last executing test programs: 8m28.497625951s ago: executing program 32 (id=501): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058"], 0x110}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 7m46.211825643s ago: executing program 33 (id=741): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001c00000004"], 0x20) 7m45.909337161s ago: executing program 34 (id=743): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x9, 0x9743, 0x81, 0x1}) 6m56.586636096s ago: executing program 35 (id=1023): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x4}, 0x4090, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000314010025bd7000ffdbdf250900020073797a3200000000080041007369770014003300766574683100000000000000000000000900020073797a30000000000800410072786500140033007866726d300000000000400000000000"], 0x60}, 0x1, 0x0, 0x0, 0x42044045}, 0x4000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="a497e8e864a07c060002652f26aa05ec0573b3ff6c9f5d2f0bbb9fe0b2f31abe813517fab4a722618b340709064903c370f2a146525d36ded55665b2b3fb6ee91cffcd4474e51c7fb9a3ae5cce312759e114e94f5ff1095cd565282344b74f87ba21d0342db50d2bf2c52c74fa02b547823d60b379f63a54f8ce4ce64c1c6273be2cf341fd1bc88b67d4b3cd87972b9d41de64c9d285c17e2c405c7f796a09b04e12bcac3d697dacb401c551d9e166d7", @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf251500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) unshare(0x22020600) r4 = io_uring_setup(0x6723, &(0x7f0000000340)={0x0, 0x1c499, 0x4, 0x3, 0x2ea}) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0xd87, 0x240) read$usbmon(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) openat(0xffffffffffffff9c, 0x0, 0x545041, 0x0) 6m53.544990698s ago: executing program 36 (id=1042): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x4}, 0x4090, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000314010025bd7000ffdbdf250900020073797a3200000000080041007369770014003300766574683100000000000000000000000900020073797a30000000000800410072786500140033007866726d300000000000400000000000"], 0x60}, 0x1, 0x0, 0x0, 0x42044045}, 0x4000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="a497e8e864a07c060002652f26aa05ec0573b3ff6c9f5d2f0bbb9fe0b2f31abe813517fab4a722618b340709064903c370f2a146525d36ded55665b2b3fb6ee91cffcd4474e51c7fb9a3ae5cce312759e114e94f5ff1095cd565282344b74f87ba21d0342db50d2bf2c52c74fa02b547823d60b379f63a54f8ce4ce64c1c6273be2cf341fd1bc88b67d4b3cd87972b9d41de64c9d285c17e2c405c7f796a09b04e12bcac3d697dacb401c551d9e166d7", @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf251500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) unshare(0x22020600) r4 = io_uring_setup(0x6723, &(0x7f0000000340)={0x0, 0x1c499, 0x4, 0x3, 0x2ea}) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0xd87, 0x240) read$usbmon(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) openat(0xffffffffffffff9c, 0x0, 0x545041, 0x0) 6m50.424169564s ago: executing program 37 (id=1055): socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x5423, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 6m49.685866935s ago: executing program 38 (id=1062): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x400000000000000) 6m47.874150342s ago: executing program 39 (id=1070): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x400000000000000) 6m38.326715435s ago: executing program 8 (id=1115): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340), 0x1, 0x52a, &(0x7f00000004c0)="$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") r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003900)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000003880)='./cgroup/cgroup.procs\x00', &(0x7f00000038c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 6m38.225280979s ago: executing program 8 (id=1117): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401e, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x1, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000040)) 6m38.152369841s ago: executing program 40 (id=1118): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0x7, 0xb3}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xfffffffffffffffe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='$\xad\xe4\\)\xc6\n\x00\x00\x00\x00\x00\x00/r\xfa\xc3\xd7\xff\x0f\xf8\b\x16+g\xcc\xe1\xabs\f\x98v\x98\xd0V\xd0\xf7h\xb9\xf1\xa6\xd9l \xd8\xea\xd7\x8a]k\xb5\xfd(\xa3\xc22MF') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="010000000000000000cef2865a000000f63a6251", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000240)=0xc, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x811) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) umount2(0x0, 0x2) r4 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000400)={[{@auto_da_alloc_val}, {@minixdf}, {@nobarrier}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") sync_file_range(r4, 0xee1, 0x7ff, 0x6) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x7ff, &(0x7f0000000100)=0x1) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000040)) 6m38.032494404s ago: executing program 8 (id=1120): setregid(0xee01, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f00000000c0)='dctcp\x00', 0xfda5) (fail_nth: 3) 6m37.776257212s ago: executing program 8 (id=1122): syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) 6m37.187670391s ago: executing program 41 (id=1124): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 6m36.833083001s ago: executing program 8 (id=1127): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x5d09, &(0x7f0000000100)={0x0, 0x1002881, 0x800, 0x80000, 0x80059}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x25, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6m36.522292881s ago: executing program 1 (id=1132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x8080) 6m36.502376481s ago: executing program 1 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 6m36.196157401s ago: executing program 8 (id=1135): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x221, 0x203, 0xa5, 0x45aa, 0x4, 0xfffffffd, 0xa2f}, 0x20) sendto$inet(r0, &(0x7f0000000100)="ab", 0xfffd, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000026c0)=ANY=[]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) 6m36.195889071s ago: executing program 42 (id=1135): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x221, 0x203, 0xa5, 0x45aa, 0x4, 0xfffffffd, 0xa2f}, 0x20) sendto$inet(r0, &(0x7f0000000100)="ab", 0xfffd, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000026c0)=ANY=[]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) 6m36.195172911s ago: executing program 1 (id=1137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60"], 0x0) 6m35.990859307s ago: executing program 1 (id=1138): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000300), 0xf7, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) 6m35.693341336s ago: executing program 1 (id=1139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4004850) 6m35.59253516s ago: executing program 1 (id=1140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340), 0x1, 0x52a, &(0x7f00000004c0)="$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") r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003900)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000003880)='./cgroup/cgroup.procs\x00', &(0x7f00000038c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 6m35.488793253s ago: executing program 43 (id=1140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340), 0x1, 0x52a, &(0x7f00000004c0)="$eJzs3c1vI2cZAPBnvLHjzabNtvQACNqlLSxotc7G266qHqCcEEKVED2CtA2JN1qtHUexU5qwEumZKxKVOMGRP4BzxYE7FwQ3LlyQ+IhADRISg2Y8Tt3U7no3iR3Fv580mo/Xnud54533jZ+sPQHMrGsRsR8RlYh4OyKWIuInEZEUS7zRW7LHfXjwcO3w4OFaEmn61j+SvD071j9XUqyvFOesRsT3vhXxw+STcTu7ew9Wm83GdrG/3G1tLXd2927eb61uNDYam/X6nZU7t167/Wr91Pr6QqtSbH3xL7/f/9qPs7QWiyOD/RhpSD/Ge0r5KE5mLiK+8/inOpcuFf2pTDsRnkgpIp6NiBfz638pLuWvJgBwkaXpUqRLg/sAwEVXymtgSalW1AIWo1Sq1Xo1vOdiodRsd7o37rV3Ntd7tbKrUS7du99s3CpqhVejnGT7K/n2R/v1Y/u3I+KZiPjZ/OV8v7bWbq5P8xcfAJhhV47N//+e783/AMAFV512AgDAxJn/AWD2mP8BYPaY/wFg9vTm/8vTTgMAmCDv/wFg9pj/AWCmfPfNN7MlPSy+/3r9nd2dB+13bq43Og9qrZ212lp7e6u20W5v5N/Z03rU+Zrt9tbKK7Hz7tWvb3W6y53dvbut9s5m927+vd53G+X8UfsT6BkAMMozL3zwpySbkV+/nC8xcC+H8lQzA85a6WRP/+1p5QFM3qVpJwBMjbt9wew6wXt85QG4IB51a9vqwAeEjmoGaZqmZ5sWcIauf079H2bVQP3f/wKGGaP+D7NL/R9mV5om497zP8Z9IABwvqnxAyP+/v9ssf518ceBH6wff8T7Z5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnG/9+//WinuBL0apVKtFPBURV6Oc3LvfbNyKiKcj4o/z5flsf2XKOQMAJ1X6a1Lc/+v60suLH2t6/srRZiUifvSLt37+7mq3u/2HiEryz/n+8e77xfH65LMHAB6tP0/n64E38h8ePFzrL5PM52/fjIhqL/7hQSUOj+LPxVy+rkY5Ihb+lRT7PclA7eIk9t+LiM8O638Si3kNpHfn0+Pxs9hPTTR+6WPxS3lbb539LD5zCrnArPkgG3/eGHb9leJavh5+/VfzEerkivEvO9XaYT4GfhS/P/5dGjH+XRs3xiu/+3Zv6/In296L+PxcRD/24cD404+fDMSfG4j/8pjx//yF518c1Zb+MuJ6DI8/2NflbmtrubO7d/N+a3WjsdHYrNfvrNy59drtV+vLeY16efRs8PfXbzw9qi3r/8Jg/Iij+NUh/R/M6ctj9v9X/337+1/6lPhffWmw//9L0zTy1/+5T4mfzYlfGTP+6sJvqqPasvjrI37+w17/vuzYjTHjn8Y8DQCcns7u3oPVZrOxfT42khFNlTgvGdo43Y25eJxnZf9kp5/z8I1vTCpWJYY3/fSl3jV9rClNnyjWqBGj+G1+YUIDFHBmji76iPjPYz97ZFkBAAAAAAAAAAAAAAA4RZP4xNK0+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF9f8AAAD//8AdzWI=") r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003900)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000003880)='./cgroup/cgroup.procs\x00', &(0x7f00000038c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 6m35.157052473s ago: executing program 0 (id=1143): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x5d09, &(0x7f0000000100)={0x0, 0x1002881, 0x800, 0x80000, 0x80059}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x25, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, 0x0, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6m35.067236656s ago: executing program 0 (id=1144): setregid(0xee01, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f00000000c0)='dctcp\x00', 0xfda5) 6m34.962252839s ago: executing program 0 (id=1145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60"], 0x0) 6m34.773624615s ago: executing program 0 (id=1146): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000300), 0xf7, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) 6m34.669157238s ago: executing program 0 (id=1147): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x71296d7aec877df0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000200)={[{@nodioread_nolock}, {@noquota}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@data_err_ignore}, {@data_err_ignore}, {@nodiscard}, {@mb_optimize_scan}, {@data_err_ignore}]}, 0x1, 0x5ba, &(0x7f0000002480)="$eJzs3T1sG9cdAPD/HUnLH2rlAi3QFh6MtoALGKYkf7RuJ3stasCAhwJdWoGiBUOUaIhUawkCKu9GUQ9FG3hxtmTImCBDhiBLxqxZ8jEHMGIhASwPCQOKR1mWSZtSRFERfz/gyPfujvz/H4/vkXe4wwUwtE43H9KIX0TE9SRibMuyfGQLT7fWW19bKT1dWykl0Wjc+DKJJCKerK2U2usn2fOJiFiNiJ9HxAeFiLPp5lseaRdqS8uzU5VKeSGrj9fnbo/XlpbP3ZqbminPlOcv/P4Ply5fvDR5fnJruk8bW2uFnbX13qf3/33voz89vP/mW6dWS/+dSuJKjGbLtrZjL7U+k0Jc2Tb/Yj+CDVAy6ATYlVzWz5td6WcxFrms13fS2Do4jOxLekAfNUYiGpu2FIEhkOj0MKTa/wOa+7/taT//fzy62toBacZdX1sp/Sva8fOtYxNxdGPf5PhXyXN7Js39zZP7mSiH0urdiJjI51/8/ifZ92/3JvYiQfrq/autDfXi9k83x5/oMP6Mto+dfk/t8W89G//WO8TPdRn/rvcY45u/fv5a1/h3R+KXHeMnm/GTDvHTiPh7j/Ef/OXdy92WNV6POBOd47clLz8+PH7zVqU80XrsGOO9M6f+2L39Ece7xG8dsz26kcjW9h/Jckp7bP87H779q9WXxP/tr1++/Tt9/sci4j/b6t385Mkbf+627NHd5HHzX8BOt38ShXj4qoZnfnfl9CdZ0VFDAAAAAAAAAADYQ+nGuWxJWtwsp2mx2LqG96dxPK1Ua/WzN6uL89Otc95ORiFtn2k11qonzfpkdj5uu35+W/1CLguYO7ZRL5aqlekBtx0AAAAAAAAAAAAAAAAAAAAOihPbrv//Ordx/f/221UDh1X3W34Dh90O+7/hAg6R5zt0MrA8gP3nBx2GVkP/h+Gl/8Pw0v9heOn/MLw69v9j+58HsP/8/sPw0v8BAAAAAAAAAAAAAAAAAAAAAAAAAKAvrl+71pwaT9dWSs36dH5pcbb6j3PT5dpscW6xVCxVF24XZ6rVmUq5WKrOver9kmr19kTML94Zr5dr9fHa0vLf5qqL8+17ipYLfW8RAAAAAAAAAAAAAAAAAAAA/PCMbkxJWowotOppWixG/CgiTiaR3LxVKU9ExI8j4uNcYaRZnxx00gAAAAAAAAAAAAAAAAAAAHDI1JaWZ6cqlfJC/wr5LFRvr/qs3td88jtZOSJW9zaN5jvu+FWF7APs72bqsZBExAFIY9eF3Ivfw6MHIrGDVhjgoAQAAAAAAAAAAAAAAAAAAEPq2UW/vb7i2/4mBAAAAAAAAAAAAAAAAAAAAEMp/SKJiOZ0Zuw3o9uXHknWcxvPEfHPBzf+d2eqXl+YbM5/vDm//v9s/vlB5A/0Jh/tfppGRLMfAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM/UlpZnpyqV8sIuCyM9rDPoNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsxncBAAD//yZjzMs=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r2, 0x0, 0xfff, 0x9) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4a) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x14c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x1, 0x47f, 0x6, 0x1a, 0x1c, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "0e0b89b5f5bbf0691c71500d2f16a8e9b477346138ebf214e0f22590bce143742db19046169df2ca0d3ebfbc08dc18b4fdca2d5e1fede5f0b3dc4e726b71abdca5e72d595938088f06bb91fb0db0db509cb807c907539351130807b7b408b153c97e808d5e26fddf5f12fff9c78857cabc4031aa241eb463a90f746b866abe6c248fb47a059efa349bcd9102852f5d4e31a5fcabbf719411043ebd148b2b9810e304e6139a66371189b6ed7321a8fc7fcfd160355a99994e1dd4da73c37975375fbf0b409e7724374ddf576148af447c1a14b3869abba66ae551c92bb2631407e613a5b696dbdb31d41c61df9db3b80bbf55d31d6b151cbca6d301e275af61a8"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000101}, 0x0) sendmmsg$inet(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="88481ab52ae0c2c59c2d91bc4466c2e3eb6003a8", 0x14}], 0x1, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8d}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @multicast2}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="4674c30b", 0x4}], 0x1, &(0x7f0000001dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x41}}], 0x18}}], 0x2, 0x40400c4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 6m34.388480127s ago: executing program 0 (id=1148): syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) 6m34.353931218s ago: executing program 44 (id=1148): syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) 6m30.70901811s ago: executing program 7 (id=1119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6m30.284320743s ago: executing program 7 (id=1150): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x5d09, &(0x7f0000000100)={0x0, 0x1002881, 0x800, 0x80000, 0x80059}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x25, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, 0x0, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6m30.159805287s ago: executing program 7 (id=1151): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x400000000000000) 6m29.218051566s ago: executing program 7 (id=1153): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000300), 0xf7, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) 6m28.829042478s ago: executing program 7 (id=1155): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x18, 0x89, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) setresuid(0xee01, 0x0, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x10108, 0x2, 0x8406, 0x9, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xffffff80, @mcast2, 0x65ac52a0}, r4}}, 0x30) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0xfffffffd) listen(0xffffffffffffffff, 0xfffffffd) capset(&(0x7f0000000340)={0x20071026}, 0x0) listen(0xffffffffffffffff, 0x1) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, 0x0, 0x0, 0x4004012, &(0x7f00000000c0)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) sendfile(r2, r2, 0x0, 0xe3aa6ea) close(r0) 6m28.357145522s ago: executing program 7 (id=1158): r0 = socket$inet6(0xa, 0x80003, 0x6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) 6m28.303961893s ago: executing program 45 (id=1158): r0 = socket$inet6(0xa, 0x80003, 0x6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) 2m1.313334318s ago: executing program 9 (id=2612): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) write(r0, &(0x7f00000000c0)="842a", 0x2) (fail_nth: 1) 2m1.004402827s ago: executing program 9 (id=2613): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') getdents64(r3, &(0x7f00000000c0)=""/157, 0x9d) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES64], 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) write(r0, &(0x7f00000001c0)="842a2c4d9b3de81f09dcd8b4ef463d3b97284a7b7629bfa69741ec80f5bce5b97668c030051361bf105c114941c24497e65821feb6b17634264fd79ae034ddb6aa353f9433eb1b3415ce50eeaa0213b70b5b5174568e17c5b9cb75b62d5a637034e1eb81fae3b089e759791a77a9aecc0723aed69f725ffb197fb1870e61b9e94b3e3ab18d3a9d4311d92ef9b76cacbcc746b16a3f43805cc9f62082cb969055524479eefa2ae85a8c8f1d8d6d4b92c5f88b5924bfd80015ae6de138cb02a949660a83fbfa5313187bcf1fd930b6e846f42ba70152e049e1819dbb9353d132541ca67d1c6fea3ea646010258e43571eb72927bab8cab5e43cf9dad897799e8267c97a52f36e42dc9cc0c925b2f422fb522ecbe82e67c1f49a298c3ac96934a5eb5cd350cec8fe0e934de1692af808d82d739e62efc56db61d88de5b98a085c68777a6af2ee7cffe07e78272012255878b571035087ea392b3f07d7aab6cbecea326655a2c6777d4a4dc87ba42a7f53a5584356ba095b2e7933c9878d25f0632a01065a73fb90aa85d6cb4356c7d1d56fd0204c0061a9ef6168e04780367b7c63af889e33c9c6c4dd00622c2219ed58029ceb4167b2727c343c7bfc0512ba4478073969d1bae224dae5ec0cd99c72cf037884c57ac25130b20dc9bf884f", 0x1dd) 2m0.796780733s ago: executing program 9 (id=2616): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)="5c00000012006bab9a3fe37ea60864160af36504001d0000001d001931a0e69ee517d344ac8f06000000a705251eff82949a3651f60a84c9f4d4938037e70e45c5bbfbffa8499c69dd752d0017675e403f1143e40967c4246eeb65bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000008010200000000000000000b0000070500030011000000050003008400000006000240887399772b3bcfdc9b95b67ca8d99608000005000300060000000900010073797a31000000001c00048008000140fffffff708000540000000060800054000000004"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) msgget$private(0x0, 0x10) read$usbmon(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0x1e) getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x25, 0x9}, 0x10c0e8, 0x0, 0x0, 0x0, 0x4, 0x8001, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffdffb) 2m0.762612524s ago: executing program 9 (id=2617): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, '\\srjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) 2m0.651222818s ago: executing program 9 (id=2618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0x7e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(r1, 0xb, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m59.989365958s ago: executing program 9 (id=2621): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x4, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m59.93585862s ago: executing program 46 (id=2621): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x4, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.786231141s ago: executing program 4 (id=3029): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0xc, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4e6}, 0x1162c4, 0x0, 0x4, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0x1f, 0x0, &(0x7f0000000740)="c1df07000000d30a298ee68888a8878f24d9938a94819393018c3d914fa5c8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6.674214214s ago: executing program 4 (id=3033): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r8 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 6.608294366s ago: executing program 3 (id=3035): r0 = socket(0x29, 0x3, 0x800000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000014001f"], 0x38}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x20000400) bind$can_j1939(r1, &(0x7f00000000c0), 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x78}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mount(&(0x7f0000000840)=@sg0, &(0x7f0000000880)='.\x00', &(0x7f00000008c0)='ramfs\x00', 0x808000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 6.594840217s ago: executing program 3 (id=3036): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usbip_server_init(0x6) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x57) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400030002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) preadv(r4, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x5c}], 0x1, 0x62, 0xfd4c) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r6, 0x7}, 0x14}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a80), r8) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000016) close_range(r0, 0xffffffffffffffff, 0x0) 5.491773561s ago: executing program 5 (id=3043): r0 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_mount_image$ext4(&(0x7f0000000e40)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbce, &(0x7f0000000240)="$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") socket(0xa, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nullb, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x3) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000008c0)={0x4813, 0x0, 0x8000}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="31a1b1bb81a6", 'wlan1\x00'}}, 0x1e) 5.432557692s ago: executing program 2 (id=3044): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)="5c00000012006bab9a3fe37ea60864160af36504001d0000001d001931a0e69ee517d344ac8f06000000a705251eff82949a3651f60a84c9f4d4938037e70e45c5bbfbffa8499c69dd752d0017675e403f1143e40967c4", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000008010200000000000000000b0000070500030011000000050003008400000006000240887399772b3bcfdc9b95b67ca8d99608000005000300060000000900010073797a31000000001c00048008000140fffffff708000540000000060800054000000004"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) msgget$private(0x0, 0x10) read$usbmon(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0x1e) getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x25, 0x9}, 0x10c0e8, 0x0, 0x0, 0x0, 0x4, 0x8001, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffdffb) 5.292721027s ago: executing program 2 (id=3046): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000030c0)=""/4103, 0x1007}], 0x1, 0x20, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)=0x0) wait4(r3, &(0x7f0000000380), 0x4, &(0x7f0000000580)) pread64(r2, &(0x7f00000001c0)=""/134, 0x86, 0x7) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80009, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@noextend}, {@aname={'aname', 0x3d, 'pids'}}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@loose}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x5}}, {@msize}]}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0xfffffffffffffffc, &(0x7f0000000340)=0x88) recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000020) fsync(0xffffffffffffffff) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001080)={0x0, 0x2b, 0x1, [0x7, 0x40, 0x4, 0x1d, 0x8], [0x81, 0x80, 0xfffffffffffffffc, 0x2, 0x4, 0xfffffffffffffffb, 0x5, 0x7fffffff, 0x1, 0x1, 0x7, 0xf, 0x8000000000000001, 0xa, 0x10000000000e, 0x80, 0xfffffffffffffff8, 0x7faf, 0x938, 0x8, 0x6, 0xfffffffffffff664, 0x3, 0x80000000, 0xfb, 0x3, 0x20000000007, 0x3, 0x5, 0x400000008000008, 0x3, 0x9, 0xc, 0x6, 0xfffd, 0x4, 0xf4, 0xfffffffbfffdfffa, 0x3, 0x800000000000000, 0x5617, 0x1, 0x2, 0x5, 0x1000002, 0x4, 0x4000006, 0x71, 0x1, 0xfc4, 0x75, 0x40800cb14, 0x3b, 0x80000004, 0x8000000000000001, 0x40000000000756, 0x3, 0x0, 0x1246, 0x3ff, 0x4, 0x642, 0x66, 0x9, 0x1, 0x1, 0x8, 0x401, 0x1, 0x5, 0xc, 0x5, 0xfff, 0xfffffffffffffffe, 0x0, 0x400000000100001, 0xd32d, 0x8, 0x632, 0x7, 0x2, 0x8000000000000000, 0xfffffffffffffffa, 0x1, 0x5, 0x3, 0x7, 0x4, 0xd7, 0x8, 0x3, 0xb, 0x8, 0x8, 0x145, 0x5e9, 0xe51a, 0x40000000053ed, 0x2, 0x80, 0x0, 0x0, 0x402, 0x2, 0x5, 0x8000, 0x4, 0x0, 0xffff, 0x1, 0x19, 0x8, 0x2000000009, 0x4b3, 0x0, 0x34d8, 0xfff2, 0x9, 0xbf7, 0x100000000000b1, 0x8000000000000001]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x30100, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0xffbf) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") gettid() 5.18673282s ago: executing program 6 (id=3048): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 4.626613297s ago: executing program 5 (id=3049): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x8, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000100feffff"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c000) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa0800025dac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x180000, 0x2001, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) r7 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0, 0x0}, &(0x7f0000000040)=0xfd02) ioprio_set$uid(0x3, r2, 0x2004) newfstatat(0xffffffffffffff9c, &(0x7f0000002d40)='./bus\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffff9c, &(0x7f0000002e00)='./file0\x00', 0x0, 0x80, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000c80)="ab362fc6d5a0188e4a75f0b6c2055c21e3a81b32a6dcbf334338cb41ec3e4d16f193bd6a6cbe2d38aaa4aa71dc176b9f717b00adee3745dc9b7e14df35bc3336d4c9e6ad7560d1d3f4ff04feb5e7375a2a7670745d6d25f68a31da1fb813f20ad38ae9503ed8b9d4ee16e6186bc96fe740ca5057f2f046290d1e23eaf7a9fc6cbced0a4c35f50f623ddb29d86c4ab4c3b6b4ba6aa27b530d017b844079bc45cc290063fb3b42dc789e91a2c87625614a0446441b69f2114cb7c94ae55a715f4ca70a9545b475c42eddcabdc802e924a4a8ec153007d58e0ad93e3995b459b9550a1919", 0xe3}, {&(0x7f0000000d80)="e535aa49c97115e3ca38d1c1990e4116010fe5692b47aca1a5d45f8d90ef2575596e26cbd9b4d3d9ee1febf7b5712d032d21ef848da4b334044831a20acfa0892320b92d3c53e28b4ce5e7c239803a66223180603f059679275e25d6459eab0fe93a8282a48bbf79ca93a8ffe0fac92e0f40f414045f56f6b31885eabcbfb4bf504fa59a3329ab2a3778ef931127e56f0042b00e4a3eeba2aab90ffb20cb1e49837589454d7a7e71ae1634c76c499896da21f35fda563bfbefd197f62dc08af27ac2b2f2eef13a9d48acf40c46ac0e0f7d90fb79393c79bee4723a4b7218daf7de5a3c937d0d27d4085f5546ee43a58d95af0d1901ac74c1c84e214e7a4f34", 0xff}, {&(0x7f0000000e80)="bf126485875cba4f34f19881d45ef8c2a9ee343b4d568edadece653bd897bf7c7d7199e9a4d7346a590b317d68be99121d06e31135b63cca80fc4581c59720c6618ac1f4e7707b49813e5a5edad71d9c343afbc3c65187326560e5094c5391f8f09f9ffc390dfed0e36f7bbebfac9cb84422b162c01b5c75cad7c5b69be2bd59b6e4cbc765b31896c1a11c639b74f3948870db2067f841290badfd7ee613a8abe65a7f273b56421b350fa90e0264251ff39e258236b1a883e01b75e2a96969cf20f85d8f3e72561947", 0xc9}, {&(0x7f0000000f80)="2db0e804f38c12a6052da71b36de5c8485c8e46ba7e292a405e8a5253c8ba264092020eb785f7e75b62440c54d60922438b5efd38a36f26df729847f02dbb91cca877a3a454353dd42cc29e35098edd4c4b0d797534bb7ab61aea0922023eace2eeae37746c856f35a0424db74ef50e5f22dec76dddbcee6fb5a5ae5b7962d4d5654a2fa059b20754da0", 0x8a}, {&(0x7f0000001500)="9a618b5ec00cc8e5feac11a7908a58f3ff6f261f4e6276621ce64c9ddfe25e5d745fa033191bc3831dd7853bae3a486c7f49f3b9c803acde43897efb69fb4939cb71bdecbe94acc2c4c3bdabb4de29eb442d37e40844280c256015a062b468f27aae", 0x62}], 0x5, &(0x7f0000001680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x4884}}, {{&(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001740)="a848b9e6a3e0b403a9b919a85430ea86b44968046358ffee229dabb3cff2b436642919f68cce3dc8d0876e7c3108494cba9a44157b4698967b05c77f265c60955dee6931a178fc3ade155b6775ad4f09bbb0094dd664a286e16ae10889cac66a690f5b48ee28c1bde52a5e4cea8e0cbb356d7c0988264671b331946f203d0b937bcf3e37762c3701ced0b97d105642beda6dfa5a73471674cc6ed2b407d6703429fd4fc7128cbca731d6ccafddaa43779d65f0e3fe1da0e07d9dea3191c81668662fa621e1b21ba8c2f1a71e32956d9234c2d2716be12885cdc80fad3fa4007de421108afa", 0xe5}, {&(0x7f0000001840)="792cd4769cc6cf166fd06604aa6cdf37ef56110bfe54adba7de7fa31f6b05dac4af9325af60098d9d02612d839ced440c22b85a3eaacbd279b710311152030a80a0bc55e775970ec908764e94273f081b88b060e367496b96d4fead0b771fb16906d3812a5154d249c56c251e8f43d972a", 0x71}, {&(0x7f00000018c0)="238ae508f6ff06e81874856751d3ae2aee1f5babd73ffb0a3cc0c994d0d330e38fde56e65cac677afded0baee94a13b7c5f9288222dbd551a0b4e3595732136bcb769629f80689e6a1b42b02bd559afe51efd36b2e1f8ee3ee59bb45cab751df066e4003a50ed21d53c74a5851cbbae7a35aee8bfbc4c7cd959014021ea1040671e02fc3f392682b0c9b29f1307aa046fc98ca28", 0x94}, {&(0x7f0000001980)="19ee58706eb31770aa94469306664106577238cdacb41a63da4c03f1c42d606b514053f273ec12a8d5f4a7ff1aac8b820d32f745a03a81ca577c12d27e55c8fed000bc643229e5b281f1e6d11e007614ff970e5f246adcc531d9d824407fffd74aacb59fccac3b1e22eda0faf56c553c65329cf7e651448290c40e1199515e0369411762a805fd877e1da256bfd5f13588d97988991c3e4f62", 0x99}, {&(0x7f0000001a40)="1180a1c1e3c1958387b4b0c93a14258f85708c0d76ca9ceec26fb39a89181a7f52d902535f4b443a0c6d", 0x2a}], 0x5, &(0x7f0000001ec0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x80, 0x44000}}, {{&(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001fc0)="7961f6d45836567d4455f40f5f5e6e3fa65995835aeea941dae05937b2f84c8c4b5a82193927ec76a2519a85d98b443f41a0c110d1c2b034cd6fa4e71fcff379999bbd9ddf2940739819b8a2177501c7731907259d", 0x55}, {&(0x7f0000002040)="5c812eb11d2702244eed3272b0532b2caf4fd80903e2c07865b417d04836d8a88dfa8f934c5dbcbf010fbf1a8ea77d116171e73cea59bb19b9495ad1bf14e5d290dfd003b3d104a2087f75f7af9bb39b457478d60837fcd6447cf0c841b83e8231196d383ff78b668635e20561ca09e29208770ae8da9dc25e97d79db4e71ef2c4f16c6d09fb", 0x86}], 0x2, 0x0, 0x0, 0x8000}}, {{&(0x7f0000002140)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000002480)=[{&(0x7f00000021c0)="a2163b4298", 0x5}, {&(0x7f0000002200)="3715f2ad87fe5bc5740a44a4fd9cb5908b1ffc5dbb39bcbaba597bb15bfac79b1e62f35c98d9d2b4979daf0acf87161cd1a359e76aa4cb2440925ee63d366fcb9ef0aa55cd0c7bd7eca3843ae8303b10a7a0c72f490a803a362c480a7bf42f60b210f886d08809a4ada52e7f3e65a267", 0x70}, {&(0x7f0000002280)="6b7590193d4a6c60bac8f9a5a68562854c93dd366e4f4d24477dd8ff5b30598e6a", 0x21}, {&(0x7f00000022c0)="7575df0f493bdf7a40b1ec44b0dbcca7f94b5c0a5ddcee631f44354dcc3675f7bca160e00c497bddd2db2af8626e23e5006076e4a1341c3e55fb544754b071b31042a4a8fc392f6d2d108b3943029f12976b6593a6cb11c21768a88e6135d1d80aed674f23419afd1802e332cc0b8bf6b1f65cb417407e4c7661d4560ddd42c99f9d816ca6f19979cff0f3", 0x8b}, {&(0x7f0000002380)="4431a931c50f3e826ad4d8e5f42a7df92b4cd9ee924512a75eadbbeffb4785c4f168c4cf7147c5cc96e37c244e61c2ad54c296e7b7c5bd81fdb0000815f640913fdfd9718daa8c6070048ebf214f9ee0650b639357e70860989d545f97f16dc5f8aa526437e2020b637f7f32c9a1c7ec54ed0730ff82f1b721bf1e2a24d3270644f96a9fb552a862f48292b6b2b4b7c9e2f14530fbe367de0ba0814646599bba68e7a810cd8c8f5c2185e1b49ca25e1685f32d36391f729bc4af8ab2b7134964708b41b7bfb50a6d216c5787cba4f38d5d70d2ab503823859c1576e96d4b97e1abc888a6a0039598b970064fffba7749fb54376a35dee6", 0xf7}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="00000000ea000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x8800}}], 0x4, 0x20004015) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) listen(0xffffffffffffffff, 0xfffefffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180c000008008000000000000b0000009111bb00000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002500)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0x10}, {0xfff1, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000002}, 0x2000400c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) 3.400131435s ago: executing program 2 (id=3051): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r5, 0x406, r4) syz_emit_ethernet(0x6e, &(0x7f0000000900)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x38, 0x67, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[@srh={0x89, 0x6, 0x4, 0x3, 0x5, 0x70, 0x40, [@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback]}]}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000200)={0x4000200a}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000580)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r8, 0x1, 0x1) getdents64(r8, 0x0, 0x22) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) fchown(r9, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x10000, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 3.399749695s ago: executing program 6 (id=3052): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0xc, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4e6}, 0x1162c4, 0x0, 0x4, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0x1f, 0x0, &(0x7f0000000740)="c1df07000000d30a298ee68888a8878f24d9938a94819393018c3d914fa5c8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.391832735s ago: executing program 3 (id=3053): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000cee00)={{0x0, 0x305, 0xfffffffffffffffc, 0x401, 0x6, 0x7fffffff, 0x9, 0x3ff, 0x1, 0x1000, 0x3, 0x7, 0x0, 0x8, 0x1}}) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x7, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7fffffff, 0x5}, 0xb212, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) socket(0xa, 0x5, 0x0) r1 = io_uring_setup(0x3647, &(0x7f00000001c0)={0x0, 0x8cf7, 0x200, 0x9, 0x22c}) io_uring_setup(0x40000a71, &(0x7f0000000240)={0x0, 0x86a1, 0x10, 0x3, 0x277, 0x0, r1}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r2) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000940)={0x877, {{0x2, 0x4e22, @loopback}}}, 0x88) 3.388904605s ago: executing program 4 (id=3054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x2000c0c2) close(0x3) 3.323267178s ago: executing program 4 (id=3055): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x2, 0x5b3, &(0x7f0000000680)="$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") syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readlinkat(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x40000c0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10f0fc, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbf7fffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x44) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x3) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040004, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) timerfd_create(0x7, 0x80000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) 2.978249778s ago: executing program 3 (id=3056): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = msgget$private(0x0, 0x421) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0) msgrcv(r3, &(0x7f00000012c0)={0x0, ""/4096}, 0x1008, 0x0, 0x0) msgsnd(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='1'], 0x8, 0x800) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x800, 0x70bd28, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x30}}, 0x4000) syz_clone3(&(0x7f0000000340)={0x41a0480, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) 2.711632366s ago: executing program 5 (id=3057): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x2, 0x5b3, &(0x7f0000000680)="$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") syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x40000c0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10f0fc, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbf7fffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x44) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x3) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040004, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) timerfd_create(0x7, 0x80000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) 2.678927908s ago: executing program 6 (id=3058): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)="5c00000012006bab9a3fe37ea60864160af36504001d0000001d001931a0e69ee517d344ac8f06000000a705251eff82949a3651f60a84c9f4d4938037e70e45c5bbfbffa8499c69dd752d0017675e403f1143e40967c4", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000008010200000000000000000b0000070500030011000000050003008400000006000240887399772b3bcfdc9b95b67ca8d99608000005000300060000000900010073797a31000000001c00048008000140fffffff708000540000000060800054000000004"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) msgget$private(0x0, 0x10) read$usbmon(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0x1e) getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x25, 0x9}, 0x10c0e8, 0x0, 0x0, 0x0, 0x4, 0x8001, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffdffb) 2.430510525s ago: executing program 3 (id=3059): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xfd02) ioprio_set$uid(0x3, r2, 0x2004) newfstatat(0xffffffffffffff9c, &(0x7f0000002d40)='./bus\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffff9c, &(0x7f0000002e00)='./file0\x00', 0x0, 0x80, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000c80)="ab362fc6d5a0188e4a75f0b6c2055c21e3a81b32a6dcbf334338cb41ec3e4d16f193bd6a6cbe2d38aaa4aa71dc176b9f717b00adee3745dc9b7e14df35bc3336d4c9e6ad7560d1d3f4ff04feb5e7375a2a7670745d6d25f68a31da1fb813f20ad38ae9503ed8b9d4ee16e6186bc96fe740ca5057f2f046290d1e23eaf7a9fc6cbced0a4c35f50f623ddb29d86c4ab4c3b6b4ba6aa27b530d017b844079bc45cc290063fb3b42dc789e91a2c87625614a0446441b69f2114cb7c94ae55a715f4ca70a9545b475c42eddcabdc802e924a4a8ec153007d58e0ad93e3995b459b9550a1919", 0xe3}, {&(0x7f0000000d80)="e535aa49c97115e3ca38d1c1990e4116010fe5692b47aca1a5d45f8d90ef2575596e26cbd9b4d3d9ee1febf7b5712d032d21ef848da4b334044831a20acfa0892320b92d3c53e28b4ce5e7c239803a66223180603f059679275e25d6459eab0fe93a8282a48bbf79ca93a8ffe0fac92e0f40f414045f56f6b31885eabcbfb4bf504fa59a3329ab2a3778ef931127e56f0042b00e4a3eeba2aab90ffb20cb1e49837589454d7a7e71ae1634c76c499896da21f35fda563bfbefd197f62dc08af27ac2b2f2eef13a9d48acf40c46ac0e0f7d90fb79393c79bee4723a4b7218daf7de5a3c937d0d27d4085f5546ee43a58d95af0d1901ac74c1c84e214e7a4f34", 0xff}, {&(0x7f0000000e80)="bf126485875cba4f34f19881d45ef8c2a9ee343b4d568edadece653bd897bf7c7d7199e9a4d7346a590b317d68be99121d06e31135b63cca80fc4581c59720c6618ac1f4e7707b49813e5a5edad71d9c343afbc3c65187326560e5094c5391f8f09f9ffc390dfed0e36f7bbebfac9cb84422b162c01b5c75cad7c5b69be2bd59b6e4cbc765b31896c1a11c639b74f3948870db2067f841290badfd7ee613a8abe65a7f273b56421b350fa90e0264251ff39e258236b1a883e01b75e2a96969cf20f85d8f3e72561947", 0xc9}, {&(0x7f0000000f80)="2db0e804f38c12a6052da71b36de5c8485c8e46ba7e292a405e8a5253c8ba264092020eb785f7e75b62440c54d60922438b5efd38a36f26df729847f02dbb91cca877a3a454353dd42cc29e35098edd4c4b0d797534bb7ab61aea0922023eace2eeae37746c856f35a0424db74ef50e5f22dec76dddbcee6fb5a5ae5b7962d4d5654a2fa059b20754da0", 0x8a}, {&(0x7f0000001500)="9a618b5ec00cc8e5feac11a7908a58f3ff6f261f4e6276621ce64c9ddfe25e5d745fa033191bc3831dd7853bae3a486c7f49f3b9c803acde43897efb69fb4939cb71bdecbe94acc2c4c3bdabb4de29eb442d37e40844280c256015a062b468f27aae", 0x62}], 0x5, &(0x7f0000001680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x4884}}, {{&(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001740)="a848b9e6a3e0b403a9b919a85430ea86b44968046358ffee229dabb3cff2b436642919f68cce3dc8d0876e7c3108494cba9a44157b4698967b05c77f265c60955dee6931a178fc3ade155b6775ad4f09bbb0094dd664a286e16ae10889cac66a690f5b48ee28c1bde52a5e4cea8e0cbb356d7c0988264671b331946f203d0b937bcf3e37762c3701ced0b97d105642beda6dfa5a73471674cc6ed2b407d6703429fd4fc7128cbca731d6ccafddaa43779d65f0e3fe1da0e07d9dea3191c81668662fa621e1b21ba8c2f1a71e32956d9234c2d2716be12885cdc80fad3fa4007de421108afa", 0xe5}, {&(0x7f0000001840)="792cd4769cc6cf166fd06604aa6cdf37ef56110bfe54adba7de7fa31f6b05dac4af9325af60098d9d02612d839ced440c22b85a3eaacbd279b710311152030a80a0bc55e775970ec908764e94273f081b88b060e367496b96d4fead0b771fb16906d3812a5154d249c56c251e8f43d972a", 0x71}, {&(0x7f00000018c0)="238ae508f6ff06e81874856751d3ae2aee1f5babd73ffb0a3cc0c994d0d330e38fde56e65cac677afded0baee94a13b7c5f9288222dbd551a0b4e3595732136bcb769629f80689e6a1b42b02bd559afe51efd36b2e1f8ee3ee59bb45cab751df066e4003a50ed21d53c74a5851cbbae7a35aee8bfbc4c7cd959014021ea1040671e02fc3f392682b0c9b29f1307aa046fc98ca28", 0x94}, {&(0x7f0000001980)="19ee58706eb31770aa94469306664106577238cdacb41a63da4c03f1c42d606b514053f273ec12a8d5f4a7ff1aac8b820d32f745a03a81ca577c12d27e55c8fed000bc643229e5b281f1e6d11e007614ff970e5f246adcc531d9d824407fffd74aacb59fccac3b1e22eda0faf56c553c65329cf7e651448290c40e1199515e0369411762a805fd877e1da256bfd5f13588d97988991c3e4f62", 0x99}, {&(0x7f0000001a40)="1180a1c1e3c1958387b4b0c93a14258f85708c0d76ca9ceec26fb39a89181a7f52d902535f4b443a0c6d", 0x2a}], 0x5, &(0x7f0000001ec0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x80, 0x44000}}, {{&(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001fc0)="7961f6d45836567d4455f40f5f5e6e3fa65995835aeea941dae05937b2f84c8c4b5a82193927ec76a2519a85d98b443f41a0c110d1c2b034cd6fa4e71fcff379999bbd9ddf2940739819b8a2177501c7731907259d", 0x55}, {&(0x7f0000002040)="5c812eb11d2702244eed3272b0532b2caf4fd80903e2c07865b417d04836d8a88dfa8f934c5dbcbf010fbf1a8ea77d116171e73cea59bb19b9495ad1bf14e5d290dfd003b3d104a2087f75f7af9bb39b457478d60837fcd6447cf0c841b83e8231196d383ff78b668635e20561ca09e29208770ae8da9dc25e97d79db4e71ef2c4f16c6d09fb", 0x86}], 0x2, 0x0, 0x0, 0x8000}}, {{&(0x7f0000002140)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000002480)=[{&(0x7f00000021c0)="a2163b4298", 0x5}, {&(0x7f0000002200)="3715f2ad87fe5bc5740a44a4fd9cb5908b1ffc5dbb39bcbaba597bb15bfac79b1e62f35c98d9d2b4979daf0acf87161cd1a359e76aa4cb2440925ee63d366fcb9ef0aa55cd0c7bd7eca3843ae8303b10a7a0c72f490a803a362c480a7bf42f60b210f886d08809a4ada52e7f3e65a267", 0x70}, {&(0x7f0000002280)="6b7590193d4a6c60bac8f9a5a68562854c93dd366e4f4d24477dd8ff5b30598e6a", 0x21}, {&(0x7f00000022c0)="7575df0f493bdf7a40b1ec44b0dbcca7f94b5c0a5ddcee631f44354dcc3675f7bca160e00c497bddd2db2af8626e23e5006076e4a1341c3e55fb544754b071b31042a4a8fc392f6d2d108b3943029f12976b6593a6cb11c21768a88e6135d1d80aed674f23419afd1802e332cc0b8bf6b1f65cb417407e4c7661d4560ddd42c99f9d816ca6f19979cff0f3", 0x8b}, {&(0x7f0000002380)="4431a931c50f3e826ad4d8e5f42a7df92b4cd9ee924512a75eadbbeffb4785c4f168c4cf7147c5cc96e37c244e61c2ad54c296e7b7c5bd81fdb0000815f640913fdfd9718daa8c6070048ebf214f9ee0650b639357e70860989d545f97f16dc5f8aa526437e2020b637f7f32c9a1c7ec54ed0730ff82f1b721bf1e2a24d3270644f96a9fb552a862f48292b6b2b4b7c9e2f14530fbe367de0ba0814646599bba68e7a810cd8c8f5c2185e1b49ca25e1685f32d36391f729bc4af8ab2b7134964708b41b7bfb50a6d216c5787cba4f38d5d70d2ab503823859c1576e96d4b97e1abc888a6a0039598b970064fffba7749fb54376a35dee6", 0xf7}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="00000000ea000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x8800}}], 0x4, 0x20004015) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) listen(r9, 0xfffefffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180c000008008000000000000b0000009111bb00000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002500)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0x10}, {0xfff1, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000002}, 0x2000400c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) 2.400414306s ago: executing program 6 (id=3060): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x8, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000100feffff"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c000) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa0800025dac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x180000, 0x2001, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.225697382s ago: executing program 4 (id=3061): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000340), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200013, &(0x7f0000000180)={[{@barrier}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x4, &(0x7f0000000440)=[{0x6, 0x6, 0xe, 0x4}, {0x7da9, 0x64, 0x6, 0xffffffff}, {0x5, 0x9, 0xd, 0x3416}, {0x9, 0x7, 0xd, 0x7}]}) bind$rds(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) 2.206489452s ago: executing program 2 (id=3062): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40010) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@multicast1, 0x4e22, 0xff7f, 0x4e23, 0x4b88, 0x2, 0xa0, 0x80, 0x0, r3, r4}, {0x10, 0x0, 0x8, 0x3ea7, 0x8, 0x2022, 0x159bfcee, 0x5}, {0x7, 0x400, 0x3, 0x3}, 0xfffffff7, 0x1, 0x1, 0x1, 0x1, 0x1}, {{@in=@remote, 0x4d5, 0x2b}, 0xa, @in=@local, 0x3501, 0x0, 0x3, 0x3, 0xd85, 0x4, 0xa}}, 0xe8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x5f) r11 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_int(r11, 0x1, 0x5, &(0x7f0000000000)=0x8, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r13, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000500)={@private1, 0x6, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x20) 2.153331524s ago: executing program 6 (id=3063): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 790.844946ms ago: executing program 6 (id=3064): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r8 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 760.616967ms ago: executing program 2 (id=3065): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000030c0)=""/4103, 0x1007}], 0x1, 0x20, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)=0x0) wait4(r3, &(0x7f0000000380), 0x4, &(0x7f0000000580)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80009, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@noextend}, {@aname={'aname', 0x3d, 'pids'}}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@loose}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x5}}, {@msize}]}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0xfffffffffffffffc, &(0x7f0000000340)=0x88) recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000020) fsync(0xffffffffffffffff) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001080)={0x0, 0x2b, 0x1, [0x7, 0x40, 0x4, 0x1d, 0x8], [0x81, 0x80, 0xfffffffffffffffc, 0x2, 0x4, 0xfffffffffffffffb, 0x5, 0x7fffffff, 0x1, 0x1, 0x7, 0xf, 0x8000000000000001, 0xa, 0x10000000000e, 0x80, 0xfffffffffffffff8, 0x7faf, 0x938, 0x8, 0x6, 0xfffffffffffff664, 0x3, 0x80000000, 0xfb, 0x3, 0x20000000007, 0x3, 0x5, 0x400000008000008, 0x3, 0x9, 0xc, 0x6, 0xfffd, 0x4, 0xf4, 0xfffffffbfffdfffa, 0x3, 0x800000000000000, 0x5617, 0x1, 0x2, 0x5, 0x1000002, 0x4, 0x4000006, 0x71, 0x1, 0xfc4, 0x75, 0x40800cb14, 0x3b, 0x80000004, 0x8000000000000001, 0x40000000000756, 0x3, 0x0, 0x1246, 0x3ff, 0x4, 0x642, 0x66, 0x9, 0x1, 0x1, 0x8, 0x401, 0x1, 0x5, 0xc, 0x5, 0xfff, 0xfffffffffffffffe, 0x0, 0x400000000100001, 0xd32d, 0x8, 0x632, 0x7, 0x2, 0x8000000000000000, 0xfffffffffffffffa, 0x1, 0x5, 0x3, 0x7, 0x4, 0xd7, 0x8, 0x3, 0xb, 0x8, 0x8, 0x145, 0x5e9, 0xe51a, 0x40000000053ed, 0x2, 0x80, 0x0, 0x0, 0x402, 0x2, 0x5, 0x8000, 0x4, 0x0, 0xffff, 0x1, 0x19, 0x8, 0x2000000009, 0x4b3, 0x0, 0x34d8, 0xfff2, 0x9, 0xbf7, 0x100000000000b1, 0x8000000000000001]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x30100, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0xffbf) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") gettid() 405.669118ms ago: executing program 5 (id=3066): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000841000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000075000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0x20) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x43) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xa081, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x2, 0x0, 0x2, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/4105, 0x1009}], 0x1, 0x3b, 0xfff5) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@fallback=r1, r2, 0x33, 0x2, r3, @void, @value=r5, @void, @void, r4}, 0x20) ioctl$LOOP_SET_DIRECT_IO(r1, 0x1260, 0x591) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) r7 = epoll_create1(0x80000) r8 = socket$unix(0x1, 0x1, 0x0) close(r8) socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xa0028000}) fcntl$setsig(r6, 0xa, 0x3b) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000240)=0x2) 388.930518ms ago: executing program 3 (id=3067): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000030c0)=""/4103, 0x1007}], 0x1, 0x20, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)=0x0) wait4(r3, &(0x7f0000000380), 0x4, &(0x7f0000000580)) pread64(r2, &(0x7f00000001c0)=""/134, 0x86, 0x7) write$cgroup_int(r2, &(0x7f0000000400)=0x5, 0x12) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0xfffffffffffffffc, &(0x7f0000000340)=0x88) recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000020) fsync(0xffffffffffffffff) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001080)={0x0, 0x2b, 0x1, [0x7, 0x40, 0x4, 0x1d, 0x8], [0x81, 0x80, 0xfffffffffffffffc, 0x2, 0x4, 0xfffffffffffffffb, 0x5, 0x7fffffff, 0x1, 0x1, 0x7, 0xf, 0x8000000000000001, 0xa, 0x10000000000e, 0x80, 0xfffffffffffffff8, 0x7faf, 0x938, 0x8, 0x6, 0xfffffffffffff664, 0x3, 0x80000000, 0xfb, 0x3, 0x20000000007, 0x3, 0x5, 0x400000008000008, 0x3, 0x9, 0xc, 0x6, 0xfffd, 0x4, 0xf4, 0xfffffffbfffdfffa, 0x3, 0x800000000000000, 0x5617, 0x1, 0x2, 0x5, 0x1000002, 0x4, 0x4000006, 0x71, 0x1, 0xfc4, 0x75, 0x40800cb14, 0x3b, 0x80000004, 0x8000000000000001, 0x40000000000756, 0x3, 0x0, 0x1246, 0x3ff, 0x4, 0x642, 0x66, 0x9, 0x1, 0x1, 0x8, 0x401, 0x1, 0x5, 0xc, 0x5, 0xfff, 0xfffffffffffffffe, 0x0, 0x400000000100001, 0xd32d, 0x8, 0x632, 0x7, 0x2, 0x8000000000000000, 0xfffffffffffffffa, 0x1, 0x5, 0x3, 0x7, 0x4, 0xd7, 0x8, 0x3, 0xb, 0x8, 0x8, 0x145, 0x5e9, 0xe51a, 0x40000000053ed, 0x2, 0x80, 0x0, 0x0, 0x402, 0x2, 0x5, 0x8000, 0x4, 0x0, 0xffff, 0x1, 0x19, 0x8, 0x2000000009, 0x4b3, 0x0, 0x34d8, 0xfff2, 0x9, 0xbf7, 0x100000000000b1, 0x8000000000000001]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x30100, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0xffbf) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") gettid() 160.620134ms ago: executing program 2 (id=3068): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x18, 0x89, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) setresuid(0xee01, 0x0, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x10108, 0x2, 0x8406, 0x9, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x8}}, 0x20) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) listen(0xffffffffffffffff, 0xfffffffd) capset(&(0x7f0000000340)={0x20071026}, 0x0) listen(0xffffffffffffffff, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004012, &(0x7f00000000c0)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) sendfile(r1, r1, 0x0, 0xe3aa6ea) close(0xffffffffffffffff) 475.09µs ago: executing program 4 (id=3069): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="200000006a0000032abd7000fbdbdf250000000000030c000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x404c000) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2004c12, &(0x7f0000000580)=ANY=[@ANYBLOB="63727566742c646d6f64653d3078303030303030303030303030303030302c73657373696f6e3d30783030303030301a0030303030303030642c63727566742c6d61703d61636f726e2c756e686964652c6f76657272696465726f636b7065726d2c757466382c646d6f64653d3078303030303030303030303030303030342c6e6f636f6d70726573732c6e6f6a6f6c6965742c696f636861727365743d69736f383835392d352c6e6f726f636b2c646d6f64653d30783030303000a58db3f647175ca7f8a1c75c372b99636a1fb9f91673b7edf21263cf423ef56a7f80960c4e7aa66692cdb431f9ae25a850f594d38d2a3a96004ae774072b631bf75116d1979f"], 0x81, 0xa4f, &(0x7f0000000a80)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)='\x00\x00', 0x2, r6) request_key(0x0, 0x0, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0x10c000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000030010000100004000"/20, @ANYBLOB="041004000000000008000400f903000008001b"], 0x30}}, 0x0) 0s ago: executing program 5 (id=3070): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = msgget$private(0x0, 0x421) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0) msgrcv(r3, &(0x7f00000012c0)={0x0, ""/4096}, 0x1008, 0x0, 0x0) msgsnd(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='1'], 0x8, 0x800) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x800, 0x70bd28, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x30}}, 0x4000) syz_clone3(&(0x7f0000000340)={0x41a0480, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) kernel console output (not intermixed with test programs): .0: pdev(5) rhport(0) sockfd(7) [ 576.340098][T16327] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 576.349849][T16327] vhci_hcd vhci_hcd.0: Device attached [ 576.368381][T16327] tipc: Invalid UDP bearer configuration [ 576.368487][T16327] tipc: Enabling of bearer rejected, failed to enable media [ 576.417802][ T8493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.440373][T16328] vhci_hcd: connection closed [ 576.444038][T14747] vhci_hcd vhci_hcd.5: stop threads [ 576.458115][T14747] vhci_hcd vhci_hcd.5: release socket [ 576.481512][T14747] vhci_hcd vhci_hcd.5: disconnect device [ 576.496684][ T8556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.542492][T16334] loop6: detected capacity change from 0 to 512 [ 576.594005][T16334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.647076][T16334] gre0 speed is unknown, defaulting to 1000 [ 576.674332][ T7838] usb usb6-port1: unable to enumerate USB device [ 577.098908][T16351] loop4: detected capacity change from 0 to 512 [ 577.182616][T16352] loop3: detected capacity change from 0 to 512 [ 577.210575][T16351] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2764: inode has both inline data and extents flags [ 577.227506][T16351] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 577.230245][T16351] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2764: couldn't read orphan inode 15 (err -117) [ 577.240625][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 577.240771][ C0] EXT4-fs (loop4): initial error at time 1780100625: ext4_orphan_get:1397: inode 15 [ 577.241335][ C0] EXT4-fs (loop4): last error at time 1780100625: ext4_orphan_get:1397: inode 15 [ 577.286326][T16351] loop4: lost filesystem error report for type 5 error -117 [ 577.302468][T16351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.348077][T16352] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 577.363869][T16352] EXT4-fs (loop3): orphan file too big: 67108874 [ 577.392986][T16352] EXT4-fs (loop3): mount failed [ 577.402645][ T28] audit: type=1400 audit(1780100625.949:2860): avc: denied { write } for pid=16345 comm="syz.4.2764" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 577.433018][T16334] serio: Serial port ttyS3 [ 578.005672][ T8556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.033597][ T28] audit: type=1400 audit(1780100626.604:2861): avc: denied { write } for pid=16349 comm="syz.3.2765" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 578.081563][T16358] loop5: detected capacity change from 0 to 512 [ 578.092922][T16358] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 578.104855][T16358] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 578.115217][T16358] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2767: Corrupt directory, running e2fsck is recommended [ 578.135797][T16358] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 578.146833][T16358] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2767: corrupted in-inode xattr: e_name out of bounds [ 578.161174][T16358] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 578.161515][T16358] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2767: couldn't read orphan inode 15 (err -117) [ 578.171058][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 578.171081][ C0] EXT4-fs (loop5): initial error at time 1780100626: ext4_iget_extra_inode:5128: inode 15 [ 578.171113][ C0] EXT4-fs (loop5): last error at time 1780100626: ext4_iget_extra_inode:5128: inode 15 [ 578.210447][T16358] loop5: lost filesystem error report for type 5 error -117 [ 578.217010][T16358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.242223][T16358] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 578.254057][T16358] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 578.264657][T16358] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2767: Corrupt directory, running e2fsck is recommended [ 578.277991][T16358] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.2767: path /324/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 578.329799][T16358] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 8: comm syz.5.2767: path /324/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 578.391466][T16363] loop6: detected capacity change from 0 to 512 [ 578.442232][T16363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.602371][ T8493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.624348][T16363] gre0 speed is unknown, defaulting to 1000 [ 578.647010][T16369] loop3: detected capacity change from 0 to 512 [ 578.671926][T16369] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 578.680939][T16371] loop4: detected capacity change from 0 to 2048 [ 578.706393][T16372] serio: Serial port ttyS3 [ 578.715150][T16371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.719621][T16369] EXT4-fs (loop3): 1 truncate cleaned up [ 578.831348][T16369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.856696][ T28] audit: type=1400 audit(1780100627.380:2862): avc: denied { write } for pid=16368 comm="syz.3.2769" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 578.879418][ T8436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.943956][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2768'. [ 578.996010][ T28] audit: type=1400 audit(1780100627.502:2863): avc: denied { read append } for pid=16370 comm="syz.4.2768" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 579.022039][ T28] audit: type=1400 audit(1780100627.502:2864): avc: denied { open } for pid=16370 comm="syz.4.2768" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 579.047141][ T28] audit: type=1400 audit(1780100627.502:2865): avc: denied { write } for pid=16370 comm="syz.4.2768" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 579.069627][ T28] audit: type=1400 audit(1780100627.502:2866): avc: denied { write } for pid=16370 comm="syz.4.2768" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 579.102674][T16381] loop5: detected capacity change from 0 to 512 [ 579.204837][T16381] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 579.239794][T16381] EXT4-fs (loop5): 1 truncate cleaned up [ 579.252509][ T28] audit: type=1400 audit(1780100627.502:2867): avc: denied { write } for pid=16370 comm="syz.4.2768" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 579.303511][T16381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.376270][ T28] audit: type=1400 audit(1780100627.502:2868): avc: denied { write } for pid=16370 comm="syz.4.2768" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 579.466097][ T28] audit: type=1400 audit(1780100627.502:2869): avc: denied { rename } for pid=16370 comm="syz.4.2768" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 579.498241][ T8556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.513057][ T28] audit: type=1400 audit(1780100627.502:2870): avc: denied { reparent } for pid=16370 comm="syz.4.2768" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 579.610114][ T8493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.629098][ T28] audit: type=1400 audit(1780100627.894:2871): avc: denied { write } for pid=16380 comm="syz.5.2770" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 579.769582][T16389] loop2: detected capacity change from 0 to 512 [ 579.805799][T16389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.829563][T16389] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 579.855258][T16386] xfrm0 speed is unknown, defaulting to 1000 [ 579.877648][ T28] audit: type=1400 audit(1780100628.334:2872): avc: denied { setopt } for pid=16385 comm="syz.6.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 579.901228][T16386] xfrm0 speed is unknown, defaulting to 1000 [ 579.940348][T16386] xfrm0 speed is unknown, defaulting to 1000 [ 579.955311][ T8651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.014275][T16386] infiniband syz0: set active [ 580.019209][T16386] infiniband syz0: added xfrm0 [ 580.024443][ T35] xfrm0 speed is unknown, defaulting to 1000 [ 580.118576][T16386] RDS/IB: syz0: added [ 580.129281][T16400] loop2: detected capacity change from 0 to 128 [ 580.137416][T16386] smc: adding ib device syz0 with port count 1 [ 580.159059][T16386] smc: ib device syz0 port 1 has no pnetid [ 580.166219][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 580.189968][T16386] xfrm0 speed is unknown, defaulting to 1000 [ 580.214443][ T3291] udevd[3291]: incorrect ext4 checksum on /dev/loop2 [ 580.221742][ T35] xfrm0 speed is unknown, defaulting to 1000 [ 580.240826][ T3291] udevd[3291]: incorrect ext4 checksum on /dev/loop2 [ 580.409574][T16386] xfrm0 speed is unknown, defaulting to 1000 [ 580.429912][T16408] loop2: detected capacity change from 0 to 512 [ 580.456326][T16408] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 580.480613][T16408] EXT4-fs (loop2): 1 truncate cleaned up [ 580.488704][T16408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.645942][ T8651] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 580.658586][ T8651] CPU: 1 UID: 0 PID: 8651 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 580.658623][ T8651] Tainted: [W]=WARN [ 580.658684][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 580.658696][ T8651] Call Trace: [ 580.658704][ T8651] [ 580.658713][ T8651] __dump_stack+0x1d/0x30 [ 580.658740][ T8651] dump_stack_lvl+0x95/0xd0 [ 580.658764][ T8651] dump_stack+0x15/0x1b [ 580.658785][ T8651] dump_header+0x80/0x240 [ 580.658854][ T8651] oom_kill_process+0x295/0x350 [ 580.658934][ T8651] out_of_memory+0x97d/0xb80 [ 580.658966][ T8651] try_charge_memcg+0x62f/0xa10 [ 580.659002][ T8651] charge_memcg+0x6d/0x120 [ 580.659102][ T8651] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 580.659142][ T8651] __swap_cache_prepare_and_add+0x69/0x4a0 [ 580.659172][ T8651] ? alloc_pages_mpol+0x217/0x260 [ 580.659330][ T8651] swap_cache_alloc_folio+0xa2/0x120 [ 580.659356][ T8651] swap_cluster_readahead+0x25f/0x3c0 [ 580.659389][ T8651] swapin_readahead+0xde/0x840 [ 580.659441][ T8651] ? folio_add_file_rmap_ptes+0x1a8/0x1e0 [ 580.659552][ T8651] ? set_pte_range+0x325/0x4f0 [ 580.659640][ T8651] ? __rcu_read_unlock+0x4e/0x70 [ 580.659664][ T8651] ? swap_cache_get_folio+0x1e0/0x1f0 [ 580.659693][ T8651] do_swap_page+0x31e/0x2180 [ 580.659722][ T8651] ? __css_rstat_updated+0xbb/0x280 [ 580.659783][ T8651] ? __rcu_read_lock+0x36/0x50 [ 580.659806][ T8651] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 580.659833][ T8651] handle_mm_fault+0xb30/0x2e70 [ 580.659936][ T8651] ? vma_start_read+0x1c7/0x2c0 [ 580.660006][ T8651] do_user_addr_fault+0x62f/0x1050 [ 580.660104][ T8651] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 580.660140][ T8651] ? trace_page_fault_user+0x1f/0xa0 [ 580.660174][ T8651] exc_page_fault+0x62/0xa0 [ 580.660211][ T8651] asm_exc_page_fault+0x26/0x30 [ 580.660230][ T8651] RIP: 0033:0x7f80bc26ae77 [ 580.660249][ T8651] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 39 7c 24 [ 580.660272][ T8651] RSP: 002b:00007ffcf41fe1b0 EFLAGS: 00010202 [ 580.660293][ T8651] RAX: 0000001b31524000 RBX: 0000000000000351 RCX: 000000000008d1d0 [ 580.660373][ T8651] RDX: 000000000cb3e3d9 RSI: 00007ffcf41fe240 RDI: 000000000000000a [ 580.660387][ T8651] RBP: 00007ffcf41fe1ec R08: 000000003074f9de R09: 3fffffffffffffff [ 580.660401][ T8651] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 580.660418][ T8651] R13: 00000000000927c0 R14: 000000000008d4d9 R15: 00007ffcf41fe240 [ 580.660441][ T8651] [ 580.660449][ T8651] memory: usage 307200kB, limit 307200kB, failcnt 23528 [ 580.923434][ T8651] memory+swap: usage 308012kB, limit 9007199254740988kB, failcnt 0 [ 580.931592][ T8651] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 580.939112][ T8651] Memory cgroup stats for /syz2: [ 580.939512][ T8651] cache 8192 [ 580.948031][ T8651] rss 0 [ 580.950838][ T8651] shmem 0 [ 580.953790][ T8651] mapped_file 0 [ 580.957261][ T8651] dirty 0 [ 580.960232][ T8651] writeback 0 [ 580.963578][ T8651] workingset_refault_anon 3064 [ 580.968359][ T8651] workingset_refault_file 11193 [ 580.973230][ T8651] swap 831488 [ 580.976657][ T8651] swapcached 227545088 [ 580.980737][ T8651] pgpgin 437566 [ 580.984306][ T8651] pgpgout 437561 [ 580.988115][ T8651] pgfault 509980 [ 580.991830][ T8651] pgmajfault 1284 [ 580.995492][ T8651] inactive_anon 12288 [ 580.999596][ T8651] active_anon 0 [ 581.003525][ T8651] inactive_file 0 [ 581.007568][ T8651] active_file 8192 [ 581.011304][ T8651] unevictable 0 [ 581.014812][ T8651] hierarchical_memory_limit 314572800 [ 581.020185][ T8651] hierarchical_memsw_limit 9223372036854771712 [ 581.026543][ T8651] total_cache 8192 [ 581.030272][ T8651] total_rss 0 [ 581.033733][ T8651] total_shmem 0 [ 581.037245][ T8651] total_mapped_file 0 [ 581.041327][ T8651] total_dirty 0 [ 581.044878][ T8651] total_writeback 0 [ 581.048719][ T8651] total_workingset_refault_anon 3064 [ 581.054709][ T8651] total_workingset_refault_file 11193 [ 581.060363][ T8651] total_swap 831488 [ 581.063012][ T8436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.064489][ T8651] total_swapcached 227545088 [ 581.064501][ T8651] total_pgpgin 437566 [ 581.064508][ T8651] total_pgpgout 437561 [ 581.064516][ T8651] total_pgfault 509980 [ 581.064523][ T8651] total_pgmajfault 1284 [ 581.064530][ T8651] total_inactive_anon 12288 [ 581.064540][ T8651] total_active_anon 0 [ 581.091545][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.094965][ T8651] total_inactive_file 0 [ 581.094977][ T8651] total_active_file 8192 [ 581.120378][T16386] xfrm0 speed is unknown, defaulting to 1000 [ 581.141508][T16412] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 581.148247][T16412] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 581.208941][T16386] xfrm0 speed is unknown, defaulting to 1000 [ 581.252407][ T8651] total_unevictable 0 [ 581.258048][T16412] vhci_hcd vhci_hcd.0: Device attached [ 581.272529][ T8651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2776,pid=16407,uid=0 [ 581.295667][T16417] tipc: Invalid UDP bearer configuration [ 581.295685][T16417] tipc: Enabling of bearer rejected, failed to enable media [ 581.310696][ T8651] Memory cgroup out of memory: Killed process 16407 (syz.2.2776) total-vm:96216kB, anon-rss:1228kB, file-rss:22448kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 581.356783][T16386] xfrm0 speed is unknown, defaulting to 1000 [ 581.411883][T16419] loop3: detected capacity change from 0 to 512 [ 581.569656][T16419] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2778: inode has both inline data and extents flags [ 581.585586][T16419] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 581.587436][ T35] usb 12-1: SetAddress Request (29) to port 0 [ 581.602823][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 581.609437][ C1] EXT4-fs (loop3): initial error at time 1780100629: ext4_orphan_get:1397: inode 15 [ 581.619085][ C1] EXT4-fs (loop3): last error at time 1780100629: ext4_orphan_get:1397: inode 15 [ 581.634160][T16419] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2778: couldn't read orphan inode 15 (err -117) [ 581.647973][T16419] loop3: lost filesystem error report for type 5 error -117 [ 581.667309][T16419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.717037][T16413] vhci_hcd: connection closed [ 581.729178][ T68] vhci_hcd vhci_hcd.5: stop threads [ 581.739464][ T68] vhci_hcd vhci_hcd.5: release socket [ 581.744884][ T68] vhci_hcd vhci_hcd.5: disconnect device [ 581.788706][T16386] xfrm0 speed is unknown, defaulting to 1000 [ 581.889874][ T35] usb 12-1: new SuperSpeed USB device number 29 using vhci_hcd [ 581.966033][ T35] usb 12-1: enqueue for inactive port 0 [ 582.004853][ T35] usb 12-1: enqueue for inactive port 0 [ 582.030577][ T9080] usb usb6-port1: attempt power cycle [ 582.053874][ T35] usb 12-1: enqueue for inactive port 0 [ 582.179134][T16423] loop6: detected capacity change from 0 to 512 [ 582.208227][T16423] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 582.219193][T16423] EXT4-fs (loop6): orphan file too big: 67108874 [ 582.230994][T16423] EXT4-fs (loop6): mount failed [ 582.237739][ T35] usb 12-1: new SuperSpeed USB device number 29 using vhci_hcd [ 582.286981][ T35] usb 12-1: enqueue for inactive port 0 [ 582.305253][ T35] usb 12-1: enqueue for inactive port 0 [ 582.324127][ T35] usb 12-1: enqueue for inactive port 0 [ 582.736979][T16427] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 582.748548][T16427] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 582.758741][T16427] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2780: Corrupt directory, running e2fsck is recommended [ 582.773251][T16427] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 582.781983][T16427] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2780: corrupted in-inode xattr: e_name out of bounds [ 582.795943][T16427] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 582.799318][T16427] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2780: couldn't read orphan inode 15 (err -117) [ 582.808974][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 582.809000][ C1] EXT4-fs (loop5): initial error at time 1780100631: ext4_iget_extra_inode:5128: inode 15 [ 582.809055][ C1] EXT4-fs (loop5): last error at time 1780100631: ext4_iget_extra_inode:5128: inode 15 [ 582.847580][T16427] loop5: lost filesystem error report for type 5 error -117 [ 582.850055][T16427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.875648][T16427] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 582.887200][T16427] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 582.897612][T16427] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2780: Corrupt directory, running e2fsck is recommended [ 582.910851][T16427] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.2780: path /327/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 582.963715][T16427] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 8: comm syz.5.2780: path /327/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 583.021418][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.075700][T16432] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 583.098792][T16432] EXT4-fs (loop6): 1 truncate cleaned up [ 583.105335][T16432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.122401][ T8651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.441893][ T35] usb usb12-port1: attempt power cycle [ 583.538024][ T8436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.584050][T16443] set_capacity_and_notify: 2 callbacks suppressed [ 583.584067][T16443] loop5: detected capacity change from 0 to 128 [ 583.628093][T16443] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 583.662828][T16443] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 583.756675][T14744] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 583.806572][T16450] loop5: detected capacity change from 0 to 512 [ 583.949714][T16457] loop3: detected capacity change from 0 to 512 [ 583.975946][ T9080] usb usb6-port1: unable to enumerate USB device [ 583.978268][T16457] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 584.043087][T16457] EXT4-fs (loop3): 1 truncate cleaned up [ 584.049462][T16457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.150180][T16460] loop5: detected capacity change from 0 to 2048 [ 584.257078][T16465] loop4: detected capacity change from 0 to 2048 [ 584.370720][T16457] syz.3.2789 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 584.390920][T16457] CPU: 0 UID: 0 PID: 16457 Comm: syz.3.2789 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 584.391017][T16457] Tainted: [W]=WARN [ 584.391026][T16457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 584.391041][T16457] Call Trace: [ 584.391092][T16457] [ 584.391103][T16457] __dump_stack+0x1d/0x30 [ 584.391128][T16457] dump_stack_lvl+0x95/0xd0 [ 584.391153][T16457] dump_stack+0x15/0x1b [ 584.391176][T16457] dump_header+0x80/0x240 [ 584.391199][T16457] oom_kill_process+0x295/0x350 [ 584.391315][T16457] out_of_memory+0x97d/0xb80 [ 584.391353][T16457] try_charge_memcg+0x62f/0xa10 [ 584.391455][T16457] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 584.391550][T16457] __alloc_frozen_pages_noprof+0x18a/0x350 [ 584.391590][T16457] alloc_pages_mpol+0xb3/0x260 [ 584.391631][T16457] alloc_pages_noprof+0x8f/0x140 [ 584.391653][T16457] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 584.391716][T16457] __kvmalloc_node_noprof+0x3d4/0x640 [ 584.391742][T16457] ? futex_hash_allocate+0x190/0x9a0 [ 584.391825][T16457] ? futex_hash_allocate+0x190/0x9a0 [ 584.391863][T16457] futex_hash_allocate+0x190/0x9a0 [ 584.391890][T16457] ? __schedule+0x951/0xd40 [ 584.391909][T16457] ? cap_task_prctl+0x13f/0x6b0 [ 584.391993][T16457] futex_hash_prctl+0xd8/0xf0 [ 584.392024][T16457] __se_sys_prctl+0x4f4/0x1400 [ 584.392050][T16457] __x64_sys_prctl+0x67/0x80 [ 584.392113][T16457] x64_sys_call+0x2533/0x3020 [ 584.392177][T16457] do_syscall_64+0x12c/0x3b0 [ 584.392215][T16457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.392242][T16457] RIP: 0033:0x7fc6cb73ce59 [ 584.392261][T16457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.392295][T16457] RSP: 002b:00007fc6ca18f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 584.392320][T16457] RAX: ffffffffffffffda RBX: 00007fc6cb9b5fa0 RCX: 00007fc6cb73ce59 [ 584.392335][T16457] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 584.392348][T16457] RBP: 00007fc6cb7d2d6f R08: 0000000000000000 R09: 0000000000000000 [ 584.392362][T16457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.392377][T16457] R13: 00007fc6cb9b6038 R14: 00007fc6cb9b5fa0 R15: 00007ffd4decf9d8 [ 584.392445][T16457] [ 584.633225][T16457] memory: usage 265080kB, limit 307200kB, failcnt 4033 [ 584.641753][T16457] memory+swap: usage 255284kB, limit 9007199254740988kB, failcnt 0 [ 584.666224][T16457] kmem: usage 224640kB, limit 9007199254740988kB, failcnt 0 [ 584.685255][T16457] Memory cgroup stats for /syz3: [ 584.685554][T16457] cache 12288 [ 584.698905][T16457] rss 40960 [ 584.702945][T16457] shmem 0 [ 584.707441][ T8556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.722897][T16465] loop4: p2 p3 p7 [ 584.731029][T16457] mapped_file 0 [ 584.803398][T16457] dirty 0 [ 584.845552][T16460] loop5: p2 p3 p7 [ 584.867483][T16457] writeback 0 [ 584.868855][T16469] loop6: detected capacity change from 0 to 512 [ 584.906424][T16469] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 584.928553][T16457] workingset_refault_anon 862 [ 584.940274][T16469] EXT4-fs (loop6): orphan file too big: 67108874 [ 584.945629][T16457] workingset_refault_file 2809 [ 584.951845][T16469] EXT4-fs (loop6): mount failed [ 584.964026][T16457] swap 323584 [ 584.994007][T16457] swapcached 68571136 [ 585.001396][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 585.001412][ T28] audit: type=1400 audit(1780100633.123:2881): avc: denied { write } for pid=16467 comm="syz.6.2792" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 585.018688][T16457] pgpgin 248067 [ 585.112370][T16457] pgpgout 248032 [ 585.139097][T16457] pgfault 281126 [ 585.181887][T16457] pgmajfault 278 [ 585.204668][T16457] inactive_anon 61440 [ 585.235531][T16457] active_anon 69632 [ 585.263617][T16457] inactive_file 4096 [ 585.285102][T16457] active_file 8192 [ 585.311308][T16457] unevictable 0 [ 585.344040][T16457] hierarchical_memory_limit 314572800 [ 585.373496][T16457] hierarchical_memsw_limit 9223372036854771712 [ 585.411158][T16457] total_cache 12288 [ 585.440312][T16457] total_rss 40960 [ 585.445620][T16457] total_shmem 0 [ 585.456146][T16457] total_mapped_file 0 [ 585.465071][T16457] total_dirty 0 [ 585.478115][T16457] total_writeback 0 [ 585.488521][T16457] total_workingset_refault_anon 862 [ 585.506822][T16457] total_workingset_refault_file 2809 [ 585.524612][T16457] total_swap 323584 [ 585.530644][T16457] total_swapcached 68571136 [ 585.535367][T16457] total_pgpgin 248067 [ 585.539752][T16457] total_pgpgout 248032 [ 585.543836][T16457] total_pgfault 281126 [ 585.548200][T16457] total_pgmajfault 278 [ 585.552591][T16457] total_inactive_anon 61440 [ 585.557180][T16457] total_active_anon 69632 [ 585.561999][T16457] total_inactive_file 4096 [ 585.566673][T16457] total_active_file 8192 [ 585.575005][T16457] total_unevictable 0 [ 585.581129][T16457] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2789,pid=16456,uid=0 [ 585.596974][T16457] Memory cgroup out of memory: Killed process 16457 (syz.3.2789) total-vm:96348kB, anon-rss:12856kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 585.674840][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.708311][T16476] 9p: Bad value for 'rfdno' [ 585.713814][T16476] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2794'. [ 585.752019][ T35] usb usb12-port1: unable to enumerate USB device [ 585.802863][ T28] audit: type=1400 audit(1780100633.872:2882): avc: denied { read } for pid=16477 comm="syz.3.2795" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 585.828248][T16479] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.835338][T16479] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.842033][T16479] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.848053][ T28] audit: type=1400 audit(1780100633.872:2883): avc: denied { open } for pid=16477 comm="syz.3.2795" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 585.878861][T16479] infiniband syz2: set active [ 585.883664][T16479] infiniband syz2: added ip6_vti0 [ 585.903206][ T11] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.932488][ T28] audit: type=1400 audit(1780100634.003:2884): avc: denied { setopt } for pid=16472 comm="syz.6.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 586.147598][T15591] usb usb6-port1: attempt power cycle [ 586.181286][T16483] 9p: Bad value for 'rfdno' [ 586.191754][T16483] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2796'. [ 586.268949][T16479] RDS/IB: syz2: added [ 586.273000][T16479] smc: adding ib device syz2 with port count 1 [ 586.279169][T16479] smc: ib device syz2 port 1 has pnetid S (user defined) [ 586.286853][T16479] ip6_vti0 speed is unknown, defaulting to 1000 [ 586.322104][ T11] ip6_vti0 speed is unknown, defaulting to 1000 [ 586.361438][T16479] ip6_vti0 speed is unknown, defaulting to 1000 [ 586.400904][T16479] ip6_vti0 speed is unknown, defaulting to 1000 [ 586.457491][ T28] audit: type=1400 audit(1780100634.442:2885): avc: denied { setopt } for pid=16484 comm="syz.3.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 586.471506][T16479] ip6_vti0 speed is unknown, defaulting to 1000 [ 586.559666][T16479] ip6_vti0 speed is unknown, defaulting to 1000 [ 586.600642][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2798'. [ 586.627279][T16479] ip6_vti0 speed is unknown, defaulting to 1000 [ 586.795419][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2800'. [ 586.922356][T16496] loop6: detected capacity change from 0 to 2048 [ 586.943318][T16489] Set syz1 is full, maxelem 65536 reached [ 587.160930][T16496] loop6: p2 p3 p7 [ 587.254631][T16501] program syz.3.2802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.306327][T16507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2803'. [ 588.412652][T15591] usb usb6-port1: unable to enumerate USB device [ 588.481620][T16513] loop3: detected capacity change from 0 to 512 [ 588.593900][T16516] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 588.600753][T16516] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 588.603536][T16513] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 588.619588][T16516] vhci_hcd vhci_hcd.0: Device attached [ 588.626223][T16513] EXT4-fs (loop3): orphan file too big: 67108874 [ 588.630859][T16516] tipc: Invalid UDP bearer configuration [ 588.633404][T16516] tipc: Enabling of bearer rejected, failed to enable media [ 588.633492][T16513] EXT4-fs (loop3): mount failed [ 588.649923][T16519] vhci_hcd: connection closed [ 588.653242][ T2267] vhci_hcd vhci_hcd.5: stop threads [ 588.663892][ T2267] vhci_hcd vhci_hcd.5: release socket [ 588.669933][ T2267] vhci_hcd vhci_hcd.5: disconnect device [ 589.488765][T16526] loop5: detected capacity change from 0 to 512 [ 589.687863][ T28] audit: type=1400 audit(1780100637.510:2886): avc: denied { write } for pid=16511 comm="syz.3.2804" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 589.935479][T16530] geneve2: entered allmulticast mode [ 590.231713][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2811'. [ 590.529111][T16540] program syz.4.2813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.624273][T16548] loop4: detected capacity change from 0 to 2048 [ 590.677389][T16548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.927294][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2814'. [ 590.953791][ T28] audit: type=1400 audit(1780100638.689:2887): avc: denied { write } for pid=16547 comm="syz.4.2814" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 590.976049][ T28] audit: type=1400 audit(1780100638.689:2888): avc: denied { write } for pid=16547 comm="syz.4.2814" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 590.998545][ T28] audit: type=1400 audit(1780100638.689:2889): avc: denied { write } for pid=16547 comm="syz.4.2814" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 591.043445][ T28] audit: type=1400 audit(1780100638.689:2890): avc: denied { write } for pid=16547 comm="syz.4.2814" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 591.543484][ T8493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.763370][T16562] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 591.770382][T16562] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 591.779990][T16562] vhci_hcd vhci_hcd.0: Device attached [ 591.798713][T16562] tipc: Invalid UDP bearer configuration [ 591.798799][T16562] tipc: Enabling of bearer rejected, failed to enable media [ 591.838977][T16563] vhci_hcd: connection closed [ 591.840063][T14744] vhci_hcd vhci_hcd.3: stop threads [ 591.850406][T14744] vhci_hcd vhci_hcd.3: release socket [ 591.855938][T14744] vhci_hcd vhci_hcd.3: disconnect device [ 592.293344][ T35] usb usb6-port1: attempt power cycle [ 592.362579][T16569] loop5: detected capacity change from 0 to 512 [ 592.370297][T16569] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 592.384752][T16569] EXT4-fs (loop5): orphan file too big: 67108874 [ 592.392964][T16569] EXT4-fs (loop5): mount failed [ 592.403408][ T28] audit: type=1400 audit(1780100640.055:2891): avc: denied { write } for pid=16567 comm="syz.5.2819" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 592.506500][T16575] loop3: detected capacity change from 0 to 2048 [ 592.552339][T16575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.692235][T16579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 592.734527][ T28] audit: type=1400 audit(1780100640.363:2892): avc: denied { write } for pid=16584 comm="syz.4.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 592.754627][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2821'. [ 592.782352][ T28] audit: type=1400 audit(1780100640.401:2893): avc: denied { write } for pid=16574 comm="syz.3.2821" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 592.809587][ T28] audit: type=1400 audit(1780100640.429:2894): avc: denied { write } for pid=16574 comm="syz.3.2821" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 592.820882][T16595] sctp: [Deprecated]: syz.4.2824 (pid 16595) Use of int in max_burst socket option. [ 592.820882][T16595] Use struct sctp_assoc_value instead [ 592.831820][ T28] audit: type=1400 audit(1780100640.429:2895): avc: denied { write } for pid=16574 comm="syz.3.2821" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 592.831956][ T28] audit: type=1400 audit(1780100640.429:2896): avc: denied { write } for pid=16574 comm="syz.3.2821" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 592.894430][T16595] loop4: detected capacity change from 0 to 512 [ 592.965908][T16601] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 592.965908][T16601] Please contact the netfilter-devel mailing list or update your nftables rules. [ 592.984759][T16601] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2825'. [ 593.076684][T16616] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2825'. [ 593.428940][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.465518][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2826'. [ 593.474802][T16685] macvlan0: entered promiscuous mode [ 593.481489][T16685] netlink: 'syz.3.2826': attribute type 2 has an invalid length. [ 593.489406][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2826'. [ 595.215393][T16724] loop4: detected capacity change from 0 to 512 [ 595.266367][T16724] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2828: inode has both inline data and extents flags [ 595.282305][T16724] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 595.285654][T16724] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2828: couldn't read orphan inode 15 (err -117) [ 595.309743][T16724] loop4: lost filesystem error report for type 5 error -117 [ 595.327860][T16724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.697833][T16733] tipc: Invalid UDP bearer configuration [ 595.697846][T16733] tipc: Enabling of bearer rejected, failed to enable media [ 595.700659][T16731] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 595.700705][T16731] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 595.700808][T16731] vhci_hcd vhci_hcd.0: Device attached [ 595.753772][T16732] loop5: detected capacity change from 0 to 4096 [ 595.783592][T16734] vhci_hcd: connection closed [ 595.783887][T14747] vhci_hcd vhci_hcd.3: stop threads [ 595.783911][T14747] vhci_hcd vhci_hcd.3: release socket [ 595.784011][T14747] vhci_hcd vhci_hcd.3: disconnect device [ 595.785812][T16732] ext4: Unknown parameter 'uid' [ 596.066953][ T35] usb usb6-port1: unable to enumerate USB device [ 596.074766][T16737] netlink: 'syz.5.2831': attribute type 10 has an invalid length. [ 596.083161][T16737] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 596.096527][T16737] veth0_vlan: left promiscuous mode [ 596.102730][T16737] veth0_vlan: entered promiscuous mode [ 596.110915][T16737] team0: Device veth0_vlan failed to register rx_handler [ 596.188401][T16742] loop2: detected capacity change from 0 to 512 [ 596.232571][T16742] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 596.263626][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2834'. [ 596.275209][T16742] EXT4-fs (loop2): orphan file too big: 67108874 [ 596.299995][T16742] EXT4-fs (loop2): mount failed [ 596.527051][ T8493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.538774][T16751] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2836'. [ 596.557873][T16751] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2836'. [ 596.633570][T16759] loop4: detected capacity change from 0 to 2048 [ 596.657681][T16759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.995691][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2839'. [ 597.096715][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 597.096755][ T28] audit: type=1400 audit(1780100644.404:2899): avc: denied { write } for pid=16758 comm="syz.4.2839" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 597.364131][ T28] audit: type=1400 audit(1780100644.432:2900): avc: denied { write } for pid=16758 comm="syz.4.2839" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 597.595569][ T28] audit: type=1400 audit(1780100644.432:2901): avc: denied { write } for pid=16758 comm="syz.4.2839" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 597.674560][ T8493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.722536][T16781] 9p: Bad value for 'rfdno' [ 597.786172][T16785] 9p: Bad value for 'rfdno' [ 597.794554][ T28] audit: type=1400 audit(1780100644.432:2902): avc: denied { write } for pid=16758 comm="syz.4.2839" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 597.903632][T16790] vhci_hcd vhci_hcd.0: port 0 already used [ 599.765926][ T35] usb usb6-port1: attempt power cycle [ 600.451820][T16775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.518089][T16810] netlink: 'syz.3.2850': attribute type 2 has an invalid length. [ 600.523980][T16806] loop2: detected capacity change from 0 to 2048 [ 600.561266][T16810] loop3: detected capacity change from 0 to 1024 [ 600.568676][T16809] loop4: detected capacity change from 0 to 8192 [ 600.575601][T16810] EXT4-fs: Ignoring removed bh option [ 600.584058][T16806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.613091][T16810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.646968][ T28] audit: type=1400 audit(1780100647.762:2903): avc: denied { write } for pid=16808 comm="syz.3.2850" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 600.651925][T16810] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 600.736441][T16820] loop4: detected capacity change from 0 to 512 [ 600.746352][T16820] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 600.771108][ T9] team_slave_0: entered promiscuous mode [ 600.777005][ T9] team_slave_1: entered promiscuous mode [ 600.791219][T16820] EXT4-fs (loop4): orphan file too big: 67108874 [ 600.794820][T16810] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 600.797845][T16820] EXT4-fs (loop4): mount failed [ 600.844571][T16821] __nla_validate_parse: 2 callbacks suppressed [ 600.844603][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2847'. [ 600.864473][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.891745][ T28] audit: type=1400 audit(1780100647.987:2904): avc: denied { write } for pid=16805 comm="syz.2.2847" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 600.935142][ T28] audit: type=1400 audit(1780100648.006:2905): avc: denied { write } for pid=16805 comm="syz.2.2847" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 600.958253][ T28] audit: type=1400 audit(1780100648.006:2906): avc: denied { write } for pid=16805 comm="syz.2.2847" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 601.002955][ T28] audit: type=1400 audit(1780100648.006:2907): avc: denied { write } for pid=16805 comm="syz.2.2847" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 601.176148][T16830] program syz.3.2854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.226180][T16834] 9p: Bad value for 'rfdno' [ 601.237354][T16834] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2855'. [ 601.436015][ T8651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.478313][T16841] loop2: detected capacity change from 0 to 512 [ 601.502771][T16841] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 601.522929][T16841] EXT4-fs (loop2): 1 truncate cleaned up [ 601.555226][T16841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.580146][T16839] gre0 speed is unknown, defaulting to 1000 [ 601.588388][T16842] loop4: detected capacity change from 0 to 2048 [ 601.687376][ T28] audit: type=1400 audit(1780100648.726:2908): avc: denied { read } for pid=16838 comm="syz.3.2857" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 601.744520][ T35] usb usb6-port1: unable to enumerate USB device [ 601.879430][T16839] xfrm0 speed is unknown, defaulting to 1000 [ 601.964726][T16845] gre0 speed is unknown, defaulting to 1000 [ 602.006717][T16853] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 602.009118][T16846] loop3: detected capacity change from 0 to 256 [ 602.013554][T16853] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 602.030592][T16853] vhci_hcd vhci_hcd.0: Device attached [ 602.048484][T16842] loop4: p2 p3 p7 [ 602.101556][T16853] tipc: Invalid UDP bearer configuration [ 602.101609][T16853] tipc: Enabling of bearer rejected, failed to enable media [ 602.142952][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2861'. [ 602.217499][T16854] vhci_hcd: connection closed [ 602.217831][ T2267] vhci_hcd vhci_hcd.5: stop threads [ 602.229832][ T2267] vhci_hcd vhci_hcd.5: release socket [ 602.240362][ T2267] vhci_hcd vhci_hcd.5: disconnect device [ 602.362381][T16839] ip6_vti0 speed is unknown, defaulting to 1000 [ 602.502818][T16845] xfrm0 speed is unknown, defaulting to 1000 [ 602.739136][T16845] ip6_vti0 speed is unknown, defaulting to 1000 [ 602.944393][T16875] loop5: detected capacity change from 0 to 512 [ 602.956988][T16875] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 603.096823][T16875] EXT4-fs (loop5): orphan file too big: 67108874 [ 603.119257][T16875] EXT4-fs (loop5): mount failed [ 603.401531][T16879] 9p: Bad value for 'rfdno' [ 603.422214][T16879] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2866'. [ 603.550123][ T8651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.879583][T16890] loop2: detected capacity change from 0 to 512 [ 603.899341][ T35] usb usb6-port1: attempt power cycle [ 603.921300][T16890] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2868: inode has both inline data and extents flags [ 603.935884][T16890] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 603.938866][T16890] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2868: couldn't read orphan inode 15 (err -117) [ 603.949257][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 603.949300][ C1] EXT4-fs (loop2): initial error at time 1780100650: ext4_orphan_get:1397: inode 15 [ 603.949920][ C1] EXT4-fs (loop2): last error at time 1780100650: ext4_orphan_get:1397: inode 15 [ 603.992289][T16890] loop2: lost filesystem error report for type 5 error -117 [ 605.826837][T16890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.151383][T16893] loop3: detected capacity change from 0 to 512 [ 606.821849][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 606.821870][ T28] audit: type=1400 audit(1780100652.916:2913): avc: denied { write } for pid=16883 comm="syz.2.2868" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 607.163816][T16893] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 607.163846][T16893] EXT4-fs: failed to create workqueue [ 607.179734][T16893] EXT4-fs (loop3): mount failed [ 607.268061][T16897] loop6: detected capacity change from 0 to 2048 [ 607.361121][ T8651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.389753][T16897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.601747][T16903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2872'. [ 607.683731][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2871'. [ 607.719552][ T28] audit: type=1400 audit(1780100654.366:2914): avc: denied { write } for pid=16896 comm="syz.6.2871" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 607.749990][ T28] audit: type=1400 audit(1780100654.404:2915): avc: denied { write } for pid=16896 comm="syz.6.2871" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 607.772798][ T28] audit: type=1400 audit(1780100654.404:2916): avc: denied { write } for pid=16896 comm="syz.6.2871" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 607.816993][ T28] audit: type=1400 audit(1780100654.404:2917): avc: denied { write } for pid=16896 comm="syz.6.2871" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 608.096340][ T8556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.149429][ T28] audit: type=1400 audit(1780100654.778:2918): avc: denied { execute_no_trans } for pid=16924 comm="syz.6.2879" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 608.646757][T16933] loop3: detected capacity change from 0 to 256 [ 608.716729][T16935] loop3: detected capacity change from 0 to 1024 [ 608.724157][T16935] EXT4-fs: Mount option(s) incompatible with ext2 [ 609.024527][T16940] loop2: detected capacity change from 0 to 512 [ 609.100525][T16940] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2884: inode has both inline data and extents flags [ 609.114087][T16940] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 609.114985][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 609.130954][ C0] EXT4-fs (loop2): initial error at time 1780100655: ext4_orphan_get:1397: inode 15 [ 609.140839][ C0] EXT4-fs (loop2): last error at time 1780100655: ext4_orphan_get:1397: inode 15 [ 609.154002][ T35] usb usb6-port1: unable to enumerate USB device [ 609.166441][T16940] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2884: couldn't read orphan inode 15 (err -117) [ 609.371183][T16940] loop2: lost filesystem error report for type 5 error -117 [ 609.404327][T16940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.507597][ T28] audit: type=1400 audit(1780100656.003:2919): avc: denied { write } for pid=16936 comm="syz.2.2884" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 610.737404][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2885'. [ 611.035976][ T8651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.338853][T16962] loop3: detected capacity change from 0 to 512 [ 611.356989][T16962] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2887: inode has both inline data and extents flags [ 611.371066][T16962] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 611.371499][T16962] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2887: couldn't read orphan inode 15 (err -117) [ 611.393337][T16962] loop3: lost filesystem error report for type 5 error -117 [ 611.394695][T16962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.444475][ T28] audit: type=1400 audit(1780100657.809:2920): avc: denied { write } for pid=16948 comm="syz.3.2887" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 611.700329][ T28] audit: type=1400 audit(1780100658.089:2921): avc: denied { ioctl } for pid=16960 comm="syz.2.2889" path="socket:[48735]" dev="sockfs" ino=48735 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 611.813380][T16969] netlink: 'syz.4.2893': attribute type 10 has an invalid length. [ 612.120160][T16969] veth0_vlan: left promiscuous mode [ 612.149225][T16969] veth0_vlan: entered promiscuous mode [ 612.156730][ T28] audit: type=1400 audit(1780100658.529:2922): avc: denied { write } for pid=16971 comm="syz.2.2894" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 612.203298][T16969] team0: Device veth0_vlan failed to register rx_handler [ 612.254618][ T28] audit: type=1400 audit(1780100658.557:2923): avc: denied { getattr } for pid=16971 comm="syz.2.2894" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=48755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 612.350887][ T28] audit: type=1400 audit(1780100658.594:2924): avc: denied { ioctl } for pid=16971 comm="syz.2.2894" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 612.915512][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.643420][ T3393] usb usb6-port1: attempt power cycle [ 613.871023][T17001] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2905'. [ 613.903833][T17002] loop3: detected capacity change from 0 to 512 [ 613.921017][T17002] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 613.952783][T17002] EXT4-fs (loop3): orphan file too big: 67108874 [ 613.973195][T17002] EXT4-fs (loop3): mount failed [ 614.022777][ T28] audit: type=1326 audit(1780100660.259:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.4.2907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff909ce59 code=0x7ffc0000 [ 614.089654][ T28] audit: type=1326 audit(1780100660.259:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.4.2907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff909ce59 code=0x7ffc0000 [ 614.147115][ T28] audit: type=1326 audit(1780100660.259:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.4.2907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff909ce59 code=0x7ffc0000 [ 614.200078][ T28] audit: type=1326 audit(1780100660.259:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.4.2907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff909ce59 code=0x7ffc0000 [ 614.257136][ T28] audit: type=1326 audit(1780100660.259:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.4.2907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff909ce59 code=0x7ffc0000 [ 614.284029][T17013] loop2: detected capacity change from 0 to 2048 [ 614.301404][T17012] loop6: detected capacity change from 0 to 2048 [ 614.312080][ T28] audit: type=1326 audit(1780100660.259:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.4.2907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ff909ce59 code=0x7ffc0000 [ 614.350833][ T28] audit: type=1326 audit(1780100660.259:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.4.2907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff909ce59 code=0x7ffc0000 [ 614.380640][ T28] audit: type=1326 audit(1780100660.259:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.4.2907" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff909ce59 code=0x7ffc0000 [ 614.414244][T17007] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2907'. [ 614.445343][T17013] loop2: p2 p3 p7 [ 614.533856][T17012] loop6: p2 p3 p7 [ 614.563564][ T2983] loop6: p2 p3 p7 [ 614.702219][T17025] loop3: detected capacity change from 0 to 2048 [ 614.906448][T17025] loop3: p2 p3 p7 [ 615.004767][T17032] loop4: detected capacity change from 0 to 2048 [ 615.174574][T17032] loop4: p2 p3 p7 [ 615.206404][ T2983] loop4: p2 p3 p7 [ 615.726993][ T3393] usb usb6-port1: unable to enumerate USB device [ 615.891322][T17046] loop2: detected capacity change from 0 to 1024 [ 615.898048][T17046] EXT4-fs: Ignoring removed bh option [ 615.999397][T17046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.176545][T17063] loop3: detected capacity change from 0 to 512 [ 616.184881][ T8651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.059099][T17063] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 617.071184][T17063] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 617.081666][T17063] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2920: Corrupt directory, running e2fsck is recommended [ 617.096425][T17063] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 617.105035][T17063] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2920: corrupted in-inode xattr: e_name out of bounds [ 617.119736][T17063] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 617.120120][T17063] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2920: couldn't read orphan inode 15 (err -117) [ 617.130230][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 617.130254][ C0] EXT4-fs (loop3): initial error at time 1780100663: ext4_iget_extra_inode:5128: inode 15 [ 617.130281][ C0] EXT4-fs (loop3): last error at time 1780100663: ext4_iget_extra_inode:5128: inode 15 [ 617.168927][T17063] loop3: lost filesystem error report for type 5 error -117 [ 617.174665][T17063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.231935][T17063] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 617.244306][T17063] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 617.254636][T17063] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2920: Corrupt directory, running e2fsck is recommended [ 617.268331][T17063] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.2920: path /78/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 617.446404][T17063] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.2920: path /78/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 618.100998][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.484798][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 618.484852][ T28] audit: type=1400 audit(1780100664.441:3018): avc: denied { ioctl } for pid=17106 comm="syz.6.2937" path="socket:[49582]" dev="sockfs" ino=49582 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 618.521732][ T28] audit: type=1400 audit(1780100664.478:3019): avc: denied { mount } for pid=17101 comm="syz.5.2936" name="/" dev="autofs" ino=49586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 618.636930][T17087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 618.998530][T17123] loop6: detected capacity change from 0 to 512 [ 619.844236][T17123] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 619.856356][T17123] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 619.866670][T17123] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2938: Corrupt directory, running e2fsck is recommended [ 619.880610][T17123] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 619.888864][T17123] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2938: corrupted in-inode xattr: e_name out of bounds [ 619.902820][T17123] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 619.917434][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 619.933228][ C1] EXT4-fs (loop6): initial error at time 1780100665: ext4_iget_extra_inode:5128: inode 15 [ 619.943197][ C1] EXT4-fs (loop6): last error at time 1780100665: ext4_iget_extra_inode:5128: inode 15 [ 620.481515][T17123] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2938: couldn't read orphan inode 15 (err -117) [ 620.493935][T17123] loop6: lost filesystem error report for type 5 error -117 [ 620.495276][T17123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.544291][T17123] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 620.556013][T17123] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 620.566275][T17123] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2938: Corrupt directory, running e2fsck is recommended [ 620.579544][T17123] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.2938: path /351/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 620.645217][T17123] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 8: comm syz.6.2938: path /351/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 621.125201][T17135] loop4: detected capacity change from 0 to 512 [ 621.154170][T17135] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 621.166144][T17135] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 621.176983][T17135] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2941: Corrupt directory, running e2fsck is recommended [ 621.194552][T17135] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 621.203488][T17135] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2941: corrupted in-inode xattr: e_name out of bounds [ 621.218074][T17135] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 621.219180][T17135] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2941: couldn't read orphan inode 15 (err -117) [ 621.229237][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 621.229262][ C0] EXT4-fs (loop4): initial error at time 1780100667: ext4_iget_extra_inode:5128: inode 15 [ 621.229294][ C0] EXT4-fs (loop4): last error at time 1780100667: ext4_iget_extra_inode:5128: inode 15 [ 621.267939][T17135] loop4: lost filesystem error report for type 5 error -117 [ 621.268227][T17057] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 621.300573][T17135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.351239][T17135] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 621.363098][T17135] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 621.373569][T17135] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2941: Corrupt directory, running e2fsck is recommended [ 621.386663][T17135] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.2941: path /379/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 621.542217][T15591] usb usb6-port1: attempt power cycle [ 621.553561][T17135] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz.4.2941: path /379/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 621.588710][ T8556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.853080][T17133] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2942'. [ 622.098620][ T28] audit: type=1400 audit(1780100667.789:3020): avc: denied { bind } for pid=17132 comm="syz.3.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 622.141458][ T28] audit: type=1400 audit(1780100667.789:3021): avc: denied { write } for pid=17132 comm="syz.3.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 622.173773][T17149] usb usb2: usbfs: interface 0 claimed by hub while 'syz.5.2946' sets config #4 [ 622.215012][T17149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17149 comm=syz.5.2946 [ 622.618485][T17155] syz.5.2948 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 622.632613][T17155] CPU: 0 UID: 0 PID: 17155 Comm: syz.5.2948 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 622.632644][T17155] Tainted: [W]=WARN [ 622.632651][T17155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 622.632665][T17155] Call Trace: [ 622.632677][T17155] [ 622.632688][T17155] __dump_stack+0x1d/0x30 [ 622.632712][T17155] dump_stack_lvl+0x95/0xd0 [ 622.632731][T17155] dump_stack+0x15/0x1b [ 622.632754][T17155] dump_header+0x80/0x240 [ 622.632779][T17155] oom_kill_process+0x295/0x350 [ 622.632889][T17155] out_of_memory+0x97d/0xb80 [ 622.632924][T17155] try_charge_memcg+0x62f/0xa10 [ 622.632964][T17155] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 622.633007][T17155] __alloc_frozen_pages_noprof+0x18a/0x350 [ 622.633033][T17155] alloc_pages_bulk_noprof+0x4d1/0x560 [ 622.633054][T17155] ? policy_nodemask+0x417/0x5e0 [ 622.633102][T17155] ? __alloc_frozen_pages_noprof+0x2a4/0x350 [ 622.633203][T17155] alloc_pages_bulk_mempolicy_noprof+0x35b/0xeb0 [ 622.633237][T17155] ? alloc_pages_mpol+0x217/0x260 [ 622.633478][T17155] __vmalloc_node_range_noprof+0x891/0x11c0 [ 622.633507][T17155] __kvmalloc_node_noprof+0x3d4/0x640 [ 622.633535][T17155] ? futex_hash_allocate+0x190/0x9a0 [ 622.633563][T17155] ? futex_hash_allocate+0x190/0x9a0 [ 622.633653][T17155] futex_hash_allocate+0x190/0x9a0 [ 622.633691][T17155] ? cap_task_prctl+0x13f/0x6b0 [ 622.633726][T17155] futex_hash_prctl+0xd8/0xf0 [ 622.633804][T17155] __se_sys_prctl+0x4f4/0x1400 [ 622.633843][T17155] __x64_sys_prctl+0x67/0x80 [ 622.633871][T17155] x64_sys_call+0x2533/0x3020 [ 622.633893][T17155] do_syscall_64+0x12c/0x3b0 [ 622.633984][T17155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.634010][T17155] RIP: 0033:0x7fc77b9dce59 [ 622.634036][T17155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.634112][T17155] RSP: 002b:00007fc77a42f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 622.634132][T17155] RAX: ffffffffffffffda RBX: 00007fc77bc55fa0 RCX: 00007fc77b9dce59 [ 622.634146][T17155] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 622.634159][T17155] RBP: 00007fc77ba72d6f R08: 0000000000000000 R09: 0000000000000000 [ 622.634174][T17155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.634189][T17155] R13: 00007fc77bc56038 R14: 00007fc77bc55fa0 R15: 00007ffd25009308 [ 622.634255][T17155] [ 622.634264][T17155] memory: usage 307200kB, limit 307200kB, failcnt 26801 [ 622.959348][ T8493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.981744][T17155] memory+swap: usage 205316kB, limit 9007199254740988kB, failcnt 0 [ 623.032889][T17163] loop4: detected capacity change from 0 to 512 [ 623.034225][T17155] kmem: usage 185088kB, limit 9007199254740988kB, failcnt 0 [ 623.060618][T17161] loop3: detected capacity change from 0 to 512 [ 623.076623][T17161] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2950: inode has both inline data and extents flags [ 623.090382][T17161] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 623.090628][T17161] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2950: couldn't read orphan inode 15 (err -117) [ 623.094142][T17155] Memory cgroup stats for [ 623.100091][T17161] loop3: lost filesystem error report for type 5 error -117 [ 623.101941][T17161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.143919][ T28] audit: type=1400 audit(1780100668.800:3022): avc: denied { write } for pid=17159 comm="syz.3.2950" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 623.164486][T17155] /syz5: [ 623.180808][T17155] cache 0 [ 623.211273][T17155] rss 176128 [ 623.215028][T17155] shmem 0 [ 623.224725][T17155] mapped_file 0 [ 623.230991][T17163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.231794][T17155] dirty 0 [ 623.263329][T17155] writeback 0 [ 623.270140][T17155] workingset_refault_anon 3384 [ 623.298908][T17163] gre0 speed is unknown, defaulting to 1000 [ 623.327857][T17155] workingset_refault_file 50 [ 623.445434][T17155] swap 36864 [ 623.448852][T17155] swapcached 256892928 [ 623.453129][T17155] pgpgin 422375 [ 623.456981][T17155] pgpgout 422321 [ 623.460710][T17155] pgfault 500282 [ 623.461972][T17163] xfrm0 speed is unknown, defaulting to 1000 [ 623.464667][T17155] pgmajfault 3979 [ 623.474983][T17155] inactive_anon 0 [ 623.478958][T17155] active_anon 221184 [ 623.482920][T17155] inactive_file 0 [ 623.486643][T17155] active_file 0 [ 623.490210][T17155] unevictable 0 [ 623.493678][T17155] hierarchical_memory_limit 314572800 [ 623.499128][T17155] hierarchical_memsw_limit 9223372036854771712 [ 623.505691][T17155] total_cache 0 [ 623.509528][T17155] total_rss 176128 [ 623.513366][T17155] total_shmem 0 [ 623.517167][T17155] total_mapped_file 0 [ 623.521183][T17155] total_dirty 0 [ 623.524831][T17155] total_writeback 0 [ 623.528677][T17155] total_workingset_refault_anon 3384 [ 623.538575][T17172] serio: Serial port ttyS3 [ 623.564850][T17163] ip6_vti0 speed is unknown, defaulting to 1000 [ 623.608457][T17155] total_workingset_refault_file 50 [ 623.626552][T17155] total_swap 36864 [ 623.639749][T17155] total_swapcached 256892928 [ 623.654563][T17155] total_pgpgin 422375 [ 623.668237][T17155] total_pgpgout 422321 [ 623.686065][T17155] total_pgfault 500282 [ 623.721226][T17155] total_pgmajfault 3979 [ 623.737465][T17155] total_inactive_anon 0 [ 623.764847][T17155] total_active_anon 221184 [ 623.792109][T17155] total_inactive_file 0 [ 623.814095][T17155] total_active_file 0 [ 623.827468][T17155] total_unevictable 0 [ 623.842874][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.856267][T17155] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2948,pid=17154,uid=0 [ 623.905133][T17177] FAULT_INJECTION: forcing a failure. [ 623.905133][T17177] name failslab, interval 1, probability 0, space 0, times 0 [ 623.906417][T17155] Memory cgroup out of memory: Killed process 17155 (syz.5.2948) total-vm:96348kB, anon-rss:12836kB, file-rss:22556kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 623.935122][T17177] CPU: 1 UID: 0 PID: 17177 Comm: syz.3.2952 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 623.935157][T17177] Tainted: [W]=WARN [ 623.935219][T17177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.935231][T17177] Call Trace: [ 623.935239][T17177] [ 623.935248][T17177] __dump_stack+0x1d/0x30 [ 623.935274][T17177] dump_stack_lvl+0x95/0xd0 [ 623.935322][T17177] dump_stack+0x15/0x1b [ 623.935341][T17177] should_fail_ex+0x263/0x280 [ 623.935379][T17177] ? getname_long+0x32/0x100 [ 623.935507][T17177] should_failslab+0x8c/0xb0 [ 623.935537][T17177] __kmalloc_cache_noprof+0x5f/0x400 [ 623.935569][T17177] ? should_fail_usercopy+0x1a/0x20 [ 623.935638][T17177] getname_long+0x32/0x100 [ 623.935660][T17177] do_getname+0x12e/0x1c0 [ 623.935748][T17177] getname_flags+0x1d/0x30 [ 623.935824][T17177] do_sys_openat2+0x60/0x130 [ 623.935848][T17177] __x64_sys_creat+0x65/0x90 [ 623.935872][T17177] x64_sys_call+0x2ea0/0x3020 [ 623.935959][T17177] do_syscall_64+0x12c/0x3b0 [ 623.936071][T17177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.936093][T17177] RIP: 0033:0x7fc6cb73ce59 [ 623.936111][T17177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.936130][T17177] RSP: 002b:00007fc6ca18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 623.936208][T17177] RAX: ffffffffffffffda RBX: 00007fc6cb9b5fa0 RCX: 00007fc6cb73ce59 [ 623.936225][T17177] RDX: 0000000000000000 RSI: 00000000000000ae RDI: 00002000000000c0 [ 623.936240][T17177] RBP: 00007fc6ca18f090 R08: 0000000000000000 R09: 0000000000000000 [ 623.936254][T17177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.936268][T17177] R13: 00007fc6cb9b6038 R14: 00007fc6cb9b5fa0 R15: 00007ffd4decf9d8 [ 623.936290][T17177] [ 624.123622][T15591] usb usb6-port1: unable to enumerate USB device [ 624.138119][ T8493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.294390][T17191] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 624.301048][T17191] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 624.348902][T17191] vhci_hcd vhci_hcd.0: Device attached [ 624.401147][T17197] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2959'. [ 624.491022][T17191] tipc: Invalid UDP bearer configuration [ 624.491075][T17191] tipc: Enabling of bearer rejected, failed to enable media [ 624.583439][T17193] vhci_hcd: connection closed [ 624.583635][ T68] vhci_hcd vhci_hcd.2: stop threads [ 624.602439][ T28] audit: type=1400 audit(1780100670.175:3023): avc: denied { ioctl } for pid=17201 comm="syz.5.2960" path="pid:[4026532482]" dev="nsfs" ino=4026532482 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 624.602419][T17203] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2960'. [ 624.643702][ T9080] usb 6-1: SetAddress Request (112) to port 0 [ 624.649978][ T68] vhci_hcd vhci_hcd.2: release socket [ 624.664127][ T9080] usb 6-1: new SuperSpeed USB device number 112 using vhci_hcd [ 624.672210][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 624.736991][T17187] syz.4.2954 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 624.751380][T17187] CPU: 0 UID: 0 PID: 17187 Comm: syz.4.2954 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 624.751439][T17187] Tainted: [W]=WARN [ 624.751448][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.751464][T17187] Call Trace: [ 624.751513][T17187] [ 624.751523][T17187] __dump_stack+0x1d/0x30 [ 624.751599][T17187] dump_stack_lvl+0x95/0xd0 [ 624.751621][T17187] dump_stack+0x15/0x1b [ 624.751657][T17187] dump_header+0x80/0x240 [ 624.751725][T17187] oom_kill_process+0x295/0x350 [ 624.751762][T17187] out_of_memory+0x97d/0xb80 [ 624.751873][T17187] try_charge_memcg+0x62f/0xa10 [ 624.751905][T17187] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 624.752002][T17187] __alloc_frozen_pages_noprof+0x18a/0x350 [ 624.752027][T17187] alloc_pages_mpol+0xb3/0x260 [ 624.752096][T17187] alloc_pages_noprof+0x8f/0x140 [ 624.752126][T17187] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 624.752158][T17187] __kvmalloc_node_noprof+0x3d4/0x640 [ 624.752178][T17187] ? futex_hash_allocate+0x190/0x9a0 [ 624.752262][T17187] ? futex_hash_allocate+0x190/0x9a0 [ 624.752305][T17187] futex_hash_allocate+0x190/0x9a0 [ 624.752397][T17187] ? cap_task_prctl+0x13f/0x6b0 [ 624.752473][T17187] futex_hash_prctl+0xd8/0xf0 [ 624.752510][T17187] __se_sys_prctl+0x4f4/0x1400 [ 624.752555][T17187] __x64_sys_prctl+0x67/0x80 [ 624.752653][T17187] x64_sys_call+0x2533/0x3020 [ 624.752703][T17187] do_syscall_64+0x12c/0x3b0 [ 624.752742][T17187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.752770][T17187] RIP: 0033:0x7f7ff909ce59 [ 624.752791][T17187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.752858][T17187] RSP: 002b:00007f7ff7af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 624.752950][T17187] RAX: ffffffffffffffda RBX: 00007f7ff9315fa0 RCX: 00007f7ff909ce59 [ 624.752965][T17187] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 624.752979][T17187] RBP: 00007f7ff9132d6f R08: 0000000000000000 R09: 0000000000000000 [ 624.753038][T17187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.753054][T17187] R13: 00007f7ff9316038 R14: 00007f7ff9315fa0 R15: 00007fff894b0a28 [ 624.753110][T17187] [ 624.753117][T17187] memory: usage 307124kB, limit 307200kB, failcnt 19888 [ 624.764392][ T9080] usb 6-1: enqueue for inactive port 0 [ 624.768149][T17187] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 624.804473][ T9080] usb 6-1: enqueue for inactive port 0 [ 624.816798][T17207] 9p: Bad value for 'rfdno' [ 624.857441][ T9080] usb 6-1: enqueue for inactive port 0 [ 624.873011][T17187] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 625.010571][ T28] audit: type=1400 audit(1780100670.493:3024): avc: denied { create } for pid=17205 comm="syz.6.2961" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 625.041365][T17187] Memory cgroup stats for /syz4: [ 625.046607][T17187] cache 0 [ 625.046689][T17187] rss 65536 [ 625.046698][T17187] shmem 0 [ 625.046707][T17187] mapped_file 0 [ 625.046716][T17187] dirty 0 [ 625.046723][T17187] writeback 12288 [ 625.046730][T17187] workingset_refault_anon 1820 [ 625.046739][T17187] workingset_refault_file 3359 [ 625.046746][T17187] swap 356352 [ 625.046753][T17187] swapcached 219398144 [ 625.046761][T17187] pgpgin 688425 [ 625.046768][T17187] pgpgout 688402 [ 625.046832][T17187] pgfault 666589 [ 625.046840][T17187] pgmajfault 683 [ 625.046849][T17187] inactive_anon 16384 [ 625.046859][T17187] active_anon 12288 [ 625.046869][T17187] inactive_file 0 [ 625.046877][T17187] active_file 4096 [ 625.046965][T17187] unevictable 0 [ 625.046973][T17187] hierarchical_memory_limit 314572800 [ 625.046982][T17187] hierarchical_memsw_limit 9223372036854771712 [ 625.046990][T17187] total_cache 0 [ 625.046997][T17187] total_rss 65536 [ 625.047004][T17187] total_shmem 0 [ 625.047011][T17187] total_mapped_file 0 [ 625.047073][T17187] total_dirty 0 [ 625.047082][T17187] total_writeback 12288 [ 625.047091][T17187] total_workingset_refault_anon 1820 [ 625.047101][T17187] total_workingset_refault_file 3359 [ 625.047109][T17187] total_swap 356352 [ 625.047116][T17187] total_swapcached 219398144 [ 625.047124][T17187] total_pgpgin 688425 [ 625.047131][T17187] total_pgpgout 688402 [ 625.047140][T17187] total_pgfault 666589 [ 625.047149][T17187] total_pgmajfault 683 [ 625.047218][T17187] total_inactive_anon 16384 [ 625.047228][T17187] total_active_anon 12288 [ 625.047238][T17187] total_inactive_file 0 [ 625.047262][T17187] total_active_file 4096 [ 625.047269][T17187] total_unevictable 0 [ 625.047277][T17187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2954,pid=17186,uid=0 [ 625.047382][T17187] Memory cgroup out of memory: Killed process 17186 (syz.4.2954) total-vm:96348kB, anon-rss:1272kB, file-rss:22372kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 625.056527][T17207] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2962'. [ 625.060256][ T9080] usb 6-1: new SuperSpeed USB device number 112 using vhci_hcd [ 625.093029][ T9080] usb 6-1: enqueue for inactive port 0 [ 625.093057][ T9080] usb 6-1: enqueue for inactive port 0 [ 625.093078][ T9080] usb 6-1: enqueue for inactive port 0 [ 625.116702][ T28] audit: type=1400 audit(1780100670.493:3025): avc: denied { write } for pid=17205 comm="syz.6.2961" name="file0" dev="tmpfs" ino=1948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 625.116822][ T28] audit: type=1400 audit(1780100670.493:3026): avc: denied { open } for pid=17205 comm="syz.6.2961" path="/355/file0" dev="tmpfs" ino=1948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 625.116846][ T28] audit: type=1400 audit(1780100670.511:3027): avc: denied { ioctl } for pid=17205 comm="syz.6.2961" path="/355/file0" dev="tmpfs" ino=1948 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 625.116948][ T28] audit: type=1400 audit(1780100670.521:3028): avc: denied { read write } for pid=17205 comm="syz.6.2961" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 625.117004][ T28] audit: type=1400 audit(1780100670.521:3029): avc: denied { open } for pid=17205 comm="syz.6.2961" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 625.150921][T17214] loop4: detected capacity change from 0 to 512 [ 625.157868][ T28] audit: type=1400 audit(1780100670.689:3030): avc: denied { read } for pid=17213 comm="syz.4.2964" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 625.157913][ T28] audit: type=1400 audit(1780100670.689:3031): avc: denied { open } for pid=17213 comm="syz.4.2964" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 625.969850][T17233] loop4: detected capacity change from 0 to 512 [ 625.970655][T17233] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 625.973465][T17233] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2971: bg 0: block 425: padding at end of block bitmap is not set [ 625.973498][T17233] loop4: lost filesystem error report for type 5 error -117 [ 625.973621][T17233] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 625.973640][T17233] loop4: lost filesystem error report for type 5 error -117 [ 625.973780][T17233] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.2971: attempt to clear invalid blocks 983260 len 1 [ 625.973811][T17233] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 625.974014][T17233] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.2971: Invalid inode table block 0 in block_group 0 [ 625.974044][T17233] loop4: lost filesystem error report for type 5 error -117 [ 625.974225][T17233] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 625.974245][T17233] loop4: lost filesystem error report for type 5 error -117 [ 625.978048][T17233] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 625.978073][T17233] loop4: lost filesystem error report for type 5 error -117 [ 625.978240][T17233] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.2971: Invalid inode table block 0 in block_group 0 [ 625.978271][T17233] loop4: lost filesystem error report for type 5 error -117 [ 625.978402][T17233] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 625.978424][T17233] loop4: lost filesystem error report for type 5 error -117 [ 625.978589][T17233] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.2971: mark_inode_dirty error [ 625.978616][T17233] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 625.978743][T17233] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 625.978790][T17233] loop4: lost filesystem error report for type 5 error -117 [ 625.978921][T17233] EXT4-fs (loop4): 1 truncate cleaned up [ 625.994817][T17233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.056214][T17233] gre0 speed is unknown, defaulting to 1000 [ 626.068241][ T28] audit: type=1400 audit(1780100671.540:3032): avc: denied { connect } for pid=17232 comm="syz.4.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 626.103490][T17241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2971'. [ 626.280408][T17246] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.2971: Invalid inode table block 0 in block_group 0 [ 626.559949][ T9080] usb usb6-port1: attempt power cycle [ 626.569620][T17233] xfrm0 speed is unknown, defaulting to 1000 [ 626.624778][T17251] bond1: Unable to set up delay as MII monitoring is disabled [ 626.649474][T17251] bond1 (unregistering): Released all slaves [ 626.722408][T17233] ip6_vti0 speed is unknown, defaulting to 1000 [ 626.971757][ T8493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.598569][T17263] 9p: Bad value for 'rfdno' [ 627.672109][T17263] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2977'. [ 628.780344][ T9080] usb usb6-port1: unable to enumerate USB device [ 628.917701][T17282] loop2: detected capacity change from 0 to 512 [ 629.117307][T17281] loop4: detected capacity change from 0 to 2048 [ 629.125393][T17282] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 629.197305][T17289] loop3: detected capacity change from 0 to 512 [ 629.276904][T17289] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 629.288766][T17289] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 629.299444][T17289] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2984: Corrupt directory, running e2fsck is recommended [ 629.314867][T17289] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 629.323499][T17289] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2984: corrupted in-inode xattr: e_name out of bounds [ 629.338366][T17289] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 629.343695][T17289] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2984: couldn't read orphan inode 15 (err -117) [ 629.352963][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 629.352984][ C1] EXT4-fs (loop3): initial error at time 1780100674: ext4_iget_extra_inode:5128: inode 15 [ 629.353014][ C1] EXT4-fs (loop3): last error at time 1780100674: ext4_iget_extra_inode:5128: inode 15 [ 629.391679][T17289] loop3: lost filesystem error report for type 5 error -117 [ 629.403213][T17289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.438302][T17289] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 629.450011][T17289] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 629.460197][T17289] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2984: Corrupt directory, running e2fsck is recommended [ 629.473708][T17289] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.2984: path /91/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 629.576441][T17289] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.2984: path /91/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 629.625054][T17282] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2985: bg 0: block 425: padding at end of block bitmap is not set [ 629.902229][T17282] loop2: lost filesystem error report for type 5 error -117 [ 629.902464][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 629.916591][ C1] EXT4-fs (loop2): initial error at time 1780100675: ext4_validate_block_bitmap:441 [ 629.926101][ C1] EXT4-fs (loop2): last error at time 1780100675: ext4_validate_block_bitmap:441 [ 629.943988][T17282] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 629.999322][T17282] loop2: lost filesystem error report for type 5 error -117 [ 630.004214][T17282] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2985: attempt to clear invalid blocks 983260 len 1 [ 630.129826][ T2983] loop4: p2 p3 p7 [ 630.156972][T17282] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 630.157289][T17282] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.2985: Invalid inode table block 0 in block_group 0 [ 630.415832][T17282] loop2: lost filesystem error report for type 5 error -117 [ 630.791924][T17303] loop6: detected capacity change from 0 to 512 [ 630.851240][T17303] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 630.863293][T17303] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 630.874051][T17303] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2987: Corrupt directory, running e2fsck is recommended [ 630.889476][T17303] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 630.897903][T17303] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2987: corrupted in-inode xattr: e_name out of bounds [ 630.912505][T17303] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 630.913864][T17303] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2987: couldn't read orphan inode 15 (err -117) [ 630.923325][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 630.923347][ C1] EXT4-fs (loop6): initial error at time 1780100676: ext4_iget_extra_inode:5128: inode 15 [ 630.923398][ C1] EXT4-fs (loop6): last error at time 1780100676: ext4_iget_extra_inode:5128: inode 15 [ 630.961915][T17303] loop6: lost filesystem error report for type 5 error -117 [ 630.966981][T17303] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.024732][T17303] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 631.037689][T17303] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 631.048286][T17303] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2987: Corrupt directory, running e2fsck is recommended [ 631.061465][T17303] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.2987: path /360/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 631.223353][ T7838] usb usb6-port1: attempt power cycle [ 631.233906][T17303] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 8: comm syz.6.2987: path /360/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 631.300730][T17282] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 631.446417][T17291] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 631.481487][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.496913][T17282] loop2: lost filesystem error report for type 5 error -117 [ 631.500009][T17282] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 631.552619][T17282] loop2: lost filesystem error report for type 5 error -117 [ 631.565262][T17282] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.2985: Invalid inode table block 0 in block_group 0 [ 631.689063][T17282] loop2: lost filesystem error report for type 5 error -117 [ 631.689229][T17282] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 631.785619][T17282] loop2: lost filesystem error report for type 5 error -117 [ 631.787391][T17282] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.2985: mark_inode_dirty error [ 631.853950][T17282] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 631.854109][T17282] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 631.937765][T17282] loop2: lost filesystem error report for type 5 error -117 [ 631.937940][T17282] EXT4-fs (loop2): 1 truncate cleaned up [ 631.985353][T17282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.120207][T17282] gre0 speed is unknown, defaulting to 1000 [ 632.188809][T17307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2985'. [ 632.230072][T17307] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.2985: Invalid inode table block 0 in block_group 0 [ 632.245340][T17282] xfrm0 speed is unknown, defaulting to 1000 [ 632.330071][T17282] ip6_vti0 speed is unknown, defaulting to 1000 [ 632.349394][ T8556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.376414][T17309] 9p: Bad value for 'rfdno' [ 632.394418][T17309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2988'. [ 632.497076][ T8651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.727818][T17317] loop6: detected capacity change from 0 to 512 [ 632.738933][T17317] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2989: inode has both inline data and extents flags [ 632.752524][T17317] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 632.753143][T17317] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2989: couldn't read orphan inode 15 (err -117) [ 632.777108][T17317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.820955][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 632.849298][ T28] audit: type=1400 audit(1780100677.836:3038): avc: denied { write } for pid=17310 comm="syz.6.2989" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 633.107530][T17323] loop3: detected capacity change from 0 to 512 [ 633.166776][T17323] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 633.236210][T17323] EXT4-fs (loop3): orphan file too big: 67108874 [ 633.263815][T17323] EXT4-fs (loop3): mount failed [ 634.082748][ T7838] usb usb6-port1: unable to enumerate USB device [ 634.222143][T17335] loop3: detected capacity change from 0 to 512 [ 634.253232][T17335] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2995: inode has both inline data and extents flags [ 634.266640][T17335] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 634.318916][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 634.334963][ C0] EXT4-fs (loop3): initial error at time 1780100679: ext4_orphan_get:1397: inode 15 [ 634.344659][ C0] EXT4-fs (loop3): last error at time 1780100679: ext4_orphan_get:1397: inode 15 [ 634.360060][T17335] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2995: couldn't read orphan inode 15 (err -117) [ 634.404810][T17335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.449136][ T28] audit: type=1400 audit(1780100679.370:3039): avc: denied { write } for pid=17330 comm="syz.3.2995" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 634.566077][ T8556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.639650][T17343] loop4: detected capacity change from 0 to 512 [ 634.650538][T17343] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 634.662281][T17343] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 634.672555][T17343] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2998: Corrupt directory, running e2fsck is recommended [ 634.691654][T17343] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 634.700686][T17343] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2998: corrupted in-inode xattr: e_name out of bounds [ 634.715198][T17343] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 634.715926][T17343] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2998: couldn't read orphan inode 15 (err -117) [ 634.725113][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 634.725129][ C1] EXT4-fs (loop4): initial error at time 1780100679: ext4_iget_extra_inode:5128: inode 15 [ 634.725158][ C1] EXT4-fs (loop4): last error at time 1780100679: ext4_iget_extra_inode:5128: inode 15 [ 634.764130][T17343] fserror_report: 2 callbacks suppressed [ 634.764218][T17343] loop4: lost filesystem error report for type 5 error -117 [ 634.776868][T17343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.810708][T17343] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 634.822402][T17343] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 634.832723][T17343] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2998: Corrupt directory, running e2fsck is recommended [ 634.846079][T17343] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.2998: path /389/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 635.080714][T17343] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz.4.2998: path /389/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 635.113112][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.595276][T17356] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2999'. [ 635.645587][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3003'. [ 635.789528][T17363] loop6: detected capacity change from 0 to 512 [ 635.797252][T17363] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 635.809972][T17363] EXT4-fs (loop6): orphan file too big: 67108874 [ 635.855619][T17363] EXT4-fs (loop6): mount failed [ 636.008322][T17365] loop3: detected capacity change from 0 to 512 [ 636.059015][T17365] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 636.106228][T17365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 636.140318][T17365] System zones: 1-12 [ 636.164545][T17365] EXT4-fs (loop3): orphan cleanup on readonly fs [ 636.193918][T17365] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3006: bg 0: block 361: padding at end of block bitmap is not set [ 636.234534][T17365] loop3: lost filesystem error report for type 5 error -117 [ 636.234965][T17365] EXT4-fs (loop3): Remounting filesystem read-only [ 636.242505][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 636.242560][ C0] EXT4-fs (loop3): initial error at time 1780100681: ext4_validate_block_bitmap:441 [ 636.242679][ C0] EXT4-fs (loop3): last error at time 1780100681: ext4_validate_block_bitmap:441 [ 636.277940][T17365] EXT4-fs (loop3): 1 truncate cleaned up [ 636.278746][ T8493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.285168][T17365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 636.329948][ T28] audit: type=1400 audit(1780100681.128:3040): avc: denied { load_policy } for pid=17364 comm="syz.3.3006" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 636.360285][T17365] SELinux: failed to load policy [ 636.372943][T17365] nfs: Bad value for 'fsc' [ 636.378188][ T28] audit: type=1400 audit(1780100681.184:3041): avc: denied { mounton } for pid=17364 comm="syz.3.3006" path="/98/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 636.422297][T17373] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 636.428860][T17373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 636.438607][ T28] audit: type=1400 audit(1780100681.240:3042): avc: denied { getopt } for pid=17364 comm="syz.3.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 636.460909][T17373] vhci_hcd vhci_hcd.0: Device attached [ 636.477476][ T28] audit: type=1400 audit(1780100681.268:3043): avc: denied { accept } for pid=17364 comm="syz.3.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 636.501953][T17373] tipc: Invalid UDP bearer configuration [ 636.501969][T17373] tipc: Enabling of bearer rejected, failed to enable media [ 636.527665][T17378] loop4: detected capacity change from 0 to 2048 [ 636.567438][T17374] vhci_hcd: connection closed [ 636.567711][ T36] vhci_hcd vhci_hcd.2: stop threads [ 636.579059][ T36] vhci_hcd vhci_hcd.2: release socket [ 636.584827][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 636.591729][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 636.617823][T17380] loop3: detected capacity change from 0 to 512 [ 636.625808][T17380] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 636.643260][T17380] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 636.651776][T17380] EXT4-fs (loop3): orphan cleanup on readonly fs [ 636.660401][T17380] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 636.745452][T17380] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 636.767918][T17380] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #16: comm syz.3.3010: corrupted xattr block 31: invalid header [ 636.840779][T17380] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 636.843311][T17380] EXT4-fs (loop3): Remounting filesystem read-only [ 636.853201][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 636.853228][ C1] EXT4-fs (loop3): initial error at time 1780100681: ext4_xattr_delete_inode:2972: inode 16 [ 636.853271][ C1] EXT4-fs (loop3): last error at time 1780100681: ext4_xattr_delete_inode:2972: inode 16 [ 636.890814][T17380] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 636.901320][T17380] EXT4-fs (loop3): 1 orphan inode deleted [ 636.908217][T17380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.938754][T17380] netlink: 604 bytes leftover after parsing attributes in process `syz.3.3010'. [ 636.964694][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.173073][T17378] loop4: p2 p3 p7 [ 638.329312][T17402] loop5: detected capacity change from 0 to 512 [ 638.726061][T17403] loop6: detected capacity change from 0 to 2048 [ 639.609327][T17401] loop2: detected capacity change from 0 to 512 [ 639.684424][ T28] audit: type=1400 audit(1780100684.271:3044): avc: denied { write } for pid=17406 comm="syz.4.3020" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 639.946173][T17413] loop4: detected capacity change from 0 to 512 [ 640.006156][T17413] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 640.037966][T17415] 9p: Bad value for 'rfdno' [ 640.044096][T17415] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3022'. [ 640.072641][T17402] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 640.072692][T17401] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 640.084676][T17401] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 640.084703][T17401] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3018: Corrupt directory, running e2fsck is recommended [ 640.096333][T17402] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 640.130434][T17402] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3015: Corrupt directory, running e2fsck is recommended [ 640.149973][T17401] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 640.150094][T17402] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 640.158343][T17401] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3018: corrupted in-inode xattr: e_name out of bounds [ 640.166675][T17402] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.3015: corrupted in-inode xattr: e_name out of bounds [ 640.181234][T17401] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 640.195330][T17402] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 640.197510][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 640.205235][T17402] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3015: couldn't read orphan inode 15 (err -117) [ 640.214303][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 640.214312][ C0] EXT4-fs (loop2): initial error at time 1780100684: ext4_iget_extra_inode:5128 [ 640.214321][ C1] EXT4-fs (loop5): initial error at time 1780100684: ext4_iget_extra_inode:5128 [ 640.214334][ C0] : inode 15 [ 640.214339][ C1] : inode 15 [ 640.214344][ C0] [ 640.214346][ C1] [ 640.214352][ C0] EXT4-fs (loop2): last error at time 1780100684: ext4_iget_extra_inode:5128 [ 640.214353][ C1] EXT4-fs (loop5): last error at time 1780100684: ext4_iget_extra_inode:5128: inode 15 [ 640.214388][ C0] : inode 15 [ 640.220964][T17402] loop5: lost filesystem error report for type 5 error -117 [ 640.233519][ C0] [ 640.233589][T17401] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3018: couldn't read orphan inode 15 (err -117) [ 640.241038][T17402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.249748][T17401] loop2: lost filesystem error report for type 5 error -117 [ 640.295823][T17402] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 640.346719][T17402] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 640.357117][T17402] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3015: Corrupt directory, running e2fsck is recommended [ 640.370426][T17402] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.3015: path /370/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 640.536998][T17402] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 8: comm syz.5.3015: path /370/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 640.537423][T17401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.592453][T17401] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 640.604957][T17401] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 640.615637][T17401] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3018: Corrupt directory, running e2fsck is recommended [ 640.628773][T17401] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.3018: path /311/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 640.768848][T17401] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.3018: path /311/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 640.823480][ T8651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.838086][T17413] EXT4-fs (loop4): orphan file too big: 67108874 [ 640.846883][T17403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.869783][T17413] EXT4-fs (loop4): mount failed [ 640.920544][ T28] audit: type=1400 audit(1780100685.431:3045): avc: denied { write } for pid=17411 comm="syz.4.3021" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 641.288132][ T8436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.302022][ T28] audit: type=1400 audit(1780100685.777:3046): avc: denied { write } for pid=17399 comm="syz.6.3017" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.327349][ T28] audit: type=1400 audit(1780100685.786:3047): avc: denied { write } for pid=17399 comm="syz.6.3017" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.349439][ T28] audit: type=1400 audit(1780100685.786:3048): avc: denied { write } for pid=17399 comm="syz.6.3017" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 641.393424][ T28] audit: type=1400 audit(1780100685.786:3049): avc: denied { write } for pid=17399 comm="syz.6.3017" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.481360][ T8556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.600535][ T28] audit: type=1400 audit(1780100686.067:3050): avc: denied { mount } for pid=17450 comm="syz.3.3035" name="/" dev="ramfs" ino=51365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 641.623366][ T28] audit: type=1400 audit(1780100686.067:3051): avc: denied { write } for pid=17450 comm="syz.3.3035" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 641.643124][ T28] audit: type=1400 audit(1780100686.067:3052): avc: denied { unmount } for pid=15392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 641.667953][T17453] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 641.674939][T17453] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 641.683217][T17453] vhci_hcd vhci_hcd.0: Device attached [ 641.692706][T17453] tipc: Invalid UDP bearer configuration [ 641.692722][T17453] tipc: Enabling of bearer rejected, failed to enable media [ 641.860038][T17467] 9p: Bad value for 'rfdno' [ 641.865399][T17467] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3038'. [ 641.895915][T17460] syz.6.3031 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 641.911713][T17460] CPU: 1 UID: 60929 PID: 17460 Comm: syz.6.3031 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 641.911747][T17460] Tainted: [W]=WARN [ 641.911755][T17460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.911796][T17460] Call Trace: [ 641.911805][T17460] [ 641.911814][T17460] __dump_stack+0x1d/0x30 [ 641.911854][T17460] dump_stack_lvl+0x95/0xd0 [ 641.911913][T17460] dump_stack+0x15/0x1b [ 641.911933][T17460] dump_header+0x80/0x240 [ 641.911955][T17460] oom_kill_process+0x295/0x350 [ 641.911989][T17460] out_of_memory+0x97d/0xb80 [ 641.912048][T17460] try_charge_memcg+0x62f/0xa10 [ 641.912079][T17460] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 641.912107][T17460] __alloc_frozen_pages_noprof+0x18a/0x350 [ 641.912273][T17460] alloc_pages_mpol+0xb3/0x260 [ 641.912338][T17460] alloc_pages_noprof+0x8f/0x140 [ 641.912368][T17460] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 641.912442][T17460] __kvmalloc_node_noprof+0x3d4/0x640 [ 641.912463][T17460] ? futex_hash_allocate+0x190/0x9a0 [ 641.912497][T17460] ? futex_hash_allocate+0x190/0x9a0 [ 641.912581][T17460] futex_hash_allocate+0x190/0x9a0 [ 641.912614][T17460] ? cap_task_prctl+0x13f/0x6b0 [ 641.912643][T17460] futex_hash_prctl+0xd8/0xf0 [ 641.912678][T17460] __se_sys_prctl+0x4f4/0x1400 [ 641.912766][T17460] __x64_sys_prctl+0x67/0x80 [ 641.912791][T17460] x64_sys_call+0x2533/0x3020 [ 641.912893][T17460] do_syscall_64+0x12c/0x3b0 [ 641.912926][T17460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.912946][T17460] RIP: 0033:0x7f368dffce59 [ 641.912963][T17460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.913031][T17460] RSP: 002b:00007f368ca36028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 641.913058][T17460] RAX: ffffffffffffffda RBX: 00007f368e276090 RCX: 00007f368dffce59 [ 641.913129][T17460] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 641.913173][T17460] RBP: 00007f368e092d6f R08: 0000000000000000 R09: 0000000000000000 [ 641.913256][T17460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.913270][T17460] R13: 00007f368e276128 R14: 00007f368e276090 R15: 00007ffea11386b8 [ 641.913291][T17460] [ 641.913417][T17460] memory: usage 307200kB, limit 307200kB, failcnt 18331 [ 641.953467][T17454] vhci_hcd: connection closed [ 641.954870][T17460] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 641.954892][T17460] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 641.963738][ T6907] vhci_hcd vhci_hcd.3: stop threads [ 641.964332][T17460] Memory cgroup stats for /syz6 [ 641.974716][ T6907] vhci_hcd vhci_hcd.3: release socket [ 642.178384][T17460] : [ 642.188046][T17474] loop5: detected capacity change from 0 to 512 [ 642.216985][T17474] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 642.237380][T17460] cache 524288 [ 642.253028][T17474] EXT4-fs (loop5): orphan file too big: 67108874 [ 642.260936][T17474] EXT4-fs (loop5): mount failed [ 642.283125][T17460] rss 16384 [ 642.292339][ T6907] vhci_hcd vhci_hcd.3: disconnect device [ 642.300635][ T28] audit: type=1400 audit(1780100686.712:3053): avc: denied { write } for pid=17469 comm="syz.5.3040" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 642.326071][T17460] shmem 0 [ 642.329621][T17460] mapped_file 65536 [ 642.333440][T17460] dirty 0 [ 642.336514][T17460] writeback 0 [ 642.339887][T17460] workingset_refault_anon 6884 [ 642.344960][T17460] workingset_refault_file 7147 [ 642.351070][T17460] swap 159744 [ 642.354887][T17460] swapcached 236175360 [ 642.359536][T17460] pgpgin 457340 [ 642.363282][T17460] pgpgout 457198 [ 642.367227][T17460] pgfault 476104 [ 642.372823][T17460] pgmajfault 1538 [ 642.376865][T17460] inactive_anon 16384 [ 642.381485][T17460] active_anon 40960 [ 642.386061][T17460] inactive_file 0 [ 642.391040][T17460] active_file 524288 [ 642.396151][T17460] unevictable 0 [ 642.399943][T17460] hierarchical_memory_limit 314572800 [ 642.405766][T17460] hierarchical_memsw_limit 9223372036854771712 [ 642.412273][T17460] total_cache 524288 [ 642.416394][T17460] total_rss 16384 [ 642.421176][T17460] total_shmem 0 [ 642.424915][T17460] total_mapped_file 65536 [ 642.448435][T17460] total_dirty 0 [ 642.455261][T17460] total_writeback 0 [ 642.481207][T17460] total_workingset_refault_anon 6884 [ 642.487450][T17460] total_workingset_refault_file 7147 [ 642.492939][T17460] total_swap 159744 [ 642.497089][T17460] total_swapcached 236175360 [ 642.501941][T17460] total_pgpgin 457340 [ 642.509651][T17460] total_pgpgout 457198 [ 642.517570][T17460] total_pgfault 476104 [ 642.524917][T17460] total_pgmajfault 1538 [ 642.532925][T17460] total_inactive_anon 16384 [ 642.539042][T17460] total_active_anon 40960 [ 642.543701][T17460] total_inactive_file 0 [ 642.547883][T17460] total_active_file 524288 [ 642.552452][T17460] total_unevictable 0 [ 642.556622][T17460] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3031,pid=17443,uid=0 [ 642.571908][T17460] Memory cgroup out of memory: Killed process 17443 (syz.6.3031) total-vm:96216kB, anon-rss:1344kB, file-rss:22792kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 642.780657][T17484] 9p: Bad value for 'rfdno' [ 642.786471][T17484] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3044'. [ 642.840067][T17482] loop5: detected capacity change from 0 to 4096 [ 642.864230][T17482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.100462][T17499] loop2: detected capacity change from 0 to 2048 [ 643.242745][T17499] loop2: p2 p3 p7 [ 643.580382][ T8436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.751883][T17456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 644.897644][T17517] loop4: detected capacity change from 0 to 512 [ 645.037820][T17517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.125915][ T28] audit: type=1400 audit(1780100689.285:3054): avc: denied { write } for pid=17514 comm="syz.2.3051" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 645.187419][T17517] gre0 speed is unknown, defaulting to 1000 [ 645.383488][T17517] xfrm0 speed is unknown, defaulting to 1000 [ 645.421446][T17517] ip6_vti0 speed is unknown, defaulting to 1000 [ 645.508848][T17530] loop5: detected capacity change from 0 to 512 [ 645.538311][T17532] 9p: Bad value for 'rfdno' [ 645.544496][T17532] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3058'. [ 645.556631][T17530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.670544][T17517] serio: Serial port ttyS3 [ 645.756139][T17530] gre0 speed is unknown, defaulting to 1000 [ 645.962891][T17543] serio: Serial port ttyS3 [ 645.985241][ T8493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.686176][T17556] loop4: detected capacity change from 0 to 4096 [ 646.692602][T17555] loop3: detected capacity change from 0 to 512 [ 646.971985][T17555] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3059: inode has both inline data and extents flags [ 646.987130][T17555] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 646.991585][T17555] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3059: couldn't read orphan inode 15 (err -117) [ 647.001796][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 647.002223][ C0] EXT4-fs (loop3): initial error at time 1780100691: ext4_orphan_get:1397: inode 15 [ 647.003378][ C0] EXT4-fs (loop3): last error at time 1780100691: ext4_orphan_get:1397: inode 15 [ 647.044840][T17555] loop3: lost filesystem error report for type 5 error -117 [ 647.058559][T17555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.082649][ T28] audit: type=1400 audit(1780100691.193:3055): avc: denied { write } for pid=17537 comm="syz.3.3059" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 647.127833][T17530] xfrm0 speed is unknown, defaulting to 1000 [ 647.166911][T17556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 647.180075][T17556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.319113][T17562] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 647.335360][ T28] audit: type=1400 audit(1780100691.315:3056): avc: denied { firmware_load } for pid=17544 comm="syz.2.3062" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 647.389730][T17562] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 647.476870][T17530] ip6_vti0 speed is unknown, defaulting to 1000 [ 647.712201][T17575] loop2: detected capacity change from 0 to 2048 [ 647.803371][ T8436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.841392][T17575] loop2: p2 p3 p7 [ 647.876262][T15392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.200050][T17585] loop4: detected capacity change from 0 to 1764 [ 648.235045][T17585] iso9660: Bad value for 'session' [ 648.543437][T17593] loop3: detected capacity change from 0 to 2048 [ 648.666824][T17593] loop3: p2 p3 p7 [ 648.726108][ T2983] loop3: p2 p3 p7 [ 648.861259][ T8436] ================================================================== [ 648.869766][ T8436] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 648.877795][ T8436] [ 648.880277][ T8436] read-write to 0xffff8881d55b0230 of 8 bytes by task 17596 on cpu 1: [ 648.888628][ T8436] shmem_add_to_page_cache+0x4b2/0x5b0 [ 648.894483][ T8436] shmem_get_folio_gfp+0x4f3/0xd60 [ 648.899967][ T8436] shmem_write_begin+0xfc/0x1f0 [ 648.904842][ T8436] generic_perform_write+0x183/0x490 [ 648.910158][ T8436] shmem_file_write_iter+0xc5/0xf0 [ 648.915308][ T8436] __kernel_write_iter+0x319/0x590 [ 648.920687][ T8436] dump_user_range+0xa73/0xd00 [ 648.925589][ T8436] elf_core_dump+0x21a2/0x2330 [ 648.930490][ T8436] coredump_write+0xabd/0xdb0 [ 648.935190][ T8436] vfs_coredump+0x26dd/0x31e0 [ 648.939912][ T8436] get_signal+0xd5c/0xf20 [ 648.944309][ T8436] arch_do_signal_or_restart+0x96/0x480 [ 648.950022][ T8436] irqentry_exit+0x145/0x5d0 [ 648.954821][ T8436] asm_exc_page_fault+0x26/0x30 [ 648.959685][ T8436] [ 648.962021][ T8436] read to 0xffff8881d55b0230 of 8 bytes by task 8436 on cpu 0: [ 648.969640][ T8436] shmem_getattr+0x68/0x200 [ 648.974446][ T8436] vfs_getattr_nosec+0x146/0x1e0 [ 648.979520][ T8436] vfs_getattr+0x48/0x60 [ 648.983783][ T8436] vfs_statx_path+0x28/0x140 [ 648.988756][ T8436] vfs_statx+0xc4/0x170 [ 648.992994][ T8436] vfs_fstatat+0x118/0x170 [ 648.997819][ T8436] __se_sys_newfstatat+0x55/0x3e0 [ 649.003211][ T8436] __x64_sys_newfstatat+0x55/0x70 [ 649.008344][ T8436] x64_sys_call+0x2c64/0x3020 [ 649.013211][ T8436] do_syscall_64+0x12c/0x3b0 [ 649.018276][ T8436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.024421][ T8436] [ 649.027102][ T8436] value changed: 0x0000000000000e2b -> 0x0000000000000e2e [ 649.034602][ T8436] [ 649.037128][ T8436] Reported by Kernel Concurrency Sanitizer on: [ 649.044585][ T8436] CPU: 0 UID: 0 PID: 8436 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 649.055913][ T8436] Tainted: [W]=WARN [ 649.059727][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 649.069969][ T8436] ================================================================== [ 650.633613][T17570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512