0x1}, 0x1) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000440)=""/178, 0xb2}], 0x1, 0x2, 0x6) 0s ago: executing program 6 (id=2689): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2e3, &(0x7f0000000d40)="$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") r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000900)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000940)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}, {&(0x7f0000001040)="815281f6650597aa51b3c58eb4532c88afaab4eb021bbfc5ca57db43f63434ce99f543517988ac3292029514b3b061c2c7d4165b1197c60e2e3a565ce228bd097f7614a583f3bb81c4bdb5f4eaef5a0750151c0e0e9270fc12cd948e1419e7d85ed5d6d2eea86a6d558b8a4afcc10864c30c06f19ffe5e72172dd9b051d708c5983d0c5d3cfbf92bd3c9616892e2ae1b23abb83af3e824bbfbb9dad298a43b1062a8a430d575da8a82294dd2cec4c9dca907dc5185be5f44ad07d4385ed8e208159a72f4324ac840a6a06b1259", 0xcd}, {&(0x7f0000001140)="7fcf43f38c42198cfa466850631dbb17163854cb5aff8cbe10c2f6fc220c27be5eaba3f5e982cd834a6c7ff879cae271e692fa643d2de56b666a06d5a5665dfb901aa69ae91bbc8f5772e8659c7c914adf9828d04366f5a1c7414c556472e2f03a9a76da3dc4fba5970b8875cbe67b998ab28b138184355e471afc9df832de5e9645cd2adcbb2981eebb4e7ab63c46a3bed5b44f2fc0d9a18308a22f088646b44ccee9601a41257c6c222f0d4c79afb7e47ef4f6892535679b75338725", 0xbd}], 0x3}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000a00)={[0x3]}, 0x8) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000001c0)='M', &(0x7f00000009c0)='./file2\x00', r2) kernel console output (not intermixed with test programs): 117 [ 467.545840][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 467.553276][ T28] audit: type=1326 audit(1772735569.325:18087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dfc6c799 code=0x7ffc0000 [ 467.559623][ C1] EXT4-fs (loop2): initial error at time 1772735570: ext4_orphan_get:1417 [ 467.583980][T13836] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.592166][ C1] EXT4-fs (loop2): last error at time 1772735570: ext4_orphan_get:1417 [ 467.615785][T13830] EXT4-fs (loop2): 1 orphan inode deleted [ 467.622163][T13830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.635542][T13839] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 467.648363][ T28] audit: type=1326 audit(1772735569.325:18088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dfc6c799 code=0x7ffc0000 [ 467.672318][ T28] audit: type=1326 audit(1772735569.325:18089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa0dfc6c799 code=0x7ffc0000 [ 467.675926][T13839] FAT-fs (loop3): Filesystem has been set read-only [ 467.736313][T13825] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2249: bad orphan inode 134217728 [ 467.762878][T13825] loop5: lost filesystem error report for type 5 error -117 [ 467.765802][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 467.779609][ C0] EXT4-fs (loop5): initial error at time 1772735570: ext4_orphan_get:1417 [ 467.788195][ C0] EXT4-fs (loop5): last error at time 1772735570: ext4_orphan_get:1417 [ 467.805068][T13825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.841818][T13836] syzkaller0: entered promiscuous mode [ 467.847452][T13836] syzkaller0: entered allmulticast mode [ 468.016294][T13849] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 4: comm syz.2.2251: lblock 0 mapped to illegal pblock 4 (length 1) [ 468.426038][ T6108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.446227][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.497120][T13854] FAULT_INJECTION: forcing a failure. [ 468.497120][T13854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.543204][T13854] CPU: 0 UID: 0 PID: 13854 Comm: syz.2.2256 Tainted: G W syzkaller #0 PREEMPT(full) [ 468.543289][T13854] Tainted: [W]=WARN [ 468.543298][T13854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.543313][T13854] Call Trace: [ 468.543321][T13854] [ 468.543331][T13854] __dump_stack+0x1d/0x30 [ 468.543363][T13854] dump_stack_lvl+0x95/0xd0 [ 468.543390][T13854] dump_stack+0x15/0x1b [ 468.543465][T13854] should_fail_ex+0x263/0x280 [ 468.543489][T13854] should_fail+0xb/0x20 [ 468.543569][T13854] should_fail_usercopy+0x1a/0x20 [ 468.543660][T13854] _copy_to_user+0x20/0xa0 [ 468.543690][T13854] simple_read_from_buffer+0xb5/0x130 [ 468.543717][T13854] proc_fail_nth_read+0x10e/0x150 [ 468.543750][T13854] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.543796][T13854] vfs_read+0x1ab/0x7f0 [ 468.543833][T13854] ? __sys_bind+0x1e9/0x290 [ 468.543861][T13854] ksys_read+0xdc/0x1a0 [ 468.543922][T13854] __x64_sys_read+0x40/0x50 [ 468.543957][T13854] x64_sys_call+0x2886/0x3020 [ 468.544006][T13854] do_syscall_64+0x12c/0x370 [ 468.544026][T13854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.544051][T13854] RIP: 0033:0x7f13638ccfce [ 468.544070][T13854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 468.544167][T13854] RSP: 002b:00007f136235efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.544190][T13854] RAX: ffffffffffffffda RBX: 00007f136235f6c0 RCX: 00007f13638ccfce [ 468.544206][T13854] RDX: 000000000000000f RSI: 00007f136235f0a0 RDI: 0000000000000004 [ 468.544219][T13854] RBP: 00007f136235f090 R08: 0000000000000000 R09: 0000000000000000 [ 468.544232][T13854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.544246][T13854] R13: 00007f1363b86038 R14: 00007f1363b85fa0 R15: 00007fffe003c9c8 [ 468.544345][T13854] [ 468.768214][T13859] openvswitch: netlink: Missing key (keys=40, expected=100) [ 468.785000][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.845032][T13864] loop2: detected capacity change from 0 to 512 [ 468.885083][T13864] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 468.916436][T13864] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 468.935441][T13864] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2260: bad orphan inode 4 [ 468.945789][T13864] loop2: lost filesystem error report for type 5 error -117 [ 468.947523][T13864] EXT4-fs (loop2): 1 orphan inode deleted [ 468.960733][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 468.960758][ C0] EXT4-fs (loop2): initial error at time 1772735571: ext4_orphan_get:1417 [ 468.960784][ C0] EXT4-fs (loop2): last error at time 1772735571: ext4_orphan_get:1417 [ 469.012770][T13864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.210842][T13884] loop5: detected capacity change from 0 to 512 [ 469.336189][T13884] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 469.359232][T13885] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 4: comm syz.2.2260: lblock 0 mapped to illegal pblock 4 (length 1) [ 469.403873][T13888] loop4: detected capacity change from 0 to 256 [ 469.466643][T13884] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 469.481533][T13888] vfat: Deprecated parameter 'posix' [ 469.490904][T13884] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2267: bad orphan inode 4 [ 469.529106][T13888] FAT-fs: "posix" option is obsolete, not supported now [ 469.554982][T13884] loop5: lost filesystem error report for type 5 error -117 [ 469.565533][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 469.579624][ C1] EXT4-fs (loop5): initial error at time 1772735572: ext4_orphan_get:1417 [ 469.588296][ C1] EXT4-fs (loop5): last error at time 1772735572: ext4_orphan_get:1417 [ 469.599213][T13884] EXT4-fs (loop5): 1 orphan inode deleted [ 469.606004][T13884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.038342][T13681] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 470.058713][T13894] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 4: comm syz.5.2267: lblock 0 mapped to illegal pblock 4 (length 1) [ 470.398407][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.437426][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.511849][T13902] loop5: detected capacity change from 0 to 256 [ 470.523238][T13909] usb usb9: usbfs: process 13909 (syz.4.2275) did not claim interface 0 before use [ 470.535275][T13909] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 470.548650][T13902] vfat: Deprecated parameter 'posix' [ 470.558505][T13902] FAT-fs: "posix" option is obsolete, not supported now [ 470.589337][T13900] 9p: Could not find request transport: unix @ [ 470.979073][T13909] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 471.013227][T13898] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2269: bad orphan inode 134217728 [ 471.044927][T13909] EXT4-fs (loop4): 1 truncate cleaned up [ 471.054079][T13898] loop2: lost filesystem error report for type 5 error -117 [ 471.055364][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 471.069306][ C1] EXT4-fs (loop2): initial error at time 1772735573: ext4_orphan_get:1417 [ 471.077960][ C1] EXT4-fs (loop2): last error at time 1772735573: ext4_orphan_get:1417 [ 471.099846][T13898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.114855][T13909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.377301][T13911] syz.8.2276 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 471.391269][T13911] CPU: 0 UID: 0 PID: 13911 Comm: syz.8.2276 Tainted: G W syzkaller #0 PREEMPT(full) [ 471.391307][T13911] Tainted: [W]=WARN [ 471.391315][T13911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.391329][T13911] Call Trace: [ 471.391337][T13911] [ 471.391347][T13911] __dump_stack+0x1d/0x30 [ 471.391436][T13911] dump_stack_lvl+0x95/0xd0 [ 471.391462][T13911] dump_stack+0x15/0x1b [ 471.391507][T13911] dump_header+0x80/0x240 [ 471.391534][T13911] oom_kill_process+0x295/0x350 [ 471.391560][T13911] out_of_memory+0x97d/0xb80 [ 471.391655][T13911] try_charge_memcg+0x62e/0xa10 [ 471.391701][T13911] obj_cgroup_charge_pages+0x23/0xc0 [ 471.391730][T13911] __memcg_kmem_charge_page+0x9e/0x170 [ 471.391840][T13911] __alloc_frozen_pages_noprof+0x18a/0x360 [ 471.391876][T13911] alloc_pages_mpol+0xb3/0x260 [ 471.391909][T13911] alloc_pages_noprof+0x8f/0x130 [ 471.391997][T13911] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 471.392036][T13911] __kvmalloc_node_noprof+0x3d4/0x650 [ 471.392129][T13911] ? futex_hash_allocate+0x190/0x9d0 [ 471.392161][T13911] ? futex_hash_allocate+0x190/0x9d0 [ 471.392200][T13911] futex_hash_allocate+0x190/0x9d0 [ 471.392231][T13911] ? cap_task_prctl+0x13f/0x6e0 [ 471.392285][T13911] futex_hash_prctl+0xd8/0xf0 [ 471.392317][T13911] __se_sys_prctl+0xa3d/0x13f0 [ 471.392352][T13911] __x64_sys_prctl+0x67/0x80 [ 471.392442][T13911] x64_sys_call+0x2533/0x3020 [ 471.392527][T13911] do_syscall_64+0x12c/0x370 [ 471.392554][T13911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.392579][T13911] RIP: 0033:0x7f4b8047c799 [ 471.392600][T13911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.392622][T13911] RSP: 002b:00007f4b7eecf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 471.392707][T13911] RAX: ffffffffffffffda RBX: 00007f4b806f5fa0 RCX: 00007f4b8047c799 [ 471.392723][T13911] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 471.392739][T13911] RBP: 00007f4b80512bd9 R08: 0000000000000000 R09: 0000000000000000 [ 471.392754][T13911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.392767][T13911] R13: 00007f4b806f6038 R14: 00007f4b806f5fa0 R15: 00007ffefd0acfb8 [ 471.392788][T13911] [ 471.392796][T13911] memory: usage 307200kB, limit 307200kB, failcnt 75 [ 471.627612][T13911] memory+swap: usage 359080kB, limit 9007199254740988kB, failcnt 0 [ 471.635719][T13911] kmem: usage 285136kB, limit 9007199254740988kB, failcnt 0 [ 471.643549][T13911] Memory cgroup stats for /syz8: [ 471.643800][T13911] cache 15667200 [ 471.702460][T13911] rss 180224 [ 471.705866][T13911] shmem 15593472 [ 471.709440][T13911] mapped_file 11829248 [ 471.713603][T13911] dirty 0 [ 471.716692][T13911] writeback 0 [ 471.719989][T13911] workingset_refault_anon 0 [ 471.724491][T13911] workingset_refault_file 0 [ 471.729031][T13911] swap 53194752 [ 471.732496][T13911] swapcached 59871232 [ 471.736578][T13911] pgpgin 327169 [ 471.740053][T13911] pgpgout 321670 [ 471.743626][T13911] pgfault 320605 [ 471.747253][T13911] pgmajfault 4 [ 471.750635][T13911] inactive_anon 6598656 [ 471.754800][T13911] active_anon 15851520 [ 471.758955][T13911] inactive_file 73728 [ 471.763193][T13911] active_file 0 [ 471.766699][T13911] unevictable 0 [ 471.770315][T13911] hierarchical_memory_limit 314572800 [ 471.775885][T13911] hierarchical_memsw_limit 9223372036854771712 [ 471.782189][T13911] total_cache 15667200 [ 471.786295][T13911] total_rss 180224 [ 471.790043][T13911] total_shmem 15593472 [ 471.794328][T13911] total_mapped_file 11829248 [ 471.798995][T13911] total_dirty 0 [ 471.802477][T13911] total_writeback 0 [ 471.806336][T13911] total_workingset_refault_anon 0 [ 471.811544][T13911] total_workingset_refault_file 0 [ 471.816819][T13911] total_swap 53194752 [ 471.820949][T13911] total_swapcached 59871232 [ 471.825632][T13911] total_pgpgin 327169 [ 471.830094][T13911] total_pgpgout 321670 [ 471.834593][T13911] total_pgfault 320605 [ 471.838718][T13911] total_pgmajfault 4 [ 471.842655][T13911] total_inactive_anon 6598656 [ 471.847408][T13911] total_active_anon 15851520 [ 471.852139][T13911] total_inactive_file 73728 [ 471.856841][T13911] total_active_file 0 [ 471.861031][T13911] total_unevictable 0 [ 471.865017][T13911] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.764,pid=8189,uid=0 [ 471.879833][T13911] Memory cgroup out of memory: Killed process 8189 (syz.8.764) total-vm:96208kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 471.939434][T13911] syz.8.2276 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 471.953387][T13911] CPU: 0 UID: 0 PID: 13911 Comm: syz.8.2276 Tainted: G W syzkaller #0 PREEMPT(full) [ 471.953412][T13911] Tainted: [W]=WARN [ 471.953417][T13911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.953479][T13911] Call Trace: [ 471.953487][T13911] [ 471.953493][T13911] __dump_stack+0x1d/0x30 [ 471.953513][T13911] dump_stack_lvl+0x95/0xd0 [ 471.953588][T13911] dump_stack+0x15/0x1b [ 471.953602][T13911] dump_header+0x80/0x240 [ 471.953617][T13911] oom_kill_process+0x295/0x350 [ 471.953698][T13911] out_of_memory+0x97d/0xb80 [ 471.953785][T13911] try_charge_memcg+0x62e/0xa10 [ 471.953811][T13911] obj_cgroup_charge_pages+0x23/0xc0 [ 471.953829][T13911] __memcg_kmem_charge_page+0x9e/0x170 [ 471.953931][T13911] __alloc_frozen_pages_noprof+0x18a/0x360 [ 471.953961][T13911] alloc_pages_mpol+0xb3/0x260 [ 471.953980][T13911] alloc_pages_noprof+0x8f/0x130 [ 471.954023][T13911] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 471.954127][T13911] __kvmalloc_node_noprof+0x3d4/0x650 [ 471.954198][T13911] ? futex_hash_allocate+0x190/0x9d0 [ 471.954217][T13911] ? futex_hash_allocate+0x190/0x9d0 [ 471.954279][T13911] futex_hash_allocate+0x190/0x9d0 [ 471.954371][T13911] ? cap_task_prctl+0x13f/0x6e0 [ 471.954387][T13911] futex_hash_prctl+0xd8/0xf0 [ 471.954405][T13911] __se_sys_prctl+0xa3d/0x13f0 [ 471.954437][T13911] __x64_sys_prctl+0x67/0x80 [ 471.954454][T13911] x64_sys_call+0x2533/0x3020 [ 471.954538][T13911] do_syscall_64+0x12c/0x370 [ 471.954553][T13911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.954625][T13911] RIP: 0033:0x7f4b8047c799 [ 471.954638][T13911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.954652][T13911] RSP: 002b:00007f4b7eecf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 471.954666][T13911] RAX: ffffffffffffffda RBX: 00007f4b806f5fa0 RCX: 00007f4b8047c799 [ 471.954676][T13911] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 471.954700][T13911] RBP: 00007f4b80512bd9 R08: 0000000000000000 R09: 0000000000000000 [ 471.954709][T13911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.954718][T13911] R13: 00007f4b806f6038 R14: 00007f4b806f5fa0 R15: 00007ffefd0acfb8 [ 471.954737][T13911] [ 471.954742][T13911] memory: usage 307200kB, limit 307200kB, failcnt 176 [ 472.190525][T13911] memory+swap: usage 358960kB, limit 9007199254740988kB, failcnt 0 [ 472.198456][T13911] kmem: usage 285276kB, limit 9007199254740988kB, failcnt 0 [ 472.205808][T13911] Memory cgroup stats for /syz8: [ 472.205982][T13911] cache 15593472 [ 472.214427][T13911] rss 180224 [ 472.217639][T13911] shmem 15593472 [ 472.221187][T13911] mapped_file 11755520 [ 472.225278][T13911] dirty 0 [ 472.228214][T13911] writeback 0 [ 472.231536][T13911] workingset_refault_anon 0 [ 472.236047][T13911] workingset_refault_file 0 [ 472.240545][T13911] swap 53002240 [ 472.243989][T13911] swapcached 59871232 [ 472.247985][T13911] pgpgin 327169 [ 472.251479][T13911] pgpgout 321688 [ 472.255022][T13911] pgfault 320605 [ 472.258684][T13911] pgmajfault 5 [ 472.262061][T13911] inactive_anon 4325376 [ 472.266269][T13911] active_anon 18124800 [ 472.270351][T13911] inactive_file 0 [ 472.274020][T13911] active_file 0 [ 472.277508][T13911] unevictable 0 [ 472.280970][T13911] hierarchical_memory_limit 314572800 [ 472.286457][T13911] hierarchical_memsw_limit 9223372036854771712 [ 472.292664][T13911] total_cache 15593472 [ 472.296736][T13911] total_rss 180224 [ 472.300460][T13911] total_shmem 15593472 [ 472.304574][T13911] total_mapped_file 11755520 [ 472.309233][T13911] total_dirty 0 [ 472.312868][T13911] total_writeback 0 [ 472.316824][T13911] total_workingset_refault_anon 0 [ 472.321938][T13911] total_workingset_refault_file 0 [ 472.327262][T13911] total_swap 53002240 [ 472.331367][T13911] total_swapcached 59871232 [ 472.336039][T13911] total_pgpgin 327169 [ 472.340269][T13911] total_pgpgout 321688 [ 472.344426][T13911] total_pgfault 320605 [ 472.348588][T13911] total_pgmajfault 5 [ 472.352605][T13911] total_inactive_anon 4325376 [ 472.357401][T13911] total_active_anon 18124800 [ 472.362004][T13911] total_inactive_file 0 [ 472.366370][T13911] total_active_file 0 [ 472.370389][T13911] total_unevictable 0 [ 472.374630][T13911] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2276,pid=13910,uid=0 [ 472.389505][T13911] Memory cgroup out of memory: Killed process 13910 (syz.8.2276) total-vm:94160kB, anon-rss:1392kB, file-rss:22276kB, shmem-rss:11480kB, UID:0 pgtables:152kB oom_score_adj:0 [ 472.469131][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 472.469147][ T28] audit: type=1400 audit(1772735574.956:18100): avc: denied { create } for pid=13930 comm="syz.5.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 472.509079][ T6108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.522112][T13931] v: renamed from ip6_vti0 (while UP) [ 472.538200][T13934] set_capacity_and_notify: 2 callbacks suppressed [ 472.538216][T13934] loop4: detected capacity change from 0 to 512 [ 472.562297][T13934] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 472.624595][T13934] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 472.649993][T13934] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2281: bad orphan inode 4 [ 472.688311][T13934] loop4: lost filesystem error report for type 5 error -117 [ 472.702296][T13934] EXT4-fs (loop4): 1 orphan inode deleted [ 472.709751][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 472.709782][ C0] EXT4-fs (loop4): initial error at time 1772735575: ext4_orphan_get:1417 [ 472.709811][ C0] EXT4-fs (loop4): last error at time 1772735575: ext4_orphan_get:1417 [ 472.752093][T13934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.771100][T13946] bond1: option lp_interval: invalid value (18446744072904421836) [ 472.779332][T13946] bond1: option lp_interval: allowed values 1 - 2147483647 [ 472.849405][T13946] bond1 (unregistering): Released all slaves [ 472.882768][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.932127][ T28] audit: type=1400 audit(1772735575.416:18101): avc: denied { execute_no_trans } for pid=13953 comm="syz.8.2288" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 473.117174][T13959] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 4: comm syz.4.2281: lblock 0 mapped to illegal pblock 4 (length 1) [ 473.566078][ T28] audit: type=1400 audit(1772735575.626:18102): avc: denied { write } for pid=13940 comm="syz.3.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 473.595156][T13946] bond1: option lp_interval: invalid value (18446744072904421836) [ 473.603262][T13946] bond1: option lp_interval: allowed values 1 - 2147483647 [ 473.612811][T13946] bond1 (unregistering): Released all slaves [ 473.722623][ T28] audit: type=1326 audit(1772735576.206:18103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13962 comm="syz.8.2289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b8047c799 code=0x0 [ 473.869702][ T6108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.932751][T13971] loop2: detected capacity change from 0 to 256 [ 473.959184][T13971] vfat: Deprecated parameter 'posix' [ 473.974955][T13971] FAT-fs: "posix" option is obsolete, not supported now [ 474.058472][T13975] loop4: detected capacity change from 0 to 256 [ 474.181031][T13982] loop2: detected capacity change from 0 to 512 [ 474.191665][T13982] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 475.310217][T13999] usb usb9: usbfs: process 13999 (syz.5.2299) did not claim interface 0 before use [ 475.328791][T13999] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 475.367852][T14004] loop5: detected capacity change from 0 to 512 [ 475.544986][T14004] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 475.609946][ T28] audit: type=1400 audit(1772735578.056:18104): avc: denied { create } for pid=14000 comm="syz.8.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 475.950369][ T28] audit: type=1400 audit(1772735578.066:18105): avc: denied { sys_admin } for pid=14000 comm="syz.8.2300" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 476.054615][T14004] EXT4-fs (loop5): 1 truncate cleaned up [ 476.121359][T14004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.473184][T14022] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 476.540994][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.667310][ T28] audit: type=1400 audit(1772735579.056:18106): avc: denied { read } for pid=14033 comm="syz.5.2309" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 476.714457][ T28] audit: type=1400 audit(1772735579.056:18107): avc: denied { ioctl } for pid=14033 comm="syz.5.2309" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 477.833636][T14063] 9p: Could not find request transport: unix @ [ 478.271943][T14044] syz_tun: entered allmulticast mode [ 478.316206][T14048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2307'. [ 478.393745][ T28] audit: type=1400 audit(1772735580.876:18108): avc: denied { unmount } for pid=6108 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 478.430160][T14044] syz_tun: left allmulticast mode [ 478.542428][T14074] loop4: detected capacity change from 0 to 256 [ 478.560558][T14075] loop5: detected capacity change from 0 to 128 [ 478.569508][T14074] vfat: Deprecated parameter 'posix' [ 478.587748][T14074] FAT-fs: "posix" option is obsolete, not supported now [ 478.717385][ T28] audit: type=1400 audit(1772735581.206:18109): avc: denied { setopt } for pid=14077 comm="syz.3.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 478.748900][ T28] audit: type=1400 audit(1772735581.206:18110): avc: denied { ioctl } for pid=14077 comm="syz.3.2318" path="socket:[38433]" dev="sockfs" ino=38433 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 478.767836][T14081] loop3: detected capacity change from 0 to 256 [ 478.893242][ T28] audit: type=1400 audit(1772735581.376:18111): avc: denied { write } for pid=14084 comm="syz.3.2322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 479.983338][T14087] usb usb9: usbfs: process 14087 (syz.4.2320) did not claim interface 0 before use [ 480.747719][T14087] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 480.768294][T14097] loop4: detected capacity change from 0 to 512 [ 480.804465][T14095] IPv6: NLM_F_CREATE should be specified when creating new route [ 481.754203][T14097] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 482.056625][T14097] EXT4-fs: error -4 creating inode table initialization thread [ 482.072930][T14097] EXT4-fs (loop4): mount failed [ 482.261481][ T28] audit: type=1400 audit(1772735584.747:18112): avc: denied { cpu } for pid=14093 comm="syz.8.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 482.345997][T14104] syzkaller0: entered promiscuous mode [ 482.363627][T14104] syzkaller0: entered allmulticast mode [ 482.379240][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2324'. [ 482.414681][ T28] audit: type=1400 audit(1772735584.897:18113): avc: denied { relabelfrom } for pid=14103 comm="syz.5.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 482.453488][T14104] syzkaller0: tun_net_xmit 1280 [ 482.458794][T14104] syzkaller0: create flow: hash 3960245809 index 2 [ 482.495855][ T28] audit: type=1400 audit(1772735584.897:18114): avc: denied { relabelto } for pid=14103 comm="syz.5.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 482.535047][T14107] 9p: Could not find request transport: unix @ [ 482.903955][T14120] loop3: detected capacity change from 0 to 256 [ 482.927437][T14120] vfat: Deprecated parameter 'posix' [ 482.934043][T14120] FAT-fs: "posix" option is obsolete, not supported now [ 482.984789][T14110] loop4: detected capacity change from 0 to 256 [ 483.122769][T14130] loop3: detected capacity change from 0 to 1024 [ 483.145094][T14130] EXT4-fs: Ignoring removed orlov option [ 483.151363][T14130] EXT4-fs: Ignoring removed bh option [ 483.237194][T14103] syzkaller0: delete flow: hash 3960245809 index 2 [ 483.427795][T14130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.614750][T14143] usb usb9: usbfs: process 14143 (syz.5.2335) did not claim interface 0 before use [ 483.646104][T14143] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 483.940897][ T7762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.013741][T14147] loop3: detected capacity change from 0 to 256 [ 484.153282][T14148] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 484.167231][T14143] loop5: detected capacity change from 0 to 512 [ 484.188609][T14148] FAT-fs (loop3): Filesystem has been set read-only [ 484.331307][T14151] usb usb9: usbfs: process 14151 (syz.4.2337) did not claim interface 0 before use [ 484.354343][T14143] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 484.399499][T14143] EXT4-fs (loop5): 1 truncate cleaned up [ 484.430580][T14143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.469819][T14151] loop4: detected capacity change from 0 to 512 [ 484.590526][T14151] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 484.675087][T14151] EXT4-fs (loop4): 1 truncate cleaned up [ 484.713103][T14151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.782492][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.930287][T14157] 9p: Could not find request transport: unix @ [ 485.098157][T14167] loop5: detected capacity change from 0 to 256 [ 485.116567][T14167] vfat: Deprecated parameter 'posix' [ 485.147330][T14167] FAT-fs: "posix" option is obsolete, not supported now [ 485.247586][ T6108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.277078][ T28] audit: type=1400 audit(1772735587.757:18115): avc: denied { read write } for pid=14173 comm="syz.5.2345" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 485.358003][T14178] loop3: detected capacity change from 0 to 1024 [ 485.467080][ T28] audit: type=1400 audit(1772735587.757:18116): avc: denied { open } for pid=14173 comm="syz.5.2345" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 485.527086][T14188] loop3: detected capacity change from 0 to 256 [ 485.703866][T14189] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 485.741986][T14189] FAT-fs (loop3): Filesystem has been set read-only [ 486.146148][T14196] loop5: detected capacity change from 0 to 128 [ 486.159581][T14196] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 486.538706][T14199] loop4: detected capacity change from 0 to 512 [ 486.587654][T14199] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 486.643632][T14199] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 486.694370][T14199] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2352: bad orphan inode 4 [ 486.725710][T14199] loop4: lost filesystem error report for type 5 error -117 [ 486.733559][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 486.747642][ C0] EXT4-fs (loop4): initial error at time 1772735589: ext4_orphan_get:1417 [ 486.756297][ C0] EXT4-fs (loop4): last error at time 1772735589: ext4_orphan_get:1417 [ 486.763880][T14199] EXT4-fs (loop4): 1 orphan inode deleted [ 486.771365][T14199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.975334][T14204] loop5: detected capacity change from 0 to 256 [ 487.031886][ T28] audit: type=1400 audit(1772735589.517:18117): avc: denied { create } for pid=14205 comm="syz.3.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 487.180192][T14207] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 4: comm syz.4.2352: lblock 0 mapped to illegal pblock 4 (length 1) [ 487.336702][ T28] audit: type=1400 audit(1772735589.717:18118): avc: denied { create } for pid=14205 comm="syz.3.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 487.357616][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2354'. [ 487.635591][ T6108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.777086][T14214] usb usb9: usbfs: process 14214 (syz.4.2355) did not claim interface 0 before use [ 487.804370][T14214] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 487.896860][ T28] audit: type=1400 audit(1772735590.387:18119): avc: denied { write } for pid=14220 comm="syz.3.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 487.986743][T14221] syz_tun: entered allmulticast mode [ 487.993198][ T28] audit: type=1400 audit(1772735590.477:18120): avc: denied { map } for pid=14220 comm="syz.3.2358" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 488.051259][T14228] FAULT_INJECTION: forcing a failure. [ 488.051259][T14228] name failslab, interval 1, probability 0, space 0, times 0 [ 488.083479][T14228] CPU: 1 UID: 0 PID: 14228 Comm: syz.5.2360 Tainted: G W syzkaller #0 PREEMPT(full) [ 488.083541][T14228] Tainted: [W]=WARN [ 488.083550][T14228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.083565][T14228] Call Trace: [ 488.083572][T14228] [ 488.083582][T14228] __dump_stack+0x1d/0x30 [ 488.083643][T14228] dump_stack_lvl+0x95/0xd0 [ 488.083671][T14228] dump_stack+0x15/0x1b [ 488.083695][T14228] should_fail_ex+0x263/0x280 [ 488.083723][T14228] should_failslab+0x8c/0xb0 [ 488.083746][T14228] kmem_cache_alloc_noprof+0x66/0x400 [ 488.083809][T14228] ? skb_clone+0x151/0x1f0 [ 488.083916][T14228] skb_clone+0x151/0x1f0 [ 488.083995][T14228] __netlink_deliver_tap+0x2c9/0x500 [ 488.084084][T14228] netlink_unicast+0x66b/0x690 [ 488.084114][T14228] netlink_sendmsg+0x5c8/0x6f0 [ 488.084148][T14228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.084323][T14228] ____sys_sendmsg+0x5af/0x600 [ 488.084433][T14228] ___sys_sendmsg+0x195/0x1e0 [ 488.084478][T14228] __x64_sys_sendmsg+0xd4/0x160 [ 488.084565][T14228] x64_sys_call+0x194c/0x3020 [ 488.084594][T14228] do_syscall_64+0x12c/0x370 [ 488.084642][T14228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.084662][T14228] RIP: 0033:0x7fa0dfc6c799 [ 488.084677][T14228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.084695][T14228] RSP: 002b:00007fa0de6bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.084716][T14228] RAX: ffffffffffffffda RBX: 00007fa0dfee5fa0 RCX: 00007fa0dfc6c799 [ 488.084778][T14228] RDX: 0000000004004814 RSI: 0000200000000040 RDI: 0000000000000003 [ 488.084793][T14228] RBP: 00007fa0de6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 488.084808][T14228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.084823][T14228] R13: 00007fa0dfee6038 R14: 00007fa0dfee5fa0 R15: 00007ffc824cc178 [ 488.084898][T14228] [ 488.334873][T14214] loop4: detected capacity change from 0 to 512 [ 488.341981][ T28] audit: type=1326 audit(1772735590.817:18121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dfc6c799 code=0x7ffc0000 [ 488.387957][ T28] audit: type=1326 audit(1772735590.817:18122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dfc6c799 code=0x7ffc0000 [ 488.427155][T14214] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 488.438227][ T28] audit: type=1326 audit(1772735590.817:18123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dfc6c799 code=0x7ffc0000 [ 488.438261][ T28] audit: type=1326 audit(1772735590.817:18124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dfc6c799 code=0x7ffc0000 [ 488.525807][T14214] EXT4-fs (loop4): 1 truncate cleaned up [ 488.602771][T14214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.637109][T14249] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 488.657987][ T6108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.676614][T14249] FAT-fs (loop3): Filesystem has been set read-only [ 488.686764][T14248] usb usb9: usbfs: process 14248 (syz.5.2367) did not claim interface 0 before use [ 488.726965][T14248] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 488.768531][T14255] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 488.780615][T14254] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 488.800516][T14255] FAT-fs (loop4): Filesystem has been set read-only [ 488.820340][T14254] EXT4-fs (loop5): 1 truncate cleaned up [ 488.964949][T14254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.274404][ T6108] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 489.302665][ T6108] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 489.349638][T14263] set_capacity_and_notify: 3 callbacks suppressed [ 489.349657][T14263] loop3: detected capacity change from 0 to 8192 [ 489.389559][T14263] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 489.479332][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.323417][T14280] usb usb9: usbfs: process 14280 (syz.5.2377) did not claim interface 0 before use [ 490.340913][T14285] loop2: detected capacity change from 0 to 256 [ 490.362080][T14285] vfat: Deprecated parameter 'posix' [ 490.389981][T14286] loop5: detected capacity change from 0 to 512 [ 490.405111][T14285] FAT-fs: "posix" option is obsolete, not supported now [ 490.424087][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 490.424105][ T28] audit: type=1400 audit(1772735592.918:18169): avc: denied { mounton } for pid=14287 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 490.467852][T14280] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 490.525933][T14286] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 490.556925][T14286] EXT4-fs (loop5): 1 truncate cleaned up [ 490.563037][T14286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.820345][T14300] loop2: detected capacity change from 0 to 256 [ 490.848730][T14287] chnl_net:caif_netlink_parms(): no params data found [ 490.912007][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.943631][T14304] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 491.016319][T14304] FAT-fs (loop2): Filesystem has been set read-only [ 491.025703][T14287] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.042934][T14287] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.063275][T14287] bridge_slave_0: entered allmulticast mode [ 491.081548][T14287] bridge_slave_0: entered promiscuous mode [ 491.101774][T14287] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.129838][T14287] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.151874][T14287] bridge_slave_1: entered allmulticast mode [ 491.171675][T14287] bridge_slave_1: entered promiscuous mode [ 491.227966][T14310] loop3: detected capacity change from 0 to 256 [ 491.228354][T14287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.245171][T14287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.293474][T14287] team0: Port device team_slave_0 added [ 491.300413][T14287] team0: Port device team_slave_1 added [ 491.317968][T14287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.325463][T14287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.374199][T14287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.385944][T14287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.393281][T14287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.420186][T14287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.448932][T14287] hsr_slave_0: entered promiscuous mode [ 491.455121][T14287] hsr_slave_1: entered promiscuous mode [ 491.461058][T14287] debugfs: 'hsr0' already exists in 'hsr' [ 491.467153][T14287] Cannot create hsr debugfs directory [ 491.548606][T14317] netlink: 'syz.2.2385': attribute type 4 has an invalid length. [ 491.560286][T14313] loop5: detected capacity change from 0 to 1024 [ 491.619067][T14313] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2383: bad orphan inode 134217728 [ 491.634817][T14313] loop5: lost filesystem error report for type 5 error -117 [ 491.650574][ T28] audit: type=1400 audit(1772735594.138:18170): avc: denied { read open } for pid=14320 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.660322][T14313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.784197][ T28] audit: type=1326 audit(1772735594.268:18171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14330 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 491.837842][ T28] audit: type=1326 audit(1772735594.268:18172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14330 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 491.891126][ T28] audit: type=1326 audit(1772735594.268:18173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14330 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 491.915343][ T28] audit: type=1326 audit(1772735594.268:18174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14330 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 491.939507][ T28] audit: type=1326 audit(1772735594.268:18175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14330 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 491.964050][ T28] audit: type=1326 audit(1772735594.268:18176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14330 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 491.988260][ T28] audit: type=1326 audit(1772735594.268:18177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14330 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 492.022661][ T28] audit: type=1326 audit(1772735594.268:18178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14330 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 492.166042][T14355] loop2: detected capacity change from 0 to 128 [ 492.172841][T14355] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 492.197355][T14355] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 492.297806][T14287] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.341307][T14287] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 492.375419][T14287] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 492.412766][T14287] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 492.552596][T14287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.573664][ T30] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 492.646993][T14287] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.688929][ T2221] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.696109][ T2221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.727662][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.734986][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.751636][T14287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 492.782535][T14287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.035912][T14287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.081457][T14399] loop3: detected capacity change from 0 to 256 [ 493.215919][T14414] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 493.256417][T14414] FAT-fs (loop3): Filesystem has been set read-only [ 493.390096][T14426] usb usb9: usbfs: process 14426 (syz.2.2395) did not claim interface 0 before use [ 493.452635][T14287] veth0_vlan: entered promiscuous mode [ 493.459331][T14426] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 493.469920][T14437] loop2: detected capacity change from 0 to 512 [ 493.479915][T14287] veth1_vlan: entered promiscuous mode [ 493.522026][T14287] veth0_macvtap: entered promiscuous mode [ 493.530174][T14287] veth1_macvtap: entered promiscuous mode [ 493.541820][T14437] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 493.557936][T14287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.576316][T14287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.592113][ T1622] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.593375][T14437] EXT4-fs (loop2): 1 truncate cleaned up [ 493.649549][ T1622] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.650214][T14437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.695496][ T1622] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.722854][ T1622] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.823110][T14460] usb usb9: usbfs: process 14460 (syz.6.2380) did not claim interface 0 before use [ 493.862290][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.905284][T14456] loop6: detected capacity change from 0 to 512 [ 493.922502][T14460] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 493.967148][T14456] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 494.015572][T14475] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 494.030668][T14475] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 494.039131][T14475] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2402: bad orphan inode 4 [ 494.050151][T14475] loop2: lost filesystem error report for type 5 error -117 [ 494.050338][T14475] EXT4-fs (loop2): 1 orphan inode deleted [ 494.058029][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 494.058078][ C1] EXT4-fs (loop2): initial error at time 1772735596: ext4_orphan_get:1417 [ 494.058106][ C1] EXT4-fs (loop2): last error at time 1772735596: ext4_orphan_get:1417 [ 494.089395][T14456] EXT4-fs (loop6): 1 truncate cleaned up [ 494.105383][T14456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.133776][T14475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.534944][T14505] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 4: comm syz.2.2402: lblock 0 mapped to illegal pblock 4 (length 1) [ 494.592500][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.908752][T14513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2403'. [ 494.921676][T14510] 9p: Could not find request transport: unix @ [ 494.925869][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.938088][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.949567][T14513] geneve2: entered promiscuous mode [ 495.074464][T14517] usb usb9: usbfs: process 14517 (syz.5.2405) did not claim interface 0 before use [ 495.107753][T14517] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 495.126649][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2403'. [ 495.155938][T14536] 9p: Could not find request transport: unix @ [ 495.235519][T14546] usb usb9: usbfs: process 14546 (syz.3.2411) did not claim interface 0 before use [ 495.272367][T14546] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 495.295571][T14552] set_capacity_and_notify: 1 callbacks suppressed [ 495.295595][T14552] loop3: detected capacity change from 0 to 512 [ 495.377207][T14552] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 495.418182][T14552] EXT4-fs (loop3): 1 truncate cleaned up [ 495.432933][ T28] kauditd_printk_skb: 985 callbacks suppressed [ 495.432951][ T28] audit: type=1326 audit(1772735597.908:19164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13638ccfce code=0x7ffc0000 [ 495.463210][ T28] audit: type=1326 audit(1772735597.908:19165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13638ccfce code=0x7ffc0000 [ 495.489893][ T28] audit: type=1326 audit(1772735597.908:19166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13638ccfce code=0x7ffc0000 [ 495.514663][ T28] audit: type=1326 audit(1772735597.908:19167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13638ccfce code=0x7ffc0000 [ 495.539029][ T28] audit: type=1326 audit(1772735597.928:19168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13638ccfce code=0x7ffc0000 [ 495.557765][T14552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.575242][ T28] audit: type=1326 audit(1772735597.928:19169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13638ccfce code=0x7ffc0000 [ 495.637148][T14551] loop5: detected capacity change from 0 to 8192 [ 495.641445][ T28] audit: type=1326 audit(1772735597.928:19170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13638ccfce code=0x7ffc0000 [ 495.677101][ T28] audit: type=1326 audit(1772735597.928:19171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13638ccfce code=0x7ffc0000 [ 495.701942][T14551] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 495.703376][ T28] audit: type=1326 audit(1772735597.928:19172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13638ccfce code=0x7ffc0000 [ 495.737819][ T28] audit: type=1326 audit(1772735597.928:19173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13638ccfce code=0x7ffc0000 [ 495.882388][T14569] usb usb9: usbfs: process 14569 (syz.6.2415) did not claim interface 0 before use [ 496.389045][ T7762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.429090][T14585] loop6: detected capacity change from 0 to 512 [ 496.558370][T14585] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 496.590235][T14585] EXT4-fs (loop6): 1 truncate cleaned up [ 496.596665][T14585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.863170][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.968274][T14633] loop6: detected capacity change from 0 to 256 [ 497.061985][T14641] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 497.104042][T14641] FAT-fs (loop6): Filesystem has been set read-only [ 497.225027][ T96] tipc: Subscription rejected, illegal request [ 497.378055][T14653] loop6: detected capacity change from 0 to 256 [ 497.485277][T14659] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 497.500580][T14658] 9p: Could not find request transport: unix @ [ 497.502580][T14659] FAT-fs (loop6): Filesystem has been set read-only [ 497.542208][T14663] usb usb9: usbfs: process 14663 (syz.2.2432) did not claim interface 0 before use [ 497.553585][T14663] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 497.555780][T14665] usb usb9: usbfs: process 14665 (syz.5.2433) did not claim interface 0 before use [ 497.660899][T14663] loop2: detected capacity change from 0 to 512 [ 497.682510][T14663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 497.717876][T14663] EXT4-fs (loop2): 1 truncate cleaned up [ 497.749490][T14663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.817547][T14665] loop5: detected capacity change from 0 to 512 [ 497.897280][T14665] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 497.958231][T14665] EXT4-fs (loop5): 1 truncate cleaned up [ 497.973596][T14665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.063243][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.753009][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.111376][T14685] loop5: detected capacity change from 0 to 512 [ 499.127338][T14695] usb usb9: usbfs: process 14695 (syz.2.2441) did not claim interface 0 before use [ 499.156372][T14695] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 499.195632][T14698] loop2: detected capacity change from 0 to 512 [ 499.204975][T14685] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 499.218899][T14698] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 499.329112][T14698] EXT4-fs (loop2): 1 truncate cleaned up [ 499.336488][T14698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.351927][T14685] EXT4-fs (loop5): 1 truncate cleaned up [ 499.386531][T14685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.426514][T14703] loop6: detected capacity change from 0 to 8192 [ 499.443976][T14703] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 499.497738][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.767258][T14719] EXT4-fs: Ignoring removed orlov option [ 499.773294][T14719] EXT4-fs: Ignoring removed bh option [ 499.847256][T14719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.316844][T14726] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2444: bad orphan inode 134217728 [ 500.358353][T14726] loop5: lost filesystem error report for type 5 error -117 [ 500.359259][T14726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.382863][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.562086][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.643159][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 500.643177][ T28] audit: type=1400 audit(1772735603.139:19272): avc: denied { getopt } for pid=14734 comm="syz.6.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 500.904258][ T28] audit: type=1400 audit(1772735603.379:19273): avc: denied { write } for pid=14734 comm="syz.6.2451" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 501.001797][T14729] set_capacity_and_notify: 2 callbacks suppressed [ 501.008927][T14729] loop2: detected capacity change from 0 to 1024 [ 501.255233][ T28] audit: type=1326 audit(1772735603.459:19274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 501.349189][T14729] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2450: bad orphan inode 134217728 [ 501.448043][T14729] loop2: lost filesystem error report for type 5 error -117 [ 501.515608][T14729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.541207][ T28] audit: type=1326 audit(1772735603.459:19275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 501.621901][ T28] audit: type=1326 audit(1772735603.459:19277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 501.701858][ T28] audit: type=1326 audit(1772735603.459:19278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 501.779041][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.791920][ T28] audit: type=1326 audit(1772735603.459:19279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 501.943894][ T28] audit: type=1326 audit(1772735603.459:19276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 502.051855][ T28] audit: type=1326 audit(1772735603.459:19280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 502.158184][ T28] audit: type=1326 audit(1772735603.459:19281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 502.250347][T14752] loop5: detected capacity change from 0 to 512 [ 502.366352][T14752] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 502.490916][T14752] EXT4-fs (loop5): 1 truncate cleaned up [ 502.572697][T14752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.587861][T14758] netlink: 'syz.6.2458': attribute type 13 has an invalid length. [ 502.608913][T14758] gretap0: refused to change device tx_queue_len [ 502.623810][T14758] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 502.693206][T14759] loop6: detected capacity change from 0 to 512 [ 502.719017][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.744938][T14759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 ro without journal. Quota mode: writeback. [ 502.785713][T14758] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2458'. [ 502.805512][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 502.961008][T14765] 9p: Could not find request transport: unix @ [ 503.080166][T14776] usb usb9: usbfs: process 14776 (syz.5.2464) did not claim interface 0 before use [ 503.110291][T14776] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 503.136025][T14779] loop5: detected capacity change from 0 to 512 [ 503.306783][T14782] loop6: detected capacity change from 0 to 8192 [ 503.342122][T14782] loop6: p1 < > p2 p4 < p5 > [ 503.346919][T14782] loop6: partition table partially beyond EOD, truncated [ 503.354216][T14782] loop6: p1 start 134217728 is beyond EOD, truncated [ 503.361176][T14782] loop6: p2 size 591360 extends beyond EOD, truncated [ 503.369531][T14782] loop6: p5 size 591360 extends beyond EOD, truncated [ 503.554300][T14779] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 503.573745][T14779] EXT4-fs (loop5): 1 truncate cleaned up [ 503.595523][T14779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.727909][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.811547][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.131778][T14792] loop3: detected capacity change from 0 to 1024 [ 504.205902][T14792] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 504.273658][T14795] loop5: detected capacity change from 0 to 512 [ 504.300019][T14792] System zones: 0-1, 3-36 [ 504.306510][T14792] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2471: bad orphan inode 134217728 [ 504.318934][T14792] loop3: lost filesystem error report for type 5 error -117 [ 504.319455][T14792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.368284][ T7762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.398524][T14805] 9p: Could not find request transport: unix @ [ 504.410852][T14795] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 504.536442][T14819] loop3: detected capacity change from 0 to 1024 [ 504.544876][T14819] EXT4-fs: Ignoring removed orlov option [ 504.550975][T14819] EXT4-fs: Ignoring removed bh option [ 504.647684][T14819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.796622][T14795] EXT4-fs (loop5): 1 truncate cleaned up [ 504.973215][T14795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.068122][T14818] loop2: detected capacity change from 0 to 164 [ 505.144974][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.269850][T14835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2482'. [ 505.279012][T14835] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2482'. [ 505.321931][T14818] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 505.391827][T14833] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 505.921754][T14841] loop6: detected capacity change from 0 to 8192 [ 507.073003][ T7762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.119047][T14841] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 507.419590][T14859] loop2: detected capacity change from 0 to 128 [ 507.443561][T14857] usb usb9: usbfs: process 14857 (syz.6.2489) did not claim interface 0 before use [ 507.457791][T14855] 9p: Could not find request transport: unix @ [ 507.485649][T14859] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 507.513879][T14863] loop6: detected capacity change from 0 to 512 [ 507.515842][T14857] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 507.601545][T14863] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 507.650499][T14863] EXT4-fs (loop6): 1 truncate cleaned up [ 507.671679][T14863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.769737][T14853] loop3: detected capacity change from 0 to 1024 [ 507.889843][ T28] kauditd_printk_skb: 155 callbacks suppressed [ 507.889860][ T28] audit: type=1326 audit(1772735610.380:19437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.5.2492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0dfc6c799 code=0x0 [ 507.936016][T14853] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2483: bad orphan inode 134217728 [ 508.066962][T14853] loop3: lost filesystem error report for type 5 error -117 [ 508.071616][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 508.087634][ C0] EXT4-fs (loop3): initial error at time 1772735610: ext4_orphan_get:1417 [ 508.098132][ C0] EXT4-fs (loop3): last error at time 1772735610: ext4_orphan_get:1417 [ 508.128494][T14853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.260902][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.898853][T14888] usb usb9: usbfs: process 14888 (syz.2.2497) did not claim interface 0 before use [ 508.936084][T14888] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 508.955407][T14893] loop2: detected capacity change from 0 to 512 [ 508.984462][T14893] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 509.019296][T14893] EXT4-fs (loop2): 1 truncate cleaned up [ 509.033004][T14893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.212074][T14901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2496'. [ 509.221107][T14901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2496'. [ 509.270515][T14903] IPv6: NLM_F_CREATE should be specified when creating new route [ 509.322966][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.510200][T14906] loop6: detected capacity change from 0 to 512 [ 509.565952][T14906] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 509.644515][T14906] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 509.698851][T14906] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2502: bad orphan inode 4 [ 510.004412][T14906] loop6: lost filesystem error report for type 5 error -117 [ 510.004699][T14906] EXT4-fs (loop6): 1 orphan inode deleted [ 510.012429][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 510.012461][ C0] EXT4-fs (loop6): initial error at time 1772735612: ext4_orphan_get:1417 [ 510.012482][ C0] EXT4-fs (loop6): last error at time 1772735612: ext4_orphan_get:1417 [ 510.165185][T14906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.882806][T14922] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #2: block 4: comm syz.6.2502: lblock 0 mapped to illegal pblock 4 (length 1) [ 511.195969][T14926] usb usb9: usbfs: process 14926 (syz.2.2508) did not claim interface 0 before use [ 511.233770][T14924] loop5: detected capacity change from 0 to 8192 [ 511.236601][T14926] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 511.241564][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.279830][T14924] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 511.315866][T14928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 511.396888][T14934] loop5: detected capacity change from 0 to 512 [ 511.408653][ T7762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.461793][T14936] usb usb9: usbfs: process 14936 (syz.6.2511) did not claim interface 0 before use [ 511.488634][T14941] usb usb9: usbfs: process 14941 (syz.3.2514) did not claim interface 0 before use [ 511.489454][T14939] macvtap1: entered promiscuous mode [ 511.511741][T14934] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 511.526400][T14939] bridge0: entered promiscuous mode [ 511.546870][T14926] loop2: detected capacity change from 0 to 512 [ 511.558057][T14939] bridge0: port 1(macvtap1) entered blocking state [ 511.566956][T14934] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 511.599014][T14939] bridge0: port 1(macvtap1) entered disabled state [ 511.619489][T14939] macvtap1: entered allmulticast mode [ 511.633323][T14936] loop6: detected capacity change from 0 to 512 [ 511.648041][T14936] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 511.650802][T14934] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2512: Corrupt directory, running e2fsck is recommended [ 511.671107][T14939] bridge0: entered allmulticast mode [ 511.678697][T14926] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 511.692993][T14934] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 511.708184][T14939] macvtap1: left allmulticast mode [ 511.720783][T14939] bridge0: left allmulticast mode [ 511.723723][T14936] EXT4-fs (loop6): 1 truncate cleaned up [ 511.733137][T14934] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.2512: corrupted in-inode xattr: e_name out of bounds [ 511.753858][T14939] bridge0: left promiscuous mode [ 511.761477][T14941] loop3: detected capacity change from 0 to 512 [ 511.769806][T14934] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 511.770309][T14936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.770682][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 511.770704][ C0] EXT4-fs (loop5): initial error at time 1772735614: ext4_iget_extra_inode:5025: inode 15 [ 511.770738][ C0] EXT4-fs (loop5): last error at time 1772735614: ext4_iget_extra_inode:5025: inode 15 [ 511.771342][T14934] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2512: couldn't read orphan inode 15 (err -117) [ 511.771373][T14934] loop5: lost filesystem error report for type 5 error -117 [ 511.807377][T14926] EXT4-fs (loop2): 1 truncate cleaned up [ 511.811282][T14934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.821820][T14941] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 511.882536][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.895327][T14926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.896757][T14934] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 511.930865][T14934] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 511.963581][T14934] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2512: Corrupt directory, running e2fsck is recommended [ 511.984751][T14941] EXT4-fs (loop3): 1 truncate cleaned up [ 512.173802][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2520'. [ 512.369673][T14967] netlink: 'syz.3.2523': attribute type 13 has an invalid length. [ 512.422301][T14967] erspan0: refused to change device tx_queue_len [ 512.429533][T14967] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 512.451728][T14971] loop5: detected capacity change from 0 to 136 [ 512.478320][T14967] loop3: detected capacity change from 0 to 512 [ 512.558781][T14974] usb usb9: usbfs: process 14974 (syz.3.2526) did not claim interface 0 before use [ 512.574174][T14971] Attempt to read inode for relocated directory [ 512.590788][T14974] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 512.612560][T14974] loop3: detected capacity change from 0 to 512 [ 512.615360][T14970] loop6: detected capacity change from 0 to 512 [ 512.657734][T14970] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 512.667529][T14974] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 512.689657][T14974] EXT4-fs (loop3): 1 truncate cleaned up [ 513.123689][ T28] audit: type=1400 audit(1772735615.610:19438): avc: denied { accept } for pid=14969 comm="syz.6.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 513.225368][T14975] loop2: detected capacity change from 0 to 512 [ 513.321079][T14975] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 513.442718][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2529'. [ 513.520066][T14975] EXT4-fs mount: 8 callbacks suppressed [ 513.520260][T14975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.524541][T14975] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.559338][T14988] loop3: detected capacity change from 0 to 32768 [ 513.672712][ T28] audit: type=1400 audit(1772735616.170:19439): avc: denied { ioctl } for pid=14961 comm="syz.2.2521" path="/329/file0/file1" dev="loop2" ino=15 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 513.959459][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.094536][ T28] audit: type=1326 audit(1772735616.590:19440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 514.097195][T15008] 9p: Could not find request transport: unix @ [ 514.123942][ T28] audit: type=1326 audit(1772735616.610:19441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 514.253108][ T28] audit: type=1326 audit(1772735616.610:19442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 514.278110][ T28] audit: type=1326 audit(1772735616.610:19443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 514.392355][ T28] audit: type=1326 audit(1772735616.610:19444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 514.416554][ T28] audit: type=1326 audit(1772735616.610:19445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 514.423820][T15015] FAULT_INJECTION: forcing a failure. [ 514.423820][T15015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.504447][T15015] CPU: 0 UID: 0 PID: 15015 Comm: syz.5.2538 Tainted: G W syzkaller #0 PREEMPT(full) [ 514.504487][T15015] Tainted: [W]=WARN [ 514.504513][T15015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.504528][T15015] Call Trace: [ 514.504536][T15015] [ 514.504544][T15015] __dump_stack+0x1d/0x30 [ 514.504574][T15015] dump_stack_lvl+0x95/0xd0 [ 514.504672][T15015] dump_stack+0x15/0x1b [ 514.504692][T15015] should_fail_ex+0x263/0x280 [ 514.504715][T15015] should_fail+0xb/0x20 [ 514.504734][T15015] should_fail_usercopy+0x1a/0x20 [ 514.504837][T15015] _copy_to_user+0x20/0xa0 [ 514.504932][T15015] simple_read_from_buffer+0xb5/0x130 [ 514.504955][T15015] proc_fail_nth_read+0x10e/0x150 [ 514.504987][T15015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.505026][T15015] vfs_read+0x1ab/0x7f0 [ 514.505077][T15015] ? __rcu_read_unlock+0x4e/0x70 [ 514.505099][T15015] ? __fget_files+0x184/0x1c0 [ 514.505160][T15015] ? mutex_lock+0x57/0x90 [ 514.505180][ T28] audit: type=1326 audit(1772735616.610:19446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 514.505191][T15015] ksys_read+0xdc/0x1a0 [ 514.505211][ T28] audit: type=1326 audit(1772735616.610:19447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.3.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb31792c799 code=0x7ffc0000 [ 514.505240][T15015] __x64_sys_read+0x40/0x50 [ 514.505272][T15015] x64_sys_call+0x2886/0x3020 [ 514.505315][T15015] do_syscall_64+0x12c/0x370 [ 514.505392][T15015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.505470][T15015] RIP: 0033:0x7fa0dfc2cfce [ 514.505495][T15015] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 514.505513][T15015] RSP: 002b:00007fa0de6befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 514.505564][T15015] RAX: ffffffffffffffda RBX: 00007fa0de6bf6c0 RCX: 00007fa0dfc2cfce [ 514.505582][T15015] RDX: 000000000000000f RSI: 00007fa0de6bf0a0 RDI: 0000000000000004 [ 514.505597][T15015] RBP: 00007fa0de6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 514.505610][T15015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.505623][T15015] R13: 00007fa0dfee6038 R14: 00007fa0dfee5fa0 R15: 00007ffc824cc178 [ 514.505642][T15015] [ 515.712147][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2542'. [ 515.748782][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2542'. [ 515.789825][T15038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 516.145767][T15050] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2549'. [ 516.160499][T15050] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2549'. [ 516.173116][T15050] loop6: detected capacity change from 0 to 512 [ 516.203309][T15050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.252925][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.293701][T15059] loop3: detected capacity change from 0 to 1024 [ 516.301029][T15059] EXT4-fs: Ignoring removed orlov option [ 516.306985][T15059] EXT4-fs: Ignoring removed bh option [ 516.335932][T15059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.730948][T15066] FAULT_INJECTION: forcing a failure. [ 516.730948][T15066] name failslab, interval 1, probability 0, space 0, times 0 [ 516.779636][T15066] CPU: 1 UID: 0 PID: 15066 Comm: syz.5.2553 Tainted: G W syzkaller #0 PREEMPT(full) [ 516.779673][T15066] Tainted: [W]=WARN [ 516.779682][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.779697][T15066] Call Trace: [ 516.779707][T15066] [ 516.779717][T15066] __dump_stack+0x1d/0x30 [ 516.779787][T15066] dump_stack_lvl+0x95/0xd0 [ 516.779811][T15066] dump_stack+0x15/0x1b [ 516.779893][T15066] should_fail_ex+0x263/0x280 [ 516.779991][T15066] ? _request_firmware+0x3e4/0xb40 [ 516.780017][T15066] should_failslab+0x8c/0xb0 [ 516.780071][T15066] __kmalloc_cache_noprof+0x5f/0x410 [ 516.780100][T15066] _request_firmware+0x3e4/0xb40 [ 516.780154][T15066] ? __rtnl_unlock+0x95/0xb0 [ 516.780182][T15066] ? netdev_run_todo+0x853/0x8b0 [ 516.780279][T15066] request_firmware+0x36/0x50 [ 516.780301][T15066] reg_reload_regdb+0x53/0x240 [ 516.780330][T15066] nl80211_reload_regdb+0xe/0x20 [ 516.780428][T15066] genl_family_rcv_msg_doit+0x187/0x1f0 [ 516.780454][T15066] genl_rcv_msg+0x432/0x470 [ 516.780479][T15066] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 516.780516][T15066] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 516.780572][T15066] ? __pfx_nl80211_post_doit+0x10/0x10 [ 516.780608][T15066] netlink_rcv_skb+0x123/0x220 [ 516.780639][T15066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.780720][T15066] genl_rcv+0x28/0x40 [ 516.780738][T15066] netlink_unicast+0x5c0/0x690 [ 516.780795][T15066] netlink_sendmsg+0x5c8/0x6f0 [ 516.780831][T15066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.780860][T15066] ____sys_sendmsg+0x5af/0x600 [ 516.780897][T15066] ___sys_sendmsg+0x195/0x1e0 [ 516.780943][T15066] __x64_sys_sendmsg+0xd4/0x160 [ 516.781019][T15066] x64_sys_call+0x194c/0x3020 [ 516.781064][T15066] do_syscall_64+0x12c/0x370 [ 516.781090][T15066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.781111][T15066] RIP: 0033:0x7fa0dfc6c799 [ 516.781157][T15066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.781180][T15066] RSP: 002b:00007fa0de6bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.781207][T15066] RAX: ffffffffffffffda RBX: 00007fa0dfee5fa0 RCX: 00007fa0dfc6c799 [ 516.781225][T15066] RDX: 0000000020008004 RSI: 00002000000006c0 RDI: 0000000000000004 [ 516.781315][T15066] RBP: 00007fa0de6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 516.781330][T15066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.781345][T15066] R13: 00007fa0dfee6038 R14: 00007fa0dfee5fa0 R15: 00007ffc824cc178 [ 516.781369][T15066] [ 517.066798][T15066] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 517.132137][ T7762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.141178][T15069] usb usb9: usbfs: process 15069 (syz.6.2552) did not claim interface 0 before use [ 517.159702][T15069] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 517.193054][T15071] usb usb9: usbfs: process 15071 (syz.5.2555) did not claim interface 0 before use [ 517.245211][T15075] loop3: detected capacity change from 0 to 256 [ 517.285747][T15075] vfat: Deprecated parameter 'posix' [ 517.323895][T15075] FAT-fs: "posix" option is obsolete, not supported now [ 517.435798][T15069] loop6: detected capacity change from 0 to 512 [ 517.883760][T15071] loop5: detected capacity change from 0 to 512 [ 518.080072][T15069] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 518.118225][T15071] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 518.174595][ T28] kauditd_printk_skb: 454 callbacks suppressed [ 518.174690][ T28] audit: type=1326 audit(1772735620.671:19902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15073 comm="syz.2.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f136390c799 code=0x7ffc0000 [ 518.281917][T15069] EXT4-fs (loop6): 1 truncate cleaned up [ 518.304117][T15071] EXT4-fs (loop5): 1 truncate cleaned up [ 518.337264][T15069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.351141][ T28] audit: type=1400 audit(1772735620.701:19903): avc: denied { bind } for pid=15083 comm="syz.3.2559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 518.387116][T15071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.440056][ T28] audit: type=1400 audit(1772735620.701:19904): avc: denied { node_bind } for pid=15083 comm="syz.3.2559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 518.543648][ T28] audit: type=1400 audit(1772735620.721:19905): avc: denied { write } for pid=15083 comm="syz.3.2559" path="socket:[42422]" dev="sockfs" ino=42422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 518.707155][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.729144][ T28] audit: type=1326 audit(1772735620.731:19906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15073 comm="syz.2.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f136390c799 code=0x7ffc0000 [ 518.851883][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.171860][ T28] audit: type=1326 audit(1772735621.661:19907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.8.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8047c799 code=0x7ffc0000 [ 519.216547][T15105] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 519.223764][T15105] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 519.265211][T15105] vhci_hcd vhci_hcd.0: Device attached [ 519.265893][ T28] audit: type=1326 audit(1772735621.661:19908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.8.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8047c799 code=0x7ffc0000 [ 519.366342][T15122] loop3: detected capacity change from 0 to 1024 [ 519.374388][T15122] EXT4-fs: Ignoring removed orlov option [ 519.380254][T15122] EXT4-fs: Ignoring removed bh option [ 519.417674][T15119] usb usb9: usbfs: process 15119 (syz.5.2570) did not claim interface 0 before use [ 519.449484][T15119] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 519.493886][ T3408] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 519.526643][T15122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.731732][ T3408] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 519.776764][ T28] audit: type=1326 audit(1772735621.661:19909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.8.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8047c799 code=0x7ffc0000 [ 519.807775][T15130] loop5: detected capacity change from 0 to 512 [ 520.004293][T15108] vhci_hcd: connection reset by peer [ 520.019336][ T50] vhci_hcd vhci_hcd.6: stop threads [ 520.042384][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2569'. [ 520.051342][T15131] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2569'. [ 520.759946][ T50] vhci_hcd vhci_hcd.6: release socket [ 520.765703][ T28] audit: type=1326 audit(1772735621.661:19910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.8.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8047c799 code=0x7ffc0000 [ 520.791134][T15130] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 520.809702][ T50] vhci_hcd vhci_hcd.6: disconnect device [ 520.841647][ T7762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.889909][ T28] audit: type=1326 audit(1772735621.661:19911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.8.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f4b8047c799 code=0x7ffc0000 [ 520.929336][T15134] usb usb9: usbfs: process 15134 (syz.3.2571) did not claim interface 0 before use [ 520.947551][T15130] EXT4-fs (loop5): 1 truncate cleaned up [ 520.968438][T15130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.046535][T15134] loop3: detected capacity change from 0 to 512 [ 521.103859][T15134] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 521.194129][T15134] EXT4-fs (loop3): 1 truncate cleaned up [ 521.201678][T15144] loop2: detected capacity change from 0 to 256 [ 521.215688][T15134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.399147][T15147] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 521.436102][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.446465][T15147] FAT-fs (loop2): Filesystem has been set read-only [ 521.539427][T15152] openvswitch: netlink: EtherType 0 is less than min 600 [ 522.237589][ T7762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.351304][T15163] usb usb9: usbfs: process 15163 (syz.5.2575) did not claim interface 0 before use [ 522.368936][T15167] FAULT_INJECTION: forcing a failure. [ 522.368936][T15167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.433706][T15163] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 522.464213][T15167] CPU: 1 UID: 0 PID: 15167 Comm: syz.3.2579 Tainted: G W syzkaller #0 PREEMPT(full) [ 522.464360][T15167] Tainted: [W]=WARN [ 522.464368][T15167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 522.464382][T15167] Call Trace: [ 522.464390][T15167] [ 522.464448][T15167] __dump_stack+0x1d/0x30 [ 522.464479][T15167] dump_stack_lvl+0x95/0xd0 [ 522.464506][T15167] dump_stack+0x15/0x1b [ 522.464562][T15167] should_fail_ex+0x263/0x280 [ 522.464590][T15167] should_fail+0xb/0x20 [ 522.464627][T15167] should_fail_usercopy+0x1a/0x20 [ 522.464656][T15167] _copy_from_iter+0xcf/0xea0 [ 522.464686][T15167] ? _copy_from_iter+0x13e/0xea0 [ 522.464729][T15167] copy_page_from_iter+0x178/0x2a0 [ 522.464758][T15167] skb_copy_datagram_from_iter+0x22d/0x480 [ 522.464869][T15167] packet_sendmsg+0x26ba/0x3370 [ 522.464999][T15167] ? selinux_socket_sendmsg+0x192/0x1c0 [ 522.465088][T15167] ? __pfx_packet_sendmsg+0x10/0x10 [ 522.465113][T15167] __sys_sendto+0x470/0x4d0 [ 522.465149][T15167] __x64_sys_sendto+0x76/0x90 [ 522.465201][T15167] x64_sys_call+0x2d35/0x3020 [ 522.465231][T15167] do_syscall_64+0x12c/0x370 [ 522.465256][T15167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.465345][T15167] RIP: 0033:0x7fb31792c799 [ 522.465374][T15167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.465394][T15167] RSP: 002b:00007fb316387028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 522.465509][T15167] RAX: ffffffffffffffda RBX: 00007fb317ba5fa0 RCX: 00007fb31792c799 [ 522.465526][T15167] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 522.465553][T15167] RBP: 00007fb316387090 R08: 0000200000000140 R09: 0000000000000014 [ 522.465568][T15167] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 522.465582][T15167] R13: 00007fb317ba6038 R14: 00007fb317ba5fa0 R15: 00007ffff21f2e58 [ 522.465605][T15167] [ 523.039456][T15164] loop5: detected capacity change from 0 to 512 [ 523.179052][T15164] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 523.329807][T15164] EXT4-fs (loop5): 1 truncate cleaned up [ 523.373822][T15164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.496352][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.587483][T15176] loop6: detected capacity change from 0 to 1024 [ 523.618607][T15183] FAULT_INJECTION: forcing a failure. [ 523.618607][T15183] name failslab, interval 1, probability 0, space 0, times 0 [ 523.654474][T15186] loop3: detected capacity change from 0 to 128 [ 523.666829][T15185] usb usb9: usbfs: process 15185 (syz.2.2585) did not claim interface 0 before use [ 523.678065][T15185] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 523.700366][T15186] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 523.712011][T15183] CPU: 1 UID: 0 PID: 15183 Comm: syz.5.2584 Tainted: G W syzkaller #0 PREEMPT(full) [ 523.712047][T15183] Tainted: [W]=WARN [ 523.712055][T15183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 523.712069][T15183] Call Trace: [ 523.712076][T15183] [ 523.712085][T15183] __dump_stack+0x1d/0x30 [ 523.712115][T15183] dump_stack_lvl+0x95/0xd0 [ 523.712204][T15183] dump_stack+0x15/0x1b [ 523.712228][T15183] should_fail_ex+0x263/0x280 [ 523.712254][T15183] should_failslab+0x8c/0xb0 [ 523.712282][T15183] kmem_cache_alloc_noprof+0x66/0x400 [ 523.712307][T15183] ? skb_clone+0x151/0x1f0 [ 523.712339][T15183] skb_clone+0x151/0x1f0 [ 523.712389][T15183] __netlink_deliver_tap+0x2c9/0x500 [ 523.712424][T15183] netlink_unicast+0x66b/0x690 [ 523.712487][T15183] netlink_sendmsg+0x5c8/0x6f0 [ 523.712576][T15183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.712608][T15183] ____sys_sendmsg+0x5af/0x600 [ 523.712658][T15183] ___sys_sendmsg+0x195/0x1e0 [ 523.712782][T15183] __x64_sys_sendmsg+0xd4/0x160 [ 523.712819][T15183] x64_sys_call+0x194c/0x3020 [ 523.712901][T15183] do_syscall_64+0x12c/0x370 [ 523.712927][T15183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.713000][T15183] RIP: 0033:0x7fa0dfc6c799 [ 523.713019][T15183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.713041][T15183] RSP: 002b:00007fa0de6bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.713066][T15183] RAX: ffffffffffffffda RBX: 00007fa0dfee5fa0 RCX: 00007fa0dfc6c799 [ 523.713114][T15183] RDX: 0000000000040810 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 523.713130][T15183] RBP: 00007fa0de6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 523.713145][T15183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.713159][T15183] R13: 00007fa0dfee6038 R14: 00007fa0dfee5fa0 R15: 00007ffc824cc178 [ 523.713187][T15183] [ 523.832269][T15176] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2583: bad orphan inode 134217728 [ 523.864520][T15185] loop2: detected capacity change from 0 to 512 [ 523.940955][T15176] loop6: lost filesystem error report for type 5 error -117 [ 523.955441][T15176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.989891][T15185] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 524.051413][T15185] EXT4-fs (loop2): 1 truncate cleaned up [ 524.076739][T15185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.205065][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.301619][T15201] usb usb9: usbfs: process 15201 (syz.2.2590) did not claim interface 0 before use [ 524.334850][T15201] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 524.357219][T15203] loop2: detected capacity change from 0 to 512 [ 524.423767][T15203] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 524.468516][T15203] EXT4-fs (loop2): 1 truncate cleaned up [ 524.475092][T15203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.548986][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.697102][T15212] 9p: Could not find request transport: unix @ [ 524.859542][ T3408] usb 13-1: enqueue for inactive port 0 [ 524.865791][ T3408] usb 13-1: enqueue for inactive port 0 [ 524.969365][ T3408] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 525.783877][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.043108][T15242] FAULT_INJECTION: forcing a failure. [ 526.043108][T15242] name failslab, interval 1, probability 0, space 0, times 0 [ 526.056002][T15242] CPU: 0 UID: 0 PID: 15242 Comm: syz.5.2603 Tainted: G W syzkaller #0 PREEMPT(full) [ 526.056046][T15242] Tainted: [W]=WARN [ 526.056055][T15242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.056069][T15242] Call Trace: [ 526.056078][T15242] [ 526.056087][T15242] __dump_stack+0x1d/0x30 [ 526.056229][T15242] dump_stack_lvl+0x95/0xd0 [ 526.056251][T15242] dump_stack+0x15/0x1b [ 526.056270][T15242] should_fail_ex+0x263/0x280 [ 526.056358][T15242] ? ip_mc_add_src+0x2e4/0x5f0 [ 526.056378][T15242] should_failslab+0x8c/0xb0 [ 526.056403][T15242] __kmalloc_cache_noprof+0x5f/0x410 [ 526.056434][T15242] ip_mc_add_src+0x2e4/0x5f0 [ 526.056458][T15242] ip_mc_msfilter+0x3e6/0x5a0 [ 526.056511][T15242] ? __kmalloc_noprof+0x3cf/0x4e0 [ 526.056537][T15242] ? set_mcast_msfilter+0x3c/0x180 [ 526.056561][T15242] set_mcast_msfilter+0x15d/0x180 [ 526.056612][T15242] ip_set_mcast_msfilter+0x244/0x290 [ 526.056639][T15242] do_ip_setsockopt+0x16c9/0x2290 [ 526.056740][T15242] ip_setsockopt+0x58/0x110 [ 526.056765][T15242] udp_setsockopt+0x99/0xb0 [ 526.056788][T15242] sock_common_setsockopt+0x69/0x80 [ 526.056834][T15242] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 526.056854][T15242] __sys_setsockopt+0x184/0x200 [ 526.056935][T15242] __x64_sys_setsockopt+0x64/0x80 [ 526.056960][T15242] x64_sys_call+0x2327/0x3020 [ 526.057053][T15242] do_syscall_64+0x12c/0x370 [ 526.057077][T15242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.057099][T15242] RIP: 0033:0x7fa0dfc6c799 [ 526.057115][T15242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.057214][T15242] RSP: 002b:00007fa0de6bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 526.057238][T15242] RAX: ffffffffffffffda RBX: 00007fa0dfee5fa0 RCX: 00007fa0dfc6c799 [ 526.057283][T15242] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000006 [ 526.057296][T15242] RBP: 00007fa0de6bf090 R08: 0000000000000310 R09: 0000000000000000 [ 526.057309][T15242] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 526.057321][T15242] R13: 00007fa0dfee6038 R14: 00007fa0dfee5fa0 R15: 00007ffc824cc178 [ 526.057340][T15242] [ 526.557690][T15253] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.565113][T15253] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.635876][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2608'. [ 526.646666][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2608'. [ 526.713122][T15253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.727388][T15253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.736492][T15259] 9p: Could not find request transport: unix @ [ 526.775955][T15257] geneve2: entered promiscuous mode [ 526.892309][T15265] FAULT_INJECTION: forcing a failure. [ 526.892309][T15265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 526.906446][T15265] CPU: 0 UID: 0 PID: 15265 Comm: syz.3.2609 Tainted: G W syzkaller #0 PREEMPT(full) [ 526.906531][T15265] Tainted: [W]=WARN [ 526.906591][T15265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.906606][T15265] Call Trace: [ 526.906614][T15265] [ 526.906624][T15265] __dump_stack+0x1d/0x30 [ 526.906676][T15265] dump_stack_lvl+0x95/0xd0 [ 526.906704][T15265] dump_stack+0x15/0x1b [ 526.906726][T15265] should_fail_ex+0x263/0x280 [ 526.906748][T15265] should_fail_alloc_page+0xf2/0x100 [ 526.906891][T15265] __alloc_frozen_pages_noprof+0x108/0x360 [ 526.906967][T15265] alloc_pages_mpol+0xb3/0x260 [ 526.906993][T15265] folio_alloc_mpol_noprof+0x39/0x80 [ 526.907085][T15265] swap_cache_alloc_folio+0x8b/0x120 [ 526.907127][T15265] read_swap_cache_async+0x90/0x1d0 [ 526.907162][T15265] madvise_vma_behavior+0x52f/0x20c0 [ 526.907253][T15265] madvise_do_behavior+0x5de/0xa10 [ 526.907280][T15265] do_madvise+0x10e/0x190 [ 526.907310][T15265] __x64_sys_madvise+0x63/0x80 [ 526.907338][T15265] x64_sys_call+0x1eff/0x3020 [ 526.907442][T15265] do_syscall_64+0x12c/0x370 [ 526.907466][T15265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.907494][T15265] RIP: 0033:0x7fb31792c799 [ 526.907514][T15265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.907535][T15265] RSP: 002b:00007fb316345028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 526.907558][T15265] RAX: ffffffffffffffda RBX: 00007fb317ba6180 RCX: 00007fb31792c799 [ 526.907641][T15265] RDX: 0000000000000003 RSI: 000000000060005f RDI: 0000200000000000 [ 526.907655][T15265] RBP: 00007fb316345090 R08: 0000000000000000 R09: 0000000000000000 [ 526.907732][T15265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.907748][T15265] R13: 00007fb317ba6218 R14: 00007fb317ba6180 R15: 00007ffff21f2e58 [ 526.907791][T15265] [ 527.130976][ T1622] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.156504][ T1622] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.183477][ T1622] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.194147][ T1622] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.212422][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 527.212474][ T28] audit: type=1400 audit(1772735629.702:19929): avc: denied { read write } for pid=15266 comm="syz.6.2610" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 527.251235][ T28] audit: type=1400 audit(1772735629.702:19930): avc: denied { open } for pid=15266 comm="syz.6.2610" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 527.283573][ T28] audit: type=1400 audit(1772735629.742:19931): avc: denied { ioctl } for pid=15266 comm="syz.6.2610" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 527.284171][T15271] tipc: Enabled bearer , priority 0 [ 527.333550][T15271] syzkaller0: entered promiscuous mode [ 527.349010][T15271] syzkaller0: entered allmulticast mode [ 527.354780][ T28] audit: type=1400 audit(1772735629.792:19932): avc: denied { read } for pid=15272 comm="syz.5.2612" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 527.378021][T15271] tipc: Resetting bearer [ 527.389951][T15270] tipc: Resetting bearer [ 527.404561][T15270] tipc: Disabling bearer [ 527.432739][T15276] usb usb9: usbfs: process 15276 (syz.6.2614) did not claim interface 0 before use [ 527.448655][T15276] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 527.541698][T15276] loop6: detected capacity change from 0 to 512 [ 527.554884][T15273] loop5: detected capacity change from 0 to 512 [ 527.573047][T15289] loop2: detected capacity change from 0 to 128 [ 527.579789][T15289] vfat: Unknown parameter 'ÿÿÿ18446744073709551615' [ 527.588516][ T28] audit: type=1400 audit(1772735630.062:19933): avc: denied { mount } for pid=15288 comm="syz.2.2619" name="/" dev="hugetlbfs" ino=43422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 527.593288][T15276] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 527.633940][ T28] audit: type=1400 audit(1772735630.122:19934): avc: denied { unmount } for pid=8536 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 527.652207][T15273] vfat: Unknown parameter 'ÿÿ' [ 527.675638][T15276] EXT4-fs (loop6): 1 truncate cleaned up [ 527.708016][T15292] usb usb9: usbfs: process 15292 (syz.2.2620) did not claim interface 0 before use [ 527.775942][T15276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.872607][T15273] loop5: detected capacity change from 0 to 512 [ 527.886810][T15292] loop2: detected capacity change from 0 to 512 [ 528.014047][T15292] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 528.025008][ T28] audit: type=1326 audit(1772735630.502:19935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.3.2622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb31792c799 code=0x0 [ 528.075720][T15292] EXT4-fs (loop2): 1 truncate cleaned up [ 528.097399][T15292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.141864][ T28] audit: type=1400 audit(1772735630.622:19936): avc: denied { create } for pid=15304 comm="syz.5.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 528.209085][ T28] audit: type=1400 audit(1772735630.682:19937): avc: denied { bind } for pid=15299 comm="syz.3.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 528.269723][ T28] audit: type=1400 audit(1772735630.762:19938): avc: denied { getopt } for pid=15304 comm="syz.5.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 528.300649][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.437018][T15320] FAULT_INJECTION: forcing a failure. [ 528.437018][T15320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.451982][T15320] CPU: 0 UID: 0 PID: 15320 Comm: syz.5.2626 Tainted: G W syzkaller #0 PREEMPT(full) [ 528.452020][T15320] Tainted: [W]=WARN [ 528.452028][T15320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.452042][T15320] Call Trace: [ 528.452049][T15320] [ 528.452058][T15320] __dump_stack+0x1d/0x30 [ 528.452135][T15320] dump_stack_lvl+0x95/0xd0 [ 528.452199][T15320] dump_stack+0x15/0x1b [ 528.452224][T15320] should_fail_ex+0x263/0x280 [ 528.452252][T15320] should_fail+0xb/0x20 [ 528.452308][T15320] should_fail_usercopy+0x1a/0x20 [ 528.452353][T15320] _copy_to_user+0x20/0xa0 [ 528.452395][T15320] simple_read_from_buffer+0xb5/0x130 [ 528.452422][T15320] proc_fail_nth_read+0x10e/0x150 [ 528.452469][T15320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 528.452506][T15320] vfs_read+0x1ab/0x7f0 [ 528.452539][T15320] ? __rcu_read_unlock+0x4e/0x70 [ 528.452607][T15320] ? __fget_files+0x184/0x1c0 [ 528.452632][T15320] ? mutex_lock+0x57/0x90 [ 528.452663][T15320] ksys_read+0xdc/0x1a0 [ 528.452771][T15320] __x64_sys_read+0x40/0x50 [ 528.452806][T15320] x64_sys_call+0x2886/0x3020 [ 528.452836][T15320] do_syscall_64+0x12c/0x370 [ 528.452867][T15320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.452929][T15320] RIP: 0033:0x7fa0dfc2cfce [ 528.452949][T15320] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 528.452970][T15320] RSP: 002b:00007fa0de6befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 528.452996][T15320] RAX: ffffffffffffffda RBX: 00007fa0de6bf6c0 RCX: 00007fa0dfc2cfce [ 528.453012][T15320] RDX: 000000000000000f RSI: 00007fa0de6bf0a0 RDI: 0000000000000005 [ 528.453060][T15320] RBP: 00007fa0de6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 528.453075][T15320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.453119][T15320] R13: 00007fa0dfee6038 R14: 00007fa0dfee5fa0 R15: 00007ffc824cc178 [ 528.453142][T15320] [ 528.674344][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2627'. [ 528.710702][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.837336][T15326] usb usb9: usbfs: process 15326 (syz.2.2629) did not claim interface 0 before use [ 528.862210][T15326] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 528.992197][T15338] futex_wake_op: syz.5.2630 tries to shift op by -3; fix this program [ 529.140564][T15326] loop2: detected capacity change from 0 to 512 [ 529.254288][T15326] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 529.331535][T15326] EXT4-fs (loop2): 1 truncate cleaned up [ 529.356775][T15326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.873686][T15332] bond0: (slave dummy0): Releasing backup interface [ 529.880933][T15332] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 529.943435][T15332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 530.090639][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.495995][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2635'. [ 530.505399][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2635'. [ 530.702156][T15358] usb usb9: usbfs: process 15358 (syz.5.2638) did not claim interface 0 before use [ 530.741356][T15360] Cannot find add_set index 0 as target [ 530.750601][T15358] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 530.801582][T15362] loop5: detected capacity change from 0 to 512 [ 530.917174][T15363] loop2: detected capacity change from 0 to 2048 [ 530.931299][T15362] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 530.942710][ T3578] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 530.967247][T15362] EXT4-fs (loop5): 1 truncate cleaned up [ 531.053761][T15362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.153144][T15370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2639'. [ 531.174783][T15370] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2639'. [ 531.247977][T15370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2639'. [ 531.337862][T15370] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2639'. [ 531.487250][T15363] loop2: p1 < > p4 [ 531.521092][T15363] loop2: p4 size 8388608 extends beyond EOD, truncated [ 532.345575][T15383] loop3: detected capacity change from 0 to 4096 [ 532.417064][T15383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.530517][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.544518][T15386] loop6: detected capacity change from 0 to 512 [ 532.551978][T15386] EXT4-fs: Ignoring removed i_version option [ 532.567242][T15386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 532.573992][T15388] loop5: detected capacity change from 0 to 128 [ 532.592088][T15386] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 532.617241][ T28] audit: type=1400 audit(1772735635.102:19939): avc: denied { ioctl } for pid=15382 comm="syz.3.2644" path="/364/file0/cpuacct.usage_sys" dev="loop3" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 532.648220][T15386] EXT4-fs (loop6): 1 truncate cleaned up [ 532.655001][T15386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.766507][T15383] netlink: 'syz.3.2644': attribute type 21 has an invalid length. [ 532.774541][T15383] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2644'. [ 532.784369][ T28] audit: type=1400 audit(1772735635.252:19940): avc: denied { watch watch_reads } for pid=15382 comm="syz.3.2644" path="/364/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 532.800952][T15396] usb usb9: usbfs: process 15396 (syz.2.2648) did not claim interface 0 before use [ 532.834175][T15399] loop5: detected capacity change from 0 to 512 [ 532.848864][T15386] EXT4-fs (loop6): shut down requested (1) [ 532.892775][T15386] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=16 [ 532.942428][T15399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.005782][T15396] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 533.020424][T15399] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 533.032347][T15386] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=16 [ 533.147162][T15401] loop2: detected capacity change from 0 to 512 [ 533.226955][T15401] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 533.298023][ T28] audit: type=1400 audit(1772735635.352:19941): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 533.326307][T15389] wireguard0: entered promiscuous mode [ 533.332451][ T28] audit: type=1400 audit(1772735635.352:19942): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.358378][T15389] wireguard0: entered allmulticast mode [ 533.364754][T15401] EXT4-fs (loop2): 1 truncate cleaned up [ 533.365397][ T28] audit: type=1400 audit(1772735635.352:19943): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 533.379399][T15401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.409032][ T28] audit: type=1400 audit(1772735635.352:19944): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 533.411742][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.439052][ T28] audit: type=1400 audit(1772735635.352:19945): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 533.491434][T15414] loop6: detected capacity change from 0 to 512 [ 533.502593][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.515048][T15414] EXT4-fs: test_dummy_encryption option not supported [ 533.750748][ T28] audit: type=1400 audit(1772735636.223:19946): avc: denied { connect } for pid=15413 comm="syz.6.2650" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 534.193661][ T7762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.209213][ T28] audit: type=1400 audit(1772735636.703:19947): avc: denied { remount } for pid=15426 comm="syz.5.2653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 534.234211][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.369768][T15436] loop5: detected capacity change from 0 to 7 [ 534.715910][ T28] audit: type=1400 audit(1772735637.203:19948): avc: denied { write } for pid=15444 comm="syz.8.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 534.847870][T15451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=15451 comm=syz.3.2661 [ 535.039643][T15455] bridge_slave_0: left allmulticast mode [ 535.053892][T15455] bridge_slave_0: left promiscuous mode [ 535.074824][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.111985][T15447] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2659'. [ 535.141472][T15455] bridge_slave_1: left allmulticast mode [ 535.147334][T15455] bridge_slave_1: left promiscuous mode [ 535.169183][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.197557][T15455] bond0: (slave bond_slave_0): Releasing backup interface [ 535.216237][T15455] bond0: (slave bond_slave_1): Releasing backup interface [ 535.256183][T15455] team0: Port device team_slave_0 removed [ 535.274774][T15469] usb usb9: usbfs: process 15469 (syz.2.2665) did not claim interface 0 before use [ 535.289443][T15469] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 535.290248][T15455] team0: Port device team_slave_1 removed [ 535.315070][T15455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.342302][T15455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.361212][T15455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.382123][T15455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.409061][T15455] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 535.417736][T15469] loop2: detected capacity change from 0 to 512 [ 535.490227][T15469] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 535.509679][T15462] bridge0: port 3(team0) entered disabled state [ 535.516131][T15462] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.570239][T15469] EXT4-fs (loop2): 1 truncate cleaned up [ 535.594913][T15462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.605975][T15462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.645653][T15469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.735748][T15467] geneve2: entered promiscuous mode [ 536.116888][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.198680][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'. [ 536.217980][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2673'. [ 536.261006][T15473] loop6: detected capacity change from 0 to 1024 [ 536.475796][T15473] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2666: bad orphan inode 134217728 [ 536.488493][T15473] loop6: lost filesystem error report for type 5 error -117 [ 536.497876][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 536.512355][ C1] EXT4-fs (loop6): initial error at time 1772735638: ext4_orphan_get:1417 [ 536.521165][ C1] EXT4-fs (loop6): last error at time 1772735638: ext4_orphan_get:1417 [ 536.544542][T15473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.573387][T15504] loop5: detected capacity change from 0 to 256 [ 536.606046][T15504] FAT-fs (loop5): Directory bread(block 64) failed [ 536.612838][T15504] FAT-fs (loop5): Directory bread(block 65) failed [ 536.619451][T15504] FAT-fs (loop5): Directory bread(block 66) failed [ 536.626194][T15504] FAT-fs (loop5): Directory bread(block 67) failed [ 536.633103][T15504] FAT-fs (loop5): Directory bread(block 68) failed [ 536.639738][T15504] FAT-fs (loop5): Directory bread(block 69) failed [ 536.646497][T15504] FAT-fs (loop5): Directory bread(block 70) failed [ 536.653250][T15504] FAT-fs (loop5): Directory bread(block 71) failed [ 536.660303][T15504] FAT-fs (loop5): Directory bread(block 72) failed [ 536.667110][T15504] FAT-fs (loop5): Directory bread(block 73) failed [ 536.724033][T15504] bridge_slave_0: left allmulticast mode [ 536.731059][T15504] bridge_slave_0: left promiscuous mode [ 536.740844][T15504] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.868472][T15504] bridge_slave_1: left allmulticast mode [ 536.875980][T15504] bridge_slave_1: left promiscuous mode [ 536.887198][T15504] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.935444][T15504] bond0: (slave bond_slave_0): Releasing backup interface [ 537.002681][T15504] bond0: (slave bond_slave_1): Releasing backup interface [ 537.065675][T15504] team0: Port device team_slave_0 removed [ 537.094629][T15504] team0: Port device team_slave_1 removed [ 537.106362][T15504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.126834][T15504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.156984][T15504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 537.515430][T15503] tipc: Started in network mode [ 537.523594][T15503] tipc: Node identity , cluster identity 4711 [ 537.533713][T15503] tipc: Failed to obtain node identity [ 537.554011][T15503] tipc: Enabling of bearer rejected, failed to enable media [ 537.656601][T15514] loop2: detected capacity change from 0 to 1024 [ 537.664624][T15514] EXT4-fs: Ignoring removed orlov option [ 537.671034][T15514] EXT4-fs: Ignoring removed bh option [ 537.734745][T15514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.778532][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 537.778575][ T28] audit: type=1400 audit(1772735640.263:19967): avc: denied { write } for pid=15510 comm="syz.8.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 539.518234][T15528] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15528 comm=syz.8.2682 [ 539.532516][ T28] audit: type=1400 audit(1772735642.033:19968): avc: denied { nlmsg_write } for pid=15527 comm="syz.8.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 539.580294][T14287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.599437][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.641976][T15533] loop5: detected capacity change from 0 to 512 [ 539.665838][T15533] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 539.703299][T15533] EXT4-fs (loop5): 1 truncate cleaned up [ 539.712231][T15533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.735540][ T28] audit: type=1326 audit(1772735642.223:19969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.8.2687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b8047c799 code=0x0 [ 539.755330][T15539] usb usb9: usbfs: process 15539 (syz.2.2686) did not claim interface 0 before use [ 539.783044][T15539] vhci_hcd vhci_hcd.4: default hub control req: 0109 v0023 i0000 l0 [ 539.816525][ T28] audit: type=1400 audit(1772735642.303:19970): avc: denied { getopt } for pid=15534 comm="syz.6.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 539.839993][T15535] loop6: detected capacity change from 0 to 512 [ 539.846636][T15535] EXT4-fs: Ignoring removed i_version option [ 539.853485][T15535] ext4: Unknown parameter 'euid<00000000004294967295' [ 539.860638][ T28] audit: type=1400 audit(1772735642.353:19971): avc: denied { map } for pid=15531 comm="syz.5.2685" path="/176/file1/memory.events" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 539.887755][ T28] audit: type=1400 audit(1772735642.353:19972): avc: denied { getopt } for pid=15531 comm="syz.5.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 539.909523][ T28] audit: type=1400 audit(1772735642.353:19973): avc: denied { shutdown } for pid=15531 comm="syz.5.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 540.007791][T12498] ================================================================== [ 540.007839][T15546] loop6: detected capacity change from 0 to 256 [ 540.015924][T12498] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 540.029186][T12498] [ 540.031528][T12498] write to 0xffff88810224be18 of 8 bytes by task 15546 on cpu 0: [ 540.040311][T12498] inc_diskseq+0x2d/0x40 [ 540.044668][T12498] disk_force_media_change+0x9e/0xe0 [ 540.050228][T12498] loop_configure+0x6cb/0x9c0 [ 540.055123][T12498] lo_ioctl+0x1e1/0x13a0 [ 540.059397][T12498] blkdev_ioctl+0x387/0x460 [ 540.064003][T12498] __se_sys_ioctl+0xce/0x140 [ 540.068624][T12498] __x64_sys_ioctl+0x43/0x50 [ 540.073506][T12498] x64_sys_call+0x1563/0x3020 [ 540.078200][T12498] do_syscall_64+0x12c/0x370 [ 540.082889][T12498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.089318][T12498] [ 540.091695][T12498] read to 0xffff88810224be18 of 8 bytes by task 12498 on cpu 1: [ 540.099426][T12498] block_uevent+0x31/0x50 [ 540.103783][T12498] dev_uevent+0x375/0x400 [ 540.108304][T12498] uevent_show+0x11a/0x200 [ 540.113261][T12498] dev_attr_show+0x3f/0xa0 [ 540.117697][T12498] sysfs_kf_seq_show+0x1a3/0x280 [ 540.122651][T12498] kernfs_seq_show+0x82/0xa0 [ 540.127254][T12498] seq_read_iter+0x31e/0x940 [ 540.131874][T12498] kernfs_fop_read_iter+0xc1/0x330 [ 540.137011][T12498] vfs_read+0x6c0/0x7f0 [ 540.141366][T12498] ksys_read+0xdc/0x1a0 [ 540.145837][T12498] __x64_sys_read+0x40/0x50 [ 540.150633][T12498] x64_sys_call+0x2886/0x3020 [ 540.155332][T12498] do_syscall_64+0x12c/0x370 [ 540.160119][T12498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.166287][T12498] [ 540.168620][T12498] value changed: 0x0000000000000595 -> 0x0000000000000596 [ 540.175858][T12498] [ 540.178190][T12498] Reported by Kernel Concurrency Sanitizer on: [ 540.184620][T12498] CPU: 1 UID: 0 PID: 12498 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 540.195917][T12498] Tainted: [W]=WARN [ 540.199814][T12498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 540.209881][T12498] ================================================================== [ 540.226633][T15539] loop2: detected capacity change from 0 to 512 [ 540.319162][T15539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 540.340631][T11685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.399732][T15539] EXT4-fs (loop2): 1 truncate cleaned up [ 540.413158][T15539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.480735][ T8536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.