last executing test programs: 3m34.32054055s ago: executing program 1 (id=1178): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4023, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x0, 0x9, 0x4, 0x6, 0x800, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x57e, &(0x7f0000000300)={0x0, 0x375, 0x10, 0x0, 0x2c4}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x4044) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x104}, 0x204, 0x6, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xc000) fallocate(r0, 0x0, 0x0, 0x8800000) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) 3m33.744751413s ago: executing program 1 (id=1187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000000000800d0000000500000000400000", @ANYRES32, @ANYBLOB="050000f8ffffffffffffff000000000000000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="02000000040000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, &(0x7f0000000240)="91ade3834d01fe2bce3d01291a1bd99e75cd9d9799229ed5dc74f249e62475e304e4bab86d38b3870a789abcaa5ce932b9cf76d5b819fef87f5c4dca3741cbc01d7434316d1745005b86e2dbe732205bc825a2a570954a2ef28438af8e8c41eeef3c79facaed1ff1e7a5b6efbbdae5f6c01be896850ec0afcbcd6316e6ce835c7be9847fc4feced7cbf9a89f1c61d00b6008844b9b081717c3db87e5ab09bd085e45789a82692c7dc811a2f823e877c225eed1d9c89a8965e0d62e2f862a1e26732f44957e4941e180f01118843855411849c1c5a18ee2d3c9c70613a05ebaae5a7181b71e70878a06cfbafbfda854106602", &(0x7f0000000340)=""/190}, 0x20) r6 = syz_open_dev$hiddev(&(0x7f0000000140), 0x19, 0x0) ioctl$HIDIOCGREPORT(r6, 0x400c4807, &(0x7f00000005c0)={0x2, 0x3, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) write$cgroup_pid(r7, &(0x7f0000000200), 0x12) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r8 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x490, 0x0, 0x0, 0x5, 0x2000, 0x101}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xbd}, 'port1\x00', 0xe6, 0x61cfb, 0x0, 0x8000008, 0x3, 0x32cbe4cd, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, &(0x7f00000001c0)={0x800100, 0x101, 0x6, 0xe1d9, 0x3}) dup3(r8, r9, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01000000ef01"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0xffa1, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 3m32.346419975s ago: executing program 1 (id=1198): setns(0xc9, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xefffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000020100)={0x4, 0x7, &(0x7f00000201c0)=ANY=[@ANYBLOB="79118300000000005501020000000000b70000000000000095000000000000008500000060000000b70000000000000095"], &(0x7f0000020200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m32.216314605s ago: executing program 1 (id=1203): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa35, 0x0, 0x100}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb8, 0x40000, 0xfffffffc, 0x1c5}) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r5, 0x1, &(0x7f00000001c0)={&(0x7f0000000280)="c9452217dd3b916dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841ef36b4c63", 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) mkdirat(r6, &(0x7f0000000000)='./tracing\x00', 0x0) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000300)={0x3, 0x0, 0xd532, 0xffffffffffffffff}) getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x1, 0x0) open(&(0x7f0000000040)='./tracing/trace_clock\x00', 0x4001, 0x180) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000140)) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m32.06402186s ago: executing program 1 (id=1207): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0xff96, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, 0x0, &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r5, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x3a, 0x0, 0x0) pwrite64(r0, &(0x7f0000000080)='\x00', 0x1, 0x8) truncate(&(0x7f0000000100)='./file1\x00', 0x5) 3m31.713352831s ago: executing program 1 (id=1212): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020028bd7000ffdbdf2503000000050003007000000005000200070000000500050002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x3001c800}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0xaa8, 0xaa8, 0xaa8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {}, 0x87, 0x0, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x800007}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xd6, 0x9, 0x79, 0x8, 0x6241, 0xed, "6f4bd83a67846e548056c9841a6ee55c671b9cc7842538275609f70396dd708d36db6e2974d3f733c00b3ded7e99d074b43c6a3e91716b6ccbf2e6debd354a45957fba258b30362d369f82313842bd76c1dec2dd8ee27e236d59c78a316ced7a60738960d3c2bb666a889734290ba89dfd91b1e042a2f5b856f93cbec24c78072d1cfd636c1604c7f978a6aa8c77a7adf11c2d24fe2e5afa2ab4dd7c2406d438c1fd263d596687f735d8faca63be70029d62b7bb674120a2ef96b0f72d6b25c29fee0d58880c309f4c6f463ff27e2126fb15f29d9159"}}, 0x1ee) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="49d1abfdd4d1d7d9fd91317a007437119cdc5c9fd38a4ef4a74ea3fadd179a1e1a2fdabc76c7f4d9f7a6fae57650c80400000000000000d3eda7ebe920008aa36d58ae3030580b4a421a973d791da927de2225c43974073a1865ef4c7b353b3e3ee9dd00272b4702a1d667d00d908e"], 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 3m31.712936741s ago: executing program 32 (id=1212): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020028bd7000ffdbdf2503000000050003007000000005000200070000000500050002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x3001c800}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0xaa8, 0xaa8, 0xaa8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {}, 0x87, 0x0, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x800007}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xd6, 0x9, 0x79, 0x8, 0x6241, 0xed, "6f4bd83a67846e548056c9841a6ee55c671b9cc7842538275609f70396dd708d36db6e2974d3f733c00b3ded7e99d074b43c6a3e91716b6ccbf2e6debd354a45957fba258b30362d369f82313842bd76c1dec2dd8ee27e236d59c78a316ced7a60738960d3c2bb666a889734290ba89dfd91b1e042a2f5b856f93cbec24c78072d1cfd636c1604c7f978a6aa8c77a7adf11c2d24fe2e5afa2ab4dd7c2406d438c1fd263d596687f735d8faca63be70029d62b7bb674120a2ef96b0f72d6b25c29fee0d58880c309f4c6f463ff27e2126fb15f29d9159"}}, 0x1ee) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="49d1abfdd4d1d7d9fd91317a007437119cdc5c9fd38a4ef4a74ea3fadd179a1e1a2fdabc76c7f4d9f7a6fae57650c80400000000000000d3eda7ebe920008aa36d58ae3030580b4a421a973d791da927de2225c43974073a1865ef4c7b353b3e3ee9dd00272b4702a1d667d00d908e"], 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 2m13.549329559s ago: executing program 3 (id=1761): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='0x8100', 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x9}, 0x959, 0x0, 0x7, 0x0, 0x0, 0xffffeffe, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000080), &(0x7f0000000440)='system_u:object_r:getty_var_run_t:s0\x00', 0x25, 0x5) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000380), 0xc, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x24, 0x1e, 0x4, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x8}, {0x6, 0x1}, {0xffe0, 0x9}}}, 0x24}}, 0x44800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) 2m13.496530581s ago: executing program 3 (id=1762): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000001140)="$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") unshare(0x28000600) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x10000, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0xc}, 0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x161d43, 0x1a) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000000119078ac141400ac14ca7823c00000009c90780100000000000000f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d5043edd2a8cc8c41345f8feb1a7a8e23043b8a46111ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea41d7df5993a6bdcd7a1"], 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x4) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r5 = accept4$unix(r3, 0x0, 0x0, 0x800) recvfrom$unix(r5, &(0x7f0000000240)=""/229, 0x40000, 0x40010010, 0x0, 0x0) 2m13.162141468s ago: executing program 3 (id=1764): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xb, 0x14a}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 2m12.998762676s ago: executing program 3 (id=1766): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000001000130700000000fcdbdf256401010100000000000000000000000020010000000000000000000000000002000400004e2100030a0000a021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d6320000000a010100000000000000000000000000000000000000000039e800000000000000000000000000000d000000004fee2400000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000060000000000000000000000000b0000feffffffffffffff0000000005000000000000002cbd7000ff340000020000007000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0xaeb, 0x2, {{0x21, 0x4, 0x0, 0x3, 0x84, 0x68, 0x0, 0xbf, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, {[@noop, @noop, @cipso={0x86, 0x29, 0x1, [{0x5, 0xa, "77c095fe9b068c89"}, {0x2, 0xc, "701f27b44cd5d0815aa2"}, {0x0, 0x4, "b079"}, {0x7, 0x9, "c4c8c28de0a919"}]}, @timestamp_prespec={0x44, 0x44, 0x1b, 0x3, 0x6, [{@broadcast, 0xa}, {@local, 0x36}, {@multicast2, 0x1}, {@broadcast, 0x8139e26b}, {@broadcast, 0x7}, {@empty, 0x6}, {@local, 0x9}, {@private=0xa010100, 0x7}]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000300)=@req={0x9, 0xfffffffd, 0x5, 0x2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./dev\x00', 0x0, &(0x7f0000000240), 0xfe, 0x3d0, &(0x7f00000006c0)="$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") r6 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000e00)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r6, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r8}]) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002940)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r5, {0x0, 0x2281965a7a17aedf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0xffff, 0x3, 0x2, 0xb9c}, {0xfa, 0x0, 0x0, 0x4, 0x2, 0x87e}, 0x80, 0xfffff001, 0xf3f}}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5a90d3d52efb08c}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={&(0x7f0000000800), 0xc, 0x0}, 0x0) 2m11.838983643s ago: executing program 3 (id=1778): r0 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x2000000, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/224, 0xe0, 0x1}, {}, 0x0, 0x1000}, 0x1) 2m11.395477584s ago: executing program 3 (id=1783): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000001600)={'syz', 0x0}, 0x0, 0xfffff, 0xfffffffffffffff9) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) close(0x3) write(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2m11.186696793s ago: executing program 33 (id=1783): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000001600)={'syz', 0x0}, 0x0, 0xfffff, 0xfffffffffffffff9) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) close(0x3) write(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 58.182951722s ago: executing program 4 (id=2187): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6020400) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0xd4d}}, {@grpquota}]}, 0x1, 0x500, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0xfffffffffffffffe, 0x2, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000019000100000000000000000080209000090048002004", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x0, @private1, 0x6}}}, 0x84) socket$packet(0x11, 0x2, 0x300) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000480)={0x68000005}) socket$packet(0x11, 0x3, 0x300) 57.395538764s ago: executing program 4 (id=2196): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = timerfd_create(0x8, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0xffc, 0x10ffff, 0xffffff88}) rename(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000180)=0x28) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000400)={0x42, 0x8000003, 0x3}, 0x10) bind$tipc(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x84, 0x16, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9e4ed24781755637}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000080) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x52b0, 0x2, 0x9, 0x4}}) r7 = getpid() r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x5, 0x20200) ioctl$USBDEVFS_GETDRIVER(r8, 0x41045508, &(0x7f00000006c0)={0x4, "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"}) sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 57.287051439s ago: executing program 4 (id=2198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x20004000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r3, 0x25, 0x8, @void}, 0x10) 56.903839147s ago: executing program 4 (id=2204): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000009c0), 0x1, 0x567, &(0x7f0000001000)="$eJzs3UGPG1cdAPD/zK533TTpJtADVEACBAKqYmedNqp6abmAUFWpouKEULrsuqsldhyyuyW7RGL7GUACiRN8AsQBiQNSTxy4cUTiAIhyQCoQgbJIHIxmPOt1d21qYq9N1r+fNJl582b8f8/OzHt+9voFMLMuRcReRCxExBsRsVTsT4olXu4s2XEPH9xf3X9wfzWJdvv1vyV5frYves6Jyz+99/UiXY6Ir3wp4hvJ8bibO7u3VhqN+t0iXd1q3qlu7uxe3WiurNfX67drtRvLN669cP352tjqerH5s/e+uPHKV3/5i4+/+5u9z38nK9bZIq+3HuPUqXqpGyczHxGvnESwKZgr1gtTLgePJo2ID0XEp/Lrfynm8v+dAMBp1m4vRXupNw0AnHZpPgaWpJWISNOiE1CJeDIino69c50dre3ba52xsvNRSt/caNSvXVj83bfyvFKSpZfzvDw/T9eOpK9HxIWI+P7iE3m6stpqrE2hvwMAdNr5bvsfEf9cTNNKZahT+3yqBwA8NsrTLgAAMHHafwCYPdp/AJg9Q7T/xYf9eydeFgBgMrz/B4DZo/0HgNmj/QeAmfLaq69mS3u/+P3rtbd2tm+13rq6Vt+8VWlur1ZWW3fvVNZbrfX8N3uaH/R4jVbrzvJzsX2vulXf3Kpu7uzebLa2b2/dzH/X+2a9NJFaAQD/zYWL7/w2iYi9F5/Il+iZy0FbDadbOsajgMfL3Cgn6yDAY81sXzC7SsM04nkn4dcTKA0wDX1/zLvcd/P9fvg/BPE9I/i/cuWjw4//m+MZThcj+zC7Hm38/6WxlwOYvEce///DeMsBTF67nRyd83+hm9XrtUnOSgwAnKQRvsLX/u64OiHAVH3QZN5j+fwfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATpmzEfHNSNJKPhd4mv2bVioR5yLifJSSNzca9WsR8VRcjIjSYpZennahAYARpX9Jivm/rixdPns0dyH512K+johv/+j1H9xb2dq6u5zt/3t3/+LB9GG1w/NGmFcQABjen4Y5KG+/a8W65438wwf3Vw+WEyzjMe99oTv56Or+g/v50smZj3a73Y4o532JM/9IYr44pxwRz0TE3Bji770dER/pV/8kHxs5X8x82hs/itjnJho/fV/8NM/rrLOn78NjKAvMmney+8/L/a6/NC7l6/7Xfzm/Q40uv/+VIw7uffs98eeLSHN94mfX/KVhYzz3qy8f29le6uS9HfHMfL/4STd+MiD+5SHj//5jn/jeSwPy2j+OuBL94/fGqm4171Q3d3avbjRX1uvr9du12o3lG9deuP58rZqPUVcPRqqP++uLzz41qGxZ/c8MiN955Z88Uv+F7rmfGbL+P/n3G1/75GFy8Wj8z326/+v/dL7u//xnbeJnh4y/cubnA6fvzuKvDaj/wetfHvD6Pztk/Hf/vLs25KEAwARs7uzeWmk06ndH2sjehY7jcY5tZEUc7uCD7uJoQf8Y+cbh05JEEuOuV9afGubg0kk9qye+Md/tK47jAec6G2eKh5xwddIx1WK0jThfbDycVNDp3I+AyTm86KddEgAAAAAAAAAAAAAAYJBJ/A3TtOsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fWfAAAA//+u/74f") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4b4, &(0x7f0000001a40)="$eJzs3cFvFG0ZAPBnpi3t16/f16Ic1KggomgIu+0CDeGEF40hJEbiyQPUdmma7nab7hZp5VD+BxNJPOmf4MHEgwkn7970Zky4mKASDTXxsGZmp6UtXVr5ym7S/f2SNzPvvMs+78tm5p0+284bwMC6EBFbEXEmIh5ExGRxPClK3O6U7HWvXz2Z3371ZD6JdvveP5K8PTsWe/5N5uPiPcci4offi/hJ8nbc5sbm8lytVl0r6uVWfbXc3Ni8ulSfW6wuVlcqldmZ2emb125UTmys5+u/efndpTs/+v3vvvLij1vf/lnWrYmibe84TlJn6CO7cTLDEXHnQwTrg6FiPGf63RHeSxoRn4uIi/n5PxlD+acJAJxm7fZktCf31gGA0y7Nc2BJWipyARORpqVSJ4d3LsbTWqPZuvKwsb6y0MmVTcVI+nCpVp0ucoVTMZJk9Zl8/029cqB+LSLORsTPRz/K66X5Rm2hnzc+ADDAPj4w//97tDP/AwCn3Fi/OwAA9Jz5HwAGj/kfAAaP+R8ABo/5HwAGj/kfAAZPl/n/+kivOwIA9MIP7t7NSnu7eP71wqON9eXGo6sL1eZyqb4+X5pvrK2WFhuNxfyZPfWj3q/WaKzOXI/1x+VWtdkqNzc279cb6yut+/lzve9X3VIAQP+dPf/8z0lEbN36KC+xZy0HczWcbmm/OwD0zVC/OwD0jdW+YHD5GR84ZInefbr+ivCzk+8L0BuXvyj/D4NK/h8Gl/w/DC75fxhc7XZizX8AGDBy/IDv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/N5GXJC0Va4FPRJqWShGfRMRUjCQPl2rV6Yj4NCL+NDoymtVn+t1pAOAzSv+WFOt/XZ68NHGw9Uzyn9F8GxE//eW9Xzyea7XWZrLj/9w93npWHK/0o/8AwFF25umdeXzH61dP5ndKL/vz8judxUWzuNtF6bQMx3C+HYuRiBj/V1LUO7L7laETiL/1NCK+cNj4kzw3MlWsfHowfhb7k57GT/fFT/O2zjb7v/j8CfQFBs3z7Ppz+7DzL40L+bY4//4a+86/sdhff18717/tt65/6e71b6jL9e/CcWNc/8P3u7Y9jfjS8GHxk934SZf4l44Z/y9f/urFbm3tX0VcjsPj741VbtVXy82NzatL9bnF6mJ1pVKZnZmdvnntRqWc56jLO5nqt/391pVP3zX+8S7xx44Y/zeOOf5f//fBj7/2jvjf+vrhn/+5d8TP5sRvHjP+3Phvuy7fncVf6DL+oz7/K8eM/+KYrwMAeqO5sbk8V6tV105wJ7o3ZbeyJxrLjh07H2Kn+HIPOLXenPT97gkAAAAAAAAAAAAAANBNL/6cqN9jBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PT6XwAAAP//BXfVng==") timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x53, 0x7f, 0xe1fe, {0x400, 0xff}, {0xcff, 0x6}, @rumble={0x535, 0xa}}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10, &(0x7f0000000440)={[{@orlov}, {@grpquota}], [{@subj_user={'subj_user', 0x3d, ']'}}]}, 0x1, 0x480, &(0x7f0000001580)="$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") mkdir(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$unix(0x1, 0x5, 0x0) 56.256157486s ago: executing program 4 (id=2207): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0xeab0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) mount(&(0x7f0000000040)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x10) setrlimit(0xc, &(0x7f0000000040)={0x4, 0x7}) sendmsg$nl_xfrm(r1, 0x0, 0x2c000010) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) splice(r5, 0x0, r4, 0x0, 0x8000000010000807, 0x0) prlimit64(r3, 0x9, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)) preadv2(r7, &(0x7f0000000940)=[{&(0x7f0000000080)=""/222, 0x99}, {&(0x7f0000000880)=""/138, 0x8a}], 0x2, 0x8, 0x7, 0x0) 55.811334179s ago: executing program 4 (id=2216): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000001140)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") unshare(0x28000600) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x10000, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000000119078ac141400ac14ca7823c00000009c90780100000000000000f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d5043edd2a8cc8c41345f8feb1a7a8e23043b8a46111ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea41d7df5993a6bdcd7a1"], 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x4) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r5 = accept4$unix(r3, 0x0, 0x0, 0x800) recvfrom$unix(r5, &(0x7f0000000240)=""/229, 0x40000, 0x40010010, 0x0, 0x0) 55.811207509s ago: executing program 34 (id=2216): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000001140)="$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") unshare(0x28000600) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x10000, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000000119078ac141400ac14ca7823c00000009c90780100000000000000f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d5043edd2a8cc8c41345f8feb1a7a8e23043b8a46111ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea41d7df5993a6bdcd7a1"], 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x4) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r5 = accept4$unix(r3, 0x0, 0x0, 0x800) recvfrom$unix(r5, &(0x7f0000000240)=""/229, 0x40000, 0x40010010, 0x0, 0x0) 51.458370551s ago: executing program 6 (id=2254): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000540)=0x8) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0xeab0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x3, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x3, 0xffff}, @window={0x3, 0xffff, 0x5}], 0x2) mount(&(0x7f0000000040)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$nl_xfrm(r2, 0x0, 0x2c000010) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x8000000010000807, 0x0) prlimit64(0x0, 0x9, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r5, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)) preadv2(r6, &(0x7f0000000940)=[{&(0x7f0000000080)=""/222, 0x99}, {&(0x7f0000000880)=""/138, 0x8a}], 0x2, 0x8, 0x7, 0x0) 51.103085313s ago: executing program 6 (id=2258): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0xeab0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) mount(&(0x7f0000000040)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x10) setrlimit(0xc, &(0x7f0000000040)={0x4, 0x7}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) splice(r4, 0x0, r3, 0x0, 0x8000000010000807, 0x0) prlimit64(r2, 0x9, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r5, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)) preadv2(r6, &(0x7f0000000940)=[{&(0x7f0000000080)=""/222, 0x99}, {&(0x7f0000000880)=""/138, 0x8a}], 0x2, 0x8, 0x7, 0x0) 50.753656813s ago: executing program 6 (id=2263): socket$inet6(0x10, 0x3, 0x4) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x80000000, 0x101000) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000005c0)={0x2, &(0x7f0000000500)="e6209376283833f3866f897a24e4aa1caa94c64760435bd10116f9b2b2f554b004112ec30562ac9b72592263562e936d88807b3512f7c6f146c0ef63f342e685e7172286c8afc4c10128dcaf9787c66ef5551031d41f8c7f5023df89cf938105636fa7a548ffad5e24dc3eafa549a12f8e41730d5964d13228d71b2bb616bda86c6032060e328662b3b477f6bdcee8ad5daeb027d58d70a3ac8025d34bbe39"}) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x3f, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x71) ftruncate(r2, 0x200002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000640)={0x2, 0x40, 0x0, 'queue0\x00', 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x12, 0x0, &(0x7f0000000380)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6e4e9a1d78ad62ceef188430800000000000000", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x7fffffff, 0x40400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0x4, 0x1], 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r5, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000000c0)=""/30}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) 50.535660234s ago: executing program 6 (id=2264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) pwrite64(r0, &(0x7f0000000100)="84fc4a", 0x3, 0x84fed1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x35) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) madvise(&(0x7f000036c000/0x5000)=nil, 0x5000, 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x40) write(r2, &(0x7f0000000340)='3', 0x1) 49.611049386s ago: executing program 6 (id=2270): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x8690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r4, 0x10004, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020605000000f5ff00000000000000000c00078005001500000000000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e657400000000"], 0x54}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fsmount(r0, 0x1, 0xc) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000000200000f", 0xfe60) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) fchdir(r6) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) r7 = open(&(0x7f0000000200)='.\x00', 0x0, 0x244) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINK={0x8, 0x5, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex=r9, 0x37, 0x1, 0x6393, &(0x7f0000000480), 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)}, 0x40) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc0049364, 0x0) 49.173046457s ago: executing program 6 (id=2276): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2018000, &(0x7f0000000280)={[{@data_err_abort}, {@noquota}, {@bsdgroups}, {@jqfmt_vfsold}, {@bsdgroups}, {@errors_continue}, {@lazytime}, {}, {}, {@jqfmt_vfsv1}, {@grpquota}, {@jqfmt_vfsv0}]}, 0x3, 0x46f, &(0x7f0000000e00)="$eJzs3M+PE1UcAPDvtN3F5deuBH/wQ11FI/HHLrsgcvCi0cSDJiZ6wOO6uxCksIZdEyFE0Rg8GhLvxqOJf4EJiV6MmpiYeNW7ISGGC+ipZtoZti1tKdBtYfv5JAPvzbz2vW9n3vTNe5QAhtZk+kcSsTki/oyI8Vq2scBk7a9rV87O/3vl7HwSlcrb/yTVclevnJ3Pi+av25RnShGFz5PY1aLe5dNnjs+Vy4unsvz0yokPppdPn3n+2Im5o4tHF0/OHjp0YP/MiwdnX+hJnGlcV3d+vLR7x+vvXnhz/vCF9375Lsnjb4qjRyY7HXyqUulxdYO1pS6dlBqPVTL9bhM3V6x10xip9v/xKMbqyRuP1z4baOOANZXelx9sf/hcdusuVpoldTd24B6V3NiNSwNpCNBn+Rd9+vybb30aetwVLr9cewBK476WbbUjpShkZUaanm97aTIiDp/77+t0i7WZhwAAaPBDOv55rtX4rxD180JbszWUiYi4PyK2RcTBiNgeEQ9EVMs+FBEP32L9zYskN45/CpduK7AupeO/l7K1rcbxXz76i4lilttSjX8kOXKsvLgv+0z2xsiGND/ToY4fX/3jy3bH6sd/6ZbWn48Fs3ZcKm1ofM3C3MrcncRc7/KnETtLreJPrq8EJBGxIyJ2tnuTrZ3rOPbMt7vbHbt5/B2UuirVUeWbiKdr5/9cNMWfSzqvT07fF+XFfdP5VXGjX38//1a7+u8o/h5Iz//Gltf/9fgnkvr12uU2b1RsX8f5v75o+0zTzfXfvHCYXv+jyTsN+z6aW1k5NRMxmrxRm5eu3z/bVG52tXwa/949rfv/tlj9JHZFRHoRPxIRj0bEY1nbH4+IJyJiT/vw4+dXnnz/NuMf7fC2PZHGv3BL5381MRrNe1onisd/+r6h0omu48/ufweqqb3Znm7ufzdp18WxiE5XMwAAAKwrhYjYHElh6nq6UJiaqv0b/u2xsVBeWl559sjShycXar8RmIiRQj7TNV43HzqTPdbn+dmm/P5s3vir4lg1PzW/VF4YdPAw5Da16f+pvzvM6QLrxO2so+0aX4OGAH3Xg3V04B6l/8Pw0v9heLXo/2ODaAfQf62+/z8ZQDuA/mvq/5b9YIh0/fx/cW3bAfSf+T8YXvo/DKXlsej8430JiZaJKJTLi/l/knMXtGfdJ37LPus+VTrAmxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAP/R8AAP//kvnnrA==") r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0xa2, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0x1, 0x5, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0xc00003a7) utime(&(0x7f0000000000)='./file0\x00', 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000000)={0x201d}) epoll_pwait(r3, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x1, &(0x7f0000000080)={[0x100000000]}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x0, &(0x7f0000000180)) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[], 0x0) r4 = socket$netlink(0x10, 0x3, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x5}}, './file1\x00'}) r6 = openat$fault_inject(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/fail_usercopy/probability\x00', 0x1, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r6, 0x8080583a, &(0x7f0000000140)={0x3, 0x4, 0x7ec, 0x5, 0xffff, 0x0, 0xfffffffffffffff0}) openat(r5, &(0x7f0000000040)='./file1\x00', 0xc042, 0x100) r7 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x20) fcntl$setlease(r7, 0x400, 0x1) fcntl$getflags(r7, 0x401) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffe4) 49.133296716s ago: executing program 35 (id=2276): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2018000, &(0x7f0000000280)={[{@data_err_abort}, {@noquota}, {@bsdgroups}, {@jqfmt_vfsold}, {@bsdgroups}, {@errors_continue}, {@lazytime}, {}, {}, {@jqfmt_vfsv1}, {@grpquota}, {@jqfmt_vfsv0}]}, 0x3, 0x46f, &(0x7f0000000e00)="$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") r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0xa2, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0x1, 0x5, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0xc00003a7) utime(&(0x7f0000000000)='./file0\x00', 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000000)={0x201d}) epoll_pwait(r3, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x1, &(0x7f0000000080)={[0x100000000]}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x0, &(0x7f0000000180)) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[], 0x0) r4 = socket$netlink(0x10, 0x3, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x5}}, './file1\x00'}) r6 = openat$fault_inject(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/fail_usercopy/probability\x00', 0x1, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r6, 0x8080583a, &(0x7f0000000140)={0x3, 0x4, 0x7ec, 0x5, 0xffff, 0x0, 0xfffffffffffffff0}) openat(r5, &(0x7f0000000040)='./file1\x00', 0xc042, 0x100) r7 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x20) fcntl$setlease(r7, 0x400, 0x1) fcntl$getflags(r7, 0x401) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffe4) 42.694375639s ago: executing program 8 (id=2277): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x992d}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x11ed7764b38cba5, 0x40004) 42.360126306s ago: executing program 8 (id=2315): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) acct(0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf93, 0x0, @perf_config_ext={0x80000000000, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x7) 41.493418556s ago: executing program 8 (id=2320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.979017934s ago: executing program 8 (id=2326): pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)={0x5c, r5, 0xf1aad47e89fb43b5, 0x1, 0x0, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x35, 0xa8, @random="47f8bf86ca8bd574be3498d6d3c5ab472be30c85b7981b75cc67c7147e8059db914f43efde621eb74d6b77a9a1485b7ff3"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf41dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x9, 0x8dd3}, 0x204, 0xf1fc, 0xa, 0x3, 0x9, 0x7, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1c25}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4094) syz_io_uring_setup(0x315b, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0x0, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008881}, 0x20002010) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r8, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf251700000074000180080003000100000008000100", @ANYRES32=r6, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x24004015}, 0x8040) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000010900"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd33bda8847acbe40605b5ee1c8f0676813afc7e9f0413567e592c7c15"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}}, 0x8000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) open(&(0x7f0000000380)='./bus\x00', 0x4ca7e, 0x10) 39.73716903s ago: executing program 8 (id=2332): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000300)='1\x00', 0x2) socket$tipc(0x1e, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) r2 = epoll_create1(0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000300)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000280)=""/102, 0x66}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) r6 = gettid() r7 = socket$inet6(0xa, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0x8, 0xd, 0x5) recvmmsg(r7, &(0x7f0000000040), 0x0, 0x101, 0x0) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffe, 0x3, 0x0, 0x1, 0x2, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,sq=0']) 39.481538879s ago: executing program 8 (id=2336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.384246731s ago: executing program 36 (id=2336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.46932007s ago: executing program 5 (id=2646): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1, 0x9, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000007c0), 0x1003, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r1, &(0x7f00000005c0), 0x0}, 0x20) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 3.672438084s ago: executing program 2 (id=2668): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@newtclass={0x2c, 0x28, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xce, 0x24}}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (fail_nth: 8) 3.184213927s ago: executing program 0 (id=2669): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_io_uring_setup(0x3bd4, &(0x7f0000000240)={0x0, 0xcc19, 0x130c8, 0x1, 0x80030d}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0x16}], 0x1) 3.182252557s ago: executing program 9 (id=2670): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407c2c2501000000000001090227", @ANYRES32=r0], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioprio_set$uid(0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'sit0\x00', @random="15c68cdc64e8"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034888a8ae000500"], 0xfdef) 3.113335493s ago: executing program 2 (id=2671): getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000e6310000000000000008a5529a04080000079cc331c2dda0d334408e0b2ded8ff8882f0e1a8de96cef5a864da311b37d36c10e28503226424a3cb457b7c94a1f6a5df2f2c6769c52cba61088a17448005f9db75742548b5a7ad8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x18, 0x0, &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)) socket$inet6(0xa, 0x1, 0x0) setuid(0xee01) socket$inet_tcp(0x2, 0x1, 0x0) 3.113047643s ago: executing program 2 (id=2672): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001780)={r1, 0x0, 0x0}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x540) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x100, r1, 0x28, {0x3, 0x4}, 0x8}, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x22, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffffff3d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,sq=0']) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) mlock(&(0x7f0000368000/0x4000)=nil, 0x4000) 3.074521922s ago: executing program 5 (id=2674): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000540)=0x8) epoll_create1(0x0) r0 = socket$inet6(0xa, 0x3, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x3, 0xffff}, @window={0x3, 0xffff, 0x5}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x10) setrlimit(0xc, &(0x7f0000000040)={0x4, 0x7}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) splice(r3, 0x0, r2, 0x0, 0x8000000010000807, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r4, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)) preadv2(r5, &(0x7f0000000940)=[{&(0x7f0000000080)=""/222, 0x99}, {&(0x7f0000000880)=""/138, 0x8a}], 0x2, 0x8, 0x7, 0x0) 2.983247923s ago: executing program 0 (id=2675): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r0, 0x1, 0x7, 0x8010004) statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=""/186) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) r3 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) syz_pidfd_open(r3, 0x0) wait4(r3, 0x0, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd29, 0x10080}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tgkill(0x0, 0x0, 0x11) 2.982819773s ago: executing program 5 (id=2676): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2c8, 0x20a, 0x278, 0x2c8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [0x0, 0xffffff00, 0x0, 0xffff00], [0xffffff00, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x59, 0xfe}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@hl={{0x28}, {0x7b969e66ce050add, 0x1c}}, @common=@unspec=@string={{0xc0}, {0x0, 0xffff, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000340)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4, 0x2, 0xfffffffe}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x118010, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7f7c0001}]}) r4 = mq_open(&(0x7f0000001100)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8av\x92\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x40, 0xcf, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000070000000e00000000004006040000000a0000000000000e040000000200000006000000000000100800000000306130000000"], &(0x7f0000000480)=""/106, 0x47, 0x6a, 0x1, 0x238, 0x10000, @value=r5}, 0x28) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x11, r6, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) mq_unlink(&(0x7f00000000c0)='eth0\x00') close(r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10cd57, 0x6, 0xffffffff, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_create(0x7, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), 0x0, 0x3c8, 0x0) 2.937152763s ago: executing program 2 (id=2678): r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(0x0, 0x0, 0x0, 0x0, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1}, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0) r2 = socket$tipc(0x1e, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0xa, 0x801, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x676, &(0x7f0000000bc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x20) open_by_handle_at(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020003000b"], 0x440) 2.442991297s ago: executing program 9 (id=2680): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000540)=0x8) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0xeab0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x3, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x3, 0xffff}, @window={0x3, 0xffff, 0x5}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0xc, &(0x7f0000000040)={0x4, 0x7}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$nl_xfrm(r2, 0x0, 0x2c000010) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x8000000010000807, 0x0) prlimit64(0x0, 0x9, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r4, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)) preadv2(r5, &(0x7f0000000940)=[{&(0x7f0000000080)=""/222, 0x99}, {&(0x7f0000000880)=""/138, 0x8a}], 0x2, 0x8, 0x7, 0x0) 2.420009092s ago: executing program 2 (id=2682): socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xbfffefffffffffff, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003) r0 = syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x42000) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000000), 0x0, r1}, 0x68) socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000180)={[{@block_validity}, {@commit={'commit', 0x3d, 0x5}}, {@dioread_nolock}, {@orlov}]}, 0x5, 0x4f3, &(0x7f00000005c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d77e) getpriority(0x1, 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000005c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000001600000000a3badd47000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x99, 0xffffffffffffffff, 0x0, 0xb, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd2d, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfffffffffffffe95}, 0x3f) socket$kcm(0x11, 0x200000000000002, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0x401, 0x200000d, 0x10, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2201000, &(0x7f0000000300)={[{@dax_always}, {@grpquota}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@oldalloc}, {@nogrpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@norecovery}]}, 0x3, 0x58c, &(0x7f0000000c40)="$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") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0xa8082, 0x0) write$binfmt_aout(r4, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x10, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r4, 0x200) 2.133240719s ago: executing program 7 (id=2684): r0 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000280)=ANY=[@ANYBLOB='map=off,check=strict,cruft,dmode=0x0000000000000002,unhide,iocharset=cp437,\x00ap=off,session=0x000000000000001c,\x00'], 0xff, 0x544, &(0x7f0000001000)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4001) close(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0xfff, 0x0, 0xcfc, 0xa1}}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 2.000415269s ago: executing program 9 (id=2685): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x4000000}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x8000, @rand_addr=0x64010100}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @local}, 0xb1, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x10001, 0x2000000}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000003c00070101000000f4dbdf25027c000004008c800c00"], 0x24}}, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x802, 0x130) r3 = dup2(r1, r2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, r3, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0xc040480) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.99777293s ago: executing program 0 (id=2686): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6020400) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0xd4d}}, {@grpquota}]}, 0x1, 0x500, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0xfffffffffffffffe, 0x2, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000019000100000000000000000080209000090048002004", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xb8, "916ab24092b46b6297ccfdeaae5aba8e6278387d44aa7c9b2078797bf9d8be31961a80b334255c5be760969cb6ebb4dad1249877da5c15ad8dc5873adb91e026f66848f93605893ef2ba8f7c343f61811cf0ca9fcd61f770e83e4d73427c402358a86b1cfb3bba791ad74e78189741e87698bc8a55582b09164248aef567346462b9d7de7ece9a7e01e2629b24ba84934a76b5205531658143abdee4c5d40b33bf4ba5718e50cbcdbac2b30213518d3d46bfa6aa6b303ff0"}, &(0x7f0000000540)=0xc0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000580)={r2, @in6={{0xa, 0x4e20, 0x0, @private1, 0x6}}}, 0x84) socket$packet(0x11, 0x2, 0x300) r3 = epoll_create1(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000480)={0x68000005}) socket$packet(0x11, 0x3, 0x300) 1.785448629s ago: executing program 9 (id=2687): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000540)=0x8) epoll_create1(0x0) r0 = socket$inet6(0xa, 0x3, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x3, 0xffff}, @window={0x3, 0xffff, 0x5}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x10) setrlimit(0xc, &(0x7f0000000040)={0x4, 0x7}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) splice(r3, 0x0, r2, 0x0, 0x8000000010000807, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r4, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)) preadv2(r5, &(0x7f0000000940)=[{&(0x7f0000000080)=""/222, 0x99}, {&(0x7f0000000880)=""/138, 0x8a}], 0x2, 0x8, 0x7, 0x0) 1.568245199s ago: executing program 9 (id=2688): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x8) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) syz_open_dev$loop(0x0, 0x2, 0x426041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xa) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.228203607s ago: executing program 7 (id=2689): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, 0x0}, 0x108) 1.188065036s ago: executing program 7 (id=2690): socket$inet6(0x10, 0x3, 0x4) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x80000000, 0x101000) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000005c0)={0x2, &(0x7f0000000500)="e6209376283833f3866f897a24e4aa1caa94c64760435bd10116f9b2b2f554b004112ec30562ac9b72592263562e936d88807b3512f7c6f146c0ef63f342e685e7172286c8afc4c10128dcaf9787c66ef5551031d41f8c7f5023df89cf938105636fa7a548ffad5e24dc3eafa549a12f8e41730d5964d13228d71b2bb616bda86c6032060e328662b3b477f6bdcee8ad5daeb027d58d70a3ac8025d34bbe39"}) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x3f, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x71) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000640)={0x2, 0x40, 0x0, 'queue0\x00', 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x12, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6e4e9a1d78ad62ceef188430800000000000000", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x7fffffff, 0x40400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0x4, 0x1], 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r4, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r6, &(0x7f0000000340), &(0x7f00000000c0)=""/30}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) 1.072354783s ago: executing program 7 (id=2691): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x200, 0x80000000, 0x0, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6020400) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0xd4d}}, {@grpquota}]}, 0x1, 0x500, &(0x7f0000000a40)="$eJzs3c9vVF0ZAOD3Tju0X7+BFmWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMX8+XeubSl7dAB2g50nie53HvOvfQ9Z4Zzzr2HzpwAetaZiFiLiGMRcTcihvP8JN/iemtLr3v54tH0+otH00k0m7f/lWTn07zY8ndSn+Y/czAifvT9iJ8mO+M2Vlbnp6rVymKeHl2qLYw2VlYvzhXynInJ8cmxq5euTHRYk/49rzhd+93z783d/PEffv+VZ39e+/bP02KVfnE8O7e1HvupVfVilLaV9OZBBOuS/vzfzzso7ndZeDtpa/tcRJzN2v9w9HXQjgCAj1uzORzN4a1pAOCoS5//S5EUyvlcQCkKhXK5NYd3KoYK1Xpj6cJwffn+TGRzWCNRLNybq1bG8rnCkSgmaXo8O95MT2xLX4qIkxHxy4FPsnR5ul6d6eaNDwD0sE+3jf//HWiN/wDAETfY7QIAAIfO+A8Avcf4DwC95y3Gf58OBIAjwvM/APQe4z8A9J49x//Hh1MOAOBQ/PDWrXRrrufffz3zYGX5O6UHF2cqjflybXm6PF1fXCjP1uuz1Up5utnc6+dV6/WF8csbycbK6p1affn+0p252tRs5U7FFz4DQPedPP30r0lErF37JNtiy1oOxmo42grdLgDQNX3dLgDQNT7PA72rg2d80wBwxO2yRO9r2v6K0JN3X/wV6K7zXzT/D73K/D/0rneb///uvpcDOHzm/6F3NZuJNf8BoMeY4wfe6///AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEeVsi0plLO1wNfSPwvlcsTxiBiJYnJvrloZi4gTEfGXgeJAmh7vdqEBgPdU+EeSr/91fvhcafvZY8n/BrJ9RPzs17d/9XBqaWlxPM3/90b+0pM8f+JYNyoAAGx1fWdWa5zO91se5F++eDT9ajvMIj6/0VpcNI27nm+tM/3Rn+0HoxgRQ/9J8nRLer/Stw/x1x5HxBc26/9wS4TSYMRIvvLp9vhp7OMHEH/z9U+yuZnN+IXX4heyc+m+mL0Wn9+HskCveXqj1U/mbS9tYnn7K8SZbL97+x/Meqj396r/W9/R/xU2+r++HfGTrM2f2Ui/uSTPL//xBzsym8Otc48jvtS/W/xkI37Spv8912Ed//blr55td675m4jzsXv8llrWzY4u1RZGGyurF+dqU7OV2cr9iYnJ8cmxq5euTIwORLUyNprNVP9ptxj/vHbhRLv4af2H2sQf3KP+3+iw/r/9/92ffO0N8b/19d3f/1NviJ+Oid/sMP7U0PU2y3e3Vv+faVP/vd7/Cx3Gf/b31ZkOLwUADkFjZXV+qlqtLO5xkN5r7nWNg4/zINYiPoBi9OhBeg/+ARRjx0G3eybgoG02+m6XBAAAAAAAAAAAAAAAaKexsjo/EAf7caJu1xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICj67MAAAD//y2oyxU=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0xfffffffffffffffe, 0x2, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000019000100000000000000000080209000090048002004", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x90) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xb8, "916ab24092b46b6297ccfdeaae5aba8e6278387d44aa7c9b2078797bf9d8be31961a80b334255c5be760969cb6ebb4dad1249877da5c15ad8dc5873adb91e026f66848f93605893ef2ba8f7c343f61811cf0ca9fcd61f770e83e4d73427c402358a86b1cfb3bba791ad74e78189741e87698bc8a55582b09164248aef567346462b9d7de7ece9a7e01e2629b24ba84934a76b5205531658143abdee4c5d40b33bf4ba5718e50cbcdbac2b30213518d3d46bfa6aa6b303ff0"}, &(0x7f0000000540)=0xc0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000580)={r1, @in6={{0xa, 0x4e20, 0x0, @private1, 0x6}}}, 0x84) socket$packet(0x11, 0x2, 0x300) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000480)={0x68000005}) socket$packet(0x11, 0x3, 0x300) 952.34268ms ago: executing program 5 (id=2692): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040844) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000003c0)={'nat\x00', 0x2, [{0x11e}, {}]}, 0x48) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000800) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 823.37127ms ago: executing program 0 (id=2693): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106, 0x8}}, 0x20) writev(r0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xddc0, &(0x7f0000000280)=ANY=[], 0x0) 704.625048ms ago: executing program 5 (id=2694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@newtclass={0x40, 0x28, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xce, 0x24}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5}}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x5, 0x4, 0x2, 0x8, 0x0, 0x4, 0x22800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xfffffffffffffff9, 0x5}, 0x8, 0x7, 0x3a1c00, 0x4, 0x9, 0x9, 0x4, 0x0, 0x4, 0x0, 0x100000001}, 0xffffffffffffffff, 0xe, r3, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, r4, 0x9) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000000080)=0x20, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) getsockopt$bt_hci(r6, 0x6, 0x22, &(0x7f0000003580)=""/4117, &(0x7f00000000c0)=0xff8f) 673.714675ms ago: executing program 0 (id=2695): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000e6310000000000000008a5529a04080000079cc331c2dda0d334408e0b2ded8ff8882f0e1a8de96cef5a864da311b37d36c10e28503226424a3cb457b7c94a1f6a5df2f2c6769c52cba61088a17448005f9db75742548b5a7ad8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x18, 0x0, &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)) socket$inet6(0xa, 0x1, 0x0) setuid(0xee01) socket$inet_tcp(0x2, 0x1, 0x0) 628.165935ms ago: executing program 9 (id=2696): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f0000002480)="$eJzs3M+LG2UYB/Cn29bWrftDrdUWpC960cvQ3YMXBVlkC9KA0naFVhCm7kRDxiRkwkJEjJ68+neIR2+CeNNLL/4N3vbisQdxxMTapsRDadkp4fO55CHv+w3PS0LgHeadw7e+/azbrrJ2PoqVY2/HyiAi3UmRYiXu+ipef/OXX1++duPmlZ1Wa/dqSpd3rm+9kVJav/jTh198/8rPozMf/LD+46m4vfnR4R/bv0/O3T5/+Nf1TztV6lSp1x+lPN3q90f5rbJI+52qm6X0flnkVZE6vaoYzo23y/5gME55b39tdTAsqirlvXHqFuM06qfRcJzyT/JOL2VZltZWg0ex992duq4j6vpkPBV1XddPx2qciWdiLdZjIzbj2Xguno+z8UKcixfjpTg/ndV03wAAAAAAAAAAAAAAAAAAALBcHun8/8WGmwcAAAAAAAAAAAAAAAAAAIAlce3GzSs7rdbu1ZROR5TfHOwd7M1eZ+M77ehEGUVcio34M6an/2dm9eV3W7uX0tRmfF1O/s1PDvaOz+e3po8TWJjfmuXTfP5UrN6f346NOLs4v70wfzpee/W+fBYb8dvH0Y8y9uOf7L38l1spvfNe64H8hek8AAAAWAZZ+s/C/XuW/d/4LP8Q1wce2F+fiAsnml07EdX4825elsWw8eJuR7N3JhHxhDS2xMXJJ6ONx1scn/shNd/PERfHIuJxfE5z/0kcnXtfetOdAAAAAAAAAAAA8DCO4rbEptcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICvAgAA//8Dzctd") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r0, 0x1, 0x7, 0x8010004) statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=""/186) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) r3 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) syz_pidfd_open(r3, 0x0) wait4(r3, 0x0, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd29, 0x10080}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tgkill(0x0, 0x0, 0x11) 569.236308ms ago: executing program 0 (id=2697): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x8) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) syz_open_dev$loop(0x0, 0x2, 0x426041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = timerfd_create(0x9, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000300)={0x8}, 0x0, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) timerfd_gettime(r4, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xa) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') truncate(&(0x7f0000000000)='./dev/sda1\x00', 0x7fff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 61.946296ms ago: executing program 7 (id=2698): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000540)=0x8) epoll_create1(0x0) r0 = socket$inet6(0xa, 0x3, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x3, 0xffff}, @window={0x3, 0xffff, 0x5}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x10) setrlimit(0xc, &(0x7f0000000040)={0x4, 0x7}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) splice(r3, 0x0, r2, 0x0, 0x8000000010000807, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r4, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)) preadv2(r5, &(0x7f0000000940)=[{&(0x7f0000000080)=""/222, 0x99}, {&(0x7f0000000880)=""/138, 0x8a}], 0x2, 0x8, 0x7, 0x0) 60.148196ms ago: executing program 2 (id=2699): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x100, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) socket(0x10, 0x803, 0x0) eventfd2(0x9, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = dup(r2) sendmmsg$inet(r3, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x100}}, 0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 5.910788ms ago: executing program 5 (id=2700): r0 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000280)=ANY=[@ANYBLOB='map=off,check=strict,cruft,dmode=0x0000000000000002,unhide,iocharset=cp437,\x00ap=off,session=0x000000000000001c,\x00'], 0xff, 0x544, &(0x7f0000001000)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4001) close(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0xfff, 0x0, 0xcfc, 0xa1}}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 0s ago: executing program 7 (id=2701): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r0, 0x1, 0x7, 0x8010004) statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=""/186) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) r3 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) syz_pidfd_open(r3, 0x0) wait4(r3, 0x0, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd29, 0x10080}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x11, r5, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) tgkill(0x0, 0x0, 0x11) kernel console output (not intermixed with test programs): .932200][T11275] ? __pfx_mce_cpu_restart+0x10/0x10 [ 309.932325][T11275] ? __pfx_mce_cpu_restart+0x10/0x10 [ 309.932480][T11275] on_each_cpu_cond_mask+0x35/0x50 [ 309.932563][T11275] set_bank+0x20d/0x290 [ 309.932631][T11275] ? __pfx_set_bank+0x10/0x10 [ 309.932756][T11275] dev_attr_store+0x4a/0x70 [ 309.932870][T11275] ? __pfx_dev_attr_store+0x10/0x10 [ 309.932977][T11275] sysfs_kf_write+0xfe/0x120 [ 309.933180][T11275] ? __pfx_sysfs_kf_write+0x10/0x10 [ 309.933347][T11275] kernfs_fop_write_iter+0x1d2/0x2e0 [ 309.933442][T11275] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 309.933604][T11275] vfs_write+0x57f/0x9a0 [ 309.933778][T11275] ksys_write+0xdc/0x1a0 [ 309.933884][T11275] __x64_sys_write+0x40/0x50 [ 309.934028][T11275] x64_sys_call+0x154e/0x2550 [ 309.934126][T11275] do_syscall_64+0x112/0x360 [ 309.934252][T11275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.934367][T11275] RIP: 0033:0x7f097325e159 [ 309.934423][T11275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.934495][T11275] RSP: 002b:00007f0971c96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 309.934596][T11275] RAX: ffffffffffffffda RBX: 00007f09734e6090 RCX: 00007f097325e159 [ 309.934667][T11275] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000006 [ 309.934725][T11275] RBP: 00007f09732f506b R08: 0000000000000000 R09: 0000000000000000 [ 309.934791][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.934855][T11275] R13: 00007f09734e6128 R14: 00007f09734e6090 R15: 00007fff7a2c54c8 [ 309.934950][T11275] [ 309.942521][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.017401][T11280] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.044360][T11280] __nla_validate_parse: 5 callbacks suppressed [ 310.044414][T11280] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2266'. [ 310.090922][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.164072][T11280] batadv_slave_1: entered promiscuous mode [ 310.174258][T11279] batadv_slave_1: left promiscuous mode [ 310.221509][T11282] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 310.236153][T11282] EXT4-fs (loop2): 1 truncate cleaned up [ 310.236691][T11282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.271905][ T29] audit: type=1400 audit(1791010695.253:4187): avc: denied { write } for pid=11281 comm="syz.2.2267" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 310.317431][ T29] audit: type=1400 audit(1791010695.303:4188): avc: denied { read } for pid=11281 comm="syz.2.2267" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 310.317475][ T29] audit: type=1400 audit(1791010695.303:4189): avc: denied { open } for pid=11281 comm="syz.2.2267" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 310.447820][ T29] audit: type=1400 audit(1791010695.433:4190): avc: denied { create } for pid=11195 comm="syz.7.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 310.448044][ T9380] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 310.455311][ T9380] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 310.458033][ T9380] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 310.538523][T11064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.594682][ T9935] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.643883][T11295] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 310.645600][T11295] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 310.913151][ T4584] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.968917][T11302] set_capacity_and_notify: 7 callbacks suppressed [ 310.968939][T11302] loop5: detected capacity change from 0 to 512 [ 310.987013][ T4584] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.031766][T11302] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.2275: bad orphan inode 15 [ 311.031813][T11302] fserror_report: 1 callbacks suppressed [ 311.031827][T11302] loop5: lost filesystem error report for type 5 error -117 [ 311.031919][T11302] ext4_test_bit(bit=14, block=5) = 0 [ 311.032301][T11302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.086857][T11302] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 311.087006][T11302] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.2275: bit already cleared for inode 13 [ 311.089248][ T4584] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.149119][T11306] loop0: detected capacity change from 0 to 512 [ 311.169781][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.172070][ T4584] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.205803][T11306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.205935][T11306] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.334356][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.345150][ T4584] bridge_slave_1: left allmulticast mode [ 311.345179][ T4584] bridge_slave_1: left promiscuous mode [ 311.345374][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.383026][T11302] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.413679][T11315] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 311.456195][T11322] netlink: 'syz.5.2281': attribute type 1 has an invalid length. [ 311.458364][T11315] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2279'. [ 311.570081][ T4584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.587699][ T4584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.605866][ T4584] bond0 (unregistering): Released all slaves [ 311.661164][T11322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.745478][T11336] bond2: (slave geneve2): making interface the new active one [ 311.760502][T11336] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 311.764255][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 311.793763][ T4584] hsr_slave_0: left promiscuous mode [ 311.798605][ T4584] hsr_slave_1: left promiscuous mode [ 311.799122][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.799141][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.806053][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.806159][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.861301][ T4584] veth1_macvtap: left promiscuous mode [ 311.861334][ T4584] veth0_macvtap: left promiscuous mode [ 311.861466][ T4584] veth1_vlan: left promiscuous mode [ 311.861488][ T4584] veth0_vlan: left promiscuous mode [ 311.899082][T11341] loop7: detected capacity change from 0 to 512 [ 312.207282][ T4584] team0 (unregistering): Port device team_slave_1 removed [ 312.222660][ T4584] team0 (unregistering): Port device team_slave_0 removed [ 312.314055][T11341] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.314173][T11341] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.826871][T11308] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.826965][T11308] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.827042][T11308] bridge_slave_0: entered allmulticast mode [ 312.827606][T11308] bridge_slave_0: entered promiscuous mode [ 312.832058][T11308] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.832161][T11308] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.850493][T11308] bridge_slave_1: entered allmulticast mode [ 312.856115][T11308] bridge_slave_1: entered promiscuous mode [ 312.885712][T11371] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 312.885916][T11371] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 312.886084][T11371] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 312.886192][T11371] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 312.886500][T11371] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 312.886620][T11371] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 312.886738][T11371] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 312.886853][T11371] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 312.993807][T11308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.998956][T11308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.090544][T11308] team0: Port device team_slave_0 added [ 313.095173][T11308] team0: Port device team_slave_1 added [ 313.155915][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 313.157544][T11308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.157571][T11308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.157649][T11308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.178807][T11308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.178859][T11308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.178988][T11308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.327594][T11308] hsr_slave_0: entered promiscuous mode [ 313.341513][T11308] hsr_slave_1: entered promiscuous mode [ 313.341858][T11308] debugfs: 'hsr0' already exists in 'hsr' [ 313.341876][T11308] Cannot create hsr debugfs directory [ 313.534689][T11395] loop5: detected capacity change from 0 to 512 [ 313.574295][T11395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.574395][T11395] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.748108][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.927464][ T7440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.002271][T11308] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 314.021795][T11308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.025150][T11308] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 314.041935][T11308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.093673][T11308] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 314.105955][T11308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.113087][T11308] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 314.124480][T11308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.290723][T11433] sctp: [Deprecated]: syz.5.2295 (pid 11433) Use of int in max_burst socket option. [ 314.290723][T11433] Use struct sctp_assoc_value instead [ 314.321084][T11428] loop5: detected capacity change from 0 to 512 [ 314.325320][T11428] ext4: Unknown parameter '' [ 314.326943][T11308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.359784][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 314.366875][T11308] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.395682][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.395733][ T4614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.415578][ T4584] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.415622][ T4584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.644035][T11445] loop2: detected capacity change from 0 to 128 [ 314.662187][T11445] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.664510][T11445] ext4 filesystem being mounted at /452/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 314.815000][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 314.815074][ T29] audit: type=1400 audit(1791010699.800:4239): avc: denied { setattr } for pid=11452 comm="syz.7.2298" name="RAWv6" dev="sockfs" ino=31996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 314.862885][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 314.945405][T11308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.968522][ T29] audit: type=1400 audit(1791010699.960:4240): avc: denied { write } for pid=11441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.094376][ T29] audit: type=1400 audit(1791010700.080:4241): avc: denied { write } for pid=11474 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.142207][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.243515][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 315.261849][T11499] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2302'. [ 315.299560][T11500] loop5: detected capacity change from 0 to 164 [ 315.635892][ T29] audit: type=1400 audit(1791010700.621:4242): avc: denied { setopt } for pid=11497 comm="syz.5.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 315.703556][T11475] loop7: detected capacity change from 0 to 512 [ 315.724254][T11508] tipc: Started in network mode [ 315.724353][T11508] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 315.724862][T11508] tipc: Enabled bearer , priority 0 [ 315.772654][T11499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11499 comm=syz.2.2302 [ 315.809399][T11475] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.809782][T11475] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.987891][ T29] audit: type=1400 audit(1791010700.982:4243): avc: denied { write } for pid=11466 comm="syz.7.2300" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.987952][ T29] audit: type=1400 audit(1791010700.982:4244): avc: denied { write } for pid=11466 comm="syz.7.2300" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.062718][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2300'. [ 316.303568][T11064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.443008][ T29] audit: type=1400 audit(1791010701.432:4245): avc: denied { write } for pid=11518 comm="syz.5.2305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 316.567317][ T29] audit: type=1400 audit(1791010701.542:4246): avc: denied { mounton } for pid=11518 comm="syz.5.2305" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 316.749819][T11519] 9p: Could not find request transport: tcp¬port=0x0000000000004e24 [ 316.776891][T11308] veth0_vlan: entered promiscuous mode [ 316.786728][T11308] veth1_vlan: entered promiscuous mode [ 316.849081][T11308] veth0_macvtap: entered promiscuous mode [ 316.849888][ T37] tipc: Node number set to 11578026 [ 316.850853][T11308] veth1_macvtap: entered promiscuous mode [ 316.885616][T11308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.904768][T11308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.294268][ T4584] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.296471][T11491] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.296532][T11491] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.296628][T11491] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.357131][T11537] loop5: detected capacity change from 0 to 128 [ 317.376504][T11537] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.377134][T11537] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 317.427512][ T29] audit: type=1400 audit(1791010702.424:4247): avc: denied { create } for pid=11540 comm="syz.8.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 317.428257][ T29] audit: type=1400 audit(1791010702.424:4248): avc: denied { ioctl } for pid=11540 comm="syz.8.2277" path="socket:[32204]" dev="sockfs" ino=32204 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 317.443107][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2310'. [ 317.652295][ T7440] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 317.887361][T11556] loop8: detected capacity change from 0 to 512 [ 317.954947][T11559] netlink: 'syz.0.2316': attribute type 3 has an invalid length. [ 317.955027][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2316'. [ 318.052124][T11564] veth0: entered promiscuous mode [ 318.073425][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2317'. [ 318.130722][T11556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.130806][T11556] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.205782][T11564] SELinux: Context ¼OPcÕÇ™»žÅè?‰s�Þ Uâ²Éì^tú”Q`wê�& ò˜m [ 318.205782][T11564] ¤ù¡ ×%ÓZÊó®Ç@L0õNïµr‘L²1X‹)Ù’i†jÏÉ’%Ø‘ÙfËíîYjwõÔLÝ�˜»ã8ôÇݱá bV:±vÓiý is not valid (left unmapped). [ 318.451723][T11564] netlink: 'syz.7.2317': attribute type 21 has an invalid length. [ 318.475341][T11556] syz.8.2315 (11556) used greatest stack depth: 9544 bytes left [ 318.508011][T11564] veth0: left promiscuous mode [ 318.593451][T11308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.674472][T11577] 9p: Could not find request transport: tcp¬port=0x0000000000004e24 [ 319.256142][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'. [ 319.319407][T11591] loop7: detected capacity change from 0 to 512 [ 319.330627][T11591] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 319.404204][T11603] loop8: detected capacity change from 0 to 512 [ 319.478588][T11591] EXT4-fs (loop7): 1 truncate cleaned up [ 319.478979][T11591] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.581739][T11064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.668062][T11613] loop2: detected capacity change from 0 to 512 [ 319.878399][T11613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.878646][T11613] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.879354][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 319.879367][ T29] audit: type=1326 audit(1791010704.867:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.2330" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbecd6e98e code=0x7ffc0000 [ 319.879862][ T29] audit: type=1326 audit(1791010704.867:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.2330" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbbecdac597 code=0x7ffc0000 [ 319.880389][ T29] audit: type=1326 audit(1791010704.867:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.2330" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbecd6e98e code=0x7ffc0000 [ 319.880624][ T29] audit: type=1326 audit(1791010704.867:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.2330" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbecdaddeb code=0x7ffc0000 [ 319.881016][ T29] audit: type=1326 audit(1791010704.867:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.2330" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbbecd6e98e code=0x7ffc0000 [ 320.068287][ T29] audit: type=1326 audit(1791010704.867:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.2330" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbecdae159 code=0x7ffc0000 [ 320.155182][ T29] audit: type=1326 audit(1791010705.147:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.2330" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbecdae159 code=0x7ffc0000 [ 320.156103][ T29] audit: type=1400 audit(1791010705.147:4426): avc: denied { write } for pid=11611 comm="syz.2.2330" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.225004][ T29] audit: type=1326 audit(1791010705.208:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.2330" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbecdae159 code=0x7ffc0000 [ 320.228573][ T29] audit: type=1326 audit(1791010705.228:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.2.2330" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbecdae159 code=0x7ffc0000 [ 320.314114][T11308] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 320.314150][T11308] FAT-fs (loop8): Filesystem has been set read-only [ 320.314221][T11308] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 320.361659][T11619] loop5: detected capacity change from 0 to 512 [ 320.384584][T11613] syz.2.2330 (11613) used greatest stack depth: 9480 bytes left [ 320.399538][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 320.426077][T11619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.427519][T11619] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.448227][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2331'. [ 320.494137][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.525165][T11619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.545967][T11634] netlink: 'syz.2.2334': attribute type 1 has an invalid length. [ 320.576083][T11634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.610205][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 320.617899][T11492] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.665823][T11634] bond2: (slave bridge1): making interface the new active one [ 320.668077][T11634] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 320.707083][T11492] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.809480][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 320.809592][T11643] netlink: 'syz.2.2334': attribute type 30 has an invalid length. [ 320.816001][T11492] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.856948][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 320.857085][T11645] netlink: 'syz.2.2334': attribute type 30 has an invalid length. [ 320.875451][T11643] vxlan0: entered promiscuous mode [ 320.875588][T11643] vxlan0: entered allmulticast mode [ 320.949600][T11645] vxlan1: entered promiscuous mode [ 320.949681][T11645] vxlan1: entered allmulticast mode [ 321.022860][T11492] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.062257][T11491] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.062972][T11491] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.063141][T11491] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.063257][T11491] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.241815][T11492] bridge_slave_1: left allmulticast mode [ 321.241843][T11492] bridge_slave_1: left promiscuous mode [ 321.242034][T11492] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.285751][T11492] bridge_slave_0: left allmulticast mode [ 321.285780][T11492] bridge_slave_0: left promiscuous mode [ 321.285972][T11492] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.484046][T11663] loop0: detected capacity change from 0 to 512 [ 321.514698][T11663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.514768][T11663] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.603801][T11492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.607180][T11492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.611243][T11492] bond0 (unregistering): Released all slaves [ 321.790074][T11492] hsr_slave_0: left promiscuous mode [ 321.792145][T11492] hsr_slave_1: left promiscuous mode [ 321.793085][T11492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.793137][T11492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.798520][T11492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.798566][T11492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.817760][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.818635][T11492] veth1_macvtap: left promiscuous mode [ 321.818719][T11492] veth0_macvtap: left promiscuous mode [ 321.818892][T11492] veth1_vlan: left promiscuous mode [ 321.819041][T11492] veth0_vlan: left promiscuous mode [ 321.928522][T11693] loop2: detected capacity change from 0 to 512 [ 321.994439][T11696] loop2: detected capacity change from 0 to 512 [ 322.171795][T11492] team0 (unregistering): Port device team_slave_1 removed [ 322.191879][T11492] team0 (unregistering): Port device team_slave_0 removed [ 322.282637][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 322.307637][ T37] net_ratelimit: 47 callbacks suppressed [ 322.307657][ T37] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 322.421999][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2350'. [ 322.422030][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2350'. [ 322.706694][ T3392] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 323.051353][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 323.152130][T11648] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.152173][T11648] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.152271][T11648] bridge_slave_0: entered allmulticast mode [ 323.156733][T11648] bridge_slave_0: entered promiscuous mode [ 323.160687][T11743] loop2: detected capacity change from 0 to 128 [ 323.188843][T11648] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.188966][T11648] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.189338][T11648] bridge_slave_1: entered allmulticast mode [ 323.193216][T11648] bridge_slave_1: entered promiscuous mode [ 323.254039][T11648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.272550][T11648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.278599][T11743] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 323.287119][T11743] ext4 filesystem being mounted at /467/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 323.341379][T11753] loop5: detected capacity change from 0 to 512 [ 323.342573][T11648] team0: Port device team_slave_0 added [ 323.343604][T11648] team0: Port device team_slave_1 added [ 323.410079][T11753] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.467264][T11648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.467284][T11648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.467334][T11648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.468106][T11648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.468118][T11648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.468147][T11648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.689664][T11648] hsr_slave_0: entered promiscuous mode [ 323.690178][T11648] hsr_slave_1: entered promiscuous mode [ 323.690492][T11648] debugfs: 'hsr0' already exists in 'hsr' [ 323.690505][T11648] Cannot create hsr debugfs directory [ 323.835480][T11779] loop5: detected capacity change from 0 to 512 [ 323.835913][T11779] EXT4-fs: Ignoring removed bh option [ 323.859537][T11779] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.997765][T11785] syzkaller1: entered promiscuous mode [ 323.997785][T11785] syzkaller1: entered allmulticast mode [ 324.020772][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 324.261300][T11648] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 324.263197][T11648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.292410][T11648] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 324.304678][T11648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.312291][T11648] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 324.336952][T11648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.398531][T11648] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 324.401053][T11648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.695545][T11648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.850206][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 324.867490][T11648] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.873590][ T4584] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.873635][ T4584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.888005][T11495] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.888136][T11495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.074844][T11844] FAULT_INJECTION: forcing a failure. [ 325.074844][T11844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.074905][T11844] CPU: 0 UID: 0 PID: 11844 Comm: syz.2.2369 Not tainted syzkaller #0 PREEMPT(lazy) [ 325.074938][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 325.074951][T11844] Call Trace: [ 325.074959][T11844] [ 325.074967][T11844] __dump_stack+0x1d/0x30 [ 325.075075][T11844] dump_stack_lvl+0x95/0xd0 [ 325.075105][T11844] dump_stack+0x15/0x1b [ 325.075132][T11844] should_fail_ex+0x262/0x280 [ 325.075165][T11844] should_fail+0xb/0x20 [ 325.075190][T11844] should_fail_usercopy+0x1a/0x20 [ 325.075277][T11844] _copy_to_user+0x20/0xa0 [ 325.075307][T11844] simple_read_from_buffer+0xb5/0x130 [ 325.075332][T11844] proc_fail_nth_read+0x10e/0x150 [ 325.075401][T11844] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.075425][T11844] vfs_read+0x18e/0x7c0 [ 325.075462][T11844] ? __rcu_read_unlock+0x4e/0x70 [ 325.075571][T11844] ? __fget_files+0x184/0x1c0 [ 325.075598][T11844] ? mutex_lock+0x57/0x90 [ 325.075701][T11844] ksys_read+0xdc/0x1a0 [ 325.075736][T11844] __x64_sys_read+0x40/0x50 [ 325.075848][T11844] x64_sys_call+0x2135/0x2550 [ 325.075874][T11844] do_syscall_64+0x112/0x360 [ 325.075898][T11844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.075926][T11844] RIP: 0033:0x7fbbecd6e98e [ 325.075947][T11844] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 325.076026][T11844] RSP: 002b:00007fbbeb806fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.076080][T11844] RAX: ffffffffffffffda RBX: 00007fbbeb8076c0 RCX: 00007fbbecd6e98e [ 325.076159][T11844] RDX: 000000000000000f RSI: 00007fbbeb8070a0 RDI: 0000000000000004 [ 325.076172][T11844] RBP: 00007fbbeb807090 R08: 0000000000000000 R09: 0000000000000000 [ 325.076187][T11844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.076199][T11844] R13: 00007fbbed036038 R14: 00007fbbed035fa0 R15: 00007fffd4b08ea8 [ 325.076224][T11844] [ 325.086030][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 325.086082][ T29] audit: type=1326 audit(1791010710.094:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.5.2368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 325.086496][ T29] audit: type=1326 audit(1791010710.094:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.5.2368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 325.127715][T11841] loop5: detected capacity change from 0 to 512 [ 325.185199][T11841] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.217009][ T29] audit: type=1326 audit(1791010710.225:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.5.2368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 325.217128][ T29] audit: type=1400 audit(1791010710.225:4466): avc: denied { write } for pid=11836 comm="syz.5.2368" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 325.251035][ T29] audit: type=1326 audit(1791010710.255:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.5.2368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 325.251460][ T29] audit: type=1326 audit(1791010710.255:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.5.2368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 325.280016][ T29] audit: type=1326 audit(1791010710.285:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.5.2368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 325.296477][ T29] audit: type=1326 audit(1791010710.305:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.5.2368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 325.300287][ T29] audit: type=1326 audit(1791010710.305:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.5.2368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 325.551086][T11853] loop7: detected capacity change from 0 to 512 [ 325.561024][T11853] vfat: Unknown parameter '00000000073218064384' [ 325.747129][T11865] loop5: detected capacity change from 0 to 128 [ 325.758852][T11863] loop2: detected capacity change from 0 to 512 [ 325.775226][T11863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 325.783503][T11865] ext4 filesystem being mounted at /222/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 325.811136][T11863] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.858651][ T29] audit: type=1400 audit(1791010710.865:4472): avc: denied { setattr } for pid=11862 comm="syz.2.2373" name="NETLINK" dev="sockfs" ino=30432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.045652][T11648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.194711][T11883] loop2: detected capacity change from 0 to 512 [ 326.230164][T11883] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.491445][T11898] loop7: detected capacity change from 0 to 512 [ 326.573536][T11648] veth0_vlan: entered promiscuous mode [ 326.597359][T11648] veth1_vlan: entered promiscuous mode [ 326.646381][T11648] veth0_macvtap: entered promiscuous mode [ 326.648163][T11648] veth1_macvtap: entered promiscuous mode [ 326.677129][T11648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.685040][T11648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.697668][ T4584] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.697803][ T4584] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.697851][ T4584] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.697914][ T4584] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.022627][T11901] loop5: detected capacity change from 0 to 8192 [ 327.045710][T11930] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.155590][T11901] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 327.734242][T11930] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.778618][ T7440] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 327.778699][ T7440] FAT-fs (loop5): Filesystem has been set read-only [ 327.832374][T11930] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.909326][T11928] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.909942][T11953] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 327.911993][T11953] EXT4-fs error (device loop5): ext4_get_journal_inode:5927: comm syz.5.2385: inode #2147418112: comm syz.5.2385: iget: illegal inode # [ 327.912111][T11953] loop5: lost filesystem error report for type 5 error -117 [ 327.913069][T11953] EXT4-fs (loop5): no journal found [ 327.913089][T11953] EXT4-fs (loop5): can't get journal size [ 327.915771][T11953] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 327.916358][T11953] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 327.997545][T11930] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.090062][T11954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 328.110627][T11968] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 328.110731][T11968] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.2385: Invalid inode bitmap blk 4 in block_group 0 [ 328.113659][T11954] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 328.113829][T11954] System zones: 1-12 [ 328.114670][T11954] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.2386: bad orphan inode 131072 [ 328.114750][T11954] loop0: lost filesystem error report for type 5 error -117 [ 328.116445][T11968] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 328.266495][T11954] veth1_vlan: entered allmulticast mode [ 328.328618][T11954] bridge0: port 1(syz_tun) entered blocking state [ 328.328729][T11954] bridge0: port 1(syz_tun) entered disabled state [ 328.328802][T11954] syz_tun: entered allmulticast mode [ 328.329305][T11954] syz_tun: entered promiscuous mode [ 328.332774][ T4584] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.384507][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2390'. [ 328.478761][ T4584] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.498473][T11490] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.499373][T11490] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.642322][T11994] set_capacity_and_notify: 3 callbacks suppressed [ 328.642346][T11994] loop0: detected capacity change from 0 to 512 [ 328.649923][T11994] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.694046][T11994] EXT4-fs (loop0): failed to initialize system zone (-117) [ 328.694257][T11994] EXT4-fs (loop0): mount failed [ 328.735595][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2393'. [ 329.005542][T12021] loop0: detected capacity change from 0 to 128 [ 329.025170][T12021] ext4 filesystem being mounted at /528/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 329.096173][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2398'. [ 329.402065][T12042] loop9: detected capacity change from 0 to 512 [ 329.450269][T12042] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.678709][T12063] loop9: detected capacity change from 0 to 128 [ 329.700661][T12063] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 329.840055][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2403'. [ 329.936053][T12070] loop7: detected capacity change from 0 to 4096 [ 329.953434][T12070] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2405: corrupted inode contents [ 329.958305][T12070] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #15: comm syz.7.2405: mark_inode_dirty error [ 329.958865][T12070] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2405: corrupted inode contents [ 329.959984][T12070] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.2405: mark_inode_dirty error [ 329.960459][T12070] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2405: corrupted inode contents [ 329.961651][T12070] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.2405: mark_inode_dirty error [ 329.962117][T12070] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2405: corrupted inode contents [ 329.963430][T12070] EXT4-fs error (device loop7): ext4_truncate:4721: inode #15: comm syz.7.2405: mark_inode_dirty error [ 329.966826][T12070] EXT4-fs error (device loop7) in ext4_setattr:6247: Corrupt filesystem [ 329.986839][T12070] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2405: corrupted inode contents [ 330.196870][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 330.196891][ T29] audit: type=1400 audit(1791010715.211:4611): avc: denied { mounton } for pid=12040 comm="syz.2.2400" path="/478/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 330.197357][ T29] audit: type=1400 audit(1791010715.211:4612): avc: denied { append } for pid=12040 comm="syz.2.2400" name="uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 330.197434][ T29] audit: type=1400 audit(1791010715.211:4613): avc: denied { open } for pid=12040 comm="syz.2.2400" path="/478/tracing/uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 330.198194][ T29] audit: type=1400 audit(1791010715.211:4614): avc: denied { write } for pid=12040 comm="syz.2.2400" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 330.266144][ T29] audit: type=1400 audit(1791010715.282:4615): avc: denied { write } for pid=12069 comm="syz.7.2405" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.290260][T12081] EXT4-fs warning (device loop7): ext4_empty_dir:3106: inode #12: comm syz.7.2405: directory missing '..' [ 330.303466][T12041] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc01 [ 330.443434][ T29] audit: type=1400 audit(1791010715.452:4616): avc: denied { write } for pid=12072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.473770][T12091] loop9: detected capacity change from 0 to 164 [ 330.555477][ T29] audit: type=1400 audit(1791010715.532:4617): avc: denied { write } for pid=12095 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.233229][T11064] fserror_report: 6 callbacks suppressed [ 331.233252][T11064] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 331.233806][T11064] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 331.234134][T11064] EXT4-fs warning (device loop7): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 331.381703][T12102] loop7: detected capacity change from 0 to 512 [ 331.382149][T12102] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 331.399773][ T29] audit: type=1400 audit(1791010716.403:4618): avc: denied { recv } for pid=12099 comm="syz.7.2409" saddr=10.128.0.163 src=38094 daddr=10.128.1.62 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 331.484654][T12103] loop7: detected capacity change from 0 to 512 [ 331.498924][T12103] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.2409: bg 0: block 5: invalid block bitmap [ 331.499002][T12103] loop7: lost filesystem error report for type 5 error -117 [ 331.499382][T12103] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 331.499408][T12103] loop7: lost filesystem error report for type 5 error -117 [ 331.499818][T12103] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2409: invalid indirect mapped block 3 (level 2) [ 331.499901][T12103] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 331.500339][T12103] EXT4-fs (loop7): 1 orphan inode deleted [ 331.500361][T12103] EXT4-fs (loop7): 1 truncate cleaned up [ 331.668822][ T29] audit: type=1400 audit(1791010716.683:4619): avc: denied { getopt } for pid=12123 comm="syz.9.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.920469][ T29] audit: type=1400 audit(1791010716.934:4620): avc: denied { write } for pid=12100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.943884][T12135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2415'. [ 332.182724][T12154] xt_REDIRECT: bad MAP_IPS. [ 332.221177][T12145] bridge0: port 3(bridge_slave_0) entered blocking state [ 332.221227][T12145] bridge0: port 3(bridge_slave_0) entered disabled state [ 332.221419][T12145] bridge_slave_0: entered allmulticast mode [ 332.221968][T12145] bridge_slave_0: entered promiscuous mode [ 332.222251][T12145] bridge0: port 3(bridge_slave_0) entered blocking state [ 332.222294][T12145] bridge0: port 3(bridge_slave_0) entered forwarding state [ 332.230523][T12145] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2419'. [ 332.242472][T12145] bridge_slave_0: left allmulticast mode [ 332.242555][T12145] bridge_slave_0: left promiscuous mode [ 332.242942][T12145] bridge0: port 3(bridge_slave_0) entered disabled state [ 332.262610][T12156] loop2: detected capacity change from 0 to 128 [ 332.306947][T12154] FAULT_INJECTION: forcing a failure. [ 332.306947][T12154] name failslab, interval 1, probability 0, space 0, times 0 [ 332.308450][T12154] CPU: 1 UID: 0 PID: 12154 Comm: syz.0.2420 Not tainted syzkaller #0 PREEMPT(lazy) [ 332.308489][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 332.308581][T12154] Call Trace: [ 332.308591][T12154] [ 332.308600][T12154] __dump_stack+0x1d/0x30 [ 332.308634][T12154] dump_stack_lvl+0x95/0xd0 [ 332.308667][T12154] dump_stack+0x15/0x1b [ 332.308697][T12154] should_fail_ex+0x262/0x280 [ 332.308781][T12154] should_failslab+0x8c/0xb0 [ 332.308827][T12154] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 332.308863][T12154] ? __d_alloc+0x34/0x320 [ 332.308943][T12154] ? __d_alloc+0x34/0x320 [ 332.308992][T12154] __d_alloc+0x34/0x320 [ 332.309057][T12154] ? d_alloc_pseudo+0x13/0x80 [ 332.309096][T12154] d_alloc_pseudo+0x1e/0x80 [ 332.309136][T12154] alloc_path_pseudo+0xa4/0x140 [ 332.309175][T12154] alloc_file_pseudo+0x55/0x120 [ 332.309235][T12154] hugetlb_file_setup+0x2a6/0x3d0 [ 332.309271][T12154] ksys_mmap_pgoff+0x13f/0x310 [ 332.309299][T12154] x64_sys_call+0x23b3/0x2550 [ 332.309389][T12154] do_syscall_64+0x112/0x360 [ 332.309425][T12154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.309458][T12154] RIP: 0033:0x7fb5e9cbe159 [ 332.309482][T12154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.309555][T12154] RSP: 002b:00007fb5e8717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 332.309584][T12154] RAX: ffffffffffffffda RBX: 00007fb5e9f45fa0 RCX: 00007fb5e9cbe159 [ 332.309606][T12154] RDX: 0000000000000009 RSI: 0000000000003000 RDI: 0000200000400000 [ 332.309625][T12154] RBP: 00007fb5e9d5506b R08: ffffffffffffffff R09: 0000000000000000 [ 332.309699][T12154] R10: 000000000004d032 R11: 0000000000000246 R12: 0000000000000000 [ 332.309719][T12154] R13: 00007fb5e9f46038 R14: 00007fb5e9f45fa0 R15: 00007fff7efd9388 [ 332.309919][T12154] [ 332.395498][T12164] loop9: detected capacity change from 0 to 1024 [ 332.396852][T12164] EXT4-fs: quotafile must be on filesystem root [ 332.680171][T12173] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.2426: iget: bad extended attribute block 134217728 [ 332.680272][T12173] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 332.681175][T12173] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.2426: couldn't read orphan inode 15 (err -117) [ 332.681215][T12173] loop9: lost filesystem error report for type 5 error -117 [ 332.682476][ C1] EXT4-fs (loop9): error count since last fsck: 2 [ 332.682501][ C1] EXT4-fs (loop9): initial error at time 1791010717: ext4_orphan_get:1403: inode 15 [ 332.682542][ C1] EXT4-fs (loop9): last error at time 1791010717: ext4_orphan_get:1408 [ 332.687616][T12173] EXT4-fs mount: 30 callbacks suppressed [ 332.687675][T12173] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.710202][T12173] EXT4-fs error (device loop9): ext4_find_dest_de:2052: inode #2: block 13: comm syz.9.2426: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 332.817758][T12173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.817944][T12173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.985087][T12188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.985314][T12188] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.127679][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.135434][T12183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.135675][T12183] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.300190][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.442203][T12200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.444464][T12200] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.444653][T11648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.448653][T12202] EXT4-fs: quotafile must be on filesystem root [ 333.561595][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2435'. [ 333.652060][T12200] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.652300][T12212] 9p: Could not find request transport: tcp¬port=0x0000000000004e24 [ 333.699157][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 333.731610][T12202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.731698][T12202] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.777472][T12219] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 333.777582][T12219] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 333.777891][T12219] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 333.777959][T12219] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 333.801031][T12219] hsr_slave_0: left promiscuous mode [ 333.814044][T12219] hsr_slave_1: left promiscuous mode [ 333.858098][T12229] set_capacity_and_notify: 6 callbacks suppressed [ 333.858117][T12229] loop9: detected capacity change from 0 to 128 [ 333.877679][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.878854][T12229] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.879055][T12229] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.929511][T12234] loop2: detected capacity change from 0 to 128 [ 333.947139][T12234] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.949483][T12234] ext4 filesystem being mounted at /487/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.958982][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2443'. [ 333.970494][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 334.006065][T11648] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.081896][T12238] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2446'. [ 334.085020][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2445'. [ 334.102471][T12238] loop9: detected capacity change from 0 to 512 [ 334.115893][T12238] EXT4-fs: Ignoring removed i_version option [ 334.115967][T12238] ext4: Unknown parameter 'fowner<00000000000000000000' [ 334.173835][T12232] loop5: detected capacity change from 0 to 512 [ 334.190138][T12232] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 334.863401][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.864806][T11064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.188340][T12261] TCP: TCP_TX_DELAY enabled [ 335.194399][T12254] loop5: detected capacity change from 0 to 1024 [ 335.200162][T12254] EXT4-fs: quotafile must be on filesystem root [ 335.363461][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 335.363524][ T29] audit: type=1400 audit(1791010720.378:4666): avc: denied { ioctl } for pid=12275 comm="syz.2.2458" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 335.367467][ T29] audit: type=1400 audit(1791010720.378:4667): avc: denied { read write } for pid=12275 comm="syz.2.2458" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 335.367557][ T29] audit: type=1400 audit(1791010720.378:4668): avc: denied { open } for pid=12275 comm="syz.2.2458" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 335.374131][ T3407] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 335.378159][ T3407] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 335.564313][ T29] audit: type=1400 audit(1791010720.579:4669): avc: denied { bind } for pid=12288 comm="syz.0.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 335.564594][ T29] audit: type=1400 audit(1791010720.579:4670): avc: denied { listen } for pid=12288 comm="syz.0.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 335.566693][ T29] audit: type=1400 audit(1791010720.579:4671): avc: denied { connect } for pid=12288 comm="syz.0.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 335.679435][T12301] loop5: detected capacity change from 0 to 512 [ 335.685553][T12301] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 335.701678][T12278] fido_id[12278]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 335.707004][T12301] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.2468: bg 0: block 4: invalid block bitmap [ 335.707057][T12301] loop5: lost filesystem error report for type 5 error -117 [ 335.710381][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 335.712720][ C1] EXT4-fs (loop5): initial error at time 1791010720: ext4_validate_block_bitmap:436 [ 335.712847][ C1] EXT4-fs (loop5): last error at time 1791010720: ext4_validate_block_bitmap:436 [ 335.718410][T12296] ./mnt: Can't lookup blockdev [ 335.742950][T12301] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 335.742971][T12301] loop5: lost filesystem error report for type 5 error -117 [ 335.744804][T12301] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2468: invalid indirect mapped block 1 (level 1) [ 335.744966][T12301] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 335.746018][T12301] EXT4-fs (loop5): 1 truncate cleaned up [ 335.747087][T12301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.757479][ T29] audit: type=1400 audit(1791010720.769:4672): avc: denied { write } for pid=12300 comm="syz.5.2468" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.757578][ T29] audit: type=1400 audit(1791010720.769:4673): avc: denied { append } for pid=12300 comm="syz.5.2468" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 335.757746][ T29] audit: type=1400 audit(1791010720.769:4674): avc: denied { open } for pid=12300 comm="syz.5.2468" path="/242/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 335.766455][ T29] audit: type=1400 audit(1791010720.779:4675): avc: denied { shutdown } for pid=12288 comm="syz.0.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 335.884166][T12304] netlink: 'syz.0.2462': attribute type 2 has an invalid length. [ 335.951143][T11489] netdevsim netdevsim120 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.951184][T11489] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.991846][T12320] loop2: detected capacity change from 0 to 512 [ 335.992771][T12320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 335.994253][T12320] EXT4-fs (loop2): 1 truncate cleaned up [ 335.994665][T12320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.048323][ T7440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.139547][T12313] loop9: detected capacity change from 0 to 1024 [ 336.140430][T12313] EXT4-fs: quotafile must be on filesystem root [ 336.205487][T12313] loop9: detected capacity change from 0 to 512 [ 336.226197][T12313] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.226477][T12313] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.266181][T11648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.722097][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.865417][T12343] loop0: detected capacity change from 0 to 512 [ 336.865898][T12343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 336.865930][T12343] EXT4-fs: Ignoring removed nobh option [ 336.924966][T12343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.925059][T12343] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.960843][T12342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 336.960939][T12342] EXT4-fs (loop0): can't enable nombcache during remount [ 337.124497][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.226893][T12373] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 337.227257][T12373] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2482'. [ 337.228095][T12373] batadv_slave_1: entered promiscuous mode [ 337.228652][T12372] batadv_slave_1: left promiscuous mode [ 337.449041][T12382] EXT4-fs: quotafile must be on filesystem root [ 337.567494][T12407] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.567726][T12407] ext4 filesystem being mounted at /546/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 337.590521][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2487'. [ 337.619014][T12359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.619110][T12359] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.680495][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.700086][T12382] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.719217][T12382] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.791653][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2480'. [ 337.817530][T11648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.870862][T12359] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.060825][T12446] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 338.061102][T12446] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2494'. [ 338.062198][T12446] batadv_slave_1: entered promiscuous mode [ 338.062840][T12445] batadv_slave_1: left promiscuous mode [ 338.431161][T12456] FAULT_INJECTION: forcing a failure. [ 338.431161][T12456] name failslab, interval 1, probability 0, space 0, times 0 [ 338.431240][T12456] CPU: 1 UID: 0 PID: 12456 Comm: syz.7.2495 Not tainted syzkaller #0 PREEMPT(lazy) [ 338.431277][T12456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 338.431296][T12456] Call Trace: [ 338.431304][T12456] [ 338.431313][T12456] __dump_stack+0x1d/0x30 [ 338.431353][T12456] dump_stack_lvl+0x95/0xd0 [ 338.431385][T12456] dump_stack+0x15/0x1b [ 338.431408][T12456] should_fail_ex+0x262/0x280 [ 338.431445][T12456] ? audit_log_start+0x34c/0x730 [ 338.431497][T12456] should_failslab+0x8c/0xb0 [ 338.431529][T12456] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 338.431637][T12456] ? audit_log_start+0x34c/0x730 [ 338.431665][T12456] audit_log_start+0x34c/0x730 [ 338.431689][T12456] ? __schedule+0x79e/0xd20 [ 338.431770][T12456] audit_seccomp+0x49/0x110 [ 338.431792][T12456] __seccomp_filter+0x909/0x1360 [ 338.431834][T12456] ? irqentry_exit+0x7d/0x610 [ 338.431966][T12456] __seccomp_permit_syscall+0x7d/0x150 [ 338.431998][T12456] do_syscall_64+0xca/0x360 [ 338.432022][T12456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.432052][T12456] RIP: 0033:0x7f142babe159 [ 338.432104][T12456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.432131][T12456] RSP: 002b:00007f142a5170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 338.432152][T12456] RAX: ffffffffffffffda RBX: 00007f142bd45fa8 RCX: 00007f142babe159 [ 338.432167][T12456] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f142bd45fa8 [ 338.432180][T12456] RBP: 00007f142bd45fa0 R08: 0000000000000000 R09: 0000000000000000 [ 338.432225][T12456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.432243][T12456] R13: 00007f142bd46038 R14: 00007ffc810a8800 R15: 00007ffc810a88e8 [ 338.432272][T12456] [ 338.835440][T12466] FAULT_INJECTION: forcing a failure. [ 338.835440][T12466] name failslab, interval 1, probability 0, space 0, times 0 [ 338.835455][T12469] bridge0: port 2(bridge_slave_0) entered blocking state [ 338.835478][T12466] CPU: 0 UID: 0 PID: 12466 Comm: syz.2.2500 Not tainted syzkaller #0 PREEMPT(lazy) [ 338.835494][T12469] bridge0: port 2(bridge_slave_0) entered disabled state [ 338.835514][T12466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 338.835530][T12466] Call Trace: [ 338.835537][T12466] [ 338.835545][T12466] __dump_stack+0x1d/0x30 [ 338.835576][T12466] dump_stack_lvl+0x95/0xd0 [ 338.835600][T12466] dump_stack+0x15/0x1b [ 338.835627][T12466] should_fail_ex+0x262/0x280 [ 338.835673][T12469] bridge_slave_0: entered allmulticast mode [ 338.835696][T12466] ? dst_alloc+0xbd/0x100 [ 338.835725][T12466] should_failslab+0x8c/0xb0 [ 338.835879][T12466] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 338.835966][T12466] ? dst_alloc+0xbd/0x100 [ 338.835991][T12466] dst_alloc+0xbd/0x100 [ 338.836015][T12466] xfrm_lookup_with_ifid+0x8b1/0x1580 [ 338.836103][T12466] xfrm_lookup_route+0x3a/0x110 [ 338.836196][T12469] bridge_slave_0: entered promiscuous mode [ 338.836211][T12466] vti_tunnel_xmit+0x24e/0xd70 [ 338.836252][T12466] dev_hard_start_xmit+0x10c/0x380 [ 338.836285][T12466] __dev_queue_xmit+0xbfd/0x1ec0 [ 338.836333][T12466] ? __dev_queue_xmit+0x151/0x1ec0 [ 338.836358][T12466] ? kmem_cache_alloc_node_noprof+0x1fa/0x400 [ 338.836419][T12466] ? skb_release_data+0x595/0x5c0 [ 338.836456][T12466] __bpf_redirect+0x708/0x960 [ 338.836487][T12466] bpf_clone_redirect+0x206/0x280 [ 338.836605][T12466] bpf_prog_69c2527fbc57d46b+0x5f/0x68 [ 338.836632][T12466] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 338.836669][T12466] ? hrtimer_start_range_ns+0x108/0x120 [ 338.836775][T12466] ? _raw_spin_unlock+0x9/0x30 [ 338.836800][T12466] ? finish_task_switch+0x121/0x340 [ 338.836836][T12466] ? __schedule+0x79e/0xd20 [ 338.836947][T12466] ? is_bpf_text_address+0x141/0x160 [ 338.836988][T12466] ? preempt_schedule_common+0x12/0x40 [ 338.837026][T12466] ? preempt_schedule_thunk+0x16/0x40 [ 338.837097][T12466] ? bpf_test_timer_continue+0xac/0x350 [ 338.837127][T12466] bpf_test_run+0x29b/0x620 [ 338.837172][T12466] ? __list_add_valid_or_report+0x38/0xe0 [ 338.837326][T12466] ? bpf_test_run+0x198/0x620 [ 338.837370][T12466] bpf_prog_test_run_skb+0xe67/0x11b0 [ 338.837418][T12466] ? __rcu_read_unlock+0x4e/0x70 [ 338.837486][T12466] ? __fget_files+0x184/0x1c0 [ 338.837515][T12466] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 338.837555][T12466] bpf_prog_test_run+0x208/0x340 [ 338.837588][T12466] __sys_bpf+0x8da/0xc30 [ 338.837714][T12466] ? do_futex+0x370/0x460 [ 338.837809][T12466] __x64_sys_bpf+0x69/0x80 [ 338.837840][T12466] x64_sys_call+0xf26/0x2550 [ 338.837871][T12466] do_syscall_64+0x112/0x360 [ 338.837932][T12466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.837990][T12469] __nla_validate_parse: 1 callbacks suppressed [ 338.838003][T12469] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2498'. [ 338.838022][T12466] RIP: 0033:0x7fbbecdae159 [ 338.838041][T12466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.838061][T12466] RSP: 002b:00007fbbeb807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 338.838086][T12466] RAX: ffffffffffffffda RBX: 00007fbbed035fa0 RCX: 00007fbbecdae159 [ 338.838106][T12466] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 338.838131][T12466] RBP: 00007fbbece4506b R08: 0000000000000000 R09: 0000000000000000 [ 338.838149][T12466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.838184][T12466] R13: 00007fbbed036038 R14: 00007fbbed035fa0 R15: 00007fffd4b08ea8 [ 338.838212][T12466] [ 338.838288][T12469] bridge_slave_0: left allmulticast mode [ 338.838309][T12469] bridge_slave_0: left promiscuous mode [ 338.838471][T12469] bridge0: port 2(bridge_slave_0) entered disabled state [ 339.071843][T12471] set_capacity_and_notify: 4 callbacks suppressed [ 339.071916][T12471] loop7: detected capacity change from 0 to 1024 [ 339.094241][T12471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.664611][T11064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.703164][T12483] loop2: detected capacity change from 0 to 512 [ 339.705800][T12481] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 339.706919][T12481] netlink: 140 bytes leftover after parsing attributes in process `syz.9.2505'. [ 339.709732][T12481] batadv_slave_1: entered promiscuous mode [ 339.711046][T12478] batadv_slave_1: left promiscuous mode [ 339.781772][T12485] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 339.823462][T12476] loop5: detected capacity change from 0 to 1024 [ 339.825780][T12476] EXT4-fs: quotafile must be on filesystem root [ 339.880983][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2507'. [ 339.889622][T12485] xt_hashlimit: size too large, truncated to 1048576 [ 339.889676][T12485] xt_hashlimit: overflow, try lower: 629/0 [ 340.022289][T12501] loop9: detected capacity change from 0 to 512 [ 340.048942][T12501] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 340.064299][T12501] EXT4-fs (loop9): 1 truncate cleaned up [ 340.064802][T12501] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.361400][T12523] loop2: detected capacity change from 0 to 1024 [ 340.381149][T12523] EXT4-fs: quotafile must be on filesystem root [ 340.451870][T12523] loop2: detected capacity change from 0 to 512 [ 340.507249][T12523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.507607][T12523] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.723614][T12531] FAULT_INJECTION: forcing a failure. [ 340.723614][T12531] name failslab, interval 1, probability 0, space 0, times 0 [ 340.723647][T12531] CPU: 1 UID: 0 PID: 12531 Comm: syz.7.2518 Not tainted syzkaller #0 PREEMPT(lazy) [ 340.723685][T12531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 340.723705][T12531] Call Trace: [ 340.723716][T12531] [ 340.723728][T12531] __dump_stack+0x1d/0x30 [ 340.723764][T12531] dump_stack_lvl+0x95/0xd0 [ 340.723838][T12531] dump_stack+0x15/0x1b [ 340.723870][T12531] should_fail_ex+0x262/0x280 [ 340.723982][T12531] should_failslab+0x8c/0xb0 [ 340.724071][T12531] __kvmalloc_node_noprof+0x168/0x5c0 [ 340.724135][T12531] ? alloc_netdev_mqs+0xa7/0xa90 [ 340.724242][T12531] ? alloc_netdev_mqs+0xa7/0xa90 [ 340.724270][T12531] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 340.724319][T12531] alloc_netdev_mqs+0xa7/0xa90 [ 340.724357][T12531] __ip_tunnel_create+0x2b1/0x420 [ 340.724386][T12531] ip_tunnel_ctl+0x39c/0x760 [ 340.724546][T12531] ipgre_tunnel_ctl+0x20d/0x540 [ 340.724633][T12531] ip_tunnel_siocdevprivate+0x77/0xe0 [ 340.724665][T12531] dev_ifsioc+0x8f5/0xfc0 [ 340.724698][T12531] dev_ioctl+0x78c/0x960 [ 340.724760][T12531] sock_ioctl+0x58f/0x610 [ 340.724797][T12531] ? __pfx_sock_ioctl+0x10/0x10 [ 340.724898][T12531] __se_sys_ioctl+0xce/0x140 [ 340.724945][T12531] __x64_sys_ioctl+0x43/0x50 [ 340.725060][T12531] x64_sys_call+0x239d/0x2550 [ 340.725101][T12531] do_syscall_64+0x112/0x360 [ 340.725132][T12531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.725186][T12531] RIP: 0033:0x7f142babe159 [ 340.725228][T12531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.725257][T12531] RSP: 002b:00007f142a4f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.725359][T12531] RAX: ffffffffffffffda RBX: 00007f142bd46090 RCX: 00007f142babe159 [ 340.725439][T12531] RDX: 0000200000000280 RSI: 00000000000089f1 RDI: 0000000000000003 [ 340.725455][T12531] RBP: 00007f142a4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.725469][T12531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.725483][T12531] R13: 00007f142bd46128 R14: 00007f142bd46090 R15: 00007ffc810a88e8 [ 340.725520][T12531] [ 340.780801][T11648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.933473][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.045853][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 341.045873][ T29] audit: type=1400 audit(1791010726.076:4825): avc: denied { create } for pid=12534 comm="syz.0.2521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_selinux_socket permissive=1 [ 341.059313][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2523'. [ 341.160109][T12544] loop0: detected capacity change from 0 to 1024 [ 341.173160][T12544] EXT4-fs: quotafile must be on filesystem root [ 341.187858][T12544] loop0: detected capacity change from 0 to 512 [ 341.200787][T12552] loop9: detected capacity change from 0 to 512 [ 341.230993][T12552] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.2525: corrupted in-inode xattr: invalid ea_ino [ 341.231139][T12552] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 341.231331][T12552] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.2525: couldn't read orphan inode 15 (err -117) [ 341.231417][T12552] loop9: lost filesystem error report for type 5 error -117 [ 341.232108][T12552] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.235875][ T29] audit: type=1400 audit(1791010726.266:4826): avc: denied { write } for pid=12545 comm="syz.9.2525" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.240616][ T29] audit: type=1400 audit(1791010726.266:4827): avc: denied { write } for pid=12545 comm="syz.9.2525" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.240730][ T29] audit: type=1400 audit(1791010726.266:4828): avc: denied { rmdir } for pid=12545 comm="syz.9.2525" name="A" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 341.244924][ T29] audit: type=1400 audit(1791010726.276:4829): avc: denied { ioctl } for pid=12545 comm="syz.9.2525" path="socket:[34462]" dev="sockfs" ino=34462 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 341.247178][T12552] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2525'. [ 341.254305][ T29] audit: type=1400 audit(1791010726.276:4830): avc: denied { watch } for pid=12545 comm="syz.9.2525" path="/34/file0" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.268403][T12544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.268841][T12544] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.275416][ T29] audit: type=1326 audit(1791010726.296:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.9.2525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67a77e159 code=0x7ffc0000 [ 341.275872][ T29] audit: type=1326 audit(1791010726.296:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.9.2525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67a77e159 code=0x7ffc0000 [ 341.276459][ T29] audit: type=1326 audit(1791010726.306:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.9.2525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67a77e159 code=0x7ffc0000 [ 341.277359][ T29] audit: type=1326 audit(1791010726.306:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.9.2525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd67a77e159 code=0x7ffc0000 [ 341.290420][T12552] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2525'. [ 341.444046][T12552] bond0 (unregistering): Released all slaves [ 341.515431][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.621278][T12568] loop0: detected capacity change from 0 to 512 [ 341.622419][T12568] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 341.628960][T12568] EXT4-fs (loop0): 1 truncate cleaned up [ 341.629585][T12568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.697264][T12573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.698966][T12573] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.2531: corrupted inode contents [ 341.699225][T12573] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #15: comm syz.2.2531: mark_inode_dirty error [ 341.699442][T12573] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.2531: corrupted inode contents [ 341.699695][T12573] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.2531: mark_inode_dirty error [ 341.699885][T12573] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.2531: corrupted inode contents [ 341.700129][T12573] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.2531: mark_inode_dirty error [ 341.700349][T12573] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.2531: corrupted inode contents [ 341.700576][T12573] EXT4-fs error (device loop2): ext4_truncate:4721: inode #15: comm syz.2.2531: mark_inode_dirty error [ 341.700763][T12573] EXT4-fs error (device loop2) in ext4_setattr:6247: Corrupt filesystem [ 341.702658][T12573] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.2531: corrupted inode contents [ 341.954804][T12584] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz.2.2531: directory missing '..' [ 341.995044][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2533'. [ 342.501544][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.530761][ T3301] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 342.530992][ T3301] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 342.531153][ T3301] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 342.533799][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.603572][T12613] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.604961][T12613] ext4 filesystem being mounted at /558/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 342.654256][T11648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.718744][T12617] SELinux: Context system_u:object_r:gpg_agent_exec_t:s0 is not valid (left unmapped). [ 342.733553][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 342.764275][T12628] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.767143][T12628] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 342.921752][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2538'. [ 342.939029][T12632] EXT4-fs: quotafile must be on filesystem root [ 343.034771][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.077360][T12647] FAULT_INJECTION: forcing a failure. [ 343.077360][T12647] name failslab, interval 1, probability 0, space 0, times 0 [ 343.077396][T12647] CPU: 0 UID: 0 PID: 12647 Comm: syz.5.2542 Not tainted syzkaller #0 PREEMPT(lazy) [ 343.077428][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 343.077447][T12647] Call Trace: [ 343.077465][T12647] [ 343.077476][T12647] __dump_stack+0x1d/0x30 [ 343.077510][T12647] dump_stack_lvl+0x95/0xd0 [ 343.077540][T12647] dump_stack+0x15/0x1b [ 343.077567][T12647] should_fail_ex+0x262/0x280 [ 343.077671][T12647] ? __alloc_skb+0x2e0/0x6f0 [ 343.077810][T12647] should_failslab+0x8c/0xb0 [ 343.077883][T12647] kmem_cache_alloc_node_noprof+0x82/0x400 [ 343.077928][T12647] ? __alloc_skb+0x2e0/0x6f0 [ 343.078163][T12647] __alloc_skb+0x2e0/0x6f0 [ 343.078207][T12647] ? __alloc_skb+0x209/0x6f0 [ 343.078250][T12647] netlink_dump+0x10d/0x870 [ 343.078293][T12647] ? should_failslab+0x8c/0xb0 [ 343.078387][T12647] ? __kmalloc_cache_noprof+0x19b/0x400 [ 343.078441][T12647] __netlink_dump_start+0x435/0x520 [ 343.078499][T12647] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 343.078626][T12647] ? __pfx_genl_start+0x10/0x10 [ 343.078661][T12647] ? __pfx_genl_dumpit+0x10/0x10 [ 343.078723][T12647] ? __pfx_genl_done+0x10/0x10 [ 343.078757][T12647] genl_rcv_msg+0x3fd/0x470 [ 343.078790][T12647] ? __pfx_netdev_nl_qstats_get_dumpit+0x10/0x10 [ 343.078919][T12647] netlink_rcv_skb+0x11e/0x220 [ 343.078962][T12647] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.079003][T12647] genl_rcv+0x28/0x40 [ 343.079131][T12647] netlink_unicast+0x5a9/0x680 [ 343.079310][T12647] netlink_sendmsg+0x5be/0x6f0 [ 343.079339][T12647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.079366][T12647] ____sys_sendmsg+0x532/0x580 [ 343.079402][T12647] ___sys_sendmsg+0x195/0x1e0 [ 343.079517][T12647] __x64_sys_sendmsg+0xd4/0x160 [ 343.079554][T12647] x64_sys_call+0x22ab/0x2550 [ 343.079592][T12647] do_syscall_64+0x112/0x360 [ 343.079626][T12647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.079653][T12647] RIP: 0033:0x7fc2b5d6e159 [ 343.079749][T12647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.079775][T12647] RSP: 002b:00007fc2b47c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.079803][T12647] RAX: ffffffffffffffda RBX: 00007fc2b5ff5fa0 RCX: 00007fc2b5d6e159 [ 343.079823][T12647] RDX: 0000000020008080 RSI: 0000200000000180 RDI: 0000000000000003 [ 343.079842][T12647] RBP: 00007fc2b47c7090 R08: 0000000000000000 R09: 0000000000000000 [ 343.079856][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.079890][T12647] R13: 00007fc2b5ff6038 R14: 00007fc2b5ff5fa0 R15: 00007ffe89f4c8e8 [ 343.079918][T12647] [ 343.194327][T12632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.194731][T12632] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.372820][T11648] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.381402][T12657] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.387459][T12657] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 343.478583][T11064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.698750][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2543'. [ 344.044458][ T7440] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.156658][T12702] set_capacity_and_notify: 6 callbacks suppressed [ 344.156688][T12702] loop5: detected capacity change from 0 to 1024 [ 344.181728][T12702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 344.181803][T12702] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.363655][T12702] EXT4-fs (loop5): shut down requested (0) [ 344.528922][T12712] loop0: detected capacity change from 0 to 1024 [ 344.552784][T12712] EXT4-fs: quotafile must be on filesystem root [ 344.605427][T12712] loop0: detected capacity change from 0 to 512 [ 344.709862][T12712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.709944][T12712] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.623662][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.660302][ T7440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 345.783367][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'. [ 345.816840][T12733] netlink: 'syz.0.2563': attribute type 21 has an invalid length. [ 345.817093][T12741] loop5: detected capacity change from 0 to 512 [ 345.818660][T12741] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 345.846839][T12741] EXT4-fs (loop5): 1 truncate cleaned up [ 345.847233][T12741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.920964][ T7440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.015899][T12749] loop5: detected capacity change from 0 to 8192 [ 346.143053][ T29] kauditd_printk_skb: 794 callbacks suppressed [ 346.143072][ T29] audit: type=1400 audit(1791010731.173:5629): avc: denied { mounton } for pid=12748 comm="syz.5.2565" path="/259/file0/file0" dev="loop5" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 346.183209][ T29] audit: type=1326 audit(1791010731.213:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.2565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 346.184007][ T29] audit: type=1326 audit(1791010731.213:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.2565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 346.184164][ T29] audit: type=1326 audit(1791010731.213:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.2565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 346.184398][ T29] audit: type=1326 audit(1791010731.213:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.2565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 346.187753][ T29] audit: type=1326 audit(1791010731.213:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.2565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 346.191248][ T29] audit: type=1326 audit(1791010731.223:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.2565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 346.191435][ T29] audit: type=1326 audit(1791010731.223:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.2565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 346.194944][ T29] audit: type=1326 audit(1791010731.223:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.2565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 346.195141][ T29] audit: type=1326 audit(1791010731.223:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.2565" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7ffc0000 [ 346.454250][T12759] loop2: detected capacity change from 0 to 256 [ 346.496547][T12762] gretap0: entered promiscuous mode [ 346.622749][T12765] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2571'. [ 346.628264][T12765] bridge_slave_0: left allmulticast mode [ 346.628338][T12765] bridge_slave_0: left promiscuous mode [ 346.628751][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.848589][T12781] loop7: detected capacity change from 0 to 512 [ 346.889509][T12781] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.889617][T12781] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.917461][T12759] tipc: Resetting bearer [ 346.918428][T12759] tipc: Resetting bearer [ 346.958705][T12781] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.2576: corrupted xattr block 33: invalid checksum [ 346.983326][T12781] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 347.082329][T11064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.177064][T12759] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 347.188233][T12799] tap0: tun_chr_ioctl cmd 1074025677 [ 347.188409][T12799] tap0: linktype set to 769 [ 347.392949][T12810] loop2: detected capacity change from 0 to 512 [ 347.440211][T12810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.440490][T12810] ext4 filesystem being mounted at /522/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.449513][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2583'. [ 347.946091][T12810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.004841][T12821] loop2: detected capacity change from 0 to 512 [ 348.020335][T12822] loop9: detected capacity change from 0 to 8192 [ 348.088805][T12821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.088879][T12821] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.204310][T12821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2585'. [ 348.356705][T12821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.360423][T12835] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 348.441118][T12841] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 348.454029][T12841] EXT4-fs (loop9): 1 truncate cleaned up [ 348.454420][T12841] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.710788][T12856] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2596'. [ 348.811990][T12865] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.812021][T12865] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.812099][T12865] bridge_slave_0: entered allmulticast mode [ 348.812657][T12865] bridge_slave_0: entered promiscuous mode [ 348.813011][T12865] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.813046][T12865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.813986][T12865] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2599'. [ 348.814300][T12865] bridge_slave_0: left allmulticast mode [ 348.814327][T12865] bridge_slave_0: left promiscuous mode [ 348.814589][T12865] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.212424][T12874] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2602'. [ 349.233183][T12876] set_capacity_and_notify: 6 callbacks suppressed [ 349.233205][T12876] loop7: detected capacity change from 0 to 256 [ 349.333018][T12883] netlink: 656 bytes leftover after parsing attributes in process `syz.9.2606'. [ 349.333066][T12883] netlink: 656 bytes leftover after parsing attributes in process `syz.9.2606'. [ 349.335421][T12883] loop9: detected capacity change from 0 to 512 [ 349.336379][T12883] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 349.336403][T12883] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 349.337615][T12883] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 349.338724][T12883] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 349.338834][T12883] System zones: 0-2, 18-18, 34-35 [ 349.502561][T12887] loop9: detected capacity change from 0 to 512 [ 349.592752][T12898] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2610'. [ 349.593042][T12898] bridge_slave_0: left allmulticast mode [ 349.593067][T12898] bridge_slave_0: left promiscuous mode [ 349.593191][T12898] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.643551][T12902] loop9: detected capacity change from 0 to 164 [ 349.687718][T12906] loop2: detected capacity change from 0 to 164 [ 350.875664][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.876497][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.877238][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.877984][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.881145][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.883058][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.884577][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.886269][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.888122][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.893147][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.894891][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.896426][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.898141][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.902418][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.904489][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.906388][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.908533][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.913085][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.915604][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.916332][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.917068][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.918017][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.925076][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.941659][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 350.945299][T12917] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 350.950642][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 351.000179][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 351.001058][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 351.004961][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 351.008333][T12918] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2616'. [ 351.008406][T12918] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2616'. [ 351.008507][T12918] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2616'. [ 351.012865][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 351.097047][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 351.120990][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 351.130748][T12916] 9pnet_fd: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1 [ 351.153234][T12916] 9pnet_virtio: no channels available for device 127.0.0.1 [ 351.225530][T12921] loop7: detected capacity change from 0 to 512 [ 351.270931][T12921] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 351.271005][T12921] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 351.287107][T12921] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 351.299740][T12921] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 351.299831][T12921] System zones: 0-2, 18-18, 34-34 [ 351.358731][T12918] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2616'. [ 351.358754][T12918] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2616'. [ 351.358769][T12918] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2616'. [ 351.387619][T12921] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.2616: bad orphan inode 15 [ 351.387714][T12921] loop7: lost filesystem error report for type 5 error -117 [ 351.391078][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 351.391113][ C1] EXT4-fs (loop7): initial error at time 1791010736: ext4_orphan_get:1429 [ 351.391146][ C1] EXT4-fs (loop7): last error at time 1791010736: ext4_orphan_get:1429 [ 351.395530][T12921] ext4_test_bit(bit=14, block=18) = 1 [ 351.395585][T12921] is_bad_inode(inode)=0 [ 351.395634][T12921] NEXT_ORPHAN(inode)=2264924160 [ 351.395658][T12921] max_ino=32 [ 351.395680][T12921] i_nlink=0 [ 351.402046][T12921] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2616: corrupted inode contents [ 351.402121][T12921] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 351.426488][T12921] EXT4-fs error (device loop7): ext4_dirty_inode:6736: inode #15: comm syz.7.2616: mark_inode_dirty error [ 351.426584][T12921] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 351.429497][T12921] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #15: comm syz.7.2616: corrupted inode contents [ 351.429588][T12921] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 351.429758][T12921] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.2616: mark_inode_dirty error [ 351.431459][T12921] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 351.442468][T12921] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2965: inode #15: comm syz.7.2616: mark inode dirty (error -117) [ 351.442572][T12921] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 351.443330][T12921] EXT4-fs warning (device loop7): ext4_evict_inode:288: xattr delete (err -117) [ 351.582837][T12918] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2616'. [ 351.582866][T12918] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2616'. [ 351.582886][T12918] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2616'. [ 351.596441][T12930] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2620'. [ 351.638922][T12934] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.675757][T12938] bridge0: port 2(bridge_slave_0) entered blocking state [ 351.675803][T12938] bridge0: port 2(bridge_slave_0) entered disabled state [ 351.675959][T12938] bridge_slave_0: entered allmulticast mode [ 351.676611][T12938] bridge_slave_0: entered promiscuous mode [ 351.676870][T12938] bridge0: port 2(bridge_slave_0) entered blocking state [ 351.676907][T12938] bridge0: port 2(bridge_slave_0) entered forwarding state [ 351.688837][T12938] bridge_slave_0: left allmulticast mode [ 351.688920][T12938] bridge_slave_0: left promiscuous mode [ 351.689243][T12938] bridge0: port 2(bridge_slave_0) entered disabled state [ 351.710140][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.713302][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.713389][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 351.771623][T12934] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.818422][T12946] loop0: detected capacity change from 0 to 128 [ 351.839225][T12946] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.845523][T12934] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.876304][T12949] FAULT_INJECTION: forcing a failure. [ 351.876304][T12949] name failslab, interval 1, probability 0, space 0, times 0 [ 351.876430][T12949] CPU: 1 UID: 0 PID: 12949 Comm: syz.7.2627 Not tainted syzkaller #0 PREEMPT(lazy) [ 351.876467][T12949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 351.876532][T12949] Call Trace: [ 351.876601][T12949] [ 351.876613][T12949] __dump_stack+0x1d/0x30 [ 351.876648][T12949] dump_stack_lvl+0x95/0xd0 [ 351.876721][T12949] dump_stack+0x15/0x1b [ 351.876751][T12949] should_fail_ex+0x262/0x280 [ 351.876811][T12949] ? __alloc_skb+0x2e0/0x6f0 [ 351.876858][T12949] should_failslab+0x8c/0xb0 [ 351.876903][T12949] kmem_cache_alloc_node_noprof+0x82/0x400 [ 351.876968][T12949] ? __alloc_skb+0x2e0/0x6f0 [ 351.877074][T12949] __alloc_skb+0x2e0/0x6f0 [ 351.877118][T12949] ? __alloc_skb+0x209/0x6f0 [ 351.877164][T12949] netlink_ack+0xfd/0x530 [ 351.877276][T12949] netlink_rcv_skb+0x18d/0x220 [ 351.877397][T12949] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 351.877449][T12949] rtnetlink_rcv+0x1c/0x30 [ 351.877486][T12949] netlink_unicast+0x5a9/0x680 [ 351.877572][T12949] netlink_sendmsg+0x5be/0x6f0 [ 351.877610][T12949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.877637][T12949] ____sys_sendmsg+0x532/0x580 [ 351.877743][T12949] ___sys_sendmsg+0x195/0x1e0 [ 351.877792][T12949] __x64_sys_sendmsg+0xd4/0x160 [ 351.877829][T12949] x64_sys_call+0x22ab/0x2550 [ 351.877865][T12949] do_syscall_64+0x112/0x360 [ 351.877902][T12949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.877983][T12949] RIP: 0033:0x7f142babe159 [ 351.878006][T12949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.878034][T12949] RSP: 002b:00007f142a517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.878062][T12949] RAX: ffffffffffffffda RBX: 00007f142bd45fa0 RCX: 00007f142babe159 [ 351.878163][T12949] RDX: 00000000000080c0 RSI: 0000200000000000 RDI: 0000000000000003 [ 351.878228][T12949] RBP: 00007f142a517090 R08: 0000000000000000 R09: 0000000000000000 [ 351.878323][T12949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.878350][T12949] R13: 00007f142bd46038 R14: 00007f142bd45fa0 R15: 00007ffc810a88e8 [ 351.878378][T12949] [ 351.897896][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 351.897949][ T29] audit: type=1400 audit(1791010736.930:6113): avc: denied { read } for pid=12945 comm="syz.0.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 351.957200][ T29] audit: type=1400 audit(1791010736.990:6114): avc: denied { write } for pid=12945 comm="syz.0.2626" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.959852][T12934] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.971498][ T29] audit: type=1400 audit(1791010737.010:6115): avc: denied { name_bind } for pid=12945 comm="syz.0.2626" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 351.978234][ T29] audit: type=1400 audit(1791010737.010:6116): avc: denied { setattr } for pid=12945 comm="syz.0.2626" path="/580/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 351.982963][ T29] audit: type=1400 audit(1791010737.020:6117): avc: denied { write } for pid=12945 comm="syz.0.2626" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.983092][ T29] audit: type=1400 audit(1791010737.020:6118): avc: denied { create } for pid=12945 comm="syz.0.2626" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 351.984491][ T29] audit: type=1400 audit(1791010737.020:6119): avc: denied { read write } for pid=12945 comm="syz.0.2626" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 351.984659][ T29] audit: type=1400 audit(1791010737.020:6120): avc: denied { open } for pid=12945 comm="syz.0.2626" path="/580/file1/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 352.074137][T11492] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.167749][T11493] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.168063][T11493] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.168183][T11493] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.342754][ T29] audit: type=1400 audit(1791010737.380:6121): avc: denied { getopt } for pid=12956 comm="syz.7.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 352.365057][T12959] loop9: detected capacity change from 0 to 164 [ 352.514134][T12969] FAULT_INJECTION: forcing a failure. [ 352.514134][T12969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.514183][T12969] CPU: 0 UID: 0 PID: 12969 Comm: syz.7.2635 Not tainted syzkaller #0 PREEMPT(lazy) [ 352.514216][T12969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 352.514230][T12969] Call Trace: [ 352.514239][T12969] [ 352.514249][T12969] __dump_stack+0x1d/0x30 [ 352.514283][T12969] dump_stack_lvl+0x95/0xd0 [ 352.514381][T12969] dump_stack+0x15/0x1b [ 352.514409][T12969] should_fail_ex+0x262/0x280 [ 352.514446][T12969] should_fail+0xb/0x20 [ 352.514473][T12969] should_fail_usercopy+0x1a/0x20 [ 352.514568][T12969] _copy_from_user+0x1c/0xb0 [ 352.514608][T12969] ___sys_sendmsg+0xc1/0x1e0 [ 352.514719][T12969] __x64_sys_sendmsg+0xd4/0x160 [ 352.514746][T12969] x64_sys_call+0x22ab/0x2550 [ 352.514794][T12969] do_syscall_64+0x112/0x360 [ 352.514886][T12969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.514909][T12969] RIP: 0033:0x7f142babe159 [ 352.514926][T12969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.514949][T12969] RSP: 002b:00007f142a517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.514977][T12969] RAX: ffffffffffffffda RBX: 00007f142bd45fa0 RCX: 00007f142babe159 [ 352.515020][T12969] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 352.515038][T12969] RBP: 00007f142a517090 R08: 0000000000000000 R09: 0000000000000000 [ 352.515056][T12969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.515073][T12969] R13: 00007f142bd46038 R14: 00007f142bd45fa0 R15: 00007ffc810a88e8 [ 352.515101][T12969] [ 352.530185][T12967] loop5: detected capacity change from 0 to 512 [ 352.557444][T12972] bridge0: port 2(bridge_slave_0) entered blocking state [ 352.557577][T12972] bridge0: port 2(bridge_slave_0) entered disabled state [ 352.557865][T12972] bridge_slave_0: entered allmulticast mode [ 352.591409][T12972] bridge_slave_0: entered promiscuous mode [ 352.594276][T12972] bridge0: port 2(bridge_slave_0) entered blocking state [ 352.594315][T12972] bridge0: port 2(bridge_slave_0) entered forwarding state [ 352.608349][T12972] bridge_slave_0: left allmulticast mode [ 352.608394][T12972] bridge_slave_0: left promiscuous mode [ 352.608923][T12972] bridge0: port 2(bridge_slave_0) entered disabled state [ 352.669289][T12967] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.972137][T12977] loop7: detected capacity change from 0 to 512 [ 352.973317][T12977] EXT4-fs: Ignoring removed orlov option [ 352.995849][T12977] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.028038][T12977] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.2638: corrupted in-inode xattr: e_value size too large [ 353.028191][T12977] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 353.029885][T12977] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.2638: couldn't read orphan inode 15 (err -117) [ 353.029914][T12977] loop7: lost filesystem error report for type 5 error -117 [ 353.118624][ T29] audit: type=1400 audit(1791010738.161:6123): avc: denied { create } for pid=12976 comm="syz.7.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 353.156906][T12970] EXT4-fs: Ignoring removed bh option [ 353.157913][T12970] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 353.285776][T12983] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.2640: corrupted inode contents [ 353.285987][T12983] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #15: comm syz.2.2640: mark_inode_dirty error [ 353.286232][T12983] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.2640: corrupted inode contents [ 353.286452][T12983] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.2640: mark_inode_dirty error [ 353.286600][T12983] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.2640: corrupted inode contents [ 353.286779][T12983] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.2640: mark_inode_dirty error [ 353.286981][T12983] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.2640: corrupted inode contents [ 353.287253][T12983] EXT4-fs error (device loop2): ext4_truncate:4721: inode #15: comm syz.2.2640: mark_inode_dirty error [ 353.287441][T12983] EXT4-fs error (device loop2) in ext4_setattr:6247: Corrupt filesystem [ 353.288528][T12983] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.2640: corrupted inode contents [ 353.546368][T13000] EXT4-fs warning (device loop2): ext4_empty_dir:3106: inode #12: comm syz.2.2640: directory missing '..' [ 353.583669][T13010] Cannot find del_set index 2 as target [ 353.615246][T13008] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.650251][T13008] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.677450][T13008] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.712678][T13008] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.907846][T13023] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.907884][T13023] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.907980][T13023] bridge_slave_0: entered allmulticast mode [ 353.908721][T13023] bridge_slave_0: entered promiscuous mode [ 353.908933][T13023] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.908973][T13023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.910278][T13023] bridge_slave_0: left allmulticast mode [ 353.910357][T13023] bridge_slave_0: left promiscuous mode [ 353.910741][T13023] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.041337][T13016] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 354.043375][T13016] JBD2: no valid journal superblock found [ 354.043389][T13016] EXT4-fs (loop0): Could not load journal inode [ 354.149032][ T3301] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 354.149285][ T3301] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 354.149462][ T3301] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 354.736935][T13029] set_capacity_and_notify: 6 callbacks suppressed [ 354.736960][T13029] loop2: detected capacity change from 0 to 8192 [ 354.992645][T13037] loop9: detected capacity change from 0 to 164 [ 355.021543][T13037] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 355.191528][T13037] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 355.263723][T13042] loop7: detected capacity change from 0 to 512 [ 355.264071][T13042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.320851][T13042] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.476915][T13037] 9p: Bad value for 'rfdno' [ 355.618884][T13053] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002 [ 355.921137][T13069] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 355.921295][T13069] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20001 [ 355.968878][T13070] loop9: detected capacity change from 0 to 8192 [ 355.975489][T13070] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 356.097347][T13077] loop7: detected capacity change from 0 to 164 [ 356.238902][T13080] tipc: Resetting bearer [ 356.241719][T13080] tipc: Resetting bearer [ 356.290162][T13080] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 356.305368][T13080] __nla_validate_parse: 9 callbacks suppressed [ 356.305428][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2667'. [ 356.503550][T13085] FAULT_INJECTION: forcing a failure. [ 356.503550][T13085] name failslab, interval 1, probability 0, space 0, times 0 [ 356.503628][T13085] CPU: 0 UID: 0 PID: 13085 Comm: syz.2.2668 Not tainted syzkaller #0 PREEMPT(lazy) [ 356.503741][T13085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 356.503848][T13085] Call Trace: [ 356.503855][T13085] [ 356.503866][T13085] __dump_stack+0x1d/0x30 [ 356.503900][T13085] dump_stack_lvl+0x95/0xd0 [ 356.503931][T13085] dump_stack+0x15/0x1b [ 356.504032][T13085] should_fail_ex+0x262/0x280 [ 356.504122][T13085] ? snd_seq_pool_new+0x32/0xe0 [ 356.504146][T13085] should_failslab+0x8c/0xb0 [ 356.504185][T13085] __kmalloc_cache_noprof+0x7a/0x400 [ 356.504217][T13085] ? snd_seq_pool_new+0x32/0xe0 [ 356.504313][T13085] ? snd_seq_fifo_new+0x31/0x110 [ 356.504341][T13085] snd_seq_pool_new+0x32/0xe0 [ 356.504426][T13085] snd_seq_fifo_new+0x44/0x110 [ 356.504517][T13085] snd_seq_open+0x142/0x300 [ 356.504564][T13085] ? __pfx_snd_seq_open+0x10/0x10 [ 356.504594][T13085] snd_open+0x23b/0x290 [ 356.504629][T13085] chrdev_open+0x2eb/0x3a0 [ 356.504653][T13085] do_dentry_open+0x49f/0xa60 [ 356.504721][T13085] ? __pfx_chrdev_open+0x10/0x10 [ 356.504747][T13085] ? may_open+0x1ee/0x350 [ 356.504818][T13085] vfs_open+0x37/0x1e0 [ 356.504895][T13085] path_openat+0xc01/0x10d0 [ 356.504954][T13085] ? kstrtouint+0x76/0xc0 [ 356.504983][T13085] do_file_open+0x16c/0x290 [ 356.505032][T13085] do_sys_openat2+0xa0/0x130 [ 356.505152][T13085] __x64_sys_openat+0xf2/0x120 [ 356.505181][T13085] x64_sys_call+0x1f72/0x2550 [ 356.505206][T13085] do_syscall_64+0x112/0x360 [ 356.505232][T13085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.505353][T13085] RIP: 0033:0x7fbbecdae159 [ 356.505372][T13085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.505392][T13085] RSP: 002b:00007fbbeb807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 356.505459][T13085] RAX: ffffffffffffffda RBX: 00007fbbed035fa0 RCX: 00007fbbecdae159 [ 356.505478][T13085] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 356.505498][T13085] RBP: 00007fbbeb807090 R08: 0000000000000000 R09: 0000000000000000 [ 356.505561][T13085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.505579][T13085] R13: 00007fbbed036038 R14: 00007fbbed035fa0 R15: 00007fffd4b08ea8 [ 356.505599][T13085] [ 356.821504][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.940714][T13091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.940932][T13091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.952262][T11491] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.961345][ T4584] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.962946][T11491] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.963006][T11491] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.081615][T13102] xt_hl: Unknown Hop Limit match mode: 221 [ 357.168803][T13104] loop0: detected capacity change from 0 to 8192 [ 357.168941][T13109] loop5: detected capacity change from 0 to 1024 [ 357.186961][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 357.186982][ T29] audit: type=1326 audit(1791010742.226:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13099 comm="syz.5.2676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2b5d6e159 code=0x7f7c0000 [ 357.316964][T13106] loop2: detected capacity change from 0 to 1024 [ 357.319584][T13106] EXT4-fs: Ignoring removed mblk_io_submit option [ 357.321037][T13106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 357.345091][T13106] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 357.399477][T13106] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.2678: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 357.399612][T13106] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 357.401644][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 357.401671][ C0] EXT4-fs (loop2): initial error at time 1791010742: ext4_ext_check_inode:521: inode 11 [ 357.401709][ C0] EXT4-fs (loop2): last error at time 1791010742: ext4_ext_check_inode:521: inode 11 [ 357.422642][T13106] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.2678: couldn't read orphan inode 11 (err -117) [ 357.422813][T13106] loop2: lost filesystem error report for type 5 error -117 [ 357.477544][ T29] audit: type=1326 audit(1791010742.517:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13101 comm="syz.0.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e9cbe159 code=0x7ffc0000 [ 357.477587][ T29] audit: type=1326 audit(1791010742.517:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13101 comm="syz.0.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e9cbe159 code=0x7ffc0000 [ 357.514624][ T29] audit: type=1326 audit(1791010742.517:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13101 comm="syz.0.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fb5e9cbe159 code=0x7ffc0000 [ 357.567716][ T29] audit: type=1326 audit(1791010742.617:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13101 comm="syz.0.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e9cbe159 code=0x7ffc0000 [ 357.567787][ T29] audit: type=1326 audit(1791010742.617:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13101 comm="syz.0.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e9cbe159 code=0x7ffc0000 [ 357.814679][T13120] loop2: detected capacity change from 0 to 512 [ 357.894936][T13125] loop7: detected capacity change from 0 to 164 [ 358.021598][T13120] EXT4-fs: Ignoring removed orlov option [ 358.682688][T13120] ext4 filesystem being mounted at /544/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.002904][T13133] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.104203][T13148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2686'. [ 359.425708][T13145] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.582819][T13167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2691'. [ 359.996406][T13163] set_capacity_and_notify: 2 callbacks suppressed [ 359.996425][T13163] loop9: detected capacity change from 0 to 8192 [ 360.067094][T13174] loop5: detected capacity change from 0 to 164 [ 360.135553][T13177] loop7: detected capacity change from 0 to 8192 [ 360.234394][T13180] ================================================================== [ 360.234440][T13180] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 360.234492][T13180] [ 360.234499][T13180] write to 0xffff88811e027bdc of 2 bytes by task 13163 on cpu 0: [ 360.234520][T13180] fat16_ent_put+0x28/0x60 [ 360.234561][T13180] fat_ent_write+0x6c/0xe0 [ 360.234597][T13180] fat_chain_add+0x170/0x4c0 [ 360.234619][T13180] fat_add_cluster+0x77/0xe0 [ 360.234636][T13180] fat_fallocate+0x11e/0x1c0 [ 360.234677][T13180] vfs_fallocate+0x3ac/0x400 [ 360.234720][T13180] __x64_sys_fallocate+0x7a/0xd0 [ 360.234752][T13180] x64_sys_call+0x1e1d/0x2550 [ 360.234788][T13180] do_syscall_64+0x112/0x360 [ 360.234816][T13180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.234842][T13180] [ 360.234849][T13180] read to 0xffff88811e027a00 of 512 bytes by task 13180 on cpu 1: [ 360.234865][T13180] fat_mirror_bhs+0x1df/0x330 [ 360.234893][T13180] fat_alloc_clusters+0xb25/0xc40 [ 360.234924][T13180] fat_get_block+0x252/0x5e0 [ 360.234958][T13180] __block_write_begin_int+0x400/0xf90 [ 360.234998][T13180] cont_write_begin+0x5bf/0x920 [ 360.235031][T13180] fat_write_begin+0x52/0xe0 [ 360.235049][T13180] generic_perform_write+0x186/0x490 [ 360.235085][T13180] __generic_file_write_iter+0x9e/0x120 [ 360.235117][T13180] generic_file_write_iter+0x77/0x1f0 [ 360.235144][T13180] __kernel_write_iter+0x30f/0x590 [ 360.235178][T13180] dump_user_range+0xa73/0xd00 [ 360.235220][T13180] elf_core_dump+0x21c0/0x2340 [ 360.235247][T13180] coredump_write+0xafb/0xdd0 [ 360.235290][T13180] vfs_coredump+0x2762/0x3270 [ 360.235328][T13180] get_signal+0xd33/0xf10 [ 360.235361][T13180] arch_do_signal_or_restart+0x96/0x480 [ 360.235393][T13180] irqentry_exit+0x14d/0x610 [ 360.235435][T13180] asm_exc_page_fault+0x26/0x30 [ 360.235460][T13180] [ 360.235464][T13180] Reported by Kernel Concurrency Sanitizer on: [ 360.235475][T13180] CPU: 1 UID: 0 PID: 13180 Comm: syz.9.2696 Not tainted syzkaller #0 PREEMPT(lazy) [ 360.235500][T13180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 360.235512][T13180] ================================================================== [ 360.431153][T13180] syz.9.2696 (13180) used greatest stack depth: 9096 bytes left [ 360.541958][ T29] audit: type=1326 audit(1791010745.591:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.9.2696" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67a77e159 code=0x7ffc0000 [ 360.544897][ T29] audit: type=1326 audit(1791010745.591:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.9.2696" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67a77e159 code=0x7ffc0000 [ 360.577240][ T29] audit: type=1326 audit(1791010745.591:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.9.2696" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd67a77e159 code=0x7ffc0000 [ 360.577477][ T29] audit: type=1326 audit(1791010745.631:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.9.2696" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67a77e159 code=0x7ffc0000