last executing test programs: 19m51.657479397s ago: executing program 3 (id=1211): r0 = socket(0x400000000010, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = io_uring_setup(0x134a, &(0x7f0000019080)={0x0, 0x1f89, 0x0, 0x3, 0x286}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r5, 0x0, r6, 0x0, 0xc, 0x4) write(r4, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0xfffd, &(0x7f0000000300)=0x2) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x85, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x2016}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 19m51.24047341s ago: executing program 3 (id=1212): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpgrp(0x0) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004811}, 0x40841) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x4800117ba854bb49, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19m49.577078582s ago: executing program 3 (id=1223): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$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") symlink(&(0x7f0000000180)='./bus\x00', &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @random="43ebb4a956fb", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @remote, @broadcast}, "21db0e31e0cddb5f29f9eb1ee119ff3213491ba894b756ac1cbe5340"}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f687372000000"], 0xe8}}, 0x0) 19m48.300608272s ago: executing program 3 (id=1225): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x5, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r7, @ANYBLOB="0800020001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @broadcast, 0x0}, &(0x7f0000000b80)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0xe8, 0x100, 0x11, @empty, @private0, 0x8000, 0x8000, 0x0, 0x15b9a4f0}}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="780000008e409ccfc9599c36c711ea0742394766e83564b2d17f52466d63fdba351a2a29b5ded5a3c25ba715eb454a4431a8a463a0411886bed73a50ddb0470776b1e6883a243e62d12397ceca54df6e270908e6720c73c65897ab9458014b30c55f0c7e452eb1ba767273890bc3dc90d411341578ce8d3d0992ee734a018002208c2a4b57660369d079c97f99674c35fbb16885c8f1b4a32ec384867487fe3cb7d648fbc06d8d05d44a3ce53a06881a7aa9d0dd67fe", @ANYRES16=r5, @ANYBLOB="00032abd7000fddbdf250200000014000b00fe8000000000000000000000000000aa080009000300000014000c00fc02000000000000000000000000000114000b0000000000000000000000ffff7f00000108000700", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="080002000000000008000100", @ANYRES32=r9, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x20000) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000180)) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc018937e, 0x0) write$cgroup_pid(r11, 0x0, 0x0) 19m47.924861574s ago: executing program 3 (id=1232): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc00) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xc, &(0x7f0000000240)={0x0, 0x79af, 0x100, 0xffffffff, 0x40024d}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@can_newroute={0x1c, 0x18, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1d, 0x1, 0x7}, [@CGW_LIM_HOPS={0x5, 0xd, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008884}, 0x50) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000400)) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'geneve1\x00', 0x58}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10003, &(0x7f0000001880)={[{@nodiscard}, {@jqfmt_vfsv1}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@usrjquota}, {}, {@journal_dev={'journal_dev', 0x3d, 0x20000000008}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@euid_eq}, {@context={'context', 0x3d, 'root'}}], 0x2c}, 0x2, 0x500, &(0x7f0000000c00)="$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") r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, '\x00', "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"}}, 0x110) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, 0x0, &(0x7f0000000080)) file_getattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000140)=0xfffffff5) socket$nl_netfilter(0x10, 0x3, 0xc) fchmod(r7, 0x42) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x19, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000746010800000000000000000a000404"], 0xf}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) 19m47.280645094s ago: executing program 3 (id=1243): socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100010020000000010000000a000026b495a6000000000077498360aa7deb4c917aab17a1988a96397613066c46994a1e7683b8fbba55a0bbf50248fdb828e67c075ec5927f34192dba4f4fcf77e7247e5df5ff51b006377bb9dec92c1961337bd1c5d63fb0d3bd5a962044c000"/133], 0x1c}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = io_uring_setup(0x57e6, &(0x7f0000000000)={0x0, 0x2c8c, 0x80, 0x3, 0x3dd}) syz_io_uring_setup(0x2175, &(0x7f0000000100)={0x0, 0x5128, 0x20000, 0x0, 0x2ea, 0x0, r1}, &(0x7f0000000180), 0x0, &(0x7f0000000200)) socket$kcm(0x29, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_io_uring_setup(0xa6a, 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80001, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpgrp(r2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xd}, 0x1101, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e26, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="33e1ae9ee21f83223c808e63af683d8d9af9e949", 0x14}, {0x0}], 0x2}}], 0x1, 0x488c4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x49, &(0x7f0000000100)={0x0, 0x0}, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 19m47.228456125s ago: executing program 32 (id=1243): socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100010020000000010000000a000026b495a6000000000077498360aa7deb4c917aab17a1988a96397613066c46994a1e7683b8fbba55a0bbf50248fdb828e67c075ec5927f34192dba4f4fcf77e7247e5df5ff51b006377bb9dec92c1961337bd1c5d63fb0d3bd5a962044c000"/133], 0x1c}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = io_uring_setup(0x57e6, &(0x7f0000000000)={0x0, 0x2c8c, 0x80, 0x3, 0x3dd}) syz_io_uring_setup(0x2175, &(0x7f0000000100)={0x0, 0x5128, 0x20000, 0x0, 0x2ea, 0x0, r1}, &(0x7f0000000180), 0x0, &(0x7f0000000200)) socket$kcm(0x29, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_io_uring_setup(0xa6a, 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80001, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpgrp(r2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xd}, 0x1101, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e26, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="33e1ae9ee21f83223c808e63af683d8d9af9e949", 0x14}, {0x0}], 0x2}}], 0x1, 0x488c4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x49, &(0x7f0000000100)={0x0, 0x0}, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 14m39.856663631s ago: executing program 1 (id=3567): socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x7, 0x8, 0x3, 0x6, {{0x36, 0x4, 0x2, 0x13, 0xd8, 0x67, 0x0, 0xd, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x40}, {[@rr={0x7, 0xb, 0x30, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x5a, 0x0, 0x8, [0x6]}, @timestamp_addr={0x44, 0x4c, 0x81, 0x1, 0x2, [{@multicast1, 0x7}, {@multicast1}, {@loopback, 0x7}, {@broadcast, 0x80000001}, {@multicast1, 0x5}, {@private=0xa010102, 0x4}, {@broadcast, 0x8}, {@multicast1, 0x8e5}, {@empty, 0x1}]}, @end, @timestamp_addr={0x44, 0x4c, 0x43, 0x1, 0x7, [{@broadcast}, {@broadcast, 0xfa}, {@local, 0x5}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7ff}, {@private=0xa010102}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3a8c}, {@remote, 0x80}, {@rand_addr=0x64010102, 0x80000000}]}, @end, @end, @end, @ssrr={0x89, 0x13, 0x5e, [@multicast2, @private=0xa010102, @remote, @local]}]}}}}}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x168) statx(r3, &(0x7f0000000080)='./file0\x00', 0x1000, 0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, r4, &(0x7f0000000180)) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)=@newpolicy={0x200, 0x13, 0x100, 0x70bd2a, 0x25dfdbfe, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4e23, 0x8ff7, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x8, r2, r4}, {0x3ff, 0x1, 0x7, 0x0, 0x10001, 0x8000000000000000, 0x3, 0x100}, {0x3f3, 0x2, 0xf2, 0x8}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2}, [@policy_type={0xa, 0x10, {0x1}}, @algo_auth={0x8d, 0x1, {{'sha1_mb\x00'}, 0x228, "1f5755255ea22417125c316d3f01c77557bdfe9ce4866aec89ca85e4a894f500f92bce8fd31de6d9d9c37da389ff6aabe088e0c586787f656075cccd48db07c00f292a1340"}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd28, 0x34}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd2a, 0x70bd27, 0x70bd28, 0x70bd2a, 0xaaee, [0x2, 0x0, 0xfff, 0x3, 0x6, 0x7eb]}}, @user_kmaddress={0x2c, 0x13, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xa}}, @sec_ctx={0x3c, 0x8, {0x38, 0x8, 0x1, 0xf6, 0x30, "820674b2ee1f3a8b8c8d3c3238636e928409293e76e59455b02795297748ef7bb0d4ee5436b89d68a7053be96ffa8cbb"}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4048895}, 0x5) write$selinux_load(r0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x65) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320000000014000000110001"], 0xb8}}, 0x40880) close(r5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2c, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40080) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14m39.771271283s ago: executing program 1 (id=3569): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000280)={[{@dots}, {@fat=@nfs_stale_rw}, {@nodots}, {@fat=@nocase}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@nodots}, {@dots}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0xc}}, {@nodots}, {@fat=@quiet}, {@fat=@nfs}, {@fat=@check_strict}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x3a424bc, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX, @ANYBLOB="e486301f94ddf2a3c6e9c6a4598fef2f7853d743f4831d65b415af9ec7dbc191ae080a134bb75d703b909f2312a98aee8b0f9b0db8e7ed2462a00363dad1638b2153b8042adc1cad959cd28efb4c8408de3df91b02cf343ff378c71b87fe0d59824e1618cd9913d306913a737be0e0af9d7310bf01ca4a8807b84427333d19419f24196d806ff138823247a8bf660b3819db5bbac9a3d8c83bbc03f79dd97f2a3ceb4e16d6a19e70233dd475778c5a2ff5143c51b6058a6effbef0ad0e432f91e823", @ANYRES16=r1, @ANYBLOB="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"/433, @ANYRES16=r1, @ANYRES8=0x0, @ANYBLOB="787fbcf0d953c7f09e72bb2e52a1f87e9302fa845ff03171634dcdcbfde9f09ac5308b68bf8ccb1186dcaa791090376a8ced429e212b7d50db18595fe44dc1973a193e4ccbd838bba3cb884f228953e593dbe276a8ce3da4d9ee24916115"], 0x5, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) 14m39.663125557s ago: executing program 1 (id=3571): syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000940)='./bus\x00', 0x210000, &(0x7f0000000b40)={[{@nobarrier}, {@nojournal_checksum}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@jqfmt_vfsold}, {@lazytime}, {@lazytime}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}], [{@permit_directio}, {@uid_eq}, {@uid_eq}, {@hash}, {@uid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, '+!'}}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}, 0xfc, 0x56f, &(0x7f0000001040)="$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") open(0x0, 0x1cd142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000000)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@noinit_itable}, {@acl}, {@bsdgroups}]}, 0x0, 0x48a, &(0x7f0000000200)="$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") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x2}) socket(0x840000000002, 0x3, 0xff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRESDEC], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000000)="1aa4", 0x2, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) 14m39.352367737s ago: executing program 1 (id=3575): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50550, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1, 0xaad2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x51, 0x0, 0x4, 0x0, 0x6e5, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000340)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) dup(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @loopback}, &(0x7f00000000c0)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf250f0000001c00018008000100", @ANYRES32=r2, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x201d810, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000f00)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x8, @loopback, 0x2}}}, 0xa0) write$binfmt_elf64(r1, &(0x7f0000000f80)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x2d, 0x7, 0x41, 0x7, 0x3, 0x6, 0x100, 0x199, 0x40, 0x67, 0x2, 0x40, 0x38, 0x2, 0xc424, 0x7f, 0x5d}, [{0x2, 0x1, 0x212, 0x0, 0x8, 0x8000000000000001, 0xb2, 0x6}, {0x1, 0x4, 0x1, 0x10000, 0x3, 0xffffffff, 0xd61d, 0xb}], "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"}, 0x10b0) 14m38.873502782s ago: executing program 1 (id=3578): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x28) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = io_uring_setup(0x1683, &(0x7f0000000200)={0x0, 0x6f5d, 0x100, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084504, &(0x7f0000ffcffc)=0x3) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000002c0)=""/168) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x20004040) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) bind$nfc_llcp(r3, 0x0, 0x0) kexec_load(0xa5, 0x0, 0x0, 0x150000) 14m38.678497487s ago: executing program 1 (id=3579): r0 = syz_open_procfs(0x0, 0x0) dup(r0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)={0x80000004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x20000014}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netfilter\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000140)}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be4220000000000dff2badc958845d800000000000000004000", 0x17}, 0x60) listen(r4, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) accept4(r4, 0x0, 0x0, 0x800) 14m38.651547068s ago: executing program 33 (id=3579): r0 = syz_open_procfs(0x0, 0x0) dup(r0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)={0x80000004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x20000014}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netfilter\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000140)}}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be4220000000000dff2badc958845d800000000000000004000", 0x17}, 0x60) listen(r4, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) accept4(r4, 0x0, 0x0, 0x800) 10m53.102153528s ago: executing program 6 (id=4956): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) capset(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x8020, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000000000800100000000a00a000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r8, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 10m51.998257182s ago: executing program 6 (id=4966): openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x189703, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 10m49.240049989s ago: executing program 6 (id=4971): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0xca37, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f00000001c0)=""/77, 0x328000, 0x800, 0x3d, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080), 0x4) prlimit64(0x0, 0x8, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000180)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r3}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) io_uring_setup(0x4d71, &(0x7f0000000100)={0x0, 0x16db, 0x800, 0x1, 0x33b}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x40002, 0x128) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_int(r5, &(0x7f0000000100)=0x100000000, 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 10m48.976851147s ago: executing program 6 (id=4977): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x511082, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0xc0185879, &(0x7f00000004c0)={0x100, 0xffffffffffffffff, 0x401000, 0x2, 0x0, 0x0, 0x2401}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 10m48.538950191s ago: executing program 6 (id=4979): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x2088d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0x6, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2000002, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000d9f000/0x4000)=nil, 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = gettid() prlimit64(r1, 0x6, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x48c02, 0x0) readv(r2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getrlimit(0xb, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_emit_ethernet(0x76, &(0x7f0000000500)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x2, '\x00', {0x2, 0x6, "c593ad", 0x94f, 0x2f, 0xff, @rand_addr=' \x01\x00', @loopback, [], "bd002f4ad51df48ee68f6c8cfe6dd4c7"}}}}}}}, 0x0) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}}], 0x1, 0x4000000) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f00000001c0), 0x1004) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) fcntl$getflags(r0, 0x401) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) 10m47.547597642s ago: executing program 6 (id=4990): socket$packet(0x11, 0x2, 0x300) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="680b53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 10m47.465873204s ago: executing program 34 (id=4990): socket$packet(0x11, 0x2, 0x300) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="680b53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 4m32.221122269s ago: executing program 5 (id=7776): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c8, 0x11e0, 0xc8, 0x8, 0x11e0, 0x5803, 0x12f8, 0x2e8, 0x2e8, 0x12f8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x82, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x5, 0x9, 0x1, 0x0, "f66026c5e6e4409b4fed9e7027bc4e8c6b10d1bd2e4c13b96328722f2d860d2371d0ae65ef518c01cf9b398b7099487a3f073b38f0d17df76a133ae1adcee537"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x1428) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x8, 0x222, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_config_ext={0x9, 0x101}, 0xd, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket(0x11, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0xfe, 0x0, 0x2, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0xfffffffffffffffc, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) chdir(0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x11102c02) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) unshare(0x26020480) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) bind$packet(r1, 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x80000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0xffffffba, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x854}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004", @ANYRESOCT=r4, @ANYRES16=r3], 0xa4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xb7, 0x2, 0xffff}]}, 0x10) pwrite64(r5, &(0x7f0000000180)='q', 0x1, 0x100004) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) 4m31.287982529s ago: executing program 5 (id=7785): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x810, 0x0, 0x0) epoll_create1(0x0) 4m31.172367572s ago: executing program 5 (id=7787): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x1e00, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c1812", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000280), &(0x7f0000000500)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000140)={0x1, 0x2, 0xc, 0xfffffffffffffff8, 0x100, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 4m31.023250947s ago: executing program 5 (id=7790): syz_open_dev$sg(0x0, 0x0, 0x101000) socket(0x5, 0x6, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x4000800) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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") r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578492b843b47f04375f0373ed9ebed880ada9584189b592f5ae1bb9d77effc8e9558a8dff6cfa5f37babe630cfacb5e5aba321f4353047dee35dd00e23f79c733ff6cd07cf4682a021aad32fe5846ad8f8cc3cca1c7add71377781ed30d468a21e25ecc505feb1c5108d47bd26d3e7d51a161ea53ec273df1ddd7600e9e3128d5736b14fe39ee7d173493f00e04e973f032fff66d6b952a5741afa6cf2eb315e0e5c9d3ee40b9d0196db748f976d8260052dfa8d"], 0x77) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x86c7e, 0x100000002, 0x81, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101842, 0x11) fsopen(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000", 0xb1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 4m30.350044648s ago: executing program 5 (id=7793): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x4040, 0x80) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/23, 0x17, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000700039022dbd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="0c0001800800010000000e000c00018008000100020001"], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x44014) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m29.664514709s ago: executing program 5 (id=7802): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4m29.580549072s ago: executing program 35 (id=7802): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.684029673s ago: executing program 2 (id=9716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xd9, &(0x7f0000000340)=""/217, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0) statx(r0, &(0x7f0000000300)='./file1/file0\x00', 0x0, 0x4, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@filename='./file2\x00', r2, &(0x7f0000000280)={0x2, 0x746, 0x6, 0x8, 0x1, 0x6, 0xc, 0xf64, 0xffeffffc}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10092, &(0x7f0000000080), 0xff, 0x249, &(0x7f0000000880)="$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") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file3\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x4) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x8, 0x9, 0x0, 0x0, 0x0}) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000400)='./file1/file0\x00', 0x2000, 0x0) socket$unix(0x1, 0x2, 0x0) 3.724988773s ago: executing program 2 (id=9724): io_uring_setup(0x4ee3, &(0x7f0000000100)={0x0, 0xfb6e, 0x8, 0x2, 0x231}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="b702000004000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd000071d3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def6132e4f8acf03438b1d01ccbe27e5be5b46304c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1eaf8deff211a307626d8b27f4356755a8b3a8103e73bb2c7114e85ab2f2ee3f2ea8a4188a7d5917e790629887c1c51f56d10a8400fb4193dd79dd657ec190acfbd00e5b3a37b6205b6b5c438ebaaea9d47acc662e5ef3c51cc2add70aa9a6420abb168651d78e3a61b3007e5c86b03ffdaaebc7545061274f1b7bfefecea707423af2601bd1608abc6f7dc4bc1ab8933d11c825efb1308d2fc80d2c19d6e083bed16f8063497f59174a8e2d0500d4c1f5f0384fd8b54faa13ecde3080a17bd3b60191a8bc1cdc985d70c539e53c1b99a8e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.627551886s ago: executing program 2 (id=9726): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) unshare(0x62040680) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008040}}], 0x1, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079a048fe00000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r5 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) ftruncate(r5, 0x51a9497) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xb5d5, 0xc000, 0xc, 0xa0002f7}) connect$unix(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 3.396236023s ago: executing program 2 (id=9732): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000100)=@ieee802154, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/202, 0xca}, {&(0x7f0000000340)=""/194, 0xc2}], 0x2, &(0x7f0000000480)=""/163, 0xa3}, 0x3}, {{&(0x7f0000000540)=@pppol2tpin6, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/68, 0x44}], 0x1}, 0xfffffffd}, {{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001940)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/33, 0x21}, {&(0x7f00000007c0)=""/179, 0xb3}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/79, 0x4f}, {&(0x7f0000001900)=""/32, 0x20}], 0x6}, 0x8}, {{&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a40)=""/53, 0x35}, {0x0}, {&(0x7f0000001b80)=""/192, 0xc0}], 0x3, &(0x7f0000001c80)=""/75, 0x4b}, 0x80}, {{&(0x7f0000001d00)=@ieee802154, 0x80, &(0x7f0000002000)=[{&(0x7f0000001d80)=""/78, 0x4e}, {&(0x7f0000001e00)=""/222, 0xde}, {&(0x7f0000001f00)=""/236, 0xec}], 0x3, &(0x7f0000002040)=""/94, 0x5e}, 0x5}, {{&(0x7f00000020c0)=@nfc, 0x80, &(0x7f0000002500)=[{&(0x7f0000002140)=""/99, 0x63}, {&(0x7f00000021c0)=""/139, 0x8b}, {&(0x7f0000002280)=""/69, 0x45}, {&(0x7f0000002300)=""/79, 0x4f}, {&(0x7f0000002380)=""/83, 0x53}, {&(0x7f0000002400)=""/192, 0xc0}], 0x6, &(0x7f0000002580)=""/29, 0x1d}, 0x9}], 0x6, 0x0, &(0x7f0000002740)={0x77359400}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x50001, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) connect$inet6(r2, &(0x7f0000005c00)={0xa, 0x4e20, 0x7, @local, 0x2}, 0x1c) syz_usb_connect(0x3, 0x24, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x80) r3 = socket(0x2b, 0x80801, 0x1) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bind$l2tp6(r3, &(0x7f0000000180)={0xa, 0x0, 0x81, @loopback, 0xa1d, 0x3}, 0x20) syz_usb_connect$uac2(0x2, 0xcc, &(0x7f00000027c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x1, 0x0, 0xe, {0x8, 0xb, 0x2, 0x2, 0x1, 0xc, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xa, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0xe6, "8805a808"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x2, 0x4, 0xfc}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xff, 0x1, 0x8, 0x81, "66a09c", ')'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x4, 0xbc, {0x8, 0x25, 0x1, 0x81, 0x3c, 0x6, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0xc, 0x8, 0xf9}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x3, 0x5, 0x2, "cdebecbd42cbaea3c0"}, @as_header={0x10, 0x24, 0x1, 0x28, 0xd6, 0x1, 0x3, 0x8, 0x6, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x4, 0x9, {0x8, 0x25, 0x1, 0xc0, 0x0, 0xf7}}}}}}}}]}}, &(0x7f0000002e40)={0xa, &(0x7f00000028c0)={0xa, 0x6, 0x201, 0xad, 0x6, 0x2, 0x40, 0xc}, 0xcd, &(0x7f0000002900)={0x5, 0xf, 0xcd, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0x1, 0x7fff}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x401, 0xf000}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x5, 0x5d, 0x81}, @generic={0x90, 0x10, 0xb, "abe6a71bc85e9939140ba1b9343e3a7665937fd75fa4f78346c4fef50357c3a4dcfef57fc3db5cefd285d330d7f274c08222f5a2f14f3df84f0daf9914fe2df57d454edbeebc671ed63b7d5c2da2aad559700f7a3498e29d9e53192f917d99d6a5c4e526cb6bf667337790a07c11d7940805454ab076bd303981ea26da97bdfca5fb4f11caad8e9350b10a7a9b"}, @ssp_cap={0x10, 0x10, 0xa, 0xaa, 0x1, 0x7, 0xf00f, 0x0, [0x3f30]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x0, 0x40}]}, 0x9, [{0x19, &(0x7f0000002a00)=@string={0x19, 0x3, "fdbdfecfd4319bd370ab533e72b70b7e33498f388d9011"}}, {0x97, &(0x7f0000002a40)=@string={0x97, 0x3, "009cc64131ebaa9fc547d74cf420cf0f86a3d5a572d5d798d93abc7b5104b3f6e72522f14b9dcb353d66c579d33bdd60899aee49b7778be655d95f24af6d19f4baf6229a01288a85dc861416598f8104aa1333f08c7f06b44cbcc81c59b046edfae1690290a79d5f27da0bb560ee12e06b083209858518f6fb6140b98acca47bf8d707911b298f5ff98f496890489ed84f38ded21a"}}, {0x64, &(0x7f0000002b00)=@string={0x64, 0x3, "0514b8d1629af6eb3f480880fe194e9372a7405c9989d0ebe3bb45f373e55a52d783f9d70e90534e444b03e1295d48e2c80536f5c3225926f4bbf0d49074821a07b75cf1e469d97a8b845389bf4218f8cf49528e0dd57904f135f5acf161586118c6"}}, {0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000002bc0)=@lang_id={0x4, 0x3, 0x1074}}, {0xea, &(0x7f0000002c00)=@string={0xea, 0x3, "ca8a5c6f2f3ab2bd9e7064449db2536b9bb94dfa59a2d1f4a65cf73e109b5112326fd1306bfbea42984a4de835c32677428ccb158ea60b8dbb537b8e2aea04e0e78b60a4231b95571d113085ace436fc272cd99d04953a98e18985cbee41d774327bc5e99f288945ff870969297c9c3dbf6035bce28f4957f6cd8655f7857e327f637a4082bd5f5b712d81c36abe76c2649d9e28b6fe57183b391b37c5e71cef8911cfd5e3076ee341fa5defded51083ae6c06147670e43618336a166ed79190bf72698147cc572a5f6c3f6b6692c0ae04042d92f4aee10fd4ca9c4e00175392c90349e4efdcff46"}}, {0x11, &(0x7f0000002d00)=@string={0x11, 0x3, "824c8b6a63b574a61dde98d0e7a54e"}}, {0x98, &(0x7f0000002d40)=@string={0x98, 0x3, "1449c3243354122080e382a7f754382284ed158c1771bddefa2695c816f1376beb9ed8c7ceb81237ef5ab43de07083ad06e07c83aa6da24e177d96776d51b688a7fd4cc7e6a7a754fd856638c9b04cb7347f817333a1392cc284055c44be70b9a27edd51fa7d5fbad2d42397237e3d3aac4f01c7ffb12334493f81f40fd2759ce30fa3d5d64a3f7a91ceaedf7c62054696bd09c18767"}}, {0x4, &(0x7f0000002e00)=@lang_id={0x4, 0x3, 0x40b}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) prlimit64(r5, 0xd, &(0x7f0000002780)={0x4, 0x19f2}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x8c}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) 2.978188556s ago: executing program 7 (id=9736): io_uring_setup(0x4ee3, &(0x7f0000000100)={0x0, 0xfb6e, 0x8, 0x2, 0x231}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.828676701s ago: executing program 7 (id=9737): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x116a80, 0x17, 0x20d6, 0x0, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000180)=0x10) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001900)=ANY=[@ANYBLOB="e4000000000807030000000000000000000000001c00048008000240000080010800014080000000080002400000a74d2c0004800800014000000003080002400000010108000240000000040800014000000003080001400000000605000300840000002400048008000140000000050800014000010001080001400000247b080001400000000406000240888400000900010073797a3100000000340004800800064000000004080003400000dbe70800"], 0xe4}, 0x1, 0x0, 0x0, 0x400c850}, 0x40000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map, 0x1, 0x1, 0xbd, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r6) r7 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x4000, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") move_mount(r5, &(0x7f0000000680)='./file1\x00', r7, &(0x7f00000006c0)='./file1\x00', 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r8, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001080)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0xfeff, 0x0}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f00000003c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 2.721108225s ago: executing program 7 (id=9738): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.573919429s ago: executing program 7 (id=9742): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') mknodat$loop(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x1000, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000240)="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", &(0x7f0000000340)=""/63}, 0x20) (async) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0xee00, r1) (async) chroot(&(0x7f0000000080)='./file0\x00') 2.488845662s ago: executing program 7 (id=9743): mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r7, &(0x7f0000000240)=[{0x0}], 0x1, 0x6400, 0x0, 0x3) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, 0x0) 2.322149507s ago: executing program 8 (id=9746): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r4}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.083039274s ago: executing program 0 (id=9750): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14) sendto$inet6(r1, &(0x7f0000000140)="800034ca269bb73c", 0x8, 0x200440c0, &(0x7f0000000040)={0xa, 0xfffd, 0xff, @mcast2}, 0x1c) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17fc2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xfcd, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xfffffffffffffffe}, 0x0, 0x0, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, 0x0, 0x0) 1.972703858s ago: executing program 4 (id=9751): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x80000001, 0x7}, 0x2211, 0x0, 0x8000, 0x9, 0xfff, 0x7fff, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc0c0009000900000600150002"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @broadcast}, @ib={0x1b, 0x0, 0xff, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) 1.58465715s ago: executing program 4 (id=9752): prctl$PR_SET_SECUREBITS(0x1c, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000001280)=""/143) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettfilter={0x0, 0x2e, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x11, 0x5}, {0x10, 0xffe0}, {0x4, 0xffff}}}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000940)=ANY=[@ANYBLOB="b0020000130000042cbd7000fbdbdf252b9106000000000000000000000001000200000005000000090000005b0c0000fcffffff00000000", @ANYRES32=r4, @ANYBLOB="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"], 0x2b0}, 0x1, 0x0, 0x0, 0x48005}, 0x10) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', r0, 0x4000, r1}, 0x18) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x31, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x10142, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x1, 0x8001) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) fchown(0xffffffffffffffff, 0xee01, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESOCT=r9, @ANYBLOB="1460139099d2ae072b990ba5a393c23cb35de72fad80cd8ec7dea9322430a3589416abbb13af0a2f9d358c9d89f4740307872099eb582cf3ae5ba147852ebd335559bf5dc65c2ef9cbfa0a59864208e28d6309e92ae98afc8b", @ANYRESHEX, @ANYRESDEC, @ANYRES32], 0x0, 0x2b7, &(0x7f0000000580)="$eJzs3c9Ka1cUB+Bf1JjoJEI7Kh0cKJSORH2DUCyUBgqWQO3IUJUWI0IEoR1UZ32XPk4foy9QC4Vcridq4s31D3o93vh9EM6Cvdc5aychOwl7JzufHx7sHh3vb3/yT5rNIgvJWf5LkrnMZ+QqSGpZzLizAAAfm62tXrvqGviwBoN2r56k8U5Lt15JQQAAAAAAAAAAADza1PX/58nK2Pr/2ug4Z/0/AMwE6/9n32DQ7i2P3r9N6v5VSUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASc6Hw9bwllvV9QEAT+8x8/+/w9LzVQsAPIXJ+b92lvj8DwCz7nxirq/F9/8AMPt+2P7pu3ans7lVFM3k8M+T7km3PJbt7f38mn72spZW/k+GV8r4m287m2vFhZXsHJ6O8k9PGqMLXOavp5WV6fnrZX4xkd+tZ3n8+htp5dPp+RtT8xfz1Rdj+atp5e+fc5R+dvM29zr/j/Wi+Pr7zo38xkU/AAAAAAAAAAAAAAAAAAAAeA6rxZXJ/fvd+bJ99X3tSeqjk9zv9wFu7K9fyGcLlQ4dAAAAAAAAAAAAAAAAAAAAXozj334/6PX7ewPB7cGXjXt0Xnrae/XyQap67A8Lmrmrz9JLKfVVBMNW+Sx6YHpFL0gAAAAAAAAAAAAAAAAAAPCKXW/6TRarLgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKnL9//8PDn78pTzFnZ2rHiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOrwJAAD//ypU4JE=") ioctl$FITRIM(r10, 0xc0185879, &(0x7f0000000040)={0x20000006, 0x1ac314a3, 0xffffffffdffffa40}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x10016, &(0x7f0000000040)={[], [{@dont_measure}]}, 0x0, 0x654, &(0x7f00000002c0)="$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") r11 = syz_open_dev$usbfs(&(0x7f0000000c80), 0x7, 0x1) ioctl$USBDEVFS_BULK(r11, 0xc0185502, &(0x7f0000000dc0)={{{0x5, 0x1}}, 0xfe, 0x7ff, &(0x7f0000000cc0)="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"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc800) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYRES32=r12], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.283507139s ago: executing program 7 (id=9753): ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000300)=0x5be1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@sysvgroups}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0xf4, 0x65, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x98, 0x2, [@TCA_BASIC_EMATCHES={0x94, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_META={0x5c, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="83f3c8"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x2}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x7}, {0x3, 0xc85, 0x800, 0x3, 0x3, 0x2}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000780)=ANY=[], 0x841, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}], 0x18}, 0xfc40) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40010040) 1.280135829s ago: executing program 8 (id=9754): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24111, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x106200, 0xfff, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000094e2f01ad4fd5571b2c001000"/30, @ANYRES32], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) r6 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfd) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r8, 0x894c, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000000000300000d0000000003000000030000000000000003000000040000"], 0x0, 0x5e, 0x0, 0x5}, 0x28) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r9) sendmsg$TIPC_NL_MON_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="13080000000000000000110000"], 0x84}, 0x1, 0x0, 0x0, 0xc8000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000030605000000000073797a300000000005000100070000000900020073797a30000000000000020073797a300000a7db41cf67a486"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4008894) 1.229124871s ago: executing program 36 (id=9753): ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000300)=0x5be1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@sysvgroups}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0xf4, 0x65, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x98, 0x2, [@TCA_BASIC_EMATCHES={0x94, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_META={0x5c, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="83f3c8"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x2}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x7}, {0x3, 0xc85, 0x800, 0x3, 0x3, 0x2}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000780)=ANY=[], 0x841, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}], 0x18}, 0xfc40) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40010040) 1.159835493s ago: executing program 0 (id=9756): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.093334266s ago: executing program 0 (id=9757): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800cc27636d00000010000000ff00229500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001380)={r3, r2, 0x25, 0xc, @val=@tcx}, 0x1c) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0xa, 0x7}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r5 = socket(0x18, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) write$tun(r6, &(0x7f0000000e80)=ANY=[@ANYBLOB="030108009a00160010006115971c009c1101fe8000000000000000000038fc0000000000000000000000000000004e214e21009c90780100000002000000ef890e7bfdd6b0ec3ffc1a4c92af33942cac48af9773e81a48e200e7b79a6733dd2464040000000400000056e9676aed568152b32af3d9b81f92b2c3fcbaed68c12dcd386d681ec45ddc3a0b2d32436d5666a3f8c4a02dbc59e0da01ba214bbb10383549a31a4a0de6a2555c00000000000000000000000000000000e28bf98c648021b5da815a293e1c8a81"], 0xce) setsockopt(r5, 0x1000000000029, 0x9, &(0x7f0000000040), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x54, r8, 0x10ada85e65c25359, 0x0, 0x25dfdbfd, {{0x6b}, {@void, @val={0xc, 0x99, {0x7, 0x69}}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x7dbd, 0xf200, 0x2a01, 0x9, 0x873, 0xe3]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x84a0}, 0x5ef768c147daadb0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x3e}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7f, 0x10000}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000050}, 0xc080) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40491}, 0x404c805) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_cache\x00') readv(r10, &(0x7f0000000740)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1) 972.466969ms ago: executing program 8 (id=9758): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0}, 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) 846.495123ms ago: executing program 8 (id=9759): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xd9, &(0x7f0000000340)=""/217, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0) statx(r0, &(0x7f0000000300)='./file1/file0\x00', 0x0, 0x4, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@filename='./file2\x00', r2, &(0x7f0000000280)={0x2, 0x746, 0x6, 0x8, 0x1, 0x6, 0xc, 0xf64, 0xffeffffc}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10092, &(0x7f0000000080), 0xff, 0x249, &(0x7f0000000880)="$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") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file3\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x4) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x8, 0x9, 0x0, 0x0, 0x0}) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000400)='./file1/file0\x00', 0x2000, 0x0) socket$unix(0x1, 0x2, 0x0) 697.357638ms ago: executing program 4 (id=9760): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xd9, &(0x7f0000000340)=""/217, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0) statx(r0, &(0x7f0000000300)='./file1/file0\x00', 0x0, 0x4, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@filename='./file2\x00', r2, &(0x7f0000000280)={0x2, 0x746, 0x6, 0x8, 0x1, 0x6, 0xc, 0xf64, 0xffeffffc}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10092, &(0x7f0000000080), 0xff, 0x249, &(0x7f0000000880)="$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") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file3\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x4) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x8, 0x9, 0x0, 0x0, 0x0}) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000400)='./file1/file0\x00', 0x2000, 0x0) socket$unix(0x1, 0x2, 0x0) 576.973231ms ago: executing program 0 (id=9761): ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000300)=0x5be1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@sysvgroups}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x50, 0x65, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/120, 0x78}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sync() r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r4], 0x14) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000780)=ANY=[], 0x841, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}], 0x18}, 0xfc40) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40010040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 453.271936ms ago: executing program 8 (id=9762): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_clone3(&(0x7f00000004c0)={0x100801000, &(0x7f0000000180), 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$netlink(0x10, 0x3, 0x14) socket$kcm(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 340.986329ms ago: executing program 2 (id=9763): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x11, 0x0, 0x40000) r1 = open(&(0x7f0000000140)='./bus\x00', 0x244200, 0x30) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd000511000460"], 0xfdef) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x6, 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf254c0000000c00b70000000000000000000e0001006e657464657673696d"], 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x4005000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000080000000800"], 0x50) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="b1", @ANYRESHEX=r4], 0xb2) 339.591949ms ago: executing program 4 (id=9764): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x400000, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x6000000}}, {0xc}}}]}]}, 0x4c}}, 0x0) 286.519781ms ago: executing program 8 (id=9765): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYBLOB="a9ba6d5328f7e55acf9b7fbe7ad730aaf1c0af5a3213d8e1db515811cee3b74b97031587a0408dc5310c3f33f17c3522256233870ff767d8f1decf5173bb1b223d3ed4bab0acc1d75d76b3be1155fd4c05801761fe8149d7f42eb1ecca9c5e0d844e46376905137d8c3315954e4b9abb27284c1b464af8eafc36e03afdaab101"], 0x5, 0x2c2, &(0x7f00000006c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01ff18"], &(0x7f0000000f40)=""/4089, 0x49, 0xff9, 0xa}, 0x28) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cO2e') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d04000000000000000000000604000000040000000000001203000000002e000061"], 0x0, 0x52}, 0x28) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xffffffffffdffffd}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a418ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 150.571085ms ago: executing program 0 (id=9766): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, 0x0, 0x24040010) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r0}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 115.663726ms ago: executing program 4 (id=9767): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff00000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 94.786157ms ago: executing program 0 (id=9768): bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x6, 0x8102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x219dfe00}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0xc814) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') r3 = socket$packet(0x11, 0x3, 0x300) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000a80)={[0x9145]}, 0x8, 0x80000) poll(&(0x7f0000000b40)=[{r4, 0x22}], 0x1, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r6 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x2}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r8 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r8, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="9745010000002000010000ac0a3324491fbb00000098894633120b5585f0b902cd17f323", 0x24}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448c9, 0x0) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbf8}, 0x14}, 0x1, 0x2b1e}, 0x2004c000) read$char_usb(r2, &(0x7f0000000040)=""/4109, 0x100d) 712.92µs ago: executing program 2 (id=9769): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB="757466382c68696465009e2d2ba14c07726a241ce3757466382c6f76657272696465726f636b7065726d2c6d61703d6f66662c6d6170303030303030303030013030303033372c756e686964652c756e686964652c6f76657272696465726f636b7005000000000000006f66662c6d61703d6e6f726d00"/133, @ANYRESHEX=0x0, @ANYBLOB="d2060d5510f769588bebfb7ad0a30755959f01793e1a5d4bcfa6efe55403df51d73b494928d0ee3f91532f54843e20493c9c59c7c629e588f0e334b250f874ec42a4c2f9e3243f83b0dcef5a670a8357262f84a029f52ee1cd1df7950e34d813", @ANYRESOCT=0x0], 0x3, 0x6c7, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x804, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4}) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 4 (id=9770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000700)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f0000000c80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x0, 0x52, 0x0, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="000000030980ffff", 0x8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = fcntl$dupfd(r5, 0x0, r3) connect$pppl2tp(r6, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2b9d}}}, 0x3a) ioctl$PPPIOCSMRU(r6, 0x40047452, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) read$msr(r7, &(0x7f0000033a40)=""/102391, 0x18ff7) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000000)={0x6, 'netpci0\x00', {0x8}, 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) kernel console output (not intermixed with test programs): P: 0033:0x7f74e80ece59 [ 1328.052659][ T3739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.052676][ T3739] RSP: 002b:00007f74e6b3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1328.052796][ T3739] RAX: ffffffffffffffda RBX: 00007f74e8365fa0 RCX: 00007f74e80ece59 [ 1328.052811][ T3739] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 1328.052824][ T3739] RBP: 00007f74e6b3f090 R08: 0000200000000180 R09: 0000000000000000 [ 1328.052836][ T3739] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 1328.052847][ T3739] R13: 00007f74e8366038 R14: 00007f74e8365fa0 R15: 00007ffc2f546838 [ 1328.052867][ T3739] [ 1328.062398][T18832] usb 1-1: enqueue for inactive port 0 [ 1328.250202][T18832] usb 1-1: enqueue for inactive port 0 [ 1328.303536][ T2649] EXT4-fs unmount: 6 callbacks suppressed [ 1328.303551][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.329465][ T3748] loop0: detected capacity change from 0 to 512 [ 1328.338664][ T3707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.346136][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.353623][ T3707] bridge_slave_0: entered allmulticast mode [ 1328.364545][ T3707] bridge_slave_0: entered promiscuous mode [ 1328.366918][T18832] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1328.372929][ T3707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.385071][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.392641][ T3707] bridge_slave_1: entered allmulticast mode [ 1328.405379][ T3707] bridge_slave_1: entered promiscuous mode [ 1328.412609][ T3748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1328.429614][ T3748] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.451284][ T3707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.475842][ T3748] hub 9-0:1.0: USB hub found [ 1328.481634][ T3707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.491250][ T3748] hub 9-0:1.0: 8 ports detected [ 1328.516529][ T3748] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.9325: iget: bad i_size value: 2533274857506816 [ 1328.532708][ T3707] team0: Port device team_slave_0 added [ 1328.540225][ T3707] team0: Port device team_slave_1 added [ 1328.565043][ T28] audit: type=1400 audit(2000000206.237:10203): avc: denied { write } for pid=3747 comm="syz.0.9325" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1328.585284][ T3707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.594522][ T3707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.623735][ T3707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.644401][ T3707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.651693][ T3707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.658755][ T3758] FAULT_INJECTION: forcing a failure. [ 1328.658755][ T3758] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.682787][ T3707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.690724][ T3758] CPU: 1 UID: 0 PID: 3758 Comm: syz.7.9328 Tainted: G W syzkaller #0 PREEMPT(full) [ 1328.690882][ T3758] Tainted: [W]=WARN [ 1328.690900][ T3758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1328.690935][ T3758] Call Trace: [ 1328.690961][ T3758] [ 1328.691020][ T3758] __dump_stack+0x1d/0x30 [ 1328.691086][ T3758] dump_stack_lvl+0x95/0xd0 [ 1328.691146][ T3758] dump_stack+0x15/0x1b [ 1328.691261][ T3758] should_fail_ex+0x263/0x280 [ 1328.691345][ T3758] should_failslab+0x8c/0xb0 [ 1328.691513][ T3758] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1328.691611][ T3758] ? security_inode_alloc+0x37/0x100 [ 1328.691689][ T3758] security_inode_alloc+0x37/0x100 [ 1328.691799][ T3758] inode_init_always_gfp+0x4a0/0x4e0 [ 1328.691985][ T3758] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1328.692144][ T3758] alloc_inode+0x58/0x170 [ 1328.692265][ T3758] __sock_create+0x120/0x580 [ 1328.692408][ T3758] ? __se_sys_setns+0xcff/0xff0 [ 1328.692593][ T3758] __sys_socket+0xaf/0x180 [ 1328.692691][ T3758] __x64_sys_socket+0x3f/0x50 [ 1328.692851][ T3758] x64_sys_call+0x11fc/0x3020 [ 1328.692945][ T3758] do_syscall_64+0x12c/0x3b0 [ 1328.693059][ T3758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.693206][ T3758] RIP: 0033:0x7fb33501ce59 [ 1328.693270][ T3758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.693330][ T3758] RSP: 002b:00007fb333a76fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1328.693365][ T3758] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb33501ce59 [ 1328.693473][ T3758] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001f [ 1328.693517][ T3758] RBP: 00007fb333a77090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.693578][ T3758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1328.693613][ T3758] R13: 00007fb335296038 R14: 00007fb335295fa0 R15: 00007ffeffc417f8 [ 1328.693667][ T3758] [ 1328.693717][ T3758] socket: no more sockets [ 1328.748516][ T3707] hsr_slave_0: entered promiscuous mode [ 1328.848560][ T28] audit: type=1400 audit(2000000206.537:10204): avc: denied { name_bind } for pid=3759 comm="syz.7.9330" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1328.931284][ T3707] hsr_slave_1: entered promiscuous mode [ 1328.939744][ T3707] debugfs: 'hsr0' already exists in 'hsr' [ 1328.945738][ T3707] Cannot create hsr debugfs directory [ 1329.091746][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.263860][ T3767] loop7: detected capacity change from 0 to 256 [ 1329.497671][ T3707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.590510][ T3707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.647552][ T3707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.718877][ T3707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.735236][ T3792] tipc: Enabling of bearer rejected, failed to enable media [ 1329.783529][T30195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.805037][ T3795] loop4: detected capacity change from 0 to 256 [ 1329.868266][ T3707] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1329.881355][ T3802] loop7: detected capacity change from 0 to 1024 [ 1329.891829][ T3802] EXT4-fs: Ignoring removed bh option [ 1329.901435][ T3707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1329.922734][ T3707] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1329.940360][ T3707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1329.962035][ T3707] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1329.990619][ T3707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1330.006548][ T3707] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1330.075321][ T3811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9345'. [ 1330.116494][ T3707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1330.181450][ T3810] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 1330.233371][ T3802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1330.383264][ T3804] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9345'. [ 1330.491781][ T3809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9345'. [ 1330.523024][ T3707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.542386][ T3707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.572606][T13505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.579787][T13505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.609178][ T3829] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9342'. [ 1330.616954][T13505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.625280][T13505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.677374][ T3831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9350'. [ 1330.690634][ T3831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9350'. [ 1330.708678][ T3802] infiniband syz1: set down [ 1330.713315][ T3831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9350'. [ 1330.725429][ T3835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9342'. [ 1330.727808][ T3802] infiniband syz1: added syz_tun [ 1330.763388][ T3802] RDS/IB: syz1: added [ 1330.767540][ T3802] smc: adding ib device syz1 with port count 1 [ 1330.773721][ T3802] smc: ib device syz1 port 1 has no pnetid [ 1330.963295][ T28] audit: type=1326 audit(2000000208.647:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.4.9352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421a69ce59 code=0x7ffc0000 [ 1330.990639][ T28] audit: type=1326 audit(2000000208.647:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.4.9352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421a69ce59 code=0x7ffc0000 [ 1331.015019][ T3851] bond1: entered allmulticast mode [ 1331.021560][ T3851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1331.031115][ T28] audit: type=1326 audit(2000000208.647:10207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.4.9352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421a69ce59 code=0x7ffc0000 [ 1331.056668][ T3707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.056860][ T28] audit: type=1326 audit(2000000208.647:10208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.4.9352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421a69ce59 code=0x7ffc0000 [ 1331.089272][ T28] audit: type=1326 audit(2000000208.647:10209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.4.9352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f421a69ce59 code=0x7ffc0000 [ 1331.247682][ T3707] veth0_vlan: entered promiscuous mode [ 1331.263654][ T3707] veth1_vlan: entered promiscuous mode [ 1331.300641][ T3707] veth0_macvtap: entered promiscuous mode [ 1331.329852][ T3707] veth1_macvtap: entered promiscuous mode [ 1331.333784][ T3878] loop0: detected capacity change from 0 to 512 [ 1331.343205][ T3876] loop4: detected capacity change from 0 to 1024 [ 1331.351417][ T3878] EXT4-fs: Ignoring removed i_version option [ 1331.358782][ T3876] EXT4-fs: Ignoring removed bh option [ 1331.372188][ T3707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.381866][ T3878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1331.396851][ T3707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.409503][ T3876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1331.428997][T22448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.432323][ T3878] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9359: invalid indirect mapped block 4294967295 (level 1) [ 1331.439270][T22448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.463535][T22448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.474629][T22448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.483456][ T3878] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1331.484481][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1331.500102][ C0] EXT4-fs (loop0): initial error at time 2000000000: ext4_free_branches:1023: inode 11 [ 1331.500526][ T3878] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9359: invalid indirect mapped block 4294967295 (level 1) [ 1331.509771][ C0] EXT4-fs (loop0): last error at time 2000000000: ext4_free_branches:1023: inode 11 [ 1331.533394][ T3878] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1331.533828][ T3878] EXT4-fs (loop0): 2 truncates cleaned up [ 1331.549858][ T3878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1331.569428][ T3878] netlink: 'syz.0.9359': attribute type 10 has an invalid length. [ 1331.595682][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.610741][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.642268][ T3889] loop2: detected capacity change from 0 to 512 [ 1331.683103][ T3893] loop0: detected capacity change from 0 to 1024 [ 1331.691520][ T3889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1331.695319][ T3893] EXT4-fs: Ignoring removed bh option [ 1331.714278][ T3889] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1331.748085][ T3896] loop4: detected capacity change from 0 to 1024 [ 1331.757232][ T3896] EXT4-fs: Ignoring removed bh option [ 1331.770793][ T3707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.831622][ T3893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1331.856136][ T3905] loop2: detected capacity change from 0 to 256 [ 1331.863064][ T3896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1331.908794][ T3896] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1331.972873][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.036543][ T3913] loop0: detected capacity change from 0 to 512 [ 1332.069496][ T3913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1332.104524][ T3917] IPv6: sit1: Disabled Multicast RS [ 1332.111031][ T3917] sit1: entered allmulticast mode [ 1332.114987][ T3913] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.159940][ T3913] hub 9-0:1.0: USB hub found [ 1332.166875][ T3919] tap0: tun_chr_ioctl cmd 1074025677 [ 1332.170320][ T3913] hub 9-0:1.0: 8 ports detected [ 1332.173271][ T3919] tap0: linktype set to 780 [ 1332.183227][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.194151][ T3913] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.9363: iget: bad i_size value: 2533274857506816 [ 1332.330021][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.544155][ T3939] x_tables: duplicate underflow at hook 2 [ 1332.565913][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 1332.565988][ T28] audit: type=1326 audit(2000000001.320:10290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.9375" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1332.604967][ T28] audit: type=1326 audit(2000000001.350:10291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.9375" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1332.659612][ T28] audit: type=1326 audit(2000000001.350:10292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.9375" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1332.685782][ T28] audit: type=1326 audit(2000000001.350:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.9375" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1332.712421][ T28] audit: type=1326 audit(2000000001.350:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.9375" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1332.739413][ T28] audit: type=1326 audit(2000000001.350:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.9375" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1332.767703][ T28] audit: type=1326 audit(2000000001.350:10296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.9375" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1332.793895][ T28] audit: type=1326 audit(2000000001.350:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.9375" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1332.819917][ T28] audit: type=1326 audit(2000000001.350:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.9375" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1332.846040][ T28] audit: type=1326 audit(2000000001.350:10299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.0.9375" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1332.891057][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.966020][ T3953] sg_write: data in/out 221184/136 bytes for SCSI command 0x0-- guessing data in; [ 1332.966020][ T3953] program not setting count and/or reply_len properly [ 1333.024002][ T3955] loop4: detected capacity change from 0 to 1024 [ 1333.044279][ T3955] EXT4-fs: Ignoring removed bh option [ 1333.051509][ T3961] loop7: detected capacity change from 0 to 1024 [ 1333.063171][ T3961] EXT4-fs: Ignoring removed bh option [ 1333.108455][ T3961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1333.129661][ T3955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1333.170019][ T3955] __nla_validate_parse: 4 callbacks suppressed [ 1333.170034][ T3955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9378'. [ 1333.199158][ T3974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.213070][ T3955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9378'. [ 1333.228491][ T3974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.355679][ T3979] loop8: detected capacity change from 0 to 256 [ 1333.510496][ T3984] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9388'. [ 1333.583891][ T3988] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9388'. [ 1333.855812][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.277042][ T4006] EXT4-fs: Ignoring removed bh option [ 1335.296723][ T4006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1336.037357][ T3961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1336.061911][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.085010][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.181178][ T4023] netlink: 196 bytes leftover after parsing attributes in process `syz.2.9402'. [ 1336.400058][ T4019] ip6erspan0: entered allmulticast mode [ 1336.414782][ T4026] set_capacity_and_notify: 2 callbacks suppressed [ 1336.414874][ T4026] loop0: detected capacity change from 0 to 1024 [ 1336.432877][ T4026] EXT4-fs: Ignoring removed bh option [ 1336.472309][ T4026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1336.503561][ T4026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9400'. [ 1336.529066][ T4026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9400'. [ 1336.647061][ T4042] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1336.653620][ T4042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1336.661410][ T4042] vhci_hcd vhci_hcd.0: Device attached [ 1336.668098][ T4042] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 1336.674727][ T4042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1336.692712][ T4042] vhci_hcd vhci_hcd.0: Device attached [ 1336.701852][ T4042] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 1336.708440][ T4042] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1336.717758][ T4042] vhci_hcd vhci_hcd.0: Device attached [ 1336.726129][ T4042] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 1336.732833][ T4042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1336.906359][ T4042] vhci_hcd vhci_hcd.0: Device attached [ 1336.923948][ T4055] loop4: detected capacity change from 0 to 1024 [ 1336.938525][ T4055] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1337.105017][ T4994] usb 9-1: new low-speed USB device number 7 using vhci_hcd [ 1337.120426][ T4057] loop7: detected capacity change from 0 to 1024 [ 1337.148050][ T4055] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.9406: Invalid block bitmap block 0 in block_group 0 [ 1337.177912][ T4057] EXT4-fs: Ignoring removed bh option [ 1337.214014][ T4055] loop4: lost filesystem error report for type 5 error -117 [ 1337.214465][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1337.228300][ C0] EXT4-fs (loop4): initial error at time 2000000005: ext4_read_block_bitmap_nowait:483 [ 1337.238007][ C0] EXT4-fs (loop4): last error at time 2000000005: ext4_read_block_bitmap_nowait:483 [ 1337.255272][ T4055] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.9406: Failed to acquire dquot type 0 [ 1337.492002][ T4055] loop4: lost filesystem error report for type 5 error -117 [ 1337.492220][ T4055] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.9406: Freeing blocks not in datazone - block = 0, count = 4096 [ 1337.521519][ T4062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9408'. [ 1337.533224][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.554550][ T4057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1337.572119][ T4055] loop4: lost filesystem error report for type 5 error -117 [ 1337.572301][ T4055] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.9406: Invalid inode bitmap blk 0 in block_group 0 [ 1337.592468][T22443] __quota_error: 50 callbacks suppressed [ 1337.592484][T22443] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 1337.626001][T22443] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 1337.662240][ T4066] loop2: detected capacity change from 0 to 1024 [ 1337.683287][T22443] loop4: lost filesystem error report for type 5 error -117 [ 1337.687265][ T4066] EXT4-fs: Ignoring removed bh option [ 1337.701558][ T4055] loop4: lost filesystem error report for type 5 error -117 [ 1337.701715][ T4055] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 1337.720252][ T4069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9409'. [ 1337.742110][ T4055] loop4: lost filesystem error report for type 5 error -117 [ 1337.742209][ T4055] EXT4-fs (loop4): 1 orphan inode deleted [ 1337.757723][ T4066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1337.780819][ T4055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.808505][ T4042] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1337.817228][ T4042] netlink: 'syz.4.9406': attribute type 10 has an invalid length. [ 1337.827864][ T4076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9409'. [ 1337.839368][ T4042] veth0_vlan: left promiscuous mode [ 1337.845937][ T4042] veth0_vlan: entered promiscuous mode [ 1337.854132][ T4042] team0: Device veth0_vlan failed to register rx_handler [ 1338.374189][ T4047] vhci_hcd: connection closed [ 1338.374667][T22443] vhci_hcd vhci_hcd.4: stop threads [ 1338.385966][ T4045] vhci_hcd: connection closed [ 1338.386136][ T4049] vhci_hcd: connection closed [ 1338.390922][ T4043] vhci_hcd: connection reset by peer [ 1338.410446][T22443] vhci_hcd vhci_hcd.4: release socket [ 1338.419588][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.440184][T22443] vhci_hcd vhci_hcd.4: disconnect device [ 1338.448465][T22443] vhci_hcd vhci_hcd.4: stop threads [ 1338.454119][T22443] vhci_hcd vhci_hcd.4: release socket [ 1338.459796][T22443] vhci_hcd vhci_hcd.4: disconnect device [ 1338.467479][T22443] vhci_hcd vhci_hcd.4: stop threads [ 1338.473403][T22443] vhci_hcd vhci_hcd.4: release socket [ 1338.478905][T22443] vhci_hcd vhci_hcd.4: disconnect device [ 1338.484889][T22443] vhci_hcd vhci_hcd.4: stop threads [ 1338.490201][T22443] vhci_hcd vhci_hcd.4: release socket [ 1338.496084][T22443] vhci_hcd vhci_hcd.4: disconnect device [ 1338.558443][ T4085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.567500][ T4085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.072071][ T4057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1340.097310][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.123209][ T3707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.135214][ T4088] xt_TCPMSS: Only works on TCP SYN packets [ 1340.153803][ T4088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9415'. [ 1340.163336][ T4088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9415'. [ 1340.291838][ T4092] netlink: 196 bytes leftover after parsing attributes in process `syz.7.9414'. [ 1342.226924][ T4994] usb 9-1: enqueue for inactive port 0 [ 1342.239562][ T4994] usb 9-1: enqueue for inactive port 0 [ 1342.404866][ T4994] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1342.460991][ T4110] loop7: detected capacity change from 0 to 256 [ 1342.667031][ T4106] loop0: detected capacity change from 0 to 1024 [ 1343.015794][ T4106] EXT4-fs: Ignoring removed bh option [ 1343.564995][ T4117] xt_NFQUEUE: number of total queues is 0 [ 1343.663135][ T4106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1343.914043][ T4124] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9425'. [ 1343.934654][ T4127] loop4: detected capacity change from 0 to 1024 [ 1343.941892][ T4106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9419'. [ 1343.971339][ T4127] EXT4-fs: Ignoring removed bh option [ 1344.001747][ T4127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1344.024219][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9419'. [ 1344.040302][ T4124] netlink: 112 bytes leftover after parsing attributes in process `syz.8.9425'. [ 1344.073088][ T4131] loop7: detected capacity change from 0 to 1024 [ 1344.080525][ T4124] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9425'. [ 1344.094769][ T4131] EXT4-fs: Ignoring removed bh option [ 1344.143610][ T4131] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1344.149722][ T4122] ip6erspan0: entered allmulticast mode [ 1344.394478][ T4155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.403523][ T4155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.955234][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.100631][ T4127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1347.139274][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.222604][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.245612][ T4181] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9438'. [ 1347.288000][ T4180] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9438'. [ 1347.390232][ T4185] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9440'. [ 1347.401251][ T4180] netlink: 112 bytes leftover after parsing attributes in process `syz.7.9438'. [ 1347.441088][ T4180] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9438'. [ 1348.434541][ T4198] loop0: detected capacity change from 0 to 512 [ 1348.556062][ T4198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1348.769088][ T4198] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1348.956212][ T4198] hub 9-0:1.0: USB hub found [ 1348.966331][ T4198] hub 9-0:1.0: 8 ports detected [ 1348.973294][ T4210] syzkaller0: entered promiscuous mode [ 1348.994147][ T4210] syzkaller0: entered allmulticast mode [ 1349.009564][ T4198] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.9444: iget: bad i_size value: 2533274857506816 [ 1349.023432][ T4210] netlink: 'syz.2.9446': attribute type 1 has an invalid length. [ 1349.031262][ T4210] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.9446'. [ 1349.084585][ T28] audit: type=1400 audit(2000000274.832:10348): avc: denied { write } for pid=4197 comm="syz.0.9444" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1349.373815][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.498238][ T4218] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1349.504869][ T4218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1349.525240][ T4218] vhci_hcd vhci_hcd.0: Device attached [ 1349.534357][ T4218] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(7) [ 1349.541057][ T4218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1349.551087][ T4218] vhci_hcd vhci_hcd.0: Device attached [ 1349.585716][ T4224] loop2: detected capacity change from 0 to 256 [ 1349.593114][ T4225] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(3) [ 1349.599657][ T4225] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1349.680412][ T4225] vhci_hcd vhci_hcd.0: Device attached [ 1349.900629][ T4218] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9) [ 1349.907194][ T4218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1349.914624][ T4241] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9453'. [ 1349.924242][ T4218] vhci_hcd vhci_hcd.0: Device attached [ 1350.327681][ T4252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9453'. [ 1350.455721][T18832] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 1350.524690][ T4218] loop8: detected capacity change from 0 to 1024 [ 1350.538754][ T4254] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9453'. [ 1351.211053][ T4258] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9453'. [ 1351.530118][ T4218] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1351.549960][ T4218] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.9450: Invalid block bitmap block 0 in block_group 0 [ 1351.563739][ T4218] loop8: lost filesystem error report for type 5 error -117 [ 1351.563886][ T4218] Quota error (device loop8): write_blk: dquota write failed [ 1351.571236][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1351.571253][ C1] EXT4-fs (loop8): initial error at time 2000000277: ext4_read_block_bitmap_nowait:483 [ 1351.571275][ C1] EXT4-fs (loop8): last error at time 2000000277: ext4_read_block_bitmap_nowait:483 [ 1351.868295][ T4218] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1351.909042][ T4218] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.9450: Failed to acquire dquot type 0 [ 1351.969952][ T4218] loop8: lost filesystem error report for type 5 error -117 [ 1351.971572][ T4218] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.9450: Freeing blocks not in datazone - block = 0, count = 4096 [ 1351.995512][ T4269] loop7: detected capacity change from 0 to 512 [ 1352.002662][ T4269] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1352.040844][ T4271] loop4: detected capacity change from 0 to 1024 [ 1352.060804][ T4273] FAULT_INJECTION: forcing a failure. [ 1352.060804][ T4273] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.061868][ T4218] loop8: lost filesystem error report for type 5 error -117 [ 1352.073522][ T4273] CPU: 1 UID: 0 PID: 4273 Comm: syz.2.9462 Tainted: G W syzkaller #0 PREEMPT(full) [ 1352.073635][ T4273] Tainted: [W]=WARN [ 1352.073642][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1352.073712][ T4273] Call Trace: [ 1352.073722][ T4273] [ 1352.073733][ T4273] __dump_stack+0x1d/0x30 [ 1352.073777][ T4273] dump_stack_lvl+0x95/0xd0 [ 1352.073805][ T4273] dump_stack+0x15/0x1b [ 1352.073832][ T4273] should_fail_ex+0x263/0x280 [ 1352.073867][ T4273] should_failslab+0x8c/0xb0 [ 1352.073934][ T4273] __kmalloc_noprof+0xb8/0x4d0 [ 1352.073975][ T4273] ? io_cache_alloc_new+0x2a/0xb0 [ 1352.074016][ T4273] io_cache_alloc_new+0x2a/0xb0 [ 1352.074090][ T4273] io_arm_apoll+0x20e/0x400 [ 1352.074141][ T4273] io_arm_poll_handler+0x12f/0x160 [ 1352.074172][ T4273] io_queue_async+0x25d/0x320 [ 1352.074203][ T4273] io_submit_sqes+0xb02/0x1170 [ 1352.074337][ T4273] __se_sys_io_uring_enter+0x25c/0xfc0 [ 1352.074384][ T4273] ? mutex_unlock+0x4e/0x90 [ 1352.074411][ T4273] ? fput+0x8f/0xc0 [ 1352.074470][ T4273] __x64_sys_io_uring_enter+0x78/0x90 [ 1352.074519][ T4273] x64_sys_call+0x1e16/0x3020 [ 1352.074553][ T4273] do_syscall_64+0x12c/0x3b0 [ 1352.074694][ T4273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.074723][ T4273] RIP: 0033:0x7f90a8eece59 [ 1352.074770][ T4273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.074789][ T4273] RSP: 002b:00007f90a7947028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1352.074831][ T4273] RAX: ffffffffffffffda RBX: 00007f90a9165fa0 RCX: 00007f90a8eece59 [ 1352.074849][ T4273] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1352.074865][ T4273] RBP: 00007f90a7947090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.074882][ T4273] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1352.074898][ T4273] R13: 00007f90a9166038 R14: 00007f90a9165fa0 R15: 00007fffe8c64d98 [ 1352.074964][ T4273] [ 1352.075383][ T4271] EXT4-fs: Ignoring removed bh option [ 1352.175639][ T4218] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.9450: Invalid inode bitmap blk 0 in block_group 0 [ 1352.200284][T12276] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-7 [ 1352.204876][ T4218] loop8: lost filesystem error report for type 5 error -117 [ 1352.220679][T12276] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 0 [ 1352.326842][ T4218] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 1352.335654][ T4218] loop8: lost filesystem error report for type 5 error -117 [ 1352.336879][ T4269] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1352.337999][ T4271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1352.346374][ T4218] EXT4-fs (loop8): 1 orphan inode deleted [ 1352.355957][T12276] loop8: lost filesystem error report for type 5 error -117 [ 1352.371567][ T4218] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1352.388050][ T28] audit: type=1400 audit(2000000278.168:10349): avc: denied { write } for pid=4270 comm="syz.4.9461" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1352.462891][ T4280] loop2: detected capacity change from 0 to 256 [ 1352.482139][ T4221] vhci_hcd: connection closed [ 1352.482344][T22450] vhci_hcd vhci_hcd.8: stop threads [ 1352.486215][ T4232] vhci_hcd: connection closed [ 1352.487111][T22450] vhci_hcd vhci_hcd.8: release socket [ 1352.510057][ T4280] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1352.543972][ T4219] vhci_hcd: connection reset by peer [ 1352.549925][T22450] vhci_hcd vhci_hcd.8: disconnect device [ 1352.561070][T22450] vhci_hcd vhci_hcd.8: stop threads [ 1352.569011][ T4286] loop0: detected capacity change from 0 to 256 [ 1352.576156][T22450] vhci_hcd vhci_hcd.8: release socket [ 1352.581681][T22450] vhci_hcd vhci_hcd.8: disconnect device [ 1352.587691][T22450] vhci_hcd vhci_hcd.8: stop threads [ 1352.593127][T22450] vhci_hcd vhci_hcd.8: release socket [ 1352.598703][T22450] vhci_hcd vhci_hcd.8: disconnect device [ 1352.606803][ T4226] vhci_hcd: connection closed [ 1352.607170][T22450] vhci_hcd vhci_hcd.8: stop threads [ 1352.617313][T22450] vhci_hcd vhci_hcd.8: release socket [ 1352.622948][T22450] vhci_hcd vhci_hcd.8: disconnect device [ 1352.633763][T30195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.643094][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.806389][ T4288] loop7: detected capacity change from 0 to 1024 [ 1352.820063][ T4288] EXT4-fs: Ignoring removed bh option [ 1353.368348][ T4288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1353.430834][ T4302] loop4: detected capacity change from 0 to 512 [ 1353.808601][ T4302] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1353.822273][ T4302] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 1353.832436][ T4302] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.9467: Corrupt directory, running e2fsck is recommended [ 1353.846328][ T4302] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1353.854651][ T4302] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.9467: corrupted in-inode xattr: e_name out of bounds [ 1353.868526][ T4302] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1353.868769][ T4302] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.9467: couldn't read orphan inode 15 (err -117) [ 1353.889797][ T4302] loop4: lost filesystem error report for type 5 error -117 [ 1353.890374][ T4302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1353.925305][ T4302] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1353.937419][ T4302] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 1353.948131][ T4302] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.9467: Corrupt directory, running e2fsck is recommended [ 1353.962335][ T4302] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.9467: path /74/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1354.001273][ T4302] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz.4.9467: path /74/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1354.143527][ T4313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9470'. [ 1354.195690][ T4316] loop0: detected capacity change from 0 to 1024 [ 1354.307595][ T4323] loop0: detected capacity change from 0 to 512 [ 1354.337793][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9470'. [ 1354.359728][ T4323] EXT4-fs (loop0): 1 orphan inode deleted [ 1354.370070][ T4323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1354.382847][T12276] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1354.396115][ T4323] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1354.409479][ T4327] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9470'. [ 1354.418717][T12276] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 1354.436150][ T4327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9470'. [ 1354.643257][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.707732][ T4332] FAULT_INJECTION: forcing a failure. [ 1354.707732][ T4332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.720834][ T4332] CPU: 1 UID: 0 PID: 4332 Comm: syz.4.9472 Tainted: G W syzkaller #0 PREEMPT(full) [ 1354.720874][ T4332] Tainted: [W]=WARN [ 1354.720886][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1354.720902][ T4332] Call Trace: [ 1354.720911][ T4332] [ 1354.720922][ T4332] __dump_stack+0x1d/0x30 [ 1354.720953][ T4332] dump_stack_lvl+0x95/0xd0 [ 1354.720981][ T4332] dump_stack+0x15/0x1b [ 1354.721088][ T4332] should_fail_ex+0x263/0x280 [ 1354.721220][ T4332] should_fail+0xb/0x20 [ 1354.721252][ T4332] should_fail_usercopy+0x1a/0x20 [ 1354.721289][ T4332] _copy_from_user+0x1c/0xb0 [ 1354.721364][ T4332] sk_setsockopt+0x1fa/0x2060 [ 1354.721469][ T4332] sock_setsockopt+0x40/0x50 [ 1354.721498][ T4332] __sys_setsockopt+0x13a/0x200 [ 1354.721528][ T4332] __x64_sys_setsockopt+0x64/0x80 [ 1354.721557][ T4332] x64_sys_call+0x2327/0x3020 [ 1354.721594][ T4332] do_syscall_64+0x12c/0x3b0 [ 1354.721634][ T4332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.721663][ T4332] RIP: 0033:0x7f421a69ce59 [ 1354.721700][ T4332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.721722][ T4332] RSP: 002b:00007f42190f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1354.721750][ T4332] RAX: ffffffffffffffda RBX: 00007f421a915fa0 RCX: 00007f421a69ce59 [ 1354.721766][ T4332] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000003 [ 1354.721781][ T4332] RBP: 00007f42190f7090 R08: 0000000000000004 R09: 0000000000000000 [ 1354.721796][ T4332] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1354.721818][ T4332] R13: 00007f421a916038 R14: 00007f421a915fa0 R15: 00007ffcc365fcb8 [ 1354.721860][ T4332] [ 1354.902293][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.942800][ T4335] No such timeout policy "syz1" [ 1354.972400][ T4336] FAULT_INJECTION: forcing a failure. [ 1354.972400][ T4336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.986438][ T4340] FAULT_INJECTION: forcing a failure. [ 1354.986438][ T4340] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.002191][ T4342] netlink: 388 bytes leftover after parsing attributes in process `syz.2.9476'. [ 1355.012683][ T4336] CPU: 1 UID: 0 PID: 4336 Comm: syz.7.9475 Tainted: G W syzkaller #0 PREEMPT(full) [ 1355.012754][ T4336] Tainted: [W]=WARN [ 1355.012762][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1355.012775][ T4336] Call Trace: [ 1355.012781][ T4336] [ 1355.012789][ T4336] __dump_stack+0x1d/0x30 [ 1355.012820][ T4336] dump_stack_lvl+0x95/0xd0 [ 1355.012922][ T4336] dump_stack+0x15/0x1b [ 1355.012941][ T4336] should_fail_ex+0x263/0x280 [ 1355.012978][ T4336] should_fail+0xb/0x20 [ 1355.013010][ T4336] should_fail_usercopy+0x1a/0x20 [ 1355.013074][ T4336] _copy_from_user+0x1c/0xb0 [ 1355.013114][ T4336] dev_ethtool+0x52/0x16a0 [ 1355.013132][ T4336] ? full_name_hash+0x92/0xe0 [ 1355.013219][ T4336] ? strcmp+0x22/0x50 [ 1355.013255][ T4336] dev_ioctl+0x2e0/0x960 [ 1355.013285][ T4336] sock_do_ioctl+0x1aa/0x230 [ 1355.013319][ T4336] sock_ioctl+0x41b/0x610 [ 1355.013392][ T4336] ? mutex_lock+0x57/0x90 [ 1355.013419][ T4336] ? __pfx_sock_ioctl+0x10/0x10 [ 1355.013447][ T4336] __se_sys_ioctl+0xce/0x140 [ 1355.013522][ T4336] __x64_sys_ioctl+0x43/0x50 [ 1355.013588][ T4336] x64_sys_call+0x1563/0x3020 [ 1355.013699][ T4336] do_syscall_64+0x12c/0x3b0 [ 1355.013733][ T4336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.013757][ T4336] RIP: 0033:0x7fb33501ce59 [ 1355.013837][ T4336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.013871][ T4336] RSP: 002b:00007fb333a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.013892][ T4336] RAX: ffffffffffffffda RBX: 00007fb335295fa0 RCX: 00007fb33501ce59 [ 1355.013906][ T4336] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000034 [ 1355.013979][ T4336] RBP: 00007fb333a77090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.013992][ T4336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.014005][ T4336] R13: 00007fb335296038 R14: 00007fb335295fa0 R15: 00007ffeffc417f8 [ 1355.014026][ T4336] [ 1355.214043][ T4340] CPU: 0 UID: 0 PID: 4340 Comm: syz.4.9477 Tainted: G W syzkaller #0 PREEMPT(full) [ 1355.214083][ T4340] Tainted: [W]=WARN [ 1355.214091][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1355.214107][ T4340] Call Trace: [ 1355.214115][ T4340] [ 1355.214125][ T4340] __dump_stack+0x1d/0x30 [ 1355.214222][ T4340] dump_stack_lvl+0x95/0xd0 [ 1355.214249][ T4340] dump_stack+0x15/0x1b [ 1355.214274][ T4340] should_fail_ex+0x263/0x280 [ 1355.214368][ T4340] should_failslab+0x8c/0xb0 [ 1355.214409][ T4340] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1355.214452][ T4340] ? __alloc_skb+0x2d6/0x690 [ 1355.214497][ T4340] __alloc_skb+0x2d6/0x690 [ 1355.214539][ T4340] ? __alloc_skb+0x200/0x690 [ 1355.214565][ T4340] netlink_alloc_large_skb+0xbf/0xf0 [ 1355.214603][ T4340] netlink_sendmsg+0x40c/0x6f0 [ 1355.214645][ T4340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1355.214698][ T4340] ____sys_sendmsg+0x563/0x5b0 [ 1355.214735][ T4340] ___sys_sendmsg+0x195/0x1e0 [ 1355.214785][ T4340] __x64_sys_sendmsg+0xd4/0x160 [ 1355.214825][ T4340] x64_sys_call+0x194c/0x3020 [ 1355.214858][ T4340] do_syscall_64+0x12c/0x3b0 [ 1355.215017][ T4340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.215046][ T4340] RIP: 0033:0x7f421a69ce59 [ 1355.215067][ T4340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.215126][ T4340] RSP: 002b:00007f42190f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1355.215151][ T4340] RAX: ffffffffffffffda RBX: 00007f421a915fa0 RCX: 00007f421a69ce59 [ 1355.215195][ T4340] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1355.215213][ T4340] RBP: 00007f42190f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.215304][ T4340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.215354][ T4340] R13: 00007f421a916038 R14: 00007f421a915fa0 R15: 00007ffcc365fcb8 [ 1355.215553][ T4340] [ 1355.423628][ T4342] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1355.438782][ T4342] syzkaller0: entered promiscuous mode [ 1355.444527][ T4342] syzkaller0: entered allmulticast mode [ 1355.445839][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.489112][T18832] usb 17-1: enqueue for inactive port 0 [ 1355.502193][T18832] usb 17-1: enqueue for inactive port 0 [ 1355.537592][ T4348] loop4: detected capacity change from 0 to 512 [ 1355.572717][ T4350] syzkaller0: entered promiscuous mode [ 1355.581889][ T4358] loop8: detected capacity change from 0 to 512 [ 1355.585903][ T4348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1355.616867][ T4350] syzkaller0: entered allmulticast mode [ 1355.623687][ T4359] loop2: detected capacity change from 0 to 1024 [ 1355.639916][ T4359] EXT4-fs: Ignoring removed bh option [ 1355.647358][ T4348] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.670250][ T4359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1355.678581][T18832] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1355.709011][ T4358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1355.727650][ T4358] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.742649][ T4348] hub 9-0:1.0: USB hub found [ 1355.750740][ T4348] hub 9-0:1.0: 8 ports detected [ 1355.785528][ T4348] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.9481: iget: bad i_size value: 2533274857506816 [ 1355.808326][ T28] audit: type=1400 audit(2000000281.612:10350): avc: denied { write } for pid=4355 comm="syz.8.9480" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1355.866501][T30195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.889212][ T3707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.914538][ T28] audit: type=1400 audit(2000000281.753:10351): avc: denied { write } for pid=4347 comm="syz.4.9481" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1357.875096][ T4393] FAULT_INJECTION: forcing a failure. [ 1357.875096][ T4393] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.140289][ T4393] CPU: 0 UID: 0 PID: 4393 Comm: syz.7.9491 Tainted: G W syzkaller #0 PREEMPT(full) [ 1358.140367][ T4393] Tainted: [W]=WARN [ 1358.140376][ T4393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1358.140394][ T4393] Call Trace: [ 1358.140402][ T4393] [ 1358.140413][ T4393] __dump_stack+0x1d/0x30 [ 1358.140456][ T4393] dump_stack_lvl+0x95/0xd0 [ 1358.140553][ T4393] dump_stack+0x15/0x1b [ 1358.140578][ T4393] should_fail_ex+0x263/0x280 [ 1358.140610][ T4393] ? alloc_fs_context+0x46/0x580 [ 1358.140682][ T4393] should_failslab+0x8c/0xb0 [ 1358.140785][ T4393] __kmalloc_cache_noprof+0x5f/0x400 [ 1358.140853][ T4393] alloc_fs_context+0x46/0x580 [ 1358.140876][ T4393] ? kfree+0x108/0x370 [ 1358.140913][ T4393] fs_context_for_mount+0x22/0x30 [ 1358.141012][ T4393] __se_sys_fsopen+0xa0/0x1e0 [ 1358.141034][ T4393] __x64_sys_fsopen+0x31/0x40 [ 1358.141055][ T4393] x64_sys_call+0x29af/0x3020 [ 1358.141078][ T4393] do_syscall_64+0x12c/0x3b0 [ 1358.141148][ T4393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.141168][ T4393] RIP: 0033:0x7fb33501ce59 [ 1358.141223][ T4393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.141247][ T4393] RSP: 002b:00007fb333a77028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1358.141271][ T4393] RAX: ffffffffffffffda RBX: 00007fb335295fa0 RCX: 00007fb33501ce59 [ 1358.141316][ T4393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1358.141329][ T4393] RBP: 00007fb333a77090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.141341][ T4393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.141354][ T4393] R13: 00007fb335296038 R14: 00007fb335295fa0 R15: 00007ffeffc417f8 [ 1358.141377][ T4393] [ 1358.349264][ T4395] loop0: detected capacity change from 0 to 1024 [ 1358.420667][ T4395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.449487][ T4405] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1358.456053][ T4405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1358.470226][ T4405] vhci_hcd vhci_hcd.0: Device attached [ 1358.484225][ T4402] loop2: detected capacity change from 0 to 512 [ 1358.497299][ T4395] EXT4-fs (loop0): shut down requested (0) [ 1358.511262][ T4405] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(7) [ 1358.517853][ T4405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1358.530111][ T4402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1358.543288][ T4407] loop7: detected capacity change from 0 to 512 [ 1358.549820][ T4402] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.562274][ T4405] vhci_hcd vhci_hcd.0: Device attached [ 1358.576744][ T4413] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(3) [ 1358.583318][ T4413] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1358.591226][ T4413] vhci_hcd vhci_hcd.0: Device attached [ 1358.602463][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.628309][ T4402] hub 9-0:1.0: USB hub found [ 1358.633474][ T4402] hub 9-0:1.0: 8 ports detected [ 1358.665906][ T4419] loop4: detected capacity change from 0 to 1024 [ 1358.671474][ T4405] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9) [ 1358.678844][ T4405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1358.689951][ T4420] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.9494: iget: bad i_size value: 2533274857506816 [ 1358.702630][ T4405] vhci_hcd vhci_hcd.0: Device attached [ 1358.710639][ T4419] EXT4-fs: Ignoring removed bh option [ 1358.719289][ T4407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1358.732065][ T4422] loop8: detected capacity change from 0 to 1024 [ 1358.738612][ T4407] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.750082][ T4422] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1358.777993][ T4422] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.9495: Invalid block bitmap block 0 in block_group 0 [ 1358.791557][ T4422] loop8: lost filesystem error report for type 5 error -117 [ 1358.803101][ T4407] hub 9-0:1.0: USB hub found [ 1358.815450][ T28] audit: type=1400 audit(2000000284.643:10352): avc: denied { write } for pid=4401 comm="syz.2.9494" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1358.820555][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1358.843765][ C1] EXT4-fs (loop8): initial error at time 2000000284: ext4_read_block_bitmap_nowait:483 [ 1358.846968][ T4422] Quota error (device loop8): write_blk: dquota write failed [ 1358.853456][ C1] EXT4-fs (loop8): last error at time 2000000284: ext4_read_block_bitmap_nowait:483 [ 1358.872304][ T4407] hub 9-0:1.0: 8 ports detected [ 1358.890751][ T4425] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.9496: iget: bad i_size value: 2533274857506816 [ 1358.915757][ T4419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.940555][ T4422] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1358.950905][ T4422] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.9495: Failed to acquire dquot type 0 [ 1358.979726][ T4422] loop8: lost filesystem error report for type 5 error -117 [ 1358.992023][ T4422] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.9495: Freeing blocks not in datazone - block = 0, count = 4096 [ 1359.012991][ T4422] loop8: lost filesystem error report for type 5 error -117 [ 1359.017219][ T28] audit: type=1400 audit(2000000284.885:10353): avc: denied { write } for pid=4403 comm="syz.7.9496" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1359.019560][ T4422] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.9495: Invalid inode bitmap blk 0 in block_group 0 [ 1359.065810][ T4422] loop8: lost filesystem error report for type 5 error -117 [ 1359.068020][ T4422] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 1359.084103][T12276] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-7 [ 1359.095930][ T4422] loop8: lost filesystem error report for type 5 error -117 [ 1359.096131][ T4422] EXT4-fs (loop8): 1 orphan inode deleted [ 1359.103543][T12276] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 0 [ 1359.141155][T12276] loop8: lost filesystem error report for type 5 error -117 [ 1359.142014][ T4422] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1359.170350][ T3707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.223398][ T4435] loop2: detected capacity change from 0 to 1024 [ 1359.239878][ T4435] EXT4-fs: Ignoring removed bh option [ 1359.245112][ T28] audit: type=1400 audit(2000000285.106:10354): avc: denied { write } for pid=4404 comm="syz.8.9495" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1359.270489][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.285688][ T4435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1359.298453][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.301609][T18832] usb 17-4: new low-speed USB device number 3 using vhci_hcd [ 1359.359303][ T4446] loop0: detected capacity change from 0 to 256 [ 1359.377100][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.424730][ T4451] netlink: 'syz.4.9503': attribute type 1 has an invalid length. [ 1359.443302][ T4451] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.9503'. [ 1359.443881][ T3707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.531617][ T4456] loop0: detected capacity change from 0 to 512 [ 1359.562666][ T4456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1359.604676][ T4456] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1359.627910][ T4456] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #12: comm syz.0.9504: Directory hole found for htree leaf block 0 [ 1359.642922][ T28] audit: type=1400 audit(2000000285.489:10355): avc: denied { write } for pid=4455 comm="syz.0.9504" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1359.666750][ T4456] EXT4-fs (loop0): Remounting filesystem read-only [ 1359.675423][ T28] audit: type=1400 audit(2000000285.489:10356): avc: denied { write } for pid=4455 comm="syz.0.9504" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1359.703408][ T28] audit: type=1400 audit(2000000285.489:10357): avc: denied { write } for pid=4455 comm="syz.0.9504" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1359.929244][ T4466] loop4: detected capacity change from 0 to 1024 [ 1359.950539][ T4466] EXT4-fs: Ignoring removed bh option [ 1359.973495][ T4414] vhci_hcd: connection closed [ 1359.985974][ T4406] vhci_hcd: connection reset by peer [ 1359.999850][ T4416] vhci_hcd: connection reset by peer [ 1360.006604][ T4409] vhci_hcd: connection closed [ 1360.007455][T12276] vhci_hcd vhci_hcd.8: stop threads [ 1360.024257][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.097398][T12276] vhci_hcd vhci_hcd.8: release socket [ 1360.172693][T12276] vhci_hcd vhci_hcd.8: disconnect device [ 1360.179420][T12276] vhci_hcd vhci_hcd.8: stop threads [ 1360.185126][T12276] vhci_hcd vhci_hcd.8: release socket [ 1360.194049][T12276] vhci_hcd vhci_hcd.8: disconnect device [ 1360.201920][T12276] vhci_hcd vhci_hcd.8: stop threads [ 1360.223429][T22445] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1360.234026][T22445] Quota error (device loop0): write_blk: dquota write failed [ 1360.268329][T12276] vhci_hcd vhci_hcd.8: release socket [ 1360.275917][T22445] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 1360.285536][T12276] vhci_hcd vhci_hcd.8: disconnect device [ 1360.291831][T30195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.301657][T12276] vhci_hcd vhci_hcd.8: stop threads [ 1360.316538][T12276] vhci_hcd vhci_hcd.8: release socket [ 1360.322245][T12276] vhci_hcd vhci_hcd.8: disconnect device [ 1360.323264][T22445] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-7 [ 1360.345421][ T4466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1360.369410][T22445] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 1360.409004][T22445] loop8: lost filesystem error report for type 5 error -117 [ 1360.428365][ T4466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9507'. [ 1360.503816][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9507'. [ 1360.731572][ T28] audit: type=1400 audit(2000000286.586:10358): avc: denied { create } for pid=4491 comm="syz.2.9514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1360.753323][ T4492] netlink: 'syz.2.9514': attribute type 1 has an invalid length. [ 1360.785273][ T4492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.792461][ T4492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.821606][ T4492] bridge_slave_0: left allmulticast mode [ 1360.827313][ T4492] bridge_slave_0: left promiscuous mode [ 1360.833168][ T4492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.861762][ T4495] loop7: detected capacity change from 0 to 1024 [ 1360.870416][ T4495] EXT4-fs: Ignoring removed bh option [ 1360.877578][ T4492] bridge_slave_1: left allmulticast mode [ 1360.888175][ T4492] bridge_slave_1: left promiscuous mode [ 1360.894035][ T4492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.902739][ T28] audit: type=1326 audit(2000000286.737:10359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.2.9514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90a8eece59 code=0x0 [ 1360.932137][ T4492] bond0: (slave bond_slave_0): Releasing backup interface [ 1360.943486][ T4492] bond0: (slave bond_slave_1): Releasing backup interface [ 1360.956810][ T4498] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9516'. [ 1360.957785][ T4492] team0: Port device team_slave_0 removed [ 1360.988991][ T4495] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.001610][ T4492] team0: Port device team_slave_1 removed [ 1361.009131][ T4492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1361.017980][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.027246][ T4492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1361.035831][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.047032][ T4492] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1361.108604][ T4508] netlink: 'syz.0.9517': attribute type 1 has an invalid length. [ 1361.119852][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.129108][ T4508] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.9517'. [ 1361.278123][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.361344][ T4523] loop4: detected capacity change from 0 to 512 [ 1362.381528][ T4523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1362.844546][ T4523] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1363.007476][ T28] audit: type=1400 audit(2000000288.891:10360): avc: denied { write } for pid=4522 comm="syz.4.9522" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1363.674302][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.692534][ T4547] loop7: detected capacity change from 0 to 512 [ 1363.748745][ T4547] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1363.770644][ T4553] loop8: detected capacity change from 0 to 1024 [ 1363.777883][ T4553] EXT4-fs: Ignoring removed bh option [ 1363.783731][ T4547] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1363.806154][ T4551] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1363.825886][ T28] audit: type=1400 audit(2000000289.716:10361): avc: denied { write } for pid=4546 comm="syz.7.9526" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1363.856559][ T4553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1363.875308][ T4547] EXT4-fs error (device loop7): ext4_empty_dir:3085: inode #12: comm syz.7.9526: Directory hole found for htree leaf block 0 [ 1363.888476][ T4551] block device autoloading is deprecated and will be removed. [ 1363.897959][ T4547] EXT4-fs (loop7): Remounting filesystem read-only [ 1363.912532][ T4558] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2582 sclass=netlink_xfrm_socket pid=4558 comm=syz.0.9529 [ 1363.973927][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.990596][T22448] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1364.037340][T30195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.047983][ T4565] syzkaller0: entered promiscuous mode [ 1364.053647][ T4565] syzkaller0: entered allmulticast mode [ 1364.080293][ T4565] netlink: 'syz.4.9530': attribute type 1 has an invalid length. [ 1364.088073][ T4565] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.9530'. [ 1364.111324][ T4567] loop2: detected capacity change from 0 to 512 [ 1364.294230][ T4567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1364.307025][ T4567] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1364.325813][ T4567] hub 9-0:1.0: USB hub found [ 1364.331037][ T4567] hub 9-0:1.0: 8 ports detected [ 1364.344933][ T4567] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.9531: iget: bad i_size value: 2533274857506816 [ 1364.409376][T18832] usb 17-4: enqueue for inactive port 3 [ 1364.415128][T18832] usb 17-4: enqueue for inactive port 3 [ 1364.487718][T18832] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1364.515538][ T3707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.725749][ T4591] FAULT_INJECTION: forcing a failure. [ 1364.725749][ T4591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.758360][ T4591] CPU: 0 UID: 0 PID: 4591 Comm: syz.0.9539 Tainted: G W syzkaller #0 PREEMPT(full) [ 1364.758396][ T4591] Tainted: [W]=WARN [ 1364.758402][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1364.758414][ T4591] Call Trace: [ 1364.758420][ T4591] [ 1364.758427][ T4591] __dump_stack+0x1d/0x30 [ 1364.758542][ T4591] dump_stack_lvl+0x95/0xd0 [ 1364.758568][ T4591] dump_stack+0x15/0x1b [ 1364.758592][ T4591] should_fail_ex+0x263/0x280 [ 1364.758633][ T4591] should_fail+0xb/0x20 [ 1364.758660][ T4591] should_fail_usercopy+0x1a/0x20 [ 1364.758691][ T4591] _copy_to_user+0x20/0xa0 [ 1364.758756][ T4591] simple_read_from_buffer+0xb5/0x130 [ 1364.758983][ T4591] proc_fail_nth_read+0x10e/0x150 [ 1364.759023][ T4591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1364.759054][ T4591] vfs_read+0x1ab/0x7f0 [ 1364.759101][ T4591] ? io_unregister_napi+0x233/0x270 [ 1364.759134][ T4591] ? __rcu_read_unlock+0x4e/0x70 [ 1364.759170][ T4591] ? __fget_files+0x184/0x1c0 [ 1364.759195][ T4591] ? mutex_lock+0x57/0x90 [ 1364.759225][ T4591] ksys_read+0xdc/0x1a0 [ 1364.759331][ T4591] __x64_sys_read+0x40/0x50 [ 1364.759366][ T4591] x64_sys_call+0x2886/0x3020 [ 1364.759428][ T4591] do_syscall_64+0x12c/0x3b0 [ 1364.759526][ T4591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.759551][ T4591] RIP: 0033:0x7f74e80ad68e [ 1364.759567][ T4591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1364.759668][ T4591] RSP: 002b:00007f74e6b3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1364.759695][ T4591] RAX: ffffffffffffffda RBX: 00007f74e6b3f6c0 RCX: 00007f74e80ad68e [ 1364.759714][ T4591] RDX: 000000000000000f RSI: 00007f74e6b3f0a0 RDI: 0000000000000004 [ 1364.759731][ T4591] RBP: 00007f74e6b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.759763][ T4591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.759779][ T4591] R13: 00007f74e8366038 R14: 00007f74e8365fa0 R15: 00007ffc2f546838 [ 1364.759864][ T4591] [ 1365.188909][ T4601] FAULT_INJECTION: forcing a failure. [ 1365.188909][ T4601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1365.228562][ T4601] CPU: 0 UID: 0 PID: 4601 Comm: syz.8.9543 Tainted: G W syzkaller #0 PREEMPT(full) [ 1365.228682][ T4601] Tainted: [W]=WARN [ 1365.228691][ T4601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1365.228707][ T4601] Call Trace: [ 1365.228713][ T4601] [ 1365.228721][ T4601] __dump_stack+0x1d/0x30 [ 1365.228752][ T4601] dump_stack_lvl+0x95/0xd0 [ 1365.228781][ T4601] dump_stack+0x15/0x1b [ 1365.228800][ T4601] should_fail_ex+0x263/0x280 [ 1365.228836][ T4601] should_fail+0xb/0x20 [ 1365.228976][ T4601] should_fail_usercopy+0x1a/0x20 [ 1365.229014][ T4601] _copy_to_user+0x20/0xa0 [ 1365.229063][ T4601] simple_read_from_buffer+0xb5/0x130 [ 1365.229149][ T4601] proc_fail_nth_read+0x10e/0x150 [ 1365.229182][ T4601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1365.229210][ T4601] vfs_read+0x1ab/0x7f0 [ 1365.229245][ T4601] ? __rcu_read_unlock+0x4e/0x70 [ 1365.229326][ T4601] ? __fget_files+0x184/0x1c0 [ 1365.229352][ T4601] ? __sys_bind+0x222/0x290 [ 1365.229437][ T4601] ? mutex_lock+0x57/0x90 [ 1365.229470][ T4601] ksys_read+0xdc/0x1a0 [ 1365.229515][ T4601] __x64_sys_read+0x40/0x50 [ 1365.229589][ T4601] x64_sys_call+0x2886/0x3020 [ 1365.229614][ T4601] do_syscall_64+0x12c/0x3b0 [ 1365.229673][ T4601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.229703][ T4601] RIP: 0033:0x7f2f2f26d68e [ 1365.229724][ T4601] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1365.229751][ T4601] RSP: 002b:00007f2f2dcfefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1365.229770][ T4601] RAX: ffffffffffffffda RBX: 00007f2f2dcff6c0 RCX: 00007f2f2f26d68e [ 1365.229788][ T4601] RDX: 000000000000000f RSI: 00007f2f2dcff0a0 RDI: 0000000000000006 [ 1365.229834][ T4601] RBP: 00007f2f2dcff090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.229902][ T4601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.229917][ T4601] R13: 00007f2f2f526038 R14: 00007f2f2f525fa0 R15: 00007fff1d024328 [ 1365.229944][ T4601] [ 1365.838424][ T4609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9544'. [ 1365.926688][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9544'. [ 1365.939841][ T4610] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9544'. [ 1365.949765][ T4610] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9544'. [ 1366.077781][ T4619] loop7: detected capacity change from 0 to 512 [ 1366.095903][ T4621] syzkaller0: entered promiscuous mode [ 1366.102277][ T4621] syzkaller0: entered allmulticast mode [ 1366.129806][ T4619] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1366.173703][ T4619] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1366.176507][ T4621] netlink: 'syz.8.9549': attribute type 1 has an invalid length. [ 1366.199856][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1366.199869][ T28] audit: type=1400 audit(2000000292.111:10365): avc: denied { getopt } for pid=4631 comm="syz.4.9552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1366.238796][ T4621] netlink: 112865 bytes leftover after parsing attributes in process `syz.8.9549'. [ 1366.296426][ T4619] hub 9-0:1.0: USB hub found [ 1366.312469][ T4619] hub 9-0:1.0: 8 ports detected [ 1366.348071][ T4619] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.9548: iget: bad i_size value: 2533274857506816 [ 1366.382891][ T28] audit: type=1400 audit(2000000292.292:10366): avc: denied { write } for pid=4618 comm="syz.7.9548" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1366.565060][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.687541][ T4647] loop4: detected capacity change from 0 to 1024 [ 1366.695130][ T4647] EXT4-fs: Ignoring removed bh option [ 1366.697128][ T4643] ip6erspan0: entered allmulticast mode [ 1366.785620][ T28] audit: type=1400 audit(2000000292.664:10367): avc: denied { getattr } for pid=4655 comm="syz.2.9562" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1366.829493][ T4647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1366.845543][ T4657] loop8: detected capacity change from 0 to 512 [ 1366.877993][ T4657] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1366.898204][ T28] audit: type=1400 audit(2000000292.815:10368): avc: denied { write } for pid=4664 comm="syz.2.9564" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1366.925235][ T4657] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.010230][ T4657] hub 9-0:1.0: USB hub found [ 1367.020856][ T4657] hub 9-0:1.0: 8 ports detected [ 1367.032086][ T4672] netlink: 196 bytes leftover after parsing attributes in process `syz.7.9566'. [ 1367.056853][ T28] audit: type=1326 audit(2000000292.976:10369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.0.9565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1367.089126][ T4683] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.9561: iget: bad i_size value: 2533274857506816 [ 1367.103017][ T28] audit: type=1326 audit(2000000292.976:10370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.0.9565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1367.165907][ T28] audit: type=1326 audit(2000000292.976:10371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.0.9565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1367.193913][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.201751][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9567'. [ 1367.227114][ T28] audit: type=1326 audit(2000000292.976:10372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.0.9565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f74e80ad68e code=0x7ffc0000 [ 1367.288472][ T4692] syzkaller0: entered promiscuous mode [ 1367.313205][ T28] audit: type=1326 audit(2000000292.976:10373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.0.9565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f74e80ad68e code=0x7ffc0000 [ 1367.316466][ T4692] syzkaller0: entered allmulticast mode [ 1367.348727][T30195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.393193][ T28] audit: type=1326 audit(2000000292.976:10374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.0.9565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e80ece59 code=0x7ffc0000 [ 1367.426126][ T4701] futex_wake_op: syz.8.9574 tries to shift op by 144; fix this program [ 1367.450162][ T4692] netlink: 'syz.4.9569': attribute type 1 has an invalid length. [ 1367.468865][ T4692] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.9569'. [ 1367.482962][ T4701] loop8: detected capacity change from 0 to 512 [ 1367.534839][ T4701] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.9574: bg 0: block 169: padding at end of block bitmap is not set [ 1367.559979][ T4701] loop8: lost filesystem error report for type 5 error -117 [ 1367.560214][ T4701] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.9574: Failed to acquire dquot type 0 [ 1367.578829][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1367.578887][ C0] EXT4-fs (loop8): initial error at time 2000000293: ext4_validate_block_bitmap:441 [ 1367.578938][ C0] EXT4-fs (loop8): last error at time 2000000293: ext4_validate_block_bitmap:441 [ 1367.698363][ T4701] loop8: lost filesystem error report for type 5 error -117 [ 1367.701004][ T4701] EXT4-fs (loop8): 1 truncate cleaned up [ 1367.739966][ T4701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1367.775294][ T4701] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.834742][ T4718] loop7: detected capacity change from 0 to 1024 [ 1367.858445][ T4718] EXT4-fs: Ignoring removed bh option [ 1367.901239][ T4718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1368.011472][T30195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.123394][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.143357][ T4735] devpts: Invalid uid '0x00000000ffffffff' [ 1368.150029][ T4734] FAULT_INJECTION: forcing a failure. [ 1368.150029][ T4734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.188018][ T4734] CPU: 0 UID: 0 PID: 4734 Comm: syz.2.9584 Tainted: G W syzkaller #0 PREEMPT(full) [ 1368.188060][ T4734] Tainted: [W]=WARN [ 1368.188069][ T4734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1368.188084][ T4734] Call Trace: [ 1368.188091][ T4734] [ 1368.188130][ T4734] __dump_stack+0x1d/0x30 [ 1368.188234][ T4734] dump_stack_lvl+0x95/0xd0 [ 1368.188257][ T4734] dump_stack+0x15/0x1b [ 1368.188324][ T4734] should_fail_ex+0x263/0x280 [ 1368.188354][ T4734] should_fail+0xb/0x20 [ 1368.188379][ T4734] should_fail_usercopy+0x1a/0x20 [ 1368.188454][ T4734] _copy_from_iter+0xcf/0xea0 [ 1368.188514][ T4734] ? __rcu_read_unlock+0x4e/0x70 [ 1368.188543][ T4734] ? avc_has_perm_noaudit+0xab/0x130 [ 1368.188581][ T4734] ping_common_sendmsg+0x9f/0x230 [ 1368.188614][ T4734] ping_v6_sendmsg+0xea/0xc60 [ 1368.188676][ T4734] ? avc_has_perm+0x101/0x190 [ 1368.188776][ T4734] ? _raw_spin_lock_bh+0x56/0xb0 [ 1368.188819][ T4734] ? _raw_spin_unlock_bh+0x18/0x20 [ 1368.188862][ T4734] ? release_sock+0x10c/0x180 [ 1368.188982][ T4734] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 1368.189007][ T4734] inet_sendmsg+0xc5/0xd0 [ 1368.189065][ T4734] ? __pfx_inet_sendmsg+0x10/0x10 [ 1368.189139][ T4734] ____sys_sendmsg+0x519/0x5b0 [ 1368.189166][ T4734] ___sys_sendmsg+0x195/0x1e0 [ 1368.189219][ T4734] __x64_sys_sendmsg+0xd4/0x160 [ 1368.189353][ T4734] x64_sys_call+0x194c/0x3020 [ 1368.189378][ T4734] do_syscall_64+0x12c/0x3b0 [ 1368.189466][ T4734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.189526][ T4734] RIP: 0033:0x7f90a8eece59 [ 1368.189542][ T4734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.189636][ T4734] RSP: 002b:00007f90a7947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1368.189656][ T4734] RAX: ffffffffffffffda RBX: 00007f90a9165fa0 RCX: 00007f90a8eece59 [ 1368.189674][ T4734] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1368.189691][ T4734] RBP: 00007f90a7947090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.189708][ T4734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.189724][ T4734] R13: 00007f90a9166038 R14: 00007f90a9165fa0 R15: 00007fffe8c64d98 [ 1368.189833][ T4734] [ 1368.509084][ T4745] loop2: detected capacity change from 0 to 512 [ 1368.572433][ T4745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1368.611813][ T4753] syzkaller0: entered promiscuous mode [ 1368.623473][ T4753] syzkaller0: entered allmulticast mode [ 1368.642941][ T4745] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.688302][ T4753] netlink: 'syz.7.9592': attribute type 1 has an invalid length. [ 1368.718493][ T4753] netlink: 112865 bytes leftover after parsing attributes in process `syz.7.9592'. [ 1369.000359][ T3707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.108580][ T4762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9593'. [ 1369.217553][ T4768] loop2: detected capacity change from 0 to 256 [ 1369.230200][ T4767] loop8: detected capacity change from 0 to 1024 [ 1369.263703][ T4767] EXT4-fs: Ignoring removed bh option [ 1369.304734][ T4767] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1369.715373][ T4797] loop2: detected capacity change from 0 to 512 [ 1370.320528][ T4797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 1370.606522][ T4797] System zones: 1-12 [ 1370.627424][T30195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.652135][ T4797] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.9605: Directory hole found for htree index block 0 [ 1370.780661][ T4797] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1370.780852][ T4797] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1370.798179][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1370.798200][ C1] EXT4-fs (loop2): initial error at time 2000000296: dx_probe:791: inode 2 [ 1370.798231][ C1] EXT4-fs (loop2): last error at time 2000000296: dx_probe:791: inode 2 [ 1370.862179][ T4808] loop7: detected capacity change from 0 to 512 [ 1370.898939][ T4808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1370.936488][ T4808] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.991168][ T4808] hub 9-0:1.0: USB hub found [ 1371.002378][ T4814] loop8: detected capacity change from 0 to 1024 [ 1371.019201][ T4808] hub 9-0:1.0: 8 ports detected [ 1371.044723][ T4815] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.9609: iget: bad i_size value: 2533274857506816 [ 1371.083446][ T4814] EXT4-fs: Ignoring removed bh option [ 1371.173732][ T4814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1371.186720][ T4797] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.9605: Directory hole found for htree index block 0 [ 1371.217856][ T28] kauditd_printk_skb: 173 callbacks suppressed [ 1371.217886][ T28] audit: type=1400 audit(2000000297.090:10546): avc: denied { write } for pid=4807 comm="syz.7.9609" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1371.299090][ T4797] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1371.299333][ T4797] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1371.346489][T30195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.373249][ T4797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.487922][ T3707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.607943][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.659036][ T4837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.678130][ T4837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.749010][ T4842] syzkaller0: entered promiscuous mode [ 1371.765072][ T4842] syzkaller0: entered allmulticast mode [ 1371.781147][ T4844] loop2: detected capacity change from 0 to 1024 [ 1371.791278][ T4844] EXT4-fs: Ignoring removed bh option [ 1371.818412][ T4844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1371.839861][ T4842] netlink: 'syz.8.9614': attribute type 1 has an invalid length. [ 1371.848673][ T4842] __nla_validate_parse: 1 callbacks suppressed [ 1371.848798][ T4842] netlink: 112865 bytes leftover after parsing attributes in process `syz.8.9614'. [ 1371.908154][ T4838] loop7: detected capacity change from 0 to 764 [ 1371.920367][ T4838] iso9660: Unknown parameter 'Y8Tz9D]+ [ 1371.920367][ T4838] Nsghd ^ [ 1371.920367][ T4838] xMN^' [ 1372.041259][ T4852] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1372.047828][ T4852] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1372.093046][ T4852] vhci_hcd vhci_hcd.0: Device attached [ 1372.104462][ T4852] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(7) [ 1372.111022][ T4852] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1372.118555][ T4852] vhci_hcd vhci_hcd.0: Device attached [ 1372.125017][ T4852] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(9) [ 1372.131572][ T4852] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1372.139184][ T4852] vhci_hcd vhci_hcd.0: Device attached [ 1372.150501][ T4852] loop7: detected capacity change from 0 to 1024 [ 1372.172783][ T4852] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1372.206423][ T4852] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.9621: Invalid block bitmap block 0 in block_group 0 [ 1372.227152][ T4852] loop7: lost filesystem error report for type 5 error -117 [ 1372.227383][ T4852] Quota error (device loop7): write_blk: dquota write failed [ 1372.256676][ T4852] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1372.266688][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1372.266706][ C0] EXT4-fs (loop7): initial error at time 2000000298: ext4_read_block_bitmap_nowait:483 [ 1372.266751][ C0] EXT4-fs (loop7): last error at time 2000000298: ext4_read_block_bitmap_nowait:483 [ 1372.315128][ T4852] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.9621: Failed to acquire dquot type 0 [ 1372.326476][ T4995] usb 15-1: new low-speed USB device number 4 using vhci_hcd [ 1372.341089][ T4852] loop7: lost filesystem error report for type 5 error -117 [ 1372.341249][ T4852] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.9621: Freeing blocks not in datazone - block = 0, count = 4096 [ 1372.390840][ T4852] loop7: lost filesystem error report for type 5 error -117 [ 1372.391994][ T4852] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.9621: Invalid inode bitmap blk 0 in block_group 0 [ 1372.412795][T22448] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-7 [ 1372.426638][ T4852] loop7: lost filesystem error report for type 5 error -117 [ 1372.427121][T22448] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 0 [ 1372.447796][ T4852] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 1372.465557][T22448] loop7: lost filesystem error report for type 5 error -117 [ 1372.468002][ T3707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.490859][ T4852] loop7: lost filesystem error report for type 5 error -117 [ 1372.497077][ T4852] EXT4-fs (loop7): 1 orphan inode deleted [ 1372.525841][ T4852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1372.561413][ T28] audit: type=1400 audit(2000000298.518:10547): avc: denied { write } for pid=4851 comm="syz.7.9621" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1372.592100][ T4868] loop4: detected capacity change from 0 to 1024 [ 1372.608607][ T4868] EXT4-fs: Ignoring removed bh option [ 1372.653412][ T4868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1372.708116][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.784926][ T4890] loop2: detected capacity change from 0 to 512 [ 1372.924400][ T4890] dummy0: entered promiscuous mode [ 1372.963084][ T4890] erspan0: entered promiscuous mode [ 1373.025722][ T4890] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 1373.050221][ T4890] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 1373.075678][ T4890] hsr1: entered allmulticast mode [ 1373.089142][ T4890] dummy0: entered allmulticast mode [ 1373.103297][ T4890] erspan0: entered allmulticast mode [ 1373.116755][ T4860] vhci_hcd: connection closed [ 1373.117541][ T4858] vhci_hcd: connection closed [ 1373.117552][T22450] vhci_hcd vhci_hcd.7: stop threads [ 1373.117575][T22450] vhci_hcd vhci_hcd.7: release socket [ 1373.122292][ T4856] vhci_hcd: connection reset by peer [ 1373.150828][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.169437][T22450] vhci_hcd vhci_hcd.7: disconnect device [ 1373.175220][T22450] vhci_hcd vhci_hcd.7: stop threads [ 1373.180460][T22450] vhci_hcd vhci_hcd.7: release socket [ 1373.185925][T22450] vhci_hcd vhci_hcd.7: disconnect device [ 1373.192567][T22450] vhci_hcd vhci_hcd.7: stop threads [ 1373.197806][T22450] vhci_hcd vhci_hcd.7: release socket [ 1373.203531][T22450] vhci_hcd vhci_hcd.7: disconnect device [ 1373.227197][T22443] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-7 [ 1373.249732][T22443] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 1373.272179][T22443] loop7: lost filesystem error report for type 5 error -117 [ 1373.437720][ T4903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9635'. [ 1373.467523][ T4903] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1373.756044][ T4907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9636'. [ 1373.776305][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9636'. [ 1373.902882][ T4912] FAULT_INJECTION: forcing a failure. [ 1373.902882][ T4912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1373.916240][ T4912] CPU: 0 UID: 0 PID: 4912 Comm: syz.8.9638 Tainted: G W syzkaller #0 PREEMPT(full) [ 1373.916274][ T4912] Tainted: [W]=WARN [ 1373.916284][ T4912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1373.916302][ T4912] Call Trace: [ 1373.916310][ T4912] [ 1373.916322][ T4912] __dump_stack+0x1d/0x30 [ 1373.916354][ T4912] dump_stack_lvl+0x95/0xd0 [ 1373.916597][ T4912] dump_stack+0x15/0x1b [ 1373.916617][ T4912] should_fail_ex+0x263/0x280 [ 1373.916645][ T4912] should_fail+0xb/0x20 [ 1373.916672][ T4912] should_fail_usercopy+0x1a/0x20 [ 1373.916785][ T4912] _copy_from_iter+0xcf/0xea0 [ 1373.916842][ T4912] ? __alloc_skb+0x4f6/0x690 [ 1373.916866][ T4912] ? __alloc_skb+0x200/0x690 [ 1373.916963][ T4912] netlink_sendmsg+0x4ae/0x6f0 [ 1373.917002][ T4912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1373.917033][ T4912] ____sys_sendmsg+0x563/0x5b0 [ 1373.917088][ T4912] ___sys_sendmsg+0x195/0x1e0 [ 1373.917126][ T4912] __x64_sys_sendmsg+0xd4/0x160 [ 1373.917167][ T4912] x64_sys_call+0x194c/0x3020 [ 1373.917200][ T4912] do_syscall_64+0x12c/0x3b0 [ 1373.917302][ T4912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.917325][ T4912] RIP: 0033:0x7f2f2f2ace59 [ 1373.917342][ T4912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.917368][ T4912] RSP: 002b:00007f2f2dcff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1373.917394][ T4912] RAX: ffffffffffffffda RBX: 00007f2f2f525fa0 RCX: 00007f2f2f2ace59 [ 1373.917501][ T4912] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1373.917514][ T4912] RBP: 00007f2f2dcff090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.917528][ T4912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.917551][ T4912] R13: 00007f2f2f526038 R14: 00007f2f2f525fa0 R15: 00007fff1d024328 [ 1373.917579][ T4912] [ 1374.262540][ T4921] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1374.269192][ T4921] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1374.278304][ T4921] vhci_hcd vhci_hcd.0: Device attached [ 1374.287121][ T4921] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 1374.293686][ T4921] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1374.308214][ T4921] vhci_hcd vhci_hcd.0: Device attached [ 1374.323594][ T4921] set_capacity_and_notify: 1 callbacks suppressed [ 1374.323614][ T4921] loop2: detected capacity change from 0 to 1024 [ 1374.333177][ T4921] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1374.362171][ T4921] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.9642: Invalid block bitmap block 0 in block_group 0 [ 1374.362326][ T4921] loop2: lost filesystem error report for type 5 error -117 [ 1374.363083][ T4921] Quota error (device loop2): write_blk: dquota write failed [ 1374.363106][ T4921] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1374.363142][ T4921] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.9642: Failed to acquire dquot type 0 [ 1374.363166][ T4921] loop2: lost filesystem error report for type 5 error -117 [ 1374.364674][ T4921] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.9642: Freeing blocks not in datazone - block = 0, count = 4096 [ 1374.374988][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 1374.375013][ C1] EXT4-fs (loop2): initial error at time 2000000300: ext4_read_block_bitmap_nowait:483 [ 1374.375037][ C1] EXT4-fs (loop2): last error at time 2000000300: ext4_acquire_dquot:7034 [ 1374.470303][ T4921] loop2: lost filesystem error report for type 5 error -117 [ 1374.476857][ T4921] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.9642: Invalid inode bitmap blk 0 in block_group 0 [ 1374.508725][ T4921] loop2: lost filesystem error report for type 5 error -117 [ 1374.518658][ T4921] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 1374.534887][ T4921] loop2: lost filesystem error report for type 5 error -117 [ 1374.535027][ T4921] EXT4-fs (loop2): 1 orphan inode deleted [ 1374.549367][ T4921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1374.599250][T18832] usb 5-1: new low-speed USB device number 5 using vhci_hcd [ 1374.635232][ T28] audit: type=1400 audit(2000000300.589:10548): avc: denied { write } for pid=4920 comm="syz.2.9642" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1376.180587][ T4924] vhci_hcd: connection closed [ 1376.180973][T22450] vhci_hcd vhci_hcd.2: stop threads [ 1376.193075][ T4922] vhci_hcd: connection reset by peer [ 1376.207053][ T3707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.262937][T22450] vhci_hcd vhci_hcd.2: release socket [ 1376.288027][T22450] vhci_hcd vhci_hcd.2: disconnect device [ 1376.307224][T22450] vhci_hcd vhci_hcd.2: stop threads [ 1376.323751][T22450] vhci_hcd vhci_hcd.2: release socket [ 1376.348232][T22450] vhci_hcd vhci_hcd.2: disconnect device [ 1376.539348][T13495] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 1376.560386][T13495] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:14: Failed to release dquot type 0 [ 1376.578895][T13495] loop2: lost filesystem error report for type 5 error -117 [ 1376.701460][ T4968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.736650][ T4968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.058698][ T4971] syzkaller0: entered promiscuous mode [ 1377.064426][ T4971] syzkaller0: entered allmulticast mode [ 1377.076350][ T4971] netlink: 'syz.7.9656': attribute type 1 has an invalid length. [ 1377.084203][ T4971] netlink: 112865 bytes leftover after parsing attributes in process `syz.7.9656'. [ 1377.480956][ T4978] loop7: detected capacity change from 0 to 1024 [ 1377.495358][ T4978] EXT4-fs: Ignoring removed bh option [ 1377.501927][ T4995] usb 15-1: enqueue for inactive port 0 [ 1377.513411][ T4995] usb 15-1: enqueue for inactive port 0 [ 1377.632477][ T4978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1377.644730][ T4995] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1377.720137][ T4990] loop4: detected capacity change from 0 to 256 [ 1377.727105][ T4978] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9659'. [ 1377.778166][ T4992] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9659'. [ 1378.004902][ T5008] loop4: detected capacity change from 0 to 512 [ 1378.011638][ T5008] ext4: Unknown parameter 'nouser_xattr' [ 1378.089490][ T5010] netlink: 'syz.4.9666': attribute type 4 has an invalid length. [ 1378.139653][ T5012] loop0: detected capacity change from 0 to 512 [ 1378.191660][ T5012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1378.204509][ T5012] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.239126][ T5012] hub 9-0:1.0: USB hub found [ 1378.246035][ T5012] hub 9-0:1.0: 8 ports detected [ 1378.261684][ T5012] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.9667: iget: bad i_size value: 2533274857506816 [ 1378.267522][ T5018] syzkaller0: entered promiscuous mode [ 1378.280533][ T5018] syzkaller0: entered allmulticast mode [ 1378.289181][ T5018] netlink: 'syz.4.9669': attribute type 1 has an invalid length. [ 1378.296980][ T28] audit: type=1400 audit(2000000304.278:10549): avc: denied { write } for pid=5011 comm="syz.0.9667" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1378.319124][ T5018] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.9669'. [ 1378.400942][ T28] audit: type=1400 audit(2000000304.378:10550): avc: denied { write } for pid=5011 comm="syz.0.9667" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1378.439620][ T28] audit: type=1400 audit(2000000304.378:10551): avc: denied { create } for pid=5011 comm="syz.0.9667" name=616B5F7374617465732038206D61726B5F7265616420300A scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1378.542812][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.627814][ T5025] loop0: detected capacity change from 0 to 512 [ 1378.645598][ T5025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1378.664990][ T5025] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.698871][ T5025] hub 9-0:1.0: USB hub found [ 1378.712140][ T5025] hub 9-0:1.0: 8 ports detected [ 1378.769798][ T5025] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.9672: iget: bad i_size value: 2533274857506816 [ 1378.796956][ T28] audit: type=1400 audit(2000000304.770:10552): avc: denied { write } for pid=5024 comm="syz.0.9672" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1378.826284][T29532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.865182][ T5036] loop4: detected capacity change from 0 to 1024 [ 1378.875430][ T5036] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1378.889798][ T28] audit: type=1400 audit(2000000304.871:10553): avc: denied { write } for pid=5024 comm="syz.0.9672" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1378.931352][ T5036] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1378.947130][ T5036] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1378.956965][ T5036] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 1378.966814][ T5036] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1378.981433][ T5036] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 1378.993397][ T5036] EXT4-fs (loop4): 1 truncate cleaned up [ 1379.001566][ T5036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1379.101718][ T2649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.146212][ T5051] FAULT_INJECTION: forcing a failure. [ 1379.146212][ T5051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.168425][ T5051] CPU: 1 UID: 0 PID: 5051 Comm: syz.4.9681 Tainted: G W syzkaller #0 PREEMPT(full) [ 1379.168530][ T5051] Tainted: [W]=WARN [ 1379.168541][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1379.168558][ T5051] Call Trace: [ 1379.168567][ T5051] [ 1379.168578][ T5051] __dump_stack+0x1d/0x30 [ 1379.168606][ T5051] dump_stack_lvl+0x95/0xd0 [ 1379.168770][ T5051] dump_stack+0x15/0x1b [ 1379.168792][ T5051] should_fail_ex+0x263/0x280 [ 1379.168824][ T5051] should_fail+0xb/0x20 [ 1379.168860][ T5051] should_fail_usercopy+0x1a/0x20 [ 1379.168907][ T5051] _copy_to_user+0x20/0xa0 [ 1379.168953][ T5051] simple_read_from_buffer+0xb5/0x130 [ 1379.169079][ T5051] proc_fail_nth_read+0x10e/0x150 [ 1379.169167][ T5051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1379.169195][ T5051] vfs_read+0x1ab/0x7f0 [ 1379.169254][ T5051] ? fput+0x8f/0xc0 [ 1379.169279][ T5051] ? __rcu_read_unlock+0x4e/0x70 [ 1379.169357][ T5051] ? __fget_files+0x184/0x1c0 [ 1379.169378][ T5051] ? mutex_lock+0x57/0x90 [ 1379.169402][ T5051] ksys_read+0xdc/0x1a0 [ 1379.169441][ T5051] __x64_sys_read+0x40/0x50 [ 1379.169535][ T5051] x64_sys_call+0x2886/0x3020 [ 1379.169566][ T5051] do_syscall_64+0x12c/0x3b0 [ 1379.169618][ T5051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.169688][ T5051] RIP: 0033:0x7f421a65d68e [ 1379.169709][ T5051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1379.169735][ T5051] RSP: 002b:00007f42190f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1379.169761][ T5051] RAX: ffffffffffffffda RBX: 00007f42190f76c0 RCX: 00007f421a65d68e [ 1379.169779][ T5051] RDX: 000000000000000f RSI: 00007f42190f70a0 RDI: 0000000000000004 [ 1379.169796][ T5051] RBP: 00007f42190f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.169833][ T5051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.169850][ T5051] R13: 00007f421a916038 R14: 00007f421a915fa0 R15: 00007ffcc365fcb8 [ 1379.169929][ T5051] [ 1379.531296][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.663094][T18832] usb 5-1: enqueue for inactive port 0 [ 1379.690447][T18832] usb 5-1: enqueue for inactive port 0 [ 1380.099673][T18832] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1380.285857][ T5069] loop8: detected capacity change from 0 to 1024 [ 1380.299261][ T5069] EXT4-fs: Ignoring removed bh option [ 1380.390872][ T5069] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1380.578689][ T5079] syzkaller0: entered promiscuous mode [ 1380.605923][ T5079] syzkaller0: entered allmulticast mode [ 1380.636387][ T5077] ip6erspan0: entered allmulticast mode [ 1380.644129][ T5079] netlink: 'syz.0.9684': attribute type 1 has an invalid length. [ 1380.651923][ T5079] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.9684'. [ 1381.514983][ T5100] loop8: detected capacity change from 0 to 512 [ 1381.536281][ T5100] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1381.556276][ T5103] loop4: detected capacity change from 0 to 1024 [ 1381.568860][ T5103] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1381.582680][ T5100] hub 9-0:1.0: USB hub found [ 1381.588683][ T5100] hub 9-0:1.0: 8 ports detected [ 1381.610761][ T5103] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.9697: Invalid block bitmap block 0 in block_group 0 [ 1381.639566][ T5103] loop4: lost filesystem error report for type 5 error -117 [ 1381.639672][ T5100] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.9696: iget: bad i_size value: 2533274857506816 [ 1381.653476][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1381.667619][ C0] EXT4-fs (loop4): initial error at time 2000000307: ext4_read_block_bitmap_nowait:483 [ 1381.679163][ C0] EXT4-fs (loop4): last error at time 2000000307: ext4_read_block_bitmap_nowait:483 [ 1381.708338][ T5103] Quota error (device loop4): write_blk: dquota write failed [ 1381.732389][ T5103] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1381.750279][ T28] audit: type=1400 audit(2000000307.715:10554): avc: denied { write } for pid=5099 comm="syz.8.9696" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1381.795784][ T5103] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.9697: Failed to acquire dquot type 0 [ 1381.823276][ T5103] loop4: lost filesystem error report for type 5 error -117 [ 1381.823514][ T5103] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.9697: Freeing blocks not in datazone - block = 0, count = 4096 [ 1381.871255][ T5103] loop4: lost filesystem error report for type 5 error -117 [ 1381.871516][ T5103] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.9697: Invalid inode bitmap blk 0 in block_group 0 [ 1381.896704][ T1075] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 1381.897317][ T5110] loop7: detected capacity change from 0 to 512 [ 1381.953612][ T5103] loop4: lost filesystem error report for type 5 error -117 [ 1381.953682][ T1075] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 0 [ 1381.955281][ T5103] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 1381.961049][ T1075] loop4: lost filesystem error report for type 5 error -117 [ 1382.009381][ T5103] loop4: lost filesystem error report for type 5 error -117 [ 1382.024955][ T5103] EXT4-fs (loop4): 1 orphan inode deleted [ 1382.071632][ T28] audit: type=1400 audit(2000000308.077:10555): avc: denied { write } for pid=5102 comm="syz.4.9697" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1382.080813][ T5110] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.9698: corrupted in-inode xattr: invalid ea_ino [ 1382.183370][ T5110] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1382.187003][ T5110] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.9698: couldn't read orphan inode 15 (err -117) [ 1382.196809][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1382.197075][ C1] EXT4-fs (loop7): initial error at time 2000000308: ext4_iget_extra_inode:5128: inode 15 [ 1382.198041][ C1] EXT4-fs (loop7): last error at time 2000000308: ext4_iget_extra_inode:5128: inode 15 [ 1382.245702][ T5110] loop7: lost filesystem error report for type 5 error -117 [ 1382.249002][T13495] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 1382.278113][T13495] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:14: Failed to release dquot type 0 [ 1382.310204][T13495] loop4: lost filesystem error report for type 5 error -117 [ 1382.320631][ T28] audit: type=1400 audit(2000000308.308:10556): avc: denied { write } for pid=5108 comm="syz.7.9698" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1382.580468][ T5134] loop7: detected capacity change from 0 to 512 [ 1382.740512][ T5134] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1382.960946][ T5140] netlink: 'syz.0.9709': attribute type 1 has an invalid length. [ 1383.739842][ T5162] loop2: detected capacity change from 0 to 512 [ 1383.794898][ T5162] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1383.843417][ T5171] FAULT_INJECTION: forcing a failure. [ 1383.843417][ T5171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1383.859633][ T5162] hub 9-0:1.0: USB hub found [ 1383.868359][ T5162] hub 9-0:1.0: 8 ports detected [ 1383.898679][ T5171] CPU: 1 UID: 0 PID: 5171 Comm: syz.7.9718 Tainted: G W syzkaller #0 PREEMPT(full) [ 1383.898719][ T5171] Tainted: [W]=WARN [ 1383.898728][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1383.898746][ T5171] Call Trace: [ 1383.898755][ T5171] [ 1383.898827][ T5171] __dump_stack+0x1d/0x30 [ 1383.898858][ T5171] dump_stack_lvl+0x95/0xd0 [ 1383.898955][ T5171] dump_stack+0x15/0x1b [ 1383.898990][ T5171] should_fail_ex+0x263/0x280 [ 1383.899028][ T5171] should_fail+0xb/0x20 [ 1383.899060][ T5171] should_fail_usercopy+0x1a/0x20 [ 1383.899200][ T5171] _copy_to_user+0x20/0xa0 [ 1383.899281][ T5171] simple_read_from_buffer+0xb5/0x130 [ 1383.899328][ T5171] proc_fail_nth_read+0x10e/0x150 [ 1383.899369][ T5171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1383.899420][ T5171] vfs_read+0x1ab/0x7f0 [ 1383.899451][ T5171] ? __rcu_read_unlock+0x4e/0x70 [ 1383.899495][ T5171] ? __fget_files+0x184/0x1c0 [ 1383.899522][ T5171] ? mutex_lock+0x57/0x90 [ 1383.899553][ T5171] ksys_read+0xdc/0x1a0 [ 1383.899657][ T5171] __x64_sys_read+0x40/0x50 [ 1383.899687][ T5171] x64_sys_call+0x2886/0x3020 [ 1383.899730][ T5171] do_syscall_64+0x12c/0x3b0 [ 1383.899763][ T5171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.899798][ T5171] RIP: 0033:0x7fb334fdd68e [ 1383.899867][ T5171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1383.899887][ T5171] RSP: 002b:00007fb333a55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1383.899949][ T5171] RAX: ffffffffffffffda RBX: 00007fb333a566c0 RCX: 00007fb334fdd68e [ 1383.899968][ T5171] RDX: 000000000000000f RSI: 00007fb333a560a0 RDI: 0000000000000009 [ 1383.899987][ T5171] RBP: 00007fb333a56090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.900004][ T5171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1383.900026][ T5171] R13: 00007fb335296128 R14: 00007fb335296090 R15: 00007ffeffc417f8 [ 1383.900053][ T5171] [ 1384.108360][ T5173] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.9716: iget: bad i_size value: 2533274857506816 [ 1384.138778][ T5172] loop8: detected capacity change from 0 to 512 [ 1384.206235][ T5178] loop7: detected capacity change from 0 to 256 [ 1384.253387][ T28] audit: type=1400 audit(2000000310.257:10557): avc: denied { write } for pid=5161 comm="syz.2.9716" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1384.288184][ T5172] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1384.325282][ T5172] hub 9-0:1.0: USB hub found [ 1384.330948][ T5172] hub 9-0:1.0: 8 ports detected [ 1384.347505][ T5172] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.9719: iget: bad i_size value: 2533274857506816 [ 1384.366207][ T28] audit: type=1400 audit(2000000310.378:10558): avc: denied { write } for pid=5170 comm="syz.8.9719" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1384.495609][ T28] audit: type=1400 audit(2000000310.508:10559): avc: denied { write } for pid=5170 comm="syz.8.9719" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1384.571391][ T5183] loop7: detected capacity change from 0 to 256 [ 1384.927187][ T5199] loop7: detected capacity change from 0 to 1024 [ 1384.962709][ T5199] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1385.004290][ T5199] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.9729: Invalid block bitmap block 0 in block_group 0 [ 1385.029448][ T5199] loop7: lost filesystem error report for type 5 error -117 [ 1385.036979][ T5210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.037212][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1385.059153][ C1] EXT4-fs (loop7): initial error at time 2000000311: ext4_read_block_bitmap_nowait:483 [ 1385.068858][ C1] EXT4-fs (loop7): last error at time 2000000311: ext4_read_block_bitmap_nowait:483 [ 1385.079965][ T5199] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.9729: Failed to acquire dquot type 0 [ 1385.091450][ T5199] loop7: lost filesystem error report for type 5 error -117 [ 1385.095950][ T5210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.129469][ T5199] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.9729: Freeing blocks not in datazone - block = 0, count = 4096 [ 1385.173882][ T5199] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.9729: Invalid inode bitmap blk 0 in block_group 0 [ 1385.212055][ T5185] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1385.216424][ T5199] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 1385.228706][T13495] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:14: Failed to release dquot type 0 [ 1385.230432][ T5199] EXT4-fs (loop7): 1 orphan inode deleted [ 1385.247308][ T5185] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1385.278319][ T5185] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1385.323480][ T5215] set_capacity_and_notify: 2 callbacks suppressed [ 1385.323504][ T5215] loop0: detected capacity change from 0 to 512 [ 1385.324207][ T5185] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1385.329339][ T5185] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #16: comm syz.4.9723: corrupted xattr block 31: invalid header [ 1385.367203][T13495] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:14: Failed to release dquot type 0 [ 1385.385012][ T5185] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1385.385513][ T5185] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 1385.404294][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1385.404344][ C0] EXT4-fs (loop4): initial error at time 2000000311: ext4_xattr_delete_inode:2972: inode 16 [ 1385.404446][ C0] EXT4-fs (loop4): last error at time 2000000311: ext4_xattr_delete_inode:2972: inode 16 [ 1385.435533][ T5185] EXT4-fs (loop4): 1 orphan inode deleted [ 1385.472556][ T5222] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9737'. [ 1385.481858][ T5222] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9737'. [ 1385.492961][ T5222] loop7: detected capacity change from 0 to 128 [ 1385.499627][ T5215] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 1385.511734][ T5222] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.753028][ T5231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9740'. [ 1386.052238][T13495] smc: removing ib device syz1 [ 1386.080131][ T5244] loop4: detected capacity change from 0 to 1024 [ 1386.094681][ T5244] EXT4-fs: Ignoring removed bh option [ 1386.226444][ T5255] usb usb7: usbfs: process 5255 (syz.0.9749) did not claim interface 0 before use [ 1386.237386][ T5255] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1386.469419][ T5261] netlink: 'syz.4.9751': attribute type 1 has an invalid length. [ 1386.508761][ T5261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9751'. [ 1386.563531][ T5261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.570807][ T5261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.646831][ T1075] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.734448][ T1075] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.877129][ T5267] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5267 comm=syz.4.9752 [ 1386.951848][ T5267] loop4: detected capacity change from 0 to 512 [ 1386.991788][ T1075] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.028738][ T5267] FAT-fs (loop4): FAT read failed (blocknr 128) [ 1387.077341][ T1075] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.151727][ T5273] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9754'. [ 1387.187994][ T5269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9754'. [ 1387.263644][ T5269] netlink: 112 bytes leftover after parsing attributes in process `syz.8.9754'. [ 1387.276847][ T1075] bridge_slave_0: left allmulticast mode [ 1387.289017][ T1075] bridge_slave_0: left promiscuous mode [ 1387.299399][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.307771][ T5269] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9754'. [ 1387.440972][ T1075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1387.462340][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1387.462355][ T28] audit: type=1400 audit(2000000313.482:10566): avc: denied { write } for pid=5285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1387.493225][ T1075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1387.508586][ T5299] loop8: detected capacity change from 0 to 512 [ 1387.522119][ T1075] bond0 (unregistering): (slave team0): Releasing backup interface [ 1387.556366][ T5299] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.573848][ T1075] bond0 (unregistering): Released all slaves [ 1387.584628][ T28] audit: type=1400 audit(2000000313.612:10567): avc: denied { write } for pid=5302 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1387.611056][ T1075] bond1 (unregistering): Released all slaves [ 1387.629141][ T5299] hub 9-0:1.0: USB hub found [ 1387.635744][ T5299] hub 9-0:1.0: 8 ports detected [ 1387.663500][ T3025] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1387.682029][ T1075] hsr_slave_0: left promiscuous mode [ 1387.687830][ T1075] hsr_slave_1: left promiscuous mode [ 1387.698284][ T5299] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.9759: iget: bad i_size value: 2533274857506816 [ 1387.711726][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.721808][ T5308] loop4: detected capacity change from 0 to 512 [ 1387.728344][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.738767][ T28] audit: type=1400 audit(2000000313.763:10568): avc: denied { write } for pid=5298 comm="syz.8.9759" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1387.761139][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.772336][ T5308] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.792226][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.809830][ T1075] veth1_macvtap: left promiscuous mode [ 1387.815765][ T1075] veth0_macvtap: left promiscuous mode [ 1387.821660][ T1075] veth1_vlan: left promiscuous mode [ 1387.852003][ T5308] hub 9-0:1.0: USB hub found [ 1387.856206][ T5313] loop0: detected capacity change from 0 to 1024 [ 1387.864021][ T5308] hub 9-0:1.0: 8 ports detected [ 1387.873481][ T5313] EXT4-fs: Ignoring removed bh option [ 1387.908004][ T5308] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.9760: iget: bad i_size value: 2533274857506816 [ 1387.932296][ T28] audit: type=1400 audit(2000000313.954:10569): avc: denied { write } for pid=5307 comm="syz.4.9760" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1388.008525][ T5323] loop8: detected capacity change from 0 to 256 [ 1388.015809][ T5323] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1388.041030][ T5323] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1388.052057][ T1075] team0 (unregistering): Port device team_slave_1 removed [ 1388.068752][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9763'. [ 1388.088628][ T1075] team0 (unregistering): Port device team_slave_0 removed [ 1388.125398][ T5331] sg_write: data in/out 1717986882/136 bytes for SCSI command 0x0-- guessing data in; [ 1388.125398][ T5331] program syz.2.9763 not setting count and/or reply_len properly [ 1388.335204][ T5347] loop2: detected capacity change from 0 to 164 [ 1388.394734][ T5347] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1388.427553][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.438050][ T5271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.445285][ T5271] bridge_slave_0: entered allmulticast mode [ 1388.452161][ T5271] bridge_slave_0: entered promiscuous mode [ 1388.459116][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.466285][ T5271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.466519][ T2975] ================================================================== [ 1388.473821][ T5271] bridge_slave_1: entered allmulticast mode [ 1388.481498][ T2975] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1388.488835][ T5271] bridge_slave_1: entered promiscuous mode [ 1388.494376][ T2975] [ 1388.494385][ T2975] write to 0xffffffff86d2cd68 of 88 bytes by task 5271 on cpu 0: [ 1388.510277][ T2975] prb_reserve+0x6e0/0xad0 [ 1388.514740][ T2975] vprintk_store+0x54a/0x910 [ 1388.519352][ T2975] vprintk_emit+0x1a4/0x600 [ 1388.523889][ T2975] vprintk_default+0x26/0x30 [ 1388.528499][ T2975] vprintk+0x1d/0x30 [ 1388.532427][ T2975] _printk+0x79/0xa0 [ 1388.536342][ T2975] br_set_state+0x2ae/0x3b0 [ 1388.540879][ T2975] new_nbp+0x235/0x300 [ 1388.544993][ T2975] br_add_if+0x1e7/0xa60 [ 1388.549258][ T2975] br_add_slave+0x2c/0x40 [ 1388.553667][ T2975] do_set_master+0x390/0x460 [ 1388.558308][ T2975] do_setlink+0x97b/0x2950 [ 1388.562757][ T2975] rtnl_newlink+0x108a/0x1400 [ 1388.567462][ T2975] rtnetlink_rcv_msg+0x64b/0x720 [ 1388.572440][ T2975] netlink_rcv_skb+0x123/0x220 [ 1388.577232][ T2975] rtnetlink_rcv+0x1c/0x30 [ 1388.581679][ T2975] netlink_unicast+0x5a8/0x680 [ 1388.586484][ T2975] netlink_sendmsg+0x5c8/0x6f0 [ 1388.591277][ T2975] __sys_sendto+0x42e/0x490 [ 1388.595802][ T2975] __x64_sys_sendto+0x76/0x90 [ 1388.600503][ T2975] x64_sys_call+0x2d35/0x3020 [ 1388.605210][ T2975] do_syscall_64+0x12c/0x3b0 [ 1388.609846][ T2975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.615766][ T2975] [ 1388.618114][ T2975] read to 0xffffffff86d2cd68 of 8 bytes by task 2975 on cpu 1: [ 1388.625728][ T2975] _prb_read_valid+0x369/0x950 [ 1388.630529][ T2975] prb_read_valid+0x3c/0x60 [ 1388.635071][ T2975] syslog_print+0x258/0x560 [ 1388.639597][ T2975] do_syslog+0x52b/0x7f0 [ 1388.643864][ T2975] __x64_sys_syslog+0x41/0x50 [ 1388.648572][ T2975] x64_sys_call+0x2b9e/0x3020 [ 1388.653277][ T2975] do_syscall_64+0x12c/0x3b0 [ 1388.657905][ T2975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.663853][ T2975] [ 1388.666198][ T2975] value changed: 0x0000000000003bbd -> 0x0000000000005bbd [ 1388.673332][ T2975] [ 1388.675692][ T2975] Reported by Kernel Concurrency Sanitizer on: [ 1388.681872][ T2975] CPU: 1 UID: 0 PID: 2975 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(full) [ 1388.692317][ T2975] Tainted: [W]=WARN [ 1388.696145][ T2975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1388.706224][ T2975] ================================================================== [ 1388.715545][ T5347] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1388.735063][ T5347] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1388.751232][ T5347] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1388.776921][ T5347] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1388.794198][ T5271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.824455][ T28] audit: type=1400 audit(2000000314.858:10570): avc: denied { write } for pid=5338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1388.828958][ T5271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.902968][ T28] audit: type=1400 audit(2000000314.938:10571): avc: denied { write } for pid=5362 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1388.909422][ T1075] IPVS: stop unused estimator thread 0... [ 1388.962124][ T3025] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1388.985532][ T5271] team0: Port device team_slave_0 added [ 1389.001670][ T5271] team0: Port device team_slave_1 added [ 1389.041142][ T5271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.050157][ T5271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.076338][ T5271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.087497][ T5340] loop0: detected capacity change from 0 to 512 [ 1389.090078][ T5271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.106742][ T5271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.120260][ T5340] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1389.132784][ T5271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.169551][ T5271] hsr_slave_0: entered promiscuous mode [ 1389.176109][ T5271] hsr_slave_1: entered promiscuous mode [ 1389.182291][ T5340] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1389.195990][ T5340] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1389.224593][ T5340] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1389.233826][ T5340] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #16: comm syz.0.9768: corrupted xattr block 31: invalid header [ 1389.248536][ T5340] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1389.257600][ T5340] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 1389.266901][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1389.266965][ C1] EXT4-fs (loop0): initial error at time 2000000315: ext4_xattr_delete_inode:2972: inode 16 [ 1389.267094][ C1] EXT4-fs (loop0): last error at time 2000000315: ext4_xattr_delete_inode:2972: inode 16 [ 1389.304074][ T5340] EXT4-fs (loop0): 1 orphan inode deleted [ 1389.314303][ T5340] EXT4-fs mount: 27 callbacks suppressed [ 1389.314331][ T5340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1389.386879][ T5271] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1389.398060][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1389.406054][ T5271] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1389.416138][ T28] audit: type=1400 audit(2000000315.440:10572): avc: denied { write } for pid=5368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.444687][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1389.457323][ T5271] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1389.468186][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1389.478417][ T28] audit: type=1400 audit(2000000315.511:10573): avc: denied { write } for pid=5380 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.479819][ T5271] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1389.524053][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1389.532532][ T3025] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1389.541198][ T2976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.574890][ T5271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.593387][ T5271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.603001][T13495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.610146][T13495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.621379][T13495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.628501][T13495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.724820][ T28] audit: type=1400 audit(2000000315.752:10574): avc: denied { write } for pid=5389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.770982][ T28] audit: type=1400 audit(2000000315.802:10575): avc: denied { write } for pid=5409 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.790756][ T5271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1389.815726][ T3025] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1389.929964][ T5271] veth0_vlan: entered promiscuous mode [ 1389.938488][ T5271] veth1_vlan: entered promiscuous mode [ 1389.955101][ T5271] veth0_macvtap: entered promiscuous mode [ 1389.962705][ T5271] veth1_macvtap: entered promiscuous mode [ 1389.974987][ T5271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.987125][ T5271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.998748][T22450] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.007706][T22450] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.017412][T22450] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.026429][T13495] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0