last executing test programs: 10m30.181578873s ago: executing program 3 (id=16): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = socket(0x5, 0x800, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000006800010000000000fedffff70a000000000000001800088014000300fc020000000000000000000000000000060007000900000008000500", @ANYRES32, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) socket$key(0xf, 0x3, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 10m29.029402355s ago: executing program 3 (id=18): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r5, 0x402, 0x3b) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) r7 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) splice(r7, 0x0, r6, 0x0, 0x59, 0x2) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa2380c200000088a805008100120008004580001c00000000002f907800eaeeffdf0000012041880b00089078"], 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fdffffff0c10000007000000080009000200000008000b"], 0x2c}}, 0x4c814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10m26.970456199s ago: executing program 3 (id=26): r0 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r7 = getpid() write$cgroup_pid(r6, &(0x7f0000000080)=r7, 0x12) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d200968", 0x39}], 0x1}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fedbdf2509000000840004801300010062726f6164636173742d6c696e6b00004c00078008000400070000000800020082b00000080001000200000008000400d53800400800030001000100080004000700000008000200030000000800040004000000080003000500"], 0x98}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) r8 = socket(0x400000000010, 0x3, 0x0) write(r8, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x6, 0x10}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000380), 0x12) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r11, 0x0) 10m26.269786887s ago: executing program 3 (id=30): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@can_delroute={0x40, 0x19, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@CGW_FILTER={0xc, 0xb, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1}}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4}, 0x5, 0x0, 0x0, 0x0, "1f2ee3a766b725cf"}, 0x6}}, @CGW_MOD_UID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40014}, 0x8004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000ce4e1ae0a5fbea30c0ce0000000000000000000084e41878888998d3028278b41f4b9ea0434d648b332c744bdfabc3e14fecd11ee63d97fadcb371bd87a60179832e3b8c320d16b7841558da9c73ba2c4ea7e67d658647db11871a0a0ee533767d620406ba317c73dfbea29f9b5ba9a8bc7573dd3281d5e9283e2272876c267a5e413d2249f6d449cc382caccf28592b28eaf8b45a9d80cf380661f52e7df2affe3fccdc6676050d8685d66705fbe20c53138e8384c09e8b57487585b1abc6ac4fa055263f4de2b405d2ebf6697a660246bf28bdd53ec3907cd3bba3613354507468854ea4de733d43766590826b8eeb511e1b7321c956898307aa224624", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000040)={@local, @dev, @void, {@generic={0x8863}}}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x9a5840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000180), &(0x7f0000000240)='%pI4 \x00'}, 0x20) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x101083, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x13, &(0x7f0000000300)=@raw=[@btf_id={0x18, 0xa0c27914451e7857, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x1, 0x3, 0x4, 0xb, 0x6, 0x2, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 10m26.219599177s ago: executing program 3 (id=31): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7f, 0x3}, 0x500, 0x0, 0x0, 0x46a632123fcbbee2, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbf7fffffffff, 0xffffffffffffffff, 0x1) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="580500002700010027bd7000fbdbdf250900"], 0x558}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x92c9, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = request_key(&(0x7f0000000340)='cifs.idmap\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='wlan1\x00', 0xfffffffffffffffe) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0xfa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00032bbd53bd5bee0e386c94183f7000fedb", @ANYBLOB="160024008b0c091b8bdd989a8983968205960d30980600001c002400b0609689e01b02811605e018488b8b12ec6c3086a40096b008006b00030000000400bf0008000d000800000004000801", @ANYRES32=r6, @ANYRES16, @ANYBLOB='h\x00\x00\x00', @ANYBLOB="85b6afaa5737226ecacb329e0116405d0f63f76455945b90ed2f5e386cecf25d36d098e9dcfafae3a71b9b2b436536e707ab93b8bc92e5506df22ce90ab3a43892096dc539698b804939d7d7070ceefb4736def4086c48d63f7b84ac618aa3bd75923a6abfb781fb6c26dd9f9c8ac56b9b7b4cb6f53f520f3a54e2f5aa7c08711d6dd1d3e869cecb699b0130967d40dd8088ea5250471af78ef6922c68550a4e7aff0634fd9a6f730c937fad623e21d2b92ab7c7a8c0311aa5bc16c50e3b92d3c7dc2c1e0cd0241c6be6194239d37bef9857728a70a84db6", @ANYRESOCT=r3, @ANYRESOCT=r4], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r7 = socket(0x15, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d814}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt(r7, 0x200000000114, 0x2714, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) 10m25.792240352s ago: executing program 3 (id=32): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fcdbdf250100000014000200776730000000000000000000000000004c00088048000080200004000a004e2300000002fe880000000000000000000000000001d70d000023e20100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922"], 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x80, 0x30, 0x0) mq_getsetattr(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x65, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x16000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x4, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) unshare(0x22020600) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) sendmsg$kcm(r6, 0x0, 0x2000c1c0) r7 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r7, 0x4008240b, &(0x7f00000013c0)) r8 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000340)=""/163, 0xa3}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}, @cswp={0x58, 0x114, 0x7, {{0x88, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x2, 0x0, 0x4, 0x21, 0x9}}], 0xa0, 0x8004}, 0x0) 10m25.673444074s ago: executing program 32 (id=32): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fcdbdf250100000014000200776730000000000000000000000000004c00088048000080200004000a004e2300000002fe880000000000000000000000000001d70d000023e20100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922"], 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x80, 0x30, 0x0) mq_getsetattr(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x65, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x16000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x4, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) unshare(0x22020600) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) sendmsg$kcm(r6, 0x0, 0x2000c1c0) r7 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r7, 0x4008240b, &(0x7f00000013c0)) r8 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000340)=""/163, 0xa3}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}, @cswp={0x58, 0x114, 0x7, {{0x88, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x2, 0x0, 0x4, 0x21, 0x9}}], 0xa0, 0x8004}, 0x0) 9m36.543917619s ago: executing program 5 (id=228): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x12902, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7140000"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000080)=ANY=[@ANYBLOB="856b1200ff00aaaaaaaaaaaa86dd60381f3400462f00fc000000000000000000000000000000ff020000000000000000000000000001042088a80000"], 0x0) 9m34.309261314s ago: executing program 5 (id=238): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r5, 0x402, 0x3b) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) r7 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) truncate(0x0, 0x103000) splice(r7, 0x0, r6, 0x0, 0x59, 0x2) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa2380c200000088a805008100120008004580001c00000000002f907800eaeeffdf0000012041880b00089078"], 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fdffffff0c10000007000000080009000200000008000b"], 0x2c}}, 0x4c814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9m31.774284673s ago: executing program 5 (id=242): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020600) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) listen(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x6, 0x2, 0xa9, 0xfffffffffffff800, 0x1000000000000, 0xfffffffffffffff5, 0x0, 0x7fff, 0x400005}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x8}}, 0x80, 0x0}, 0x20048851) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 9m31.042483991s ago: executing program 5 (id=245): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x9c}}, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x4, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x4, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000001c0), 0x1}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000001c0), 0x1}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r4 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) (async) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3b}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {0xffffffffffffffff, 0x100000000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) symlink(&(0x7f0000000140)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580)) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000002080), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @dev={0xac, 0x14, 0x14, 0xc}, @multicast2}}}], 0x20}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) 9m29.613963867s ago: executing program 5 (id=250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x64}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x15}, 0x94) r2 = socket$kcm(0x1e, 0x2, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0x100, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@remote, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@tfcpad={0x8, 0x22, 0x80000000}]}, 0x100}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {r4}}, './file1\x00'}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r5, &(0x7f00000005c0)={'a', ' *:* ', 'rwm\x00'}, 0xa) r6 = socket$kcm(0x1e, 0x4, 0x0) fcntl$setflags(r5, 0x2, 0x1) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8001, 0xd) 9m29.156373092s ago: executing program 5 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000140)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x2e, 0x5f, 0x30]}}, 0x0, 0x21, 0x0, 0x1, 0x1ffffe}, 0x28) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000340)={0x0, 0xfb, 0xb2, 0x1, 0x0, "1130315fce7f50ab7ea925a764d20111", "750d8e3f235cbc6e5d689788b8054e18e602cffa2cc0f9c2e13f56965ffde01326b9cfd5da937727a394d2632107cfa220d9ea17c0f9e3e4e48cec01a5ef6c0fa457a6164e244cf27edc3fe1685f5e1f31943d18c09730126ca3052bea1a44048482c1708d1b118168bb5c1502cf6e75ad04a950cd7d5f73edd2e4379a5692cd84796f9cc901786139a7cfd0695151e82da67f4d398969e317d9181be4"}, 0xb2, 0x3) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c800, &(0x7f0000000140)={[{@oldalloc}, {@debug}, {@bsdgroups}]}, 0xfe, 0x246, &(0x7f0000000ac0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000809800000000000000040000000000000010000000000000"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) 9m29.034911833s ago: executing program 33 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000140)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x2e, 0x5f, 0x30]}}, 0x0, 0x21, 0x0, 0x1, 0x1ffffe}, 0x28) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000340)={0x0, 0xfb, 0xb2, 0x1, 0x0, "1130315fce7f50ab7ea925a764d20111", "750d8e3f235cbc6e5d689788b8054e18e602cffa2cc0f9c2e13f56965ffde01326b9cfd5da937727a394d2632107cfa220d9ea17c0f9e3e4e48cec01a5ef6c0fa457a6164e244cf27edc3fe1685f5e1f31943d18c09730126ca3052bea1a44048482c1708d1b118168bb5c1502cf6e75ad04a950cd7d5f73edd2e4379a5692cd84796f9cc901786139a7cfd0695151e82da67f4d398969e317d9181be4"}, 0xb2, 0x3) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c800, &(0x7f0000000140)={[{@oldalloc}, {@debug}, {@bsdgroups}]}, 0xfe, 0x246, &(0x7f0000000ac0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000809800000000000000040000000000000010000000000000"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) 9m8.99622802s ago: executing program 4 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x5f, 0x30]}}, 0x0, 0x20, 0x0, 0x1, 0x1ffffe}, 0x28) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) 9m7.002487342s ago: executing program 4 (id=401): bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xf7ff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x20000080, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x983, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xc6, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x10000, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x6, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b52, &(0x7f0000000000)={0x2, {0xc, 0x6, 0x6, 0x101, 0x100}}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000002100)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0x10, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) 9m5.002990125s ago: executing program 4 (id=411): r0 = socket$kcm(0x2, 0x3, 0x84) inotify_init1(0x800) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ff) read$char_usb(r1, &(0x7f00000000c0)=""/157, 0x9d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x5, 0x2, 0x1, 0x4, 0xad4}, 0x20) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) shutdown(r2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000001c0)='./file0\x00', 0x4480, &(0x7f0000000100)=ANY=[], 0x86, 0x23f, &(0x7f00000004c0)="$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") r3 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000001840)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000302000000000000040000000000009302000000005f2e6161303000"], 0x0, 0x2c, 0x0, 0x2001, 0x4}, 0x28) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000cc549a07200000000000000000000000000003", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$loop(&(0x7f0000000080), 0x700000000000, 0x8900) writev(r6, &(0x7f00000019c0)=[{&(0x7f0000000780)="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", 0x78a}, {&(0x7f0000001780)="4d8dee9265b7368f6d98b7a1d6b800bb2716f33709e2559c65f99a4102dbb6a6f902e25c2da5353929142a9702222f1000fcc65452328890", 0x38}, {0x0}, {0x0}], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x4c, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850) socket$netlink(0x10, 0x3, 0x6) 9m2.310626725s ago: executing program 4 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000140)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x2e, 0x5f, 0x30]}}, 0x0, 0x21, 0x0, 0x1, 0x1ffffe}, 0x28) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000340)={0x0, 0xfb, 0xb2, 0x1, 0x0, "1130315fce7f50ab7ea925a764d20111", "750d8e3f235cbc6e5d689788b8054e18e602cffa2cc0f9c2e13f56965ffde01326b9cfd5da937727a394d2632107cfa220d9ea17c0f9e3e4e48cec01a5ef6c0fa457a6164e244cf27edc3fe1685f5e1f31943d18c09730126ca3052bea1a44048482c1708d1b118168bb5c1502cf6e75ad04a950cd7d5f73edd2e4379a5692cd84796f9cc901786139a7cfd0695151e82da67f4d398969e317d9181be4"}, 0xb2, 0x3) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c800, &(0x7f0000000140)={[{@oldalloc}, {@debug}, {@bsdgroups}]}, 0xfe, 0x246, &(0x7f0000000ac0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000809800000000000000040000000000000010000000000000"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) 8m57.920407865s ago: executing program 4 (id=421): mkdir(&(0x7f0000000040)='./file0\x00', 0xfc) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 8m57.604054358s ago: executing program 4 (id=422): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e21, 0xe000000, @empty, 0x4}}, 0x101, 0x5, 0x7f, 0x3, 0x42, 0x9, 0xb1}, &(0x7f0000000100)=0x9c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x8001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) 8m41.50226149s ago: executing program 34 (id=422): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e21, 0xe000000, @empty, 0x4}}, 0x101, 0x5, 0x7f, 0x3, 0x42, 0x9, 0xb1}, &(0x7f0000000100)=0x9c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x8001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) 5m47.0916464s ago: executing program 7 (id=1014): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) keyctl$assume_authority(0x10, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r1 = dup(r0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0x1010}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x7fc, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xff}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005340)={0xffffffffffffffff, 0xe0, &(0x7f0000005240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000005080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000050c0)=[0x0], &(0x7f0000005100)=[0x0, 0x0], 0x0, 0x67, &(0x7f0000005140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000005180), &(0x7f00000051c0), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000005200)}}, 0x10) sendmmsg$inet(r1, &(0x7f0000005500)=[{{&(0x7f0000001180)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000014c0)=[{&(0x7f00000011c0)="adf8a8b88f70d50e1e33439d559179bf5dfc23f859794bc1bde9fac441837a419fa2a7d88c09ca9ac1fa191a2f59a198fef212be8043ebb98ac1a2cc82c674dda08486a8839439854141d25323a90988b86ba7ed56ba7a44b23e4007e3d82a367754c18806389e29f36a89e4123d84842338748b1801b3a7acf2cb96a1fdf30858777747b8adf15df2f2a0c51ee95138e2da3d9d96f29641f565ebabf49dae32ff1085347aefb9951aff4a42ace3f0e4c9485ffb928b09a5096a83c57acbedceead983d0bfe2a601cd7dfc7fbc439f43f904740e", 0xd4}, {&(0x7f00000012c0)="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", 0xfb}, {&(0x7f00000013c0)="04a3f0d7f3cb27b508545e355fd6401849127ee1cf2382446d8cc7176f1eb9ee764b9fbab9ed27f319ffe0ca99fb39620ea78f7d941cbeb64f85f05e4f5b2145da2388a1f7c21e310fe3dcb2861c30dbc5bc502859d63880e4594fa805e060502e65e8c11bcb0de66239fa85189b92229c11e394cfe1c35f11bd86af726a5aca9f62f7ba", 0x84}, {&(0x7f0000001480)="1217942b21309ea81913a2f303a5a2", 0xf}], 0x4}}, {{&(0x7f0000001500)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)}, {&(0x7f0000001580)="b3eba40e2b08226147d9cb656ae16767937943d1522f94c81dd58100a75256d753bb2c4462700aabd7d73e2292758b8db7c1f2560863260cea1ceabd336cdb7fbea587aa1d5c8a2a9298f1198fb465b3099002ab6215ce787a6195e377b8e9100740373873fc6c32af8a08e4cc7a171ff29f8bd79ca499a9a70c659f05fc9a0ae3fec9292a948ec46bb4b1f90059968aa31e70cae11f1b03ecdcf0", 0x9b}, {&(0x7f0000001640)="7e62d152dce02795d21ed6e08b9abcf3c5db2b032c61d264a74cd559e0e400ac497b71febe4c7660737db5bddb4000db18e52ff6633fcc3c808ca14a73c42655e1e6067422cd8a5fa24618f705f227d3c940bcd5dc5a8f4308eb4dc8291aa5431211c816dc7067a9d46009f020a2cb87bc3489c763aa", 0x76}], 0x3, &(0x7f0000001700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x68}}, {{&(0x7f0000001780)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000002400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002440)="815bceb1bea8471bba8999c1ed0155d126118be0a41b210d0f360b080ea32e5d8249121b946aa22d7b8acf5edd1c1bcf165bf4", 0x33}], 0x1, &(0x7f00000024c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x30}}, {{&(0x7f0000002500)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000005380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x99}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xee8e}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@generic={0x94, 0xc, "3dd0828f69a25e74d2f8"}, @timestamp={0x44, 0x8, 0x19, 0x0, 0x8, [0xa88]}, @timestamp_addr={0x44, 0x2c, 0x62, 0x1, 0x3, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x80000001}, {@remote, 0xfffff000}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb67a}]}, @ssrr={0x89, 0x13, 0xc2, [@local, @loopback, @private=0xa010100, @multicast2]}, @ssrr={0x89, 0x1b, 0x36, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @local]}, @ssrr={0x89, 0x1b, 0xcd, [@private=0x7, @local, @loopback, @rand_addr=0x64010102, @multicast1, @remote]}]}}}], 0x180}}], 0x5, 0x4081) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44901}, 0x20048080) timer_create(0x3, 0x0, &(0x7f0000001040)=0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r8, 0x40e8662e, &(0x7f0000000080)={0xae, 0xd000007}) getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x12602, 0xa9, 0x32}, 0x18) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000001080)='(\x00', 0x0, r9) 5m45.855574754s ago: executing program 7 (id=1027): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r1 = accept(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r1}, 0x47) recvmmsg$unix(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/55, 0x37}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x400000000000281, 0x122, 0x0) 5m43.743951918s ago: executing program 7 (id=1032): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r0, 0x402, 0x3b) r1 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4081, 0x7, 0x12) r2 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x92002, 0x0) pidfd_send_signal(r3, 0x27, &(0x7f0000000240)={0x11, 0x10001, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRES16=0x0, @ANYBLOB="000000000000000000000000000000e9aa53c85fbb1051835a92c7b3a680c710e61d10740d0ebea2b2be322a6154f219987bf5a0bd6379b388d336dd4466a39de8667e9f8808d7dcd3f83bbd92a7f0f5b0fd8bab8d8aa1c4318464db4e9038b32f29ade81d259d12523d696f9acf93bb0de1e7e8cc209d5d6141781fcf"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c010) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC=r3, @ANYRESHEX=r2], 0x314}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x60}}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ip6erspan0\x00'}) 5m43.264843793s ago: executing program 7 (id=1035): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x8, 0x0, 0x0, 0xea2}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187014, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="940100001400010027bd7000fddbdf25fc010000000000000000000000000000ac1e00010000df1100000000000000004e2300384e2400040a0000a033000000", @ANYRES32, @ANYRES32, @ANYBLOB="b36b6e00010000005000110020010000000000000000000000000000fe800000000000000000000000000038e0000002000000000000000000000000ac1414bb0000000000000000000000002b050000053500000a000a0008001d00bf2b00000a001000000000000000000008001f00"], 0x194}, 0x1, 0x0, 0x0, 0x20001040}, 0x808) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x22b00, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x1, 0xfffffffe, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r2 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0xd7, &(0x7f0000000580)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x4, 0x6, "81307c", 0xa1, 0x6, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@fragment={0x0, 0x0, 0x2, 0x1, 0x0, 0x7, 0x64}, @fragment={0x1d, 0x0, 0x7, 0x0, 0x0, 0x3, 0x65}], {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x7, 0x8, 0x4, 0x0, 0x3, {[@eol, @window={0x3, 0x3, 0x9}, @fastopen={0x22, 0x2}]}}, {"41ccf4db3c1bf7df5479c5b3a805b46020789ce4ac69a14621fddd1ebf2ebbd566ed56d867a0672d0b26d375f26abcb558f4a749d1909a854345f4e614ccebab95e4693746d4af374b857d0b3e5c2945f20cc935c02c47b718af93c23886337618cb6c06d6b8dfb2d2822a4c92d480e91d627e49d8"}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x529, &(0x7f0000000c40)="$eJzs3c9vI1cdAPCvZ9eb7HbbpFCpgIAupbCg1TqJt42qnsoFhKpKiIoThzQ4ThTFiaPYKU2I1OR/QKISBwQnzkggOFTqiSOCG9x6KQekAhFog8TBaMbjxN3YG3c3sUX8+UijmTcznu97M5r3xs8/XgBj61ZE7EfEtYh4MyKm8vWFfIpX21O63/3DvcrR4V6lEK3WG/8oZNvTddH1mtQT+TEnI+K734r4QeF03MbO7tpirVbdytMzzfXNmcbO7t3V9cWV6kp1o1yen5ufffneS+WByjE5wD7Prf/qo2+uvva99373hQ//tP/1H6XZuplv6y7HeWoXvXgcJ3U1Il67iGAjcCUvz7VRZ4RHkkTEpyLi+ez+n4or2dUcTI/bGgD4P9BqTUVrqjsNAFx2SdYHVkhKeV/AzUiSUqndh/dM3Ehq9UbzznJ9e2Op3Vc2HcVkebVWnY1i9rwwHcVCmp57J10+SZfj4+l7EfF0RPx44nqWLlUG72cAAM7XEw+0//+eSK5HadS5AgAuXM8vz3S/P18YXl4AgOEY5MuzAMDlov0HgPFz0v7fGGk+AIDh8f4fAMaP9h8Axs0Hnfb/yqhzAgAMxXdefz2dWkf5/18vvbWzvVZ/6+5StbFWWt+ulCr1rc3SSr2+UquWKvX1s45Xq9c3516M7bdnmtVGc6axs7uwXt/eaC5k/+u9UC0OpVQAwMM8/dz7fylExP4r17MpusZy0FbD5ZaMOgPAyOjzh/HlX7hhfHmPD+Pr1/kvfs8ay7PvV4TffYSgrXce4UXAebv9Wf3/MK70/8P40v8P40v/P4yvVqvQb8z/5HgXAOBS+YR9/D4SgEtoqJ//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCVxM5umu9JJUipFPBkR01EsLK/WqrMR8VRE/HmiOJGm50aaYwDg8SV/K+Tjf92eeuHmg1uvFf4zkc0j4oc/feMnby82m1tz6fp/Hq9vvpuvL48i/wDAWTrtdKcd77h/uFe5f22vks6HmZ+PvtEeXDSNe5RP7S1X42o6++NkNujwjX8V2ulc+rxy5Rzi7x9ExGfy8h92l7+Q9Y1M5yOfPhg/jf3kUOMnH4ufZNva8/RcfPrUkSf6xjxrrFcYF++n9c+rve6/JG5l88megx9PZjXU4+vUf0en6r/O/T6Z1TW96r9bg8Z48fff7rvtIOJzV3vFLxzHL/SJ/8KA8T/4/Bef77et9fOI29E7fnesmeb65kxjZ/dueuKrK9WNcnl+bn725XsvlWeWV2t9LkW7hfj7K3ee6lv+X/42ryhPx588o/xfeWipW8cV8C/+++b3v9Qv/kHE177c+/o/85D4aZv41Xy5f03ftnjjN32H707jL7XP/8Envf53zojb8eFfd5cG3BUAGILGzu7aYq1W3TrXhWKc8wFPFtInmYs5soXhLwzzUqaPyY97nGfzLrPFzv3Tvc8ffvbes+m6kZ/Vc1kYXZ0EDMfJTT/qnAAAAAAAAAAAAAAAAP1c+M+JklGXEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvsfwEAAP//0nDA0w==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x23) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x19, r4, 0xc, 0x40000000000274b) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000500)={[{@nofavordynmods}]}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @private0, 0x2}, 0x3b) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) sched_setscheduler(r4, 0x5, &(0x7f00000001c0)=0x3) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, &(0x7f0000000040)={{0x2579, 0x4}, {0x400000000000, 0x2}, 0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x400ffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0xa19a, 0x1008}, 0x100000, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 5m42.067813277s ago: executing program 7 (id=1042): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) recvmmsg$unix(r2, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/55, 0x37}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x400000000000281, 0x122, 0x0) 5m40.799624341s ago: executing program 7 (id=1053): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) recvmmsg$unix(r2, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/55, 0x37}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x400000000000281, 0x122, 0x0) 5m40.799028861s ago: executing program 35 (id=1053): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) recvmmsg$unix(r2, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/55, 0x37}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x400000000000281, 0x122, 0x0) 8.550570974s ago: executing program 2 (id=3905): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) fadvise64(0xffffffffffffffff, 0x7f, 0xe4ff, 0x4) timer_create(0x0, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000008011b80000000000c600001b2000000021a3ff60be7b552e5c8bb89500000000000000223d3185ca74abe2b1f7b48c45720ecb55c6863338c140a78b1a5343eeffda1b230839ec76c9ce2606ea59abf1490760b46d43"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x44080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x8000) r3 = socket$inet(0x2, 0x3, 0x20004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x18031, 0xffffffffffffffff, 0x5a687000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 8.378906846s ago: executing program 6 (id=3907): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x80, 0x8, 0x2, 0x9, 0x19, "bca9c861276a6edc"}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x8b}, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x81, 0xb, 0x4, 0x7, 0x4, 0x7, 0x8, 0x4, r3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x205, 0x8401) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0xf48, 0x4}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={r3, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000200)=0x1d, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000880)={[{@block_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) lgetxattr(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000840)=@known='trusted.overlay.upper\x00', &(0x7f0000000f40)=""/184, 0x841) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, r5, 0x814, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x69}, @NL80211_ATTR_WIPHY_FREQ={0xfffffffffffffebe, 0x26, @random=0x16c1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x0, 0x27, 0x2}]]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 8.305187706s ago: executing program 6 (id=3908): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xe}, 0x102260, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000003100)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/49, 0x31}, {&(0x7f0000001900)=""/60, 0x3c}, {&(0x7f0000003280)=""/4111, 0x100f}, {&(0x7f0000003000)=""/250, 0xfa}], 0x5, &(0x7f0000003180)=""/176, 0xb0}}], 0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) execve(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)={[&(0x7f00000002c0)='{\v-##\x00', &(0x7f0000000300)='\x00', &(0x7f0000000800)='\xaa\x97\xf5j\x00\x00&\xe9q\xaa\x96\xbc\xaa', &(0x7f0000000340)='&[*&+,\x00']}, &(0x7f0000000740)={[&(0x7f0000000440)='\x00', &(0x7f0000000480)='{%\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)=']-{}\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\'(\xf3\x00', &(0x7f0000000700)='\x00']}) socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) poll(0x0, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x10, 0x16, &(0x7f0000001940)=ANY=[@ANYBLOB="180000006b070000000000000004000085200000010000005da31800ffffffff9b905000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="1d000000632701d4"], &(0x7f0000001a00)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b00)={0x1, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001f00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c09000000000000b7020000000000007b2af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x29, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) chroot(&(0x7f0000000240)='./file0\x00') listen(r4, 0x8) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000200)=@get={0x1, &(0x7f0000000380)=""/7, 0x3767}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000400), 0x8) listen(r5, 0xc) setrlimit(0xf, 0x0) sendmsg$key(r0, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 8.303726966s ago: executing program 2 (id=3909): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000140)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x30, 0x30, 0x5f, 0x2e, 0x5f, 0x30]}}, 0x0, 0x20, 0x0, 0x1, 0x1ffffe}, 0x28) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000340)={0x0, 0xfb, 0xa9, 0x1, 0x0, "1130315fce7f50ab7ea925a764d20111", "750d8e3f235cbc6e5d689788b8054e18e602cffa2cc0f9c2e13f56965ffde01326b9cfd5da937727a394d2632107cfa220d9ea17c0f9e3e4e48cec01a5ef6c0fa457a6164e244cf27edc3fe1685f5e1f31943d18c09730126ca3052bea1a44048482c1708d1b118168bb5c1502cf6e75ad04a950cd7d5f73edd2e4379a5692cd84796f9cc901786139a7cfd0695151e82da67f4d"}, 0xa9, 0x3) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c800, &(0x7f0000000140)={[{@oldalloc}, {@debug}, {@bsdgroups}]}, 0xfe, 0x246, &(0x7f0000000ac0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200008098000000000000000400"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) 7.855033392s ago: executing program 0 (id=3911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x8000}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0xfe, 0x4ff, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/895, @ANYRES8, @ANYBLOB="3314f54e5fd2edf68f060b6dc46e6726b43f6ee9ddde462c40e60f24007b2bab9e62e0cb8f8765d8cbe7f5463bcb92c74efb73ef0f526fe4056777ed73b012c79f7de0f43b0840ffd77dc59c2f080b4e37bbf7b0a7c58486ec28cc997fb50b582ce980b04cde0666cb1514340a36a20c20bc6ec73af2f34d53b12df083d642b8e66055ff69d88264abb6d6922fb288698e8bb5728002858a45c8"], 0x1, 0x2b1, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1d, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xdf, 0xfffffffffffffe67, &(0x7f0000000580)="00000000dd738fe70f91df6dea24c9ba22ad7b577a28f32c312558beb6c07473f84193fb0ca2c7f749a7b8aa8cd3299eaf5b2286e930cdc7eeb9617ba10cc9f86dfd8c08adc257b95fbcfddae3240c1f68af540ceb49f60c3c69d854fea3a11cb2407747340ec0ca57b89bb8c2fdb8c50922aa213b05a571ab274c0e414b399ca0a4bf991db5c4b228fc2833f46b9273efa7e21146f2e81a99db9aed9cd77acd5dec33f6adb4bb3a031092d989f76addb4ff5675ba11290328aa93e18ea11e57a2b7ba1805b7548470eb609a97c7df91c707cb2b5e6bcf91e60d5c0b8b9926", 0x0, 0xffdf, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 7.360253837s ago: executing program 6 (id=3913): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, r3, 0x4, r0}, 0x10) 7.271493838s ago: executing program 6 (id=3915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x15, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x3, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r4, &(0x7f0000000380)="fad33075218151db00316f3a277f", 0xe, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 6.010009303s ago: executing program 2 (id=3918): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x13}, 0x400, 0x0, 0x3, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x27}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="18440000070000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400fa247f27dfdbd1276c7d8ec80a00f0ffff", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000b100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000870b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x9, &(0x7f0000000440)=""/9, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x6, 0x19, 0x78}, 0x10, 0x0, r0, 0x5, &(0x7f0000000500)=[r4, 0x1], &(0x7f0000000540)=[{0x0, 0x4, 0x7, 0x7}, {0x2, 0x4, 0xb, 0x2}, {0x0, 0x3, 0x2, 0xa}, {0x5, 0x1, 0x7, 0xa}, {0x4, 0x3, 0xd, 0x6}], 0x10, 0x7}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000000)) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) 4.932999325s ago: executing program 6 (id=3919): r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="3a000000a00102001c00128009000100766c616e000000000c0002800600054d4f0f88a9b1508987ce6d230088a80000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r2 = syz_pidfd_open(r0, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x8, 0x4, @tid=r6}, &(0x7f0000044000)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmmsg$unix(r5, &(0x7f0000000040), 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f00000001c0)=[{r8, 0xe055}], 0x1, 0x0, 0x0, 0x0) close_range(r2, r4, 0x0) 3.53632466s ago: executing program 0 (id=3921): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) open(0x0, 0x80, 0x28) r0 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) r1 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) pread64(r1, 0x0, 0x0, 0x12) r2 = socket$packet(0x11, 0x3, 0x300) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x92002, 0x0) pidfd_send_signal(r3, 0x27, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c010) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC=r3, @ANYRESHEX=r2], 0x314}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="600000001000030400030000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x60}}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ip6erspan0\x00'}) 3.396288492s ago: executing program 8 (id=3922): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x208000, &(0x7f0000000280)={[{@block_validity}, {}, {@data_err_ignore}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) fallocate(r0, 0x0, 0x0, 0x8800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@deltfilter={0x54, 0x2d, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0xe, 0xc}, {0xa, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x40}}, @TCA_RATE={0x6, 0x5, {0x99, 0x6}}, @TCA_RATE={0x6, 0x5, {0xf7, 0x7}}, @TCA_RATE={0x6, 0x5, {0xf, 0x8}}, @TCA_RATE={0x6, 0x5, {0x8, 0x80}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1d4}, 0x6c845) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11000000040000000f00000001"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r4, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2.817798789s ago: executing program 0 (id=3924): unshare(0x22020400) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x4e22, 0x9, 0x4e20, 0x200, 0x2, 0x20, 0x0, 0x33, 0x0, r1}, {0x3, 0x6, 0xa48, 0x5, 0x6, 0x9, 0xfffffffffffff2ad, 0x6}, {0x7, 0xfffffffffffffffe, 0x3, 0x4}, 0x5, 0x0, 0x3, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x2, 0x2, 0x0, 0x6, 0x100, 0x7ec6}}, 0xe8) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0xdaeb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.762636949s ago: executing program 2 (id=3925): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001000000040000180060001000a000000080005"], 0x54}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000080)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="f1", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002580)=[{&(0x7f0000000540)="e2", 0x1}], 0x1}}], 0x2, 0x10048085) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x4, 0x3, 0x4, r4}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e22, @broadcast}}, [0x7ff, 0x1, 0x3, 0x8, 0x2, 0x6, 0x0, 0x6, 0xffe000000, 0x8, 0xffff, 0x1, 0x8, 0x8001, 0x98]}, &(0x7f00000002c0)=0x100) 2.70036283s ago: executing program 0 (id=3926): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, r3, 0x4, r0}, 0x10) 2.66542428s ago: executing program 0 (id=3927): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x5401, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x8000000000003, 0x0, 0x8, 0x3, 0x28af, 0x0, 0x5}) 2.631856051s ago: executing program 2 (id=3928): socket$kcm(0xa, 0x922000000003, 0x11) r0 = syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xff, 0x5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0xdc86}]) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa010045000037006400000202907800000000e000000211009078e0000002000000020000000d7d36016e"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000f7f832e6ffffffffff08000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000004c0)=r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'wg0\x00', &(0x7f0000001380)=@ethtool_link_settings={0x4d, 0x8, 0xf, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x1], [0x7fffffff]}}) socket$kcm(0x10, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 2.513820902s ago: executing program 0 (id=3929): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x0, &(0x7f0000000040)}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0xf, @private0={0xfc, 0x0, '\x00', 0x2}, 0x80000000}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={r7, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={r7, 0x2}, &(0x7f00000001c0)=0x8) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) sync() 1.928302799s ago: executing program 1 (id=3932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002f18000018010000201af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff85000000720000009500"/96], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ffffffff000000000600002c"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000300)=r7) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.900150739s ago: executing program 6 (id=3933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x64}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0xfffffffc, 0x3, 0x3, 0x5}, 0x10}, 0x94) r4 = socket$kcm(0x1e, 0x2, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0x100, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@remote, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@tfcpad={0x8, 0x22, 0x80000000}]}, 0x100}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {r6}}, './file1\x00'}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r7, &(0x7f00000005c0)={'a', ' *:* ', 'rwm\x00'}, 0xa) r8 = socket$kcm(0x1e, 0x4, 0x0) fcntl$setflags(r7, 0x2, 0x1) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r8) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:'], 0xa) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 1.772312801s ago: executing program 2 (id=3934): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r7, &(0x7f0000000100)=0xffffffffffffffff, 0x12) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) syz_emit_ethernet(0xe6, &(0x7f0000000780)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x29, 0x4, 0x0, 0x0, 0xd8, 0x66, 0x0, 0x3f, 0x1, 0x0, @rand_addr=0x64010100, @loopback, {[@noop, @generic={0x83, 0x9, "84aca0bcc7dc47"}, @cipso={0x86, 0x3f, 0x0, [{0x0, 0xc, "b5efd7c8df5842d25440"}, {0x5, 0x2}, {0x6, 0x8, "55f22cbcf040"}, {0x1, 0xa, "d2178a7c73ed2771"}, {0x5, 0x9, "cac6ce98708861"}, {0x7, 0x8, "702dae034530"}, {0x5, 0x8, "d59d3141d543"}]}, @cipso={0x86, 0x1f, 0x2, [{0x7, 0x8, "d90b7fa4bd32"}, {0x5, 0x11, "cb77006ae2453dbd362042cdafccbf"}]}, @ssrr={0x89, 0x13, 0xc3, [@multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x82, 0x11, "ae3e7f5c9bd13ed39043cd1b3d1d63"}, @end]}}, @redirect={0x5, 0x1, 0x0, @rand_addr=0x64010100, {0xb, 0x4, 0x1, 0x8, 0xaa, 0x64, 0x18, 0x7f, 0x11, 0x4, @rand_addr=0x64010101, @private=0xa010100, {[@rr={0x7, 0x17, 0x4e, [@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x18}, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}]}]}}}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) sendto$inet6(r6, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e34", 0x3fff, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000140)={[{@orlov}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r8, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb86dd60122d92001c3afffe80000000000001000000000100000000000000000082009078ff8806700000000000000000000000000000000096040000088104d46a2e31f6295a271b3842236041c3aa238a50d08946be09ab79bdea006d8a3c8f3034b18f202d9ebe6e3f016aedf4f338bdb0a4e2354e71086e09f2054538bc1badaac0ca1a55c7ea6beeae43261a5e870e7ad163e18538e0d526b028ac4e7562c94aa7fa008b53bd5c200066e8c4de3d2ec7b2095d9ffa03091d4695a1b187d5379f1b661abda3"], 0x0) 1.726933091s ago: executing program 8 (id=3935): socket$kcm(0xa, 0x922000000003, 0x11) r0 = syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xff, 0x5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0xdc86}]) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa010045000037006400000202907800000000e000000211009078e0000002000000020000000d7d36016e"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000f7f832e6ffffffffff0800000073119c0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000004c0)=r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'wg0\x00', &(0x7f0000001380)=@ethtool_link_settings={0x4d, 0x8, 0xf, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x1], [0x7fffffff]}}) socket$kcm(0x10, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.724702931s ago: executing program 1 (id=3936): r0 = socket(0x2b, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) 1.524222974s ago: executing program 1 (id=3937): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b9104006"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, r3, 0x4, r0}, 0x10) 1.175980358s ago: executing program 1 (id=3938): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$igmp6(0xa, 0x3, 0x2) socket$tipc(0x1e, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000005f2a66cf5efb580a99eb8d480000000000914d910c3c9336a96f0d2d1301604609ee199c568131e2b76a7fc843bdbda08e25354f1abeebf569595b09d9aa1b6a46e7504f5e75e0f37e136616ba3f1edca43dd5c67ab90d00d4ab25a6720e18825041754bd45955a96b614e39d2d5b215a30e41b632ca9cffe606977d5b8c3c6bbeb3aaffd8871f5ae7e350809b7d004f139503d83e1ea0a10d1bea9f4b4820536148c23ab1f15639d092142b050515443a7a6ed6bf100c7599e91ae7abba64ec98a61f2e375e6c3144c28a10e2e1b330798f490339f1ad80906df55e6cd032"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1806000000192c001084a0e74b5d7b8633000000000000000000000018110000", @ANYRES32=r10, @ANYRES16=r6, @ANYRES16=r3, @ANYRES32=r8], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x29, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000000100)={r14, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000140)={r14, 0x5775, 0x20}, 0xc) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r9, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086dd", 0x18}, {&(0x7f00000022c0)="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", 0x4cf}], 0x2}, 0x0) 501.598015ms ago: executing program 8 (id=3939): lsm_set_self_attr(0x67, &(0x7f0000000000)={0x8, 0x420f99df, 0x50, 0x30, "a44c966d00e31352f1a915d42f8fbdb5189eb47983239827fbb331614c430754d7606171803414494a74ede33b797e77"}, 0x50, 0x0) lsm_get_self_attr(0x66, &(0x7f0000000080)={0x0, 0x0, 0x9b, 0x7b, ""/123}, &(0x7f0000000140)=0x9b, 0x1) lsm_get_self_attr(0x66, &(0x7f0000000180)={0x0, 0x0, 0xf4, 0xd4, ""/212}, &(0x7f0000000280)=0xf4, 0x1) lsm_set_self_attr(0x69, &(0x7f00000002c0)={0x61, 0x1, 0x84, 0x64, "d60245512ef19c35b07f0ccbd67fd42186efdd725e51ea904f13f44405a585a4c57f822e70c756aa2e5e8efd208c9c0db024da18313aeb394df7d82063646d14404631f003207ec12c0bb88cd6f546c5935f55d0c659894fedc377cdc1ea98e04d0b5bef"}, 0x84, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) close(r0) lsm_get_self_attr(0x67, &(0x7f00000003c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000001400)=0x1020, 0x0) r1 = openat2(r0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x80503, 0x0, 0x30}, 0x18) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000014c0)=0x40, 0x4) lsm_get_self_attr(0x66, &(0x7f0000001500)={0x0, 0x0, 0x32, 0x12, ""/18}, &(0x7f0000001540)=0x32, 0x0) lsm_get_self_attr(0x69, &(0x7f0000001580)={0x0, 0x0, 0x92, 0x72, ""/114}, &(0x7f0000001640)=0x92, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000001680)={{0x1, 0x1, 0x18, r1, {0xf729d0ccfd5fe03f}}, './file0\x00'}) lsm_get_self_attr(0x64, &(0x7f00000016c0)={0x0, 0x0, 0x90, 0x70, ""/112}, &(0x7f0000001780)=0x90, 0x1) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$VT_WAITACTIVE(r2, 0x5607) lsm_get_self_attr(0x66, &(0x7f00000017c0)={0x0, 0x0, 0x91, 0x71, ""/113}, &(0x7f0000001880)=0x91, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x63, 0x63, 0x3, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @struct={0x5, 0x1, 0x0, 0x4, 0x0, 0xf8d7, [{0x3, 0x0, 0xfffffffa}]}, @datasec={0xd, 0x0, 0x0, 0xf, 0x3, [], "bb4b27"}, @func={0x4, 0x0, 0x0, 0xc, 0x5}, @ptr={0x4, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x2}}]}, {0x0, [0x5f]}}, &(0x7f0000001940)=""/58, 0x7f, 0x3a, 0x1, 0x2a3c, 0x10000, @value=r0}, 0x28) preadv(r1, &(0x7f0000002ec0)=[{&(0x7f00000019c0)=""/120, 0x78}, {&(0x7f0000001a40)=""/141, 0x8d}, {&(0x7f0000001b00)=""/139, 0x8b}, {&(0x7f0000001bc0)=""/253, 0xfd}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/41, 0x29}, {&(0x7f0000002d00)=""/226, 0xe2}, {&(0x7f0000002e00)=""/121, 0x79}, {&(0x7f0000002e80)=""/29, 0x1d}], 0x9, 0x200, 0x133) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000002f80)={0xee54, 0x4, 0x0, 0x2, 0x6, 0x0, [{0x7, 0x7ba, 0x9, '\x00', 0x200}, {0x9, 0x4eed, 0x8, '\x00', 0x400}, {0x5, 0x6, 0x8, '\x00', 0x80}, {0xa8, 0x7, 0x10, '\x00', 0x2f00}, {0x6, 0x2, 0x3, '\x00', 0x4}, {0x11, 0x0, 0x9, '\x00', 0x300}]}) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000003100), &(0x7f0000003140)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000003240)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x18, 0x140b, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0xc0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000003280)={0x0, @in6={{0xa, 0x4e23, 0xfffffff1, @private2, 0x4}}, 0x7c11, 0x7, 0x5f, 0x7fff, 0x8}, &(0x7f0000003340)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000003380)={r3, 0x88}, &(0x7f00000033c0)=0x8) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000003400)={0x80000001, 0x62, 0x2}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000003440)={0x1f, 0x4, 0x2}, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003980)={r0, 0xe0, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000036c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000003700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003740)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x13, &(0x7f0000003780)=[{}], 0x8, 0x10, &(0x7f00000037c0), &(0x7f0000003800), 0x8, 0x28, 0x8, 0x8, &(0x7f0000003840)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x15, 0x1a, &(0x7f0000003480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003580)='syzkaller\x00', 0x2, 0xeb, &(0x7f00000035c0)=""/235, 0x41000, 0x46, '\x00', r5, @sk_reuseport=0x27, r1, 0x8, &(0x7f00000039c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000003a00)={0x2, 0x3, 0x8, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000003a40)=[r0, r2, r2, r0, r0], &(0x7f0000003a80)=[{0x2, 0x4, 0x3, 0x2}, {0x2, 0x1, 0xa, 0x9}, {0x2, 0x1, 0x9, 0x5}, {0x2, 0x3, 0xb, 0x8}, {0x3, 0x5, 0x8, 0xb}]}, 0x94) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000003bc0)={r0}) lsm_set_self_attr(0x64, &(0x7f0000003c00)={0x66, 0x2, 0x117, 0xf7, "3270df93c9f1cd357b2ad7b5a3378ec53dc384d9e612b1429a0a1d257eab4439103d1f8c6b1a38a47c829611636798e6b067655df2cff15c34c06e5433e6ff204886a122074c549860f0d6e19c356b1b7d917dc81e9810b698626c5226630a0c258998e63217fd303968cce8a553fb31e984d4babdd6f1097a1cd0cfbe5a3f9403537c9cf94c3f4d1bb198210feafa33f686c31c51d096ca08f86d47cc66f5721d569bde8728bc42a958b54bb8b375ad2d3b17fd8b35e9ef117bb7d346abac3b76526bec3dd3c90ebdd855404712c23b84ecbca75d4d474d8fbb36e100cf717c560a2e4a39250cb17a245ccaffc62b2280d6e6089107c8"}, 0x117, 0x0) 412.477326ms ago: executing program 8 (id=3940): r0 = epoll_create(0xbacb) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000005c0)={0x9, 0x200000000000000}) 409.164736ms ago: executing program 8 (id=3941): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) 328.659917ms ago: executing program 8 (id=3942): socket$kcm(0xa, 0x922000000003, 0x11) r0 = syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xff, 0x5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0xdc86}]) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa010045000037006400000202907800000000e000000211009078e0000002000000020000000d7d36016e"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000f7f832e6ffffffffff0800000073119c0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000004c0)=r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'wg0\x00', &(0x7f0000001380)=@ethtool_link_settings={0x4d, 0x8, 0xf, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x1], [0x7fffffff]}}) socket$kcm(0x10, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 106.700629ms ago: executing program 1 (id=3943): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) unshare(0x2a060400) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x40, 0xc, 0x800, 0x2, 0x4, 0xfffffffc}}, {0x4}}, {{0x1c, 0x1, {0x1, 0xf5, 0x4, 0x80000000, 0x3, 0xd, 0x401}}, {0x4}}]}]}, 0x68}}, 0x8000) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/143, 0x10000, 0x1000, 0x40, 0x2}, 0x20) 0s ago: executing program 1 (id=3944): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/187, 0xbb}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") (async) unshare(0x22020400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r4, 0x8, 0x0) (async) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x746, 0x6, 0x8, 0x6, 0x6, 0x20000000ffe, 0xf64, 0xffeffffc}) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRESHEX, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r3, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) (async) sendto$packet(r1, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x6e) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getpgid(0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r9, r10, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(r7, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r6) kernel console output (not intermixed with test programs): 276960: ext4_map_blocks:791: inode 11: block 327694 [ 555.871697][ C1] EXT4-fs (loop2): last error at time 1778276960: ext4_map_blocks:791: inode 11: block 327694 [ 555.919278][T15056] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 555.926533][T15056] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #12: comm syz.8.3227: corrupted inode contents [ 555.969879][T15056] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 555.970116][T15056] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #12: comm syz.8.3227: mark_inode_dirty error [ 555.996534][T15068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.032010][T15056] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 556.032204][T15056] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #12: comm syz.8.3227: corrupted inode contents [ 556.055771][T15068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.074480][T15068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.100506][T15056] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 556.100850][T15056] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 556.166614][T15056] loop8: lost filesystem error report for type 5 error -117 [ 556.166858][T15056] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #12: comm syz.8.3227: corrupted inode contents [ 556.205809][T15056] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 556.205939][T15056] EXT4-fs error (device loop8): ext4_truncate:4690: inode #12: comm syz.8.3227: mark_inode_dirty error [ 556.227029][T15056] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 556.227290][T15056] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 556.246332][T15056] loop8: lost filesystem error report for type 5 error -117 [ 556.246614][T15056] EXT4-fs (loop8): 1 truncate cleaned up [ 556.262287][T15071] netlink: 'syz.2.3232': attribute type 7 has an invalid length. [ 556.276566][T15071] netlink: 'syz.2.3232': attribute type 7 has an invalid length. [ 556.284641][ T1477] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.293550][ T1477] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.302784][ T1477] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.337248][ T1477] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.398804][T15075] syzkaller0: entered promiscuous mode [ 556.404528][T15075] syzkaller0: entered allmulticast mode [ 556.413081][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 556.540984][T15056] EXT4-fs (loop8): pa ffff888108586690: logic 1, phys. 41, len 23 [ 556.549016][T15056] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 556.580073][T15056] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 556.607504][ T7821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.672255][T15080] syzkaller0: entered promiscuous mode [ 556.706288][T15080] syzkaller0: entered allmulticast mode [ 557.197540][ T28] audit: type=1400 audit(1778276961.465:1611): avc: denied { unmount } for pid=14006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 557.284259][T15101] sock: sock_timestamping_bind_phc: sock not bind to device [ 557.293821][T14006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.386058][T15106] No such timeout policy "syz1" [ 557.639431][T15114] loop8: detected capacity change from 0 to 128 [ 557.655955][T15114] EXT4-fs: Ignoring removed oldalloc option [ 557.954212][T15114] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 557.964248][T15114] System zones: 1-3, 19-19, 35-36 [ 557.983944][T15114] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 558.048969][T15114] ext4 filesystem being mounted at /405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 558.513109][T15125] syzkaller0: entered promiscuous mode [ 558.519417][T15125] syzkaller0: entered allmulticast mode [ 558.527636][T15128] tipc: Started in network mode [ 558.533693][T15128] tipc: Node identity 7a1bea0a279c, cluster identity 4711 [ 558.540952][T15128] tipc: Enabled bearer , priority 0 [ 558.550030][T15126] tipc: Disabling bearer [ 558.630382][T15132] netlink: 1348 bytes leftover after parsing attributes in process `syz.6.3251'. [ 558.717508][T15132] loop6: detected capacity change from 0 to 512 [ 558.731942][T15134] loop0: detected capacity change from 0 to 2048 [ 558.772974][T15134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.794026][T15132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.837694][ T28] audit: type=1400 audit(1778276962.977:1612): avc: denied { create } for pid=15133 comm="syz.0.3252" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 558.888578][T15132] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.925496][T14207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.984699][T14821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.376787][ T7821] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 559.507984][T15154] loop1: detected capacity change from 0 to 128 [ 559.546901][T15152] loop8: detected capacity change from 0 to 512 [ 559.698244][T15161] No such timeout policy "syz1" [ 559.805826][T15168] loop0: detected capacity change from 0 to 1764 [ 560.846611][T15172] syzkaller0: entered promiscuous mode [ 560.878922][T15172] syzkaller0: entered allmulticast mode [ 560.895396][T15176] syzkaller0: entered promiscuous mode [ 560.907274][T15176] syzkaller0: entered allmulticast mode [ 560.956817][T15178] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.964206][T15178] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.059084][T15178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.069825][T15182] loop6: detected capacity change from 0 to 4096 [ 561.080721][T15178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.104031][T15182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.138583][ T28] audit: type=1400 audit(1778276965.105:1613): avc: denied { append } for pid=15181 comm="syz.6.3265" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 561.222291][T15178] vlan2: left promiscuous mode [ 561.227266][T15178] bridge0: left promiscuous mode [ 561.235361][T14821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.244820][T15176] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3262'. [ 561.254168][T15176] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3262'. [ 561.270752][ T2006] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.280996][ T2006] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.324839][ T2006] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.343823][ T2006] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.370914][ T2006] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.388851][ T2006] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.444978][T15199] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.452379][T15199] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.510657][T15205] loop2: detected capacity change from 0 to 128 [ 561.519342][T15205] vfat: Unknown parameter '18446744073709551615ÿÿ' [ 561.575677][T15199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.597989][T15199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.641825][T15211] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 561.681358][ T2006] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.702253][ T2006] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.725463][ T2006] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.748567][ T2006] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.761037][ T2006] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.779385][ T2006] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.833023][ T28] audit: type=1400 audit(1778276965.741:1614): avc: denied { append } for pid=15216 comm="syz.8.3277" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 561.943622][T15228] program syz.6.3281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.989691][T15231] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 561.998416][T15231] syzkaller0: entered promiscuous mode [ 562.004309][T15231] syzkaller0: entered allmulticast mode [ 562.013810][T15231] tipc: Enabled bearer , priority 0 [ 562.029944][T15231] tipc: Resetting bearer [ 562.037635][T15233] syzkaller0: entered promiscuous mode [ 562.044150][T15233] syzkaller0: entered allmulticast mode [ 562.051198][T15230] tipc: Resetting bearer [ 562.062619][T15230] tipc: Disabling bearer [ 562.077311][T15233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3282'. [ 562.087355][T15233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3282'. [ 562.202367][T15238] loop6: detected capacity change from 0 to 128 [ 562.232717][T15239] loop1: detected capacity change from 0 to 1764 [ 562.242085][T15236] ref_ctr increment failed for inode: 0xea offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888105764380 [ 562.369008][T15238] FAT-fs (loop6): bogus number of reserved sectors [ 562.397367][T15238] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 562.446975][T15238] FAT-fs (loop6): Can't find a valid FAT filesystem [ 562.505972][ T28] audit: type=1400 audit(1778276966.359:1615): avc: denied { ioctl } for pid=15243 comm="syz.0.3287" path="socket:[49433]" dev="sockfs" ino=49433 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 562.541698][T15242] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 563.109032][T15258] loop8: detected capacity change from 0 to 128 [ 563.116368][T15256] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 563.220951][T15258] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 563.319032][T15258] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.738591][T15250] kexec: Could not allocate control_code_buffer [ 563.875039][ T7821] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 563.925663][T15266] tipc: Enabling of bearer rejected, failed to enable media [ 564.117285][T15285] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 564.136796][T15287] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3302'. [ 564.147705][T15276] loop6: detected capacity change from 0 to 8192 [ 564.197181][T15276] loop6: p1 p2 p3 p4 [ 564.204533][T15276] loop6: p1 start 51379968 is beyond EOD, truncated [ 564.232344][T15276] loop6: p3 size 100663552 extends beyond EOD, truncated [ 564.243828][T15276] loop6: p4 size 81920 extends beyond EOD, truncated [ 564.309287][T15293] loop6: detected capacity change from 0 to 512 [ 564.319687][T15294] netlink: 1348 bytes leftover after parsing attributes in process `syz.2.3305'. [ 564.335239][T15293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 564.373805][ T4434] udevd[4434]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 564.380498][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 564.389047][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 564.404748][T15293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.448596][T15294] loop2: detected capacity change from 0 to 512 [ 564.465460][T15293] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 564.513239][T15294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.568713][T15294] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.631692][T15278] __vm_enough_memory: pid: 15278, comm: syz.0.3299, bytes: 11727357935616 not enough memory for the allocation [ 564.715683][T14006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.795019][ T28] audit: type=1400 audit(1778276968.282:1616): avc: denied { append } for pid=15291 comm="syz.6.3304" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 565.124844][T15311] syz.8.3309 (15311) used obsolete PPPIOCDETACH ioctl [ 565.138499][T14821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.151459][T15311] loop8: detected capacity change from 0 to 512 [ 565.173924][T15311] EXT4-fs: Ignoring removed bh option [ 565.204791][T15312] loop2: detected capacity change from 0 to 1764 [ 565.241271][T15311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.267894][T15311] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.293942][T15311] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #2: comm syz.8.3309: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 565.316859][T15311] EXT4-fs (loop8): Remounting filesystem read-only [ 565.405838][T15314] tipc: Enabling of bearer rejected, failed to enable media [ 565.600352][ T7821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.674276][T15333] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 565.698513][T15333] syzkaller0: entered promiscuous mode [ 565.707438][T15333] syzkaller0: entered allmulticast mode [ 565.738804][T15339] FAULT_INJECTION: forcing a failure. [ 565.738804][T15339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.760248][T15339] CPU: 0 UID: 0 PID: 15339 Comm: syz.6.3316 Tainted: G W syzkaller #0 PREEMPT(full) [ 565.760407][T15339] Tainted: [W]=WARN [ 565.760414][T15339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 565.760427][T15339] Call Trace: [ 565.760433][T15339] [ 565.760440][T15339] __dump_stack+0x1d/0x30 [ 565.760477][T15339] dump_stack_lvl+0x95/0xd0 [ 565.760502][T15339] dump_stack+0x15/0x1b [ 565.760521][T15339] should_fail_ex+0x263/0x280 [ 565.760615][T15339] should_fail+0xb/0x20 [ 565.760639][T15339] should_fail_usercopy+0x1a/0x20 [ 565.760671][T15339] _copy_to_user+0x20/0xa0 [ 565.760740][T15339] simple_read_from_buffer+0xb5/0x130 [ 565.760827][T15339] proc_fail_nth_read+0x10e/0x150 [ 565.760938][T15339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 565.760965][T15339] vfs_read+0x1ab/0x7f0 [ 565.760992][T15339] ? __rcu_read_unlock+0x4e/0x70 [ 565.761069][T15339] ? __fget_files+0x184/0x1c0 [ 565.761089][T15339] ? mutex_lock+0x57/0x90 [ 565.761141][T15339] ksys_read+0xdc/0x1a0 [ 565.761187][T15339] __x64_sys_read+0x40/0x50 [ 565.761219][T15339] x64_sys_call+0x2886/0x3020 [ 565.761251][T15339] do_syscall_64+0x12c/0x3b0 [ 565.761327][T15339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.761350][T15339] RIP: 0033:0x7f7dc4e8d60e [ 565.761447][T15339] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 565.761477][T15339] RSP: 002b:00007f7dc391efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 565.761505][T15339] RAX: ffffffffffffffda RBX: 00007f7dc391f6c0 RCX: 00007f7dc4e8d60e [ 565.761524][T15339] RDX: 000000000000000f RSI: 00007f7dc391f0a0 RDI: 0000000000000005 [ 565.761545][T15339] RBP: 00007f7dc391f090 R08: 0000000000000000 R09: 0000000000000000 [ 565.761563][T15339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.761578][T15339] R13: 00007f7dc5146038 R14: 00007f7dc5145fa0 R15: 00007ffc9ffc15e8 [ 565.761725][T15339] [ 566.235598][T15353] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 566.288517][T15353] syzkaller0: entered promiscuous mode [ 566.306927][T15353] syzkaller0: entered allmulticast mode [ 566.381107][T15363] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3326'. [ 566.404026][T15363] FAULT_INJECTION: forcing a failure. [ 566.404026][T15363] name failslab, interval 1, probability 0, space 0, times 0 [ 566.439236][T15363] CPU: 0 UID: 0 PID: 15363 Comm: syz.0.3326 Tainted: G W syzkaller #0 PREEMPT(full) [ 566.439280][T15363] Tainted: [W]=WARN [ 566.439290][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.439308][T15363] Call Trace: [ 566.439317][T15363] [ 566.439327][T15363] __dump_stack+0x1d/0x30 [ 566.439399][T15363] dump_stack_lvl+0x95/0xd0 [ 566.439421][T15363] dump_stack+0x15/0x1b [ 566.439441][T15363] should_fail_ex+0x263/0x280 [ 566.439496][T15363] should_failslab+0x8c/0xb0 [ 566.439534][T15363] kmem_cache_alloc_noprof+0x66/0x3f0 [ 566.439619][T15363] ? skb_clone+0x151/0x1f0 [ 566.439646][T15363] skb_clone+0x151/0x1f0 [ 566.439671][T15363] __netlink_deliver_tap+0x2c9/0x500 [ 566.439791][T15363] ? netlink_attachskb+0x2e2/0x660 [ 566.439827][T15363] netlink_sendskb+0x126/0x150 [ 566.439858][T15363] netlink_unicast+0x28a/0x680 [ 566.439902][T15363] netlink_ack+0x4c8/0x500 [ 566.439949][T15363] netlink_rcv_skb+0x192/0x220 [ 566.439986][T15363] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 566.440026][T15363] rtnetlink_rcv+0x1c/0x30 [ 566.440061][T15363] netlink_unicast+0x5a8/0x680 [ 566.440169][T15363] netlink_sendmsg+0x5c8/0x6f0 [ 566.440212][T15363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.440285][T15363] sock_write_iter+0x2e8/0x320 [ 566.440318][T15363] ? __pfx_sock_write_iter+0x10/0x10 [ 566.440355][T15363] vfs_write+0x5a6/0x9f0 [ 566.440472][T15363] ksys_write+0xdc/0x1a0 [ 566.440619][T15363] __x64_sys_write+0x40/0x50 [ 566.440659][T15363] x64_sys_call+0x27e1/0x3020 [ 566.440704][T15363] do_syscall_64+0x12c/0x3b0 [ 566.440753][T15363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.440777][T15363] RIP: 0033:0x7f299558cdd9 [ 566.440798][T15363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.440823][T15363] RSP: 002b:00007f2993fe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 566.440850][T15363] RAX: ffffffffffffffda RBX: 00007f2995805fa0 RCX: 00007f299558cdd9 [ 566.440877][T15363] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 566.440966][T15363] RBP: 00007f2993fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 566.440984][T15363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.441004][T15363] R13: 00007f2995806038 R14: 00007f2995805fa0 R15: 00007ffe3f0d9c18 [ 566.441031][T15363] [ 566.719095][T15366] syzkaller0: entered promiscuous mode [ 566.724742][T15366] syzkaller0: entered allmulticast mode [ 566.756934][T15366] tipc: Enabled bearer , priority 0 [ 566.802726][T15365] tipc: Resetting bearer [ 566.844142][T15365] tipc: Disabling bearer [ 566.862991][T15359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 566.872549][T15359] EXT4-fs: Ignoring removed orlov option [ 566.894232][T15372] set_capacity_and_notify: 4 callbacks suppressed [ 566.894252][T15372] loop2: detected capacity change from 0 to 4096 [ 566.919854][T15359] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.947431][T15372] EXT4-fs: Ignoring removed nomblk_io_submit option [ 566.984358][T15372] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 567.029721][T15372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.046611][T15384] syzkaller0: entered promiscuous mode [ 567.067137][T15384] syzkaller0: entered allmulticast mode [ 567.150074][T15387] loop0: detected capacity change from 0 to 1024 [ 567.178445][T15387] EXT4-fs: Ignoring removed orlov option [ 567.221405][ T7821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.248174][T15387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.304156][ T4553] IPVS: starting estimator thread 0... [ 567.372853][T15399] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 567.376191][T15399] loop6: detected capacity change from 0 to 512 [ 567.468601][T15393] IPVS: using max 2496 ests per chain, 124800 per kthread [ 567.498137][ T28] audit: type=1400 audit(1778276970.565:1617): avc: denied { create } for pid=15398 comm="syz.6.3334" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 567.499119][ T28] audit: type=1400 audit(1778276970.565:1618): avc: denied { associate } for pid=15398 comm="syz.6.3334" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 567.502697][T15399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.723452][T14821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.732835][ T28] audit: type=1400 audit(1778276970.565:1619): avc: denied { mounton } for pid=15398 comm="syz.6.3334" path="/31/file1" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 567.739001][ T28] audit: type=1400 audit(1778276970.791:1620): avc: denied { rmdir } for pid=14821 comm="syz-executor" name="file1" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 567.757422][T14006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.928659][T15400] syzkaller0: entered promiscuous mode [ 567.995168][T15400] syzkaller0: entered allmulticast mode [ 568.142108][T14207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.184125][T15418] syzkaller0: entered promiscuous mode [ 568.201004][T15422] netlink: 1348 bytes leftover after parsing attributes in process `syz.0.3341'. [ 568.212937][T15418] syzkaller0: entered allmulticast mode [ 568.231395][T15418] tipc: Enabled bearer , priority 0 [ 568.238826][T15417] tipc: Resetting bearer [ 568.247003][T15422] loop0: detected capacity change from 0 to 512 [ 568.266799][T15417] tipc: Disabling bearer [ 568.311042][T15422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.358310][T15422] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.452768][T15428] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 568.497156][T14207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.574136][T15431] No such timeout policy "syz1" [ 568.688299][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3346'. [ 568.754773][T15434] loop2: detected capacity change from 0 to 512 [ 568.799476][T15434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.802494][T15440] loop0: detected capacity change from 0 to 256 [ 568.886267][T14006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.494976][T15447] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 569.549071][T15447] syzkaller0: entered promiscuous mode [ 569.560596][T15447] syzkaller0: entered allmulticast mode [ 569.608125][T15451] loop1: detected capacity change from 0 to 512 [ 569.622056][T15451] EXT4-fs: Ignoring removed nobh option [ 569.677961][T15451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.770946][T15458] syzkaller0: entered promiscuous mode [ 569.783579][T15458] syzkaller0: entered allmulticast mode [ 569.822605][T15458] tipc: Enabled bearer , priority 0 [ 569.830261][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.862990][T15456] tipc: Resetting bearer [ 569.880316][T15456] tipc: Disabling bearer [ 569.905956][T15461] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 569.914877][T15461] syzkaller0: entered promiscuous mode [ 569.922065][T15461] syzkaller0: entered allmulticast mode [ 569.951732][T15461] tipc: Enabled bearer , priority 0 [ 569.964306][T15461] tipc: Resetting bearer [ 569.986721][T15460] tipc: Resetting bearer [ 569.999246][T15460] tipc: Disabling bearer [ 570.057886][T15469] syzkaller0: entered promiscuous mode [ 570.077647][T15469] syzkaller0: entered allmulticast mode [ 570.509370][T15479] loop6: detected capacity change from 0 to 1764 [ 570.700976][T15481] tipc: Enabling of bearer rejected, failed to enable media [ 571.044759][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3368'. [ 571.079125][ T28] audit: type=1326 audit(1778276973.761:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15494 comm="syz.1.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b28acdd9 code=0x7ffc0000 [ 571.089666][T15495] netlink: 'syz.1.3368': attribute type 4 has an invalid length. [ 571.148429][T15495] netlink: 3649 bytes leftover after parsing attributes in process `syz.1.3368'. [ 571.154358][ T28] audit: type=1326 audit(1778276973.761:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15494 comm="syz.1.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b28acdd9 code=0x7ffc0000 [ 571.218416][ T28] audit: type=1326 audit(1778276973.761:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15494 comm="syz.1.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b28acdd9 code=0x7ffc0000 [ 571.289823][ T28] audit: type=1326 audit(1778276973.761:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15494 comm="syz.1.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f90b28acdd9 code=0x7ffc0000 [ 571.369040][ T28] audit: type=1326 audit(1778276973.761:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15494 comm="syz.1.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b28acdd9 code=0x7ffc0000 [ 571.376316][T15501] siw: device registration error -23 [ 571.438477][T15506] netlink: 'syz.6.3372': attribute type 2 has an invalid length. [ 571.448281][ T28] audit: type=1326 audit(1778276973.761:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15494 comm="syz.1.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b28acdd9 code=0x7ffc0000 [ 571.463148][T15506] netlink: 'syz.6.3372': attribute type 7 has an invalid length. [ 571.497986][ T28] audit: type=1326 audit(1778276973.761:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15494 comm="syz.1.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b28acdd9 code=0x7ffc0000 [ 571.505928][T15508] netlink: 31 bytes leftover after parsing attributes in process `syz.6.3372'. [ 571.559667][ T28] audit: type=1326 audit(1778276973.761:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15494 comm="syz.1.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f90b28acdd9 code=0x7ffc0000 [ 571.561062][T15506] netlink: 'syz.6.3372': attribute type 5 has an invalid length. [ 571.606384][T15507] loop1: detected capacity change from 0 to 256 [ 571.628278][ T28] audit: type=1326 audit(1778276973.761:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15494 comm="syz.1.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b28acdd9 code=0x7ffc0000 [ 571.692444][ T28] audit: type=1326 audit(1778276973.761:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15494 comm="syz.1.3368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b28acdd9 code=0x7ffc0000 [ 571.827476][T15512] ref_ctr increment failed for inode: 0xe0 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881057621c0 [ 572.113882][T15526] netlink: 'syz.6.3380': attribute type 17 has an invalid length. [ 572.186234][T15528] FAULT_INJECTION: forcing a failure. [ 572.186234][T15528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.213912][T15528] CPU: 1 UID: 0 PID: 15528 Comm: syz.6.3381 Tainted: G W syzkaller #0 PREEMPT(full) [ 572.213989][T15528] Tainted: [W]=WARN [ 572.213999][T15528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 572.214016][T15528] Call Trace: [ 572.214025][T15528] [ 572.214058][T15528] __dump_stack+0x1d/0x30 [ 572.214087][T15528] dump_stack_lvl+0x95/0xd0 [ 572.214115][T15528] dump_stack+0x15/0x1b [ 572.214139][T15528] should_fail_ex+0x263/0x280 [ 572.214175][T15528] should_fail+0xb/0x20 [ 572.214255][T15528] should_fail_usercopy+0x1a/0x20 [ 572.214313][T15528] _copy_from_user+0x1c/0xb0 [ 572.214423][T15528] uhid_char_write+0xee/0x650 [ 572.214494][T15528] ? __pfx_uhid_char_write+0x10/0x10 [ 572.214518][T15528] vfs_write+0x269/0x9f0 [ 572.214557][T15528] ? __rcu_read_unlock+0x4e/0x70 [ 572.214586][T15528] ? __fget_files+0x184/0x1c0 [ 572.214629][T15528] ksys_write+0xdc/0x1a0 [ 572.214665][T15528] __x64_sys_write+0x40/0x50 [ 572.214703][T15528] x64_sys_call+0x27e1/0x3020 [ 572.214766][T15528] do_syscall_64+0x12c/0x3b0 [ 572.214805][T15528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.214848][T15528] RIP: 0033:0x7f7dc4eccdd9 [ 572.214865][T15528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.214886][T15528] RSP: 002b:00007f7dc391f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 572.214906][T15528] RAX: ffffffffffffffda RBX: 00007f7dc5145fa0 RCX: 00007f7dc4eccdd9 [ 572.214921][T15528] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000003 [ 572.214983][T15528] RBP: 00007f7dc391f090 R08: 0000000000000000 R09: 0000000000000000 [ 572.214996][T15528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.215011][T15528] R13: 00007f7dc5146038 R14: 00007f7dc5145fa0 R15: 00007ffc9ffc15e8 [ 572.215037][T15528] [ 572.425878][T15530] loop6: detected capacity change from 0 to 512 [ 572.481382][T15530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.505410][T15530] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.600752][T14821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.872656][T15540] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3385'. [ 572.893001][T15540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.934222][T15540] loop8: detected capacity change from 0 to 1024 [ 572.952341][T15540] EXT4-fs: Ignoring removed orlov option [ 572.969714][T15540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.121789][ T7821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.134055][T15546] syzkaller0: entered promiscuous mode [ 573.139711][T15546] syzkaller0: entered allmulticast mode [ 573.240171][T15550] ref_ctr increment failed for inode: 0x8bc offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811f8f2f40 [ 573.769431][T15584] ref_ctr increment failed for inode: 0x10a offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811f8f57c0 [ 573.914708][T15595] loop6: detected capacity change from 0 to 512 [ 573.924054][T15595] ext3: Unknown parameter 'func' [ 573.991214][T15596] loop1: detected capacity change from 0 to 128 [ 574.002969][T15596] EXT4-fs: Ignoring removed oldalloc option [ 574.078187][T15596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 574.087278][T15596] System zones: 1-3, 19-19, 35-36 [ 574.109445][T15596] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 574.126648][T15596] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 574.526412][T15606] FAULT_INJECTION: forcing a failure. [ 574.526412][T15606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.540984][T15606] CPU: 1 UID: 0 PID: 15606 Comm: syz.8.3408 Tainted: G W syzkaller #0 PREEMPT(full) [ 574.541026][T15606] Tainted: [W]=WARN [ 574.541033][T15606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 574.541118][T15606] Call Trace: [ 574.541127][T15606] [ 574.541189][T15606] __dump_stack+0x1d/0x30 [ 574.541214][T15606] dump_stack_lvl+0x95/0xd0 [ 574.541258][T15606] dump_stack+0x15/0x1b [ 574.541278][T15606] should_fail_ex+0x263/0x280 [ 574.541309][T15606] should_fail+0xb/0x20 [ 574.541334][T15606] should_fail_usercopy+0x1a/0x20 [ 574.541460][T15606] _copy_from_iter+0xcf/0xea0 [ 574.541498][T15606] ? __alloc_skb+0x4f6/0x690 [ 574.541517][T15606] ? __alloc_skb+0x200/0x690 [ 574.541542][T15606] netlink_sendmsg+0x4ae/0x6f0 [ 574.541612][T15606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.541647][T15606] ____sys_sendmsg+0x563/0x5b0 [ 574.541676][T15606] ___sys_sendmsg+0x195/0x1e0 [ 574.541697][T15606] ? __rcu_read_unlock+0x4e/0x70 [ 574.541813][T15606] __x64_sys_sendmsg+0xd4/0x160 [ 574.541865][T15606] x64_sys_call+0x194c/0x3020 [ 574.541889][T15606] do_syscall_64+0x12c/0x3b0 [ 574.541945][T15606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.541974][T15606] RIP: 0033:0x7f080c1bcdd9 [ 574.541993][T15606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.542012][T15606] RSP: 002b:00007f080ac0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.542032][T15606] RAX: ffffffffffffffda RBX: 00007f080c435fa0 RCX: 00007f080c1bcdd9 [ 574.542046][T15606] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 574.542130][T15606] RBP: 00007f080ac0f090 R08: 0000000000000000 R09: 0000000000000000 [ 574.542168][T15606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.542184][T15606] R13: 00007f080c436038 R14: 00007f080c435fa0 R15: 00007ffc2a84a948 [ 574.542209][T15606] [ 574.988606][T15617] FAULT_INJECTION: forcing a failure. [ 574.988606][T15617] name failslab, interval 1, probability 0, space 0, times 0 [ 575.001681][T15617] CPU: 1 UID: 0 PID: 15617 Comm: syz.8.3411 Tainted: G W syzkaller #0 PREEMPT(full) [ 575.001722][T15617] Tainted: [W]=WARN [ 575.001736][T15617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.001760][T15617] Call Trace: [ 575.001769][T15617] [ 575.001778][T15617] __dump_stack+0x1d/0x30 [ 575.001805][T15617] dump_stack_lvl+0x95/0xd0 [ 575.001895][T15617] dump_stack+0x15/0x1b [ 575.001922][T15617] should_fail_ex+0x263/0x280 [ 575.001955][T15617] should_failslab+0x8c/0xb0 [ 575.002055][T15617] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 575.002172][T15617] ? __alloc_skb+0x2d6/0x690 [ 575.002239][T15617] __alloc_skb+0x2d6/0x690 [ 575.002390][T15617] ? __alloc_skb+0x200/0x690 [ 575.002477][T15617] netlink_alloc_large_skb+0xbf/0xf0 [ 575.002510][T15617] netlink_sendmsg+0x40c/0x6f0 [ 575.002557][T15617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.002610][T15617] ____sys_sendmsg+0x563/0x5b0 [ 575.002642][T15617] ___sys_sendmsg+0x195/0x1e0 [ 575.002682][T15617] __x64_sys_sendmsg+0xd4/0x160 [ 575.002788][T15617] x64_sys_call+0x194c/0x3020 [ 575.002815][T15617] do_syscall_64+0x12c/0x3b0 [ 575.002851][T15617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.002941][T15617] RIP: 0033:0x7f080c1bcdd9 [ 575.003021][T15617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.003046][T15617] RSP: 002b:00007f080ac0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.003073][T15617] RAX: ffffffffffffffda RBX: 00007f080c435fa0 RCX: 00007f080c1bcdd9 [ 575.003092][T15617] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 575.003182][T15617] RBP: 00007f080ac0f090 R08: 0000000000000000 R09: 0000000000000000 [ 575.003218][T15617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.003231][T15617] R13: 00007f080c436038 R14: 00007f080c435fa0 R15: 00007ffc2a84a948 [ 575.003250][T15617] [ 575.241472][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3412'. [ 575.258499][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'. [ 575.629301][T15645] tipc: Enabling of bearer rejected, failed to enable media [ 575.727117][T15652] loop0: detected capacity change from 0 to 128 [ 575.758052][T15652] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 575.812476][T15652] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.891226][T14207] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 575.988420][T15648] loop8: detected capacity change from 0 to 512 [ 576.000949][T15648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 576.013965][T15648] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 576.022402][T15648] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e041e118, mo2=0002] [ 576.030740][T15648] System zones: 0-1, 15-15, 18-18, 34-34 [ 576.036665][T15648] EXT4-fs (loop8): orphan cleanup on readonly fs [ 576.045331][T15648] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 576.068889][T12430] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 576.088666][T15648] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 576.097104][T15648] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3420: bg 0: block 40: padding at end of block bitmap is not set [ 576.114633][T15648] loop8: lost filesystem error report for type 5 error -117 [ 576.114734][T15648] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 576.122121][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 576.122145][ C0] EXT4-fs (loop8): initial error at time 1778276978: ext4_validate_block_bitmap:441 [ 576.122166][ C0] EXT4-fs (loop8): last error at time 1778276978: ext4_validate_block_bitmap:441 [ 576.156539][T15648] loop8: lost filesystem error report for type 5 error -117 [ 576.158090][T15648] EXT4-fs (loop8): 1 truncate cleaned up [ 576.178585][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3425'. [ 576.193999][T15648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 576.236041][T15663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15663 comm=syz.6.3426 [ 576.290820][T15658] loop0: detected capacity change from 0 to 1764 [ 576.448972][ T7821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.550202][T15671] loop2: detected capacity change from 0 to 512 [ 576.590884][T15671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.605195][T15671] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.678917][T15674] netlink: 'syz.2.3430': attribute type 2 has an invalid length. [ 576.695094][T15674] netlink: 'syz.2.3430': attribute type 11 has an invalid length. [ 576.703420][T15674] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3430'. [ 576.713033][T15698] program syz.0.3423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.759822][T14006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.818235][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 576.818254][ T28] audit: type=1400 audit(1778276978.993:1672): avc: denied { getopt } for pid=15703 comm="syz.2.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 576.900035][ T28] audit: type=1400 audit(1778276979.057:1673): avc: denied { lock } for pid=15707 comm="syz.2.3439" path="socket:[51261]" dev="sockfs" ino=51261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 577.325866][ T28] audit: type=1326 audit(1778276979.452:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15724 comm="syz.6.3444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4eccdd9 code=0x7ffc0000 [ 577.345477][T15726] loop6: detected capacity change from 0 to 128 [ 577.359361][T15725] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 577.381393][T15725] syzkaller0: entered promiscuous mode [ 577.391464][T15725] syzkaller0: entered allmulticast mode [ 577.426357][ T28] audit: type=1326 audit(1778276979.452:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15724 comm="syz.6.3444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4eccdd9 code=0x7ffc0000 [ 577.484769][ T28] audit: type=1326 audit(1778276979.452:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15724 comm="syz.6.3444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4eccdd9 code=0x7ffc0000 [ 577.551054][ T28] audit: type=1326 audit(1778276979.452:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15724 comm="syz.6.3444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4eccdd9 code=0x7ffc0000 [ 577.630378][ T28] audit: type=1326 audit(1778276979.452:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15724 comm="syz.6.3444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc4eccdd9 code=0x7ffc0000 [ 577.684819][ T28] audit: type=1326 audit(1778276979.452:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15724 comm="syz.6.3444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7dc4eccdd9 code=0x7ffc0000 [ 577.738979][ T28] audit: type=1326 audit(1778276979.452:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15724 comm="syz.6.3444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7dc4eccb42 code=0x7ffc0000 [ 577.839220][ T28] audit: type=1326 audit(1778276979.452:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15724 comm="syz.6.3444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7dc4e8d60e code=0x7ffc0000 [ 577.933605][T15737] loop2: detected capacity change from 0 to 256 [ 577.986016][T15737] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 578.079865][ T4553] Process accounting resumed [ 578.084639][ T4553] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 578.098532][ T4553] FAT-fs (loop2): Filesystem has been set read-only [ 578.206846][T15742] loop1: detected capacity change from 0 to 1764 [ 578.826702][T15750] siw: device registration error -23 [ 579.441828][T15760] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 579.459931][T15760] syzkaller0: entered promiscuous mode [ 579.472783][T15760] syzkaller0: entered allmulticast mode [ 579.506103][T15761] loop2: detected capacity change from 0 to 512 [ 579.553659][T15761] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 579.627981][T15761] EXT4-fs (loop2): 1 truncate cleaned up [ 579.667270][T15761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.864506][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'. [ 579.887895][T14006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.960996][T15780] loop6: detected capacity change from 0 to 256 [ 580.025043][T15783] loop2: detected capacity change from 0 to 512 [ 580.061576][T15783] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.3464: Failed to acquire dquot type 0 [ 580.136427][T15783] loop2: lost filesystem error report for type 5 error -5 [ 580.138813][T15783] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.3464: corrupted inode contents [ 580.146084][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 580.146108][ C1] EXT4-fs (loop2): initial error at time 1778276982: ext4_acquire_dquot:7034 [ 580.146137][ C1] EXT4-fs (loop2): last error at time 1778276982: ext4_acquire_dquot:7034 [ 580.238941][T15783] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 580.239207][T15783] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.3464: mark_inode_dirty error [ 580.288749][T15783] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 580.288994][T15783] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.3464: corrupted inode contents [ 580.340014][T15783] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 580.340179][T15783] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.3464: mark_inode_dirty error [ 580.406524][T15783] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 580.406831][T15783] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.3464: corrupted inode contents [ 580.437367][T15783] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 580.442060][T15783] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 580.485569][T15783] loop2: lost filesystem error report for type 5 error -117 [ 580.487232][T15783] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.3464: corrupted inode contents [ 580.541328][T15783] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 580.542978][T15783] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.3464: mark_inode_dirty error [ 580.611350][T15783] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 580.612213][T15783] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 580.645548][T15783] loop2: lost filesystem error report for type 5 error -117 [ 580.647799][T15783] EXT4-fs (loop2): 1 truncate cleaned up [ 580.687817][T15783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.719892][T15783] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.772022][T14006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.855851][T15791] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 581.520851][T15801] loop2: detected capacity change from 0 to 128 [ 581.549454][T15801] EXT4-fs: Ignoring removed oldalloc option [ 581.596606][T15801] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 581.608206][T15801] System zones: 1-3, 19-19, 35-36 [ 581.635160][T15801] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 581.652053][T15801] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 581.747185][T15798] syzkaller0: entered promiscuous mode [ 581.797615][T15798] syzkaller0: entered allmulticast mode [ 582.016549][T15798] tipc: Enabled bearer , priority 0 [ 582.047292][T15797] tipc: Resetting bearer [ 582.081134][T15797] tipc: Disabling bearer [ 582.381083][ T28] kauditd_printk_skb: 210 callbacks suppressed [ 582.381172][ T28] audit: type=1400 audit(1778276984.098:1890): avc: denied { mount } for pid=15815 comm="syz.8.3473" name="/" dev="hugetlbfs" ino=51547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 582.416428][T15819] sch_fq: defrate 0 ignored. [ 582.494490][T15821] No such timeout policy "syz1" [ 582.606220][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3473'. [ 582.987621][T15827] tipc: Enabled bearer , priority 10 [ 582.995026][T15827] tipc: Enabled bearer , priority 0 [ 583.152105][ T28] audit: type=1400 audit(1778276984.807:1891): avc: denied { write } for pid=15828 comm="syz.0.3478" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 583.205322][T15831] No such timeout policy "syz1" [ 583.216045][T14006] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 583.295445][ T28] audit: type=1400 audit(1778276984.954:1892): avc: denied { unmount } for pid=7821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 584.074476][ T917] tipc: Node number set to 1569188362 [ 584.120450][T15857] loop1: detected capacity change from 0 to 1764 [ 584.863961][T15867] loop8: detected capacity change from 0 to 512 [ 584.902074][T15867] EXT4-fs: Ignoring removed bh option [ 584.936760][T15867] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.988431][T15867] EXT4-fs (loop8): Invalid log block size: 20 [ 585.178109][T15875] loop2: detected capacity change from 0 to 1024 [ 585.196207][T15875] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 586.264101][T15891] loop8: detected capacity change from 0 to 256 [ 586.332937][T15891] msdos: Unknown parameter 'fmaskG000000\ àHÛ000000000000h066of' [ 587.447545][T15908] loop2: detected capacity change from 0 to 8192 [ 587.579719][T15912] syzkaller0: entered promiscuous mode [ 587.605227][T15912] syzkaller0: entered allmulticast mode [ 588.247546][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3506'. [ 588.290171][ T49] bond0: (slave bond_slave_0): interface is now down [ 588.300636][T15920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.317332][ T49] bond0: (slave bond_slave_1): interface is now down [ 588.330985][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3506'. [ 588.463814][T15924] tipc: Enabled bearer , priority 0 [ 588.491041][T15923] tipc: Disabling bearer [ 588.500566][T13229] bond0: (slave bond_slave_0): interface is now down [ 588.507518][T13229] bond0: (slave bond_slave_1): interface is now down [ 588.522608][T13229] bond0: now running without any active interface! [ 589.302764][T15940] syzkaller0: entered promiscuous mode [ 589.324280][T15940] syzkaller0: entered allmulticast mode [ 589.363763][ T28] audit: type=1400 audit(1778276990.541:1893): avc: denied { unlink } for pid=14821 comm="syz-executor" name="file0" dev="tmpfs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 589.618876][ T28] audit: type=1400 audit(1778276990.780:1894): avc: denied { ioctl } for pid=15948 comm="syz.0.3517" path="pid:[4026532382]" dev="nsfs" ino=4026532382 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 589.745825][T15951] tipc: Enabled bearer , priority 0 [ 589.792558][T15950] tipc: Disabling bearer [ 589.964276][T15970] loop1: detected capacity change from 0 to 512 [ 590.012262][T15965] syzkaller0: entered promiscuous mode [ 590.067139][T15965] syzkaller0: entered allmulticast mode [ 590.110286][T15970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.124793][T15970] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.203945][T15970] EXT4-fs error (device loop1): __ext4_add_entry:2412: inode #12: comm syz.1.3519: Directory hole found for htree leaf block 0 [ 590.455083][ T28] audit: type=1400 audit(1778276991.315:1895): avc: denied { write } for pid=15955 comm="syz.1.3519" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 590.722433][T15965] tipc: Enabled bearer , priority 0 [ 590.885913][ T28] audit: type=1400 audit(1778276991.315:1896): avc: denied { reparent } for pid=15955 comm="syz.1.3519" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 591.038690][T15989] loop6: detected capacity change from 0 to 2048 [ 591.108649][ T28] audit: type=1400 audit(1778276992.154:1897): avc: denied { read } for pid=15990 comm="syz.0.3529" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 591.171933][T15964] tipc: Resetting bearer [ 591.178598][ T28] audit: type=1400 audit(1778276992.173:1898): avc: denied { open } for pid=15990 comm="syz.0.3529" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 591.234675][T15964] tipc: Disabling bearer [ 591.240701][T15989] loop6: p1 [ 591.247556][T15989] loop6: p1 size 5119 extends beyond EOD, truncated [ 591.340919][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 591.398913][ T4554] hid-generic 0000:0040:2000E.0002: unknown main item tag 0x0 [ 591.415891][T15998] netlink: 1348 bytes leftover after parsing attributes in process `syz.0.3531'. [ 591.427615][ T4554] hid-generic 0000:0040:2000E.0002: unknown main item tag 0x0 [ 591.450821][ T4554] hid-generic 0000:0040:2000E.0002: unknown main item tag 0x0 [ 591.462513][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 591.478461][T16000] syzkaller0: entered promiscuous mode [ 591.486933][ T4554] hid-generic 0000:0040:2000E.0002: unknown main item tag 0x0 [ 591.499462][T16000] syzkaller0: entered allmulticast mode [ 591.507169][T15998] loop0: detected capacity change from 0 to 512 [ 591.513715][ T4554] hid-generic 0000:0040:2000E.0002: unknown main item tag 0x0 [ 591.545757][ T4554] hid-generic 0000:0040:2000E.0002: unknown main item tag 0x0 [ 591.568659][T15998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.594269][ T4554] hid-generic 0000:0040:2000E.0002: unknown main item tag 0x0 [ 591.613379][ T4554] hid-generic 0000:0040:2000E.0002: unknown main item tag 0x0 [ 591.623457][T15998] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.641394][ T4554] hid-generic 0000:0040:2000E.0002: unknown main item tag 0x0 [ 591.667420][ T4554] hid-generic 0000:0040:2000E.0002: unknown main item tag 0x0 [ 591.723298][ T4554] hid-generic 0000:0040:2000E.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 591.746307][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.773641][T16008] fido_id[16008]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 591.932569][T16015] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 591.966194][T14207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.999212][ T28] audit: type=1400 audit(1778276992.975:1899): avc: denied { create } for pid=16022 comm="syz.0.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 592.015723][T16017] syzkaller0: entered promiscuous mode [ 592.024979][T16017] syzkaller0: entered allmulticast mode [ 592.032415][T16015] syzkaller0: entered promiscuous mode [ 592.046663][T16025] loop0: detected capacity change from 0 to 1024 [ 592.047326][T16015] syzkaller0: entered allmulticast mode [ 592.087912][T16025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 592.171989][T16030] loop8: detected capacity change from 0 to 128 [ 592.190368][T16030] EXT4-fs: Ignoring removed oldalloc option [ 592.259861][ T28] audit: type=1400 audit(1778276993.215:1900): avc: denied { relabelfrom } for pid=16016 comm="syz.2.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 592.324957][T16030] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 592.344336][T16030] System zones: 1-3, 19-19, 35-36 [ 592.369055][T16030] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 592.386926][T16030] ext4 filesystem being mounted at /458/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 592.490476][T16025] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 592.549812][ T28] audit: type=1400 audit(1778276993.233:1901): avc: denied { relabelto } for pid=16016 comm="syz.2.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 592.570593][T16025] System zones: 0-1, 3-36 [ 592.615861][T16037] syzkaller0: entered promiscuous mode [ 592.623538][T16025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.647498][T16037] syzkaller0: entered allmulticast mode [ 592.728066][T16036] tipc: Enabled bearer , priority 0 [ 593.211856][T16035] tipc: Resetting bearer [ 593.234246][T16035] tipc: Disabling bearer [ 593.947695][T14207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.620777][T16041] loop6: detected capacity change from 0 to 1024 [ 595.056804][T16049] loop2: detected capacity change from 0 to 1024 [ 595.334027][ T917] tipc: Node number set to 3688838324 [ 595.390351][T16049] EXT4-fs: Ignoring removed orlov option [ 595.452516][T16041] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 595.464807][T16041] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 595.476617][T16041] EXT4-fs (loop6): invalid journal inode [ 595.482841][T16041] EXT4-fs (loop6): can't get journal size [ 595.960883][T16053] loop0: detected capacity change from 0 to 1024 [ 595.977478][T16041] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 595.978145][T16041] EXT4-fs: failed to create workqueue [ 595.994159][T16041] EXT4-fs (loop6): mount failed [ 596.024426][T16049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.043810][T16053] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 596.055786][T16053] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 596.081672][T16053] EXT4-fs (loop0): invalid journal inode [ 596.088387][T16053] EXT4-fs (loop0): can't get journal size [ 596.172298][T16053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 596.335757][ T28] audit: type=1400 audit(1778276996.968:1902): avc: denied { setattr } for pid=16048 comm="syz.2.3546" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 596.533021][T16060] hub 8-0:1.0: USB hub found [ 596.537946][T16060] hub 8-0:1.0: 8 ports detected [ 596.563195][ T7821] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 596.645881][T14006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.712885][T16066] loop6: detected capacity change from 0 to 512 [ 596.724186][T16066] EXT4-fs: Ignoring removed bh option [ 596.737674][T16066] EXT4-fs: Ignoring removed mblk_io_submit option [ 596.748437][T16066] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 596.782633][T16066] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 596.796845][T16066] EXT4-fs (loop6): orphan cleanup on readonly fs [ 596.805319][T16066] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4 [ 596.817170][T16066] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 596.828444][T16066] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3552: Failed to acquire dquot type 1 [ 596.841446][T16066] loop6: lost filesystem error report for type 5 error -5 [ 596.842716][T16066] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3552: Invalid block bitmap block 0 in block_group 0 [ 596.850981][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 596.851255][ C1] EXT4-fs (loop6): last error at time 1778276997: ext4_acquire_dquot:7034 [ 596.882485][T16066] loop6: lost filesystem error report for type 5 error -117 [ 596.886157][T16066] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3552: Invalid block bitmap block 0 in block_group 0 [ 596.911262][T16066] loop6: lost filesystem error report for type 5 error -117 [ 596.913895][T16066] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3552: Invalid block bitmap block 0 in block_group 0 [ 596.937438][T16066] loop6: lost filesystem error report for type 5 error -117 [ 596.940045][T16066] Quota error (device loop6): write_blk: dquota write failed [ 596.956736][T16066] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 596.967823][T16066] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3552: Failed to acquire dquot type 1 [ 596.980143][T16066] loop6: lost filesystem error report for type 5 error -28 [ 596.982380][T16066] Quota error (device loop6): write_blk: dquota write failed [ 596.999096][T16066] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 597.010505][T16066] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3552: Failed to acquire dquot type 1 [ 597.022477][T16066] loop6: lost filesystem error report for type 5 error -28 [ 597.023926][T16066] EXT4-fs (loop6): 1 orphan inode deleted [ 597.556821][T16069] loop8: detected capacity change from 0 to 512 [ 597.620217][T16060] netlink: 'syz.1.3548': attribute type 36 has an invalid length. [ 597.631191][T16060] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 597.641134][T16060] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 597.674338][T16069] EXT4-fs: Ignoring removed nobh option [ 597.686693][T14207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.714933][T16066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 597.828920][T16069] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 597.867554][T16069] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3547: invalid indirect mapped block 256 (level 1) [ 597.913702][T16072] sit0: entered promiscuous mode [ 597.956812][T16072] netlink: 'syz.2.3551': attribute type 1 has an invalid length. [ 597.984390][T16069] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 597.989509][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 598.005179][ C1] EXT4-fs (loop8): initial error at time 1778276998: ext4_free_branches:1023: inode 13 [ 598.014872][ C1] EXT4-fs (loop8): last error at time 1778276998: ext4_free_branches:1023: inode 13 [ 598.029616][T16069] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3547: invalid indirect mapped block 2683928664 (level 1) [ 598.046773][T16066] syz.6.3552 (16066) used greatest stack depth: 7552 bytes left [ 598.061977][T16072] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3551'. [ 598.086085][T14821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.104558][T16069] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 598.105290][T16069] EXT4-fs (loop8): 1 truncate cleaned up [ 598.148533][T16069] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.168850][T16069] FAULT_INJECTION: forcing a failure. [ 598.168850][T16069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.187138][T16069] CPU: 0 UID: 0 PID: 16069 Comm: syz.8.3547 Tainted: G W syzkaller #0 PREEMPT(full) [ 598.187178][T16069] Tainted: [W]=WARN [ 598.187232][T16069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.187250][T16069] Call Trace: [ 598.187260][T16069] [ 598.187270][T16069] __dump_stack+0x1d/0x30 [ 598.187303][T16069] dump_stack_lvl+0x95/0xd0 [ 598.187388][T16069] dump_stack+0x15/0x1b [ 598.187413][T16069] should_fail_ex+0x263/0x280 [ 598.187541][T16069] should_fail+0xb/0x20 [ 598.187568][T16069] should_fail_usercopy+0x1a/0x20 [ 598.187661][T16069] _copy_from_iter+0xcf/0xea0 [ 598.187692][T16069] ? __alloc_skb+0x4f6/0x690 [ 598.187711][T16069] ? __alloc_skb+0x200/0x690 [ 598.187755][T16069] netlink_sendmsg+0x4ae/0x6f0 [ 598.187809][T16069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.187847][T16069] ____sys_sendmsg+0x563/0x5b0 [ 598.187932][T16069] ___sys_sendmsg+0x195/0x1e0 [ 598.188044][T16069] __x64_sys_sendmsg+0xd4/0x160 [ 598.188074][T16069] x64_sys_call+0x194c/0x3020 [ 598.188110][T16069] do_syscall_64+0x12c/0x3b0 [ 598.188216][T16069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.188248][T16069] RIP: 0033:0x7f080c1bcdd9 [ 598.188271][T16069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.188291][T16069] RSP: 002b:00007f080ac0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.188379][T16069] RAX: ffffffffffffffda RBX: 00007f080c435fa0 RCX: 00007f080c1bcdd9 [ 598.188398][T16069] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 598.188415][T16069] RBP: 00007f080ac0f090 R08: 0000000000000000 R09: 0000000000000000 [ 598.188428][T16069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.188441][T16069] R13: 00007f080c436038 R14: 00007f080c435fa0 R15: 00007ffc2a84a948 [ 598.188520][T16069] [ 598.417739][ T7821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.454287][T16075] syzkaller0: entered promiscuous mode [ 598.482770][T16075] syzkaller0: entered allmulticast mode [ 598.507297][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3554'. [ 598.534750][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3554'. [ 598.556328][T16088] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 598.573231][T16088] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 598.581598][T16088] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3 [ 598.614376][T16089] syzkaller0: entered promiscuous mode [ 598.624696][T16093] No such timeout policy "syz1" [ 598.629782][T16089] syzkaller0: entered allmulticast mode [ 598.669151][T16089] tipc: Enabled bearer , priority 0 [ 598.678148][T16079] loop1: detected capacity change from 0 to 512 [ 598.678747][T16087] tipc: Resetting bearer [ 598.699083][T16079] EXT4-fs: Ignoring removed mblk_io_submit option [ 598.722248][T16079] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 598.756130][T16079] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 598.769344][T16079] EXT4-fs (loop1): orphan cleanup on readonly fs [ 598.777427][T16079] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.3556: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1) [ 598.796968][T16079] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 598.799498][T16079] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.3556: Bad quota inode: 4, type: 1 [ 598.808946][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 598.809240][ C1] EXT4-fs (loop1): last error at time 1778276999: ext4_ext_check_inode:521: inode 4 [ 598.844265][T16079] loop1: lost filesystem error report for type 5 error -117 [ 598.859573][T16079] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 598.885536][T16079] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 598.894117][T16087] tipc: Disabling bearer [ 598.950542][T16079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 598.983906][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 599.038152][T16097] loop6: detected capacity change from 0 to 512 [ 599.064929][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.126946][T16097] EXT4-fs (loop6): 1 orphan inode deleted [ 599.141341][T16097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.158612][T16097] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.184601][ T28] audit: type=1400 audit(1778276999.605:1903): avc: denied { bind } for pid=16109 comm="syz.1.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 599.187754][T13229] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 599.238566][T13229] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:13: Failed to release dquot type 1 [ 599.451219][T16115] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.458562][T16115] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.506122][T16115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.529189][T16115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.579669][T13229] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.597632][T13229] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.616469][T13229] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.640167][T13229] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.667695][T14821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.759588][T16125] syzkaller0: entered promiscuous mode [ 599.768266][T16125] syzkaller0: entered allmulticast mode [ 599.775580][T16125] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3571'. [ 599.784936][T16125] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3571'. [ 599.874617][T16133] loop0: detected capacity change from 0 to 1024 [ 599.894687][T16133] EXT4-fs: quotafile must be on filesystem root [ 600.072895][T16143] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3577'. [ 600.143081][T16144] loop6: detected capacity change from 0 to 1764 [ 600.165169][T16143] loop8: detected capacity change from 0 to 128 [ 600.520159][T16163] syzkaller0: entered promiscuous mode [ 600.531742][T16163] syzkaller0: entered allmulticast mode [ 600.549051][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3584'. [ 600.574495][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3584'. [ 600.728103][ T28] audit: type=1400 audit(1778277001.025:1904): avc: denied { mount } for pid=16168 comm="syz.0.3587" name="/" dev="configfs" ino=2072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 600.763667][T16171] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3588'. [ 600.808592][T16173] loop8: detected capacity change from 0 to 512 [ 600.859001][T16173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.889285][T16173] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.910510][T16179] loop2: detected capacity change from 0 to 128 [ 600.955324][T16179] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 600.993482][T16179] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.207174][ T7821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.287887][T16192] syzkaller0: entered promiscuous mode [ 601.304948][T16192] syzkaller0: entered allmulticast mode [ 601.340530][T16192] tipc: Enabled bearer , priority 0 [ 601.379252][T16190] tipc: Resetting bearer [ 601.402283][T16190] tipc: Disabling bearer [ 601.544716][T14006] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 601.662065][T16204] syzkaller0: entered promiscuous mode [ 601.680008][T16204] syzkaller0: entered allmulticast mode [ 601.938139][T16208] loop2: detected capacity change from 0 to 4096 [ 601.981945][T16208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.093353][T14006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.195005][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 602.195023][ T28] audit: type=1400 audit(1778277002.372:1914): avc: denied { create } for pid=16220 comm="syz.2.3603" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 602.269859][T16223] syzkaller0: entered promiscuous mode [ 602.293631][T16223] syzkaller0: entered allmulticast mode [ 602.318193][T16227] syzkaller0: entered promiscuous mode [ 602.341421][T16227] syzkaller0: entered allmulticast mode [ 602.521773][T16232] tipc: Enabled bearer , priority 0 [ 602.529468][T16226] tipc: Resetting bearer [ 602.536795][T16226] tipc: Disabling bearer [ 602.577903][T16234] loop8: detected capacity change from 0 to 256 [ 602.733774][T16236] syzkaller0: entered promiscuous mode [ 602.758451][T16236] syzkaller0: entered allmulticast mode [ 604.670359][T16254] loop8: detected capacity change from 0 to 1024 [ 605.615474][T16254] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 605.628951][T16254] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 605.653918][T16254] EXT4-fs (loop8): invalid journal inode [ 605.661231][T16254] EXT4-fs (loop8): can't get journal size [ 606.485927][T16254] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 606.718359][ T28] audit: type=1400 audit(1778277006.540:1915): avc: denied { write } for pid=16259 comm="syz.2.3618" path="socket:[53222]" dev="sockfs" ino=53222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 606.780670][T16247] loop0: detected capacity change from 0 to 512 [ 606.805232][T16247] EXT4-fs: Ignoring removed nomblk_io_submit option [ 606.826367][ T7821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.848547][T16247] EXT4-fs: journaled quota format not specified [ 606.856262][ T28] audit: type=1400 audit(1778277006.678:1916): avc: denied { unmount } for pid=14006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 606.892555][T16247] __nla_validate_parse: 5 callbacks suppressed [ 606.892571][T16247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3614'. [ 606.935119][T16269] syzkaller0: entered promiscuous mode [ 606.955539][T16269] syzkaller0: entered allmulticast mode [ 607.286793][T16274] syzkaller0: entered promiscuous mode [ 607.302021][T16274] syzkaller0: entered allmulticast mode [ 607.333151][T16276] loop8: detected capacity change from 0 to 128 [ 607.381529][T16281] binfmt_misc: register: failed to install interpreter file ./file1 [ 607.392433][T16274] tipc: Enabled bearer , priority 0 [ 607.440345][T16283] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 607.458233][T16273] tipc: Resetting bearer [ 607.466504][T16273] tipc: Disabling bearer [ 607.492927][T16276] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 607.517517][T16276] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.626598][T16288] syzkaller0: entered promiscuous mode [ 607.637415][T16288] syzkaller0: entered allmulticast mode [ 608.176841][T16306] loop0: detected capacity change from 0 to 1024 [ 608.218474][T16306] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 608.254326][T16306] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 608.431879][T16306] EXT4-fs (loop0): invalid journal inode [ 608.438731][T16306] EXT4-fs (loop0): can't get journal size [ 608.469349][T16306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 608.708186][T16312] siw: device registration error -23 [ 609.637418][T14207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.684051][T16316] syzkaller0: entered promiscuous mode [ 609.704370][T16316] syzkaller0: entered allmulticast mode [ 609.739061][ T7821] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 609.779669][T16320] loop8: detected capacity change from 0 to 512 [ 609.898483][T16323] syzkaller0: entered promiscuous mode [ 609.916075][T16323] syzkaller0: entered allmulticast mode [ 609.935624][T16323] tipc: Enabled bearer , priority 0 [ 609.954692][T16322] tipc: Resetting bearer [ 609.970399][T16322] tipc: Disabling bearer [ 612.271522][T16356] loop1: detected capacity change from 0 to 1024 [ 612.318360][T16356] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 612.330511][T16356] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 612.355248][T16356] EXT4-fs (loop1): invalid journal inode [ 612.362077][T16356] EXT4-fs (loop1): can't get journal size [ 612.397646][T16356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 612.539184][T16359] syzkaller0: entered promiscuous mode [ 612.614700][T16359] syzkaller0: entered allmulticast mode [ 612.744240][T16365] syzkaller0: entered promiscuous mode [ 612.749991][T16365] syzkaller0: entered allmulticast mode [ 612.760955][T16365] tipc: Enabled bearer , priority 0 [ 612.768190][T16364] tipc: Resetting bearer [ 612.868046][T16364] tipc: Disabling bearer [ 612.969351][T16367] -1: renamed from syzkaller0 [ 613.790148][T16381] loop0: detected capacity change from 0 to 1764 [ 613.832035][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.183069][T16390] loop8: detected capacity change from 0 to 128 [ 614.226149][T16390] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 614.264075][T16390] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 614.771447][ T7821] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 614.843900][T16416] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3663'. [ 614.871669][T16421] loop8: detected capacity change from 0 to 1024 [ 614.896374][T16421] EXT4-fs: Ignoring removed orlov option [ 614.931754][T16427] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 614.950621][T16421] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.977602][T16427] syzkaller0: entered promiscuous mode [ 615.013227][T16427] syzkaller0: entered allmulticast mode [ 615.026130][ T28] audit: type=1400 audit(1778277014.204:1917): avc: denied { write } for pid=16411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.054030][T16440] syzkaller0: entered promiscuous mode [ 615.073039][T16440] syzkaller0: entered allmulticast mode [ 615.082235][T16427] tipc: Enabling of bearer rejected, failed to enable media [ 615.094614][ T28] audit: type=1400 audit(1778277014.268:1918): avc: denied { write } for pid=16443 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.132943][T16421] syzkaller0: entered promiscuous mode [ 615.139988][T16421] syzkaller0: entered allmulticast mode [ 615.306153][T16454] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 615.330292][T16454] syzkaller0: entered promiscuous mode [ 615.336676][T16454] syzkaller0: entered allmulticast mode [ 615.355662][T16454] tipc: Enabling of bearer rejected, failed to enable media [ 615.403387][ T28] audit: type=1400 audit(1778277014.554:1919): avc: denied { write } for pid=16451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.471436][ T28] audit: type=1400 audit(1778277014.609:1920): avc: denied { write } for pid=16470 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.824029][ T7821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.488309][T16494] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3678'. [ 616.577618][T16499] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3677'. [ 617.016749][T16504] loop8: detected capacity change from 0 to 128 [ 617.176438][T16509] loop6: detected capacity change from 0 to 1024 [ 617.230624][T16510] loop1: detected capacity change from 0 to 512 [ 617.255703][T16509] EXT4-fs: Mount option(s) incompatible with ext3 [ 617.279697][T16510] EXT4-fs (loop1): 1 orphan inode deleted [ 617.292952][T16510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.307112][ T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 617.317636][T16510] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.394353][T16509] loop6: detected capacity change from 0 to 512 [ 617.405428][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 617.444411][T16509] EXT4-fs: test_dummy_encryption option not supported [ 617.544020][T16514] syzkaller0: entered promiscuous mode [ 617.574046][T16514] syzkaller0: entered allmulticast mode [ 617.819726][ T28] audit: type=1400 audit(1778277016.776:1921): avc: denied { create } for pid=16517 comm="syz.6.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 617.892275][ T28] audit: type=1400 audit(1778277016.823:1922): avc: denied { listen } for pid=16517 comm="syz.6.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 618.006955][ T28] audit: type=1400 audit(1778277016.823:1923): avc: denied { ioctl } for pid=16517 comm="syz.6.3683" path="socket:[54776]" dev="sockfs" ino=54776 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 618.119603][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.231984][T16523] loop2: detected capacity change from 0 to 512 [ 618.255033][T16523] EXT4-fs: test_dummy_encryption option not supported [ 618.301148][T16523] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 618.334058][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 618.879936][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3691'. [ 618.931127][T16540] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3691'. [ 619.139213][T16545] rdma_rxe: rxe_newlink: failed to add veth1_virt_wifi [ 619.159894][T16545] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3692'. [ 619.169252][T16545] unsupported nlmsg_type 40 [ 619.284215][ T28] audit: type=1400 audit(1778277018.132:1924): avc: denied { append } for pid=16550 comm="syz.8.3695" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 619.946451][T16558] loop0: detected capacity change from 0 to 1024 [ 619.987122][T16558] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 620.054204][T16558] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 620.231522][T16561] loop6: detected capacity change from 0 to 1764 [ 620.239799][T16558] EXT4-fs (loop0): invalid journal inode [ 620.283997][T16558] EXT4-fs (loop0): can't get journal size [ 620.353833][T16551] loop8: detected capacity change from 0 to 128 [ 620.637332][T16558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 620.729623][T16531] Bluetooth: hci0: command 0x1003 tx timeout [ 620.743034][ T4587] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 621.163084][T14207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.192537][T16571] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3699'. [ 621.237686][T16569] No such timeout policy "syz1" [ 621.280802][ T28] audit: type=1400 audit(1778277019.967:1925): avc: denied { sys_admin } for pid=16572 comm="syz.0.3701" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 621.350276][T16578] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 621.652978][ T28] audit: type=1400 audit(1778277020.318:1926): avc: denied { create } for pid=16579 comm="syz.0.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 621.697137][ T28] audit: type=1400 audit(1778277020.345:1927): avc: denied { bind } for pid=16579 comm="syz.0.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 621.837043][T16591] loop2: detected capacity change from 0 to 512 [ 621.849439][T16591] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #11: comm syz.2.3707: unexpected EA_INODE flag [ 621.865818][T16591] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 621.866628][T16591] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3707: couldn't read orphan inode 11 (err -117) [ 621.875903][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 621.875929][ C1] EXT4-fs (loop2): initial error at time 1778277020: ext4_orphan_get:1397: inode 11 [ 621.875961][ C1] EXT4-fs (loop2): last error at time 1778277020: ext4_orphan_get:1397: inode 11 [ 621.918783][T16591] loop2: lost filesystem error report for type 5 error -117 [ 621.919645][T16591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.008428][T16594] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3707'. [ 622.018541][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3707'. [ 622.201555][T16598] syzkaller0: entered promiscuous mode [ 622.212716][T16598] syzkaller0: entered allmulticast mode [ 622.221415][T16598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3709'. [ 622.231643][T14006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.240753][T16598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3709'. [ 622.261836][T16601] loop8: detected capacity change from 0 to 512 [ 622.445021][T16618] No such timeout policy "syz1" [ 622.637552][T16621] loop8: detected capacity change from 0 to 1024 [ 622.696493][T16621] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 622.708287][T16621] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 622.730388][T16621] EXT4-fs (loop8): invalid journal inode [ 622.738180][T16621] EXT4-fs (loop8): can't get journal size [ 622.769985][T16621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 623.626616][T16642] FAULT_INJECTION: forcing a failure. [ 623.626616][T16642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.648129][T16640] loop1: detected capacity change from 0 to 2048 [ 623.695091][T16642] CPU: 0 UID: 0 PID: 16642 Comm: syz.6.3722 Tainted: G W syzkaller #0 PREEMPT(full) [ 623.695127][T16642] Tainted: [W]=WARN [ 623.695136][T16642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.695153][T16642] Call Trace: [ 623.695161][T16642] [ 623.695169][T16642] __dump_stack+0x1d/0x30 [ 623.695193][T16642] dump_stack_lvl+0x95/0xd0 [ 623.695274][T16642] dump_stack+0x15/0x1b [ 623.695298][T16642] should_fail_ex+0x263/0x280 [ 623.695334][T16642] should_fail+0xb/0x20 [ 623.695368][T16642] should_fail_usercopy+0x1a/0x20 [ 623.695399][T16642] _copy_to_user+0x20/0xa0 [ 623.695463][T16642] simple_read_from_buffer+0xb5/0x130 [ 623.695506][T16642] proc_fail_nth_read+0x10e/0x150 [ 623.695544][T16642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 623.695595][T16642] vfs_read+0x1ab/0x7f0 [ 623.695623][T16642] ? __rcu_read_unlock+0x4e/0x70 [ 623.695646][T16642] ? __fget_files+0x184/0x1c0 [ 623.695671][T16642] ? mutex_lock+0x57/0x90 [ 623.695844][T16642] ksys_read+0xdc/0x1a0 [ 623.695877][T16642] __x64_sys_read+0x40/0x50 [ 623.695908][T16642] x64_sys_call+0x2886/0x3020 [ 623.695935][T16642] do_syscall_64+0x12c/0x3b0 [ 623.696024][T16642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.696046][T16642] RIP: 0033:0x7f7dc4e8d60e [ 623.696062][T16642] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 623.696082][T16642] RSP: 002b:00007f7dc391efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 623.696161][T16642] RAX: ffffffffffffffda RBX: 00007f7dc391f6c0 RCX: 00007f7dc4e8d60e [ 623.696176][T16642] RDX: 000000000000000f RSI: 00007f7dc391f0a0 RDI: 0000000000000004 [ 623.696192][T16642] RBP: 00007f7dc391f090 R08: 0000000000000000 R09: 0000000000000000 [ 623.696213][T16642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.696298][T16642] R13: 00007f7dc5146038 R14: 00007f7dc5145fa0 R15: 00007ffc9ffc15e8 [ 623.696318][T16642] [ 624.215600][T16653] syzkaller0: entered promiscuous mode [ 624.246532][T16653] syzkaller0: entered allmulticast mode [ 624.263425][T16653] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3725'. [ 624.283686][T16653] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3725'. [ 624.295411][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3726'. [ 624.454980][T16640] Alternate GPT is invalid, using primary GPT. [ 624.463215][T16640] loop1: p2 p3 p7 [ 624.495972][ T2987] Alternate GPT is invalid, using primary GPT. [ 624.496377][ T2987] loop1: p2 p3 p7 [ 624.572143][ T4434] udevd[4434]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 624.577319][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 624.596515][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 624.613315][ T7821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.616969][T16666] No such timeout policy "syz1" [ 624.650087][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 624.651646][ T4434] udevd[4434]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 624.673620][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 624.718400][T16668] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 624.999767][T16674] No such timeout policy "syz1" [ 625.080586][T16682] syzkaller0: entered promiscuous mode [ 625.086438][T16682] syzkaller0: entered allmulticast mode [ 625.093518][T16682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3738'. [ 625.103402][T16682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3738'. [ 625.249243][T16684] loop6: detected capacity change from 0 to 128 [ 625.267097][T16684] EXT4-fs: Ignoring removed oldalloc option [ 625.372025][T16684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 625.408785][T16684] System zones: 1-3, 19-19, 35-36 [ 625.529971][T16684] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 625.563219][T16684] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 625.821391][ T28] audit: type=1400 audit(1778277024.163:1928): avc: denied { create } for pid=16688 comm="syz.0.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 626.135011][ T28] audit: type=1400 audit(1778277024.191:1929): avc: denied { bind } for pid=16688 comm="syz.0.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 627.409641][T16707] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 627.444981][T16698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3743'. [ 627.459607][T14821] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 627.613367][T16715] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3748'. [ 627.649983][T16698] binfmt_misc: register: failed to install interpreter file ./file1 [ 627.794218][ T28] audit: type=1400 audit(1778277025.980:1930): avc: denied { write } for pid=16706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.449499][ T28] audit: type=1400 audit(1778277026.579:1931): avc: denied { write } for pid=16730 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.004681][T16729] loop8: detected capacity change from 0 to 128 [ 629.087002][T16729] EXT4-fs: Ignoring removed oldalloc option [ 629.190358][T16729] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 629.204952][T16729] System zones: 1-3, 19-19, 35-36 [ 629.226071][T16729] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 629.246031][T16729] ext4 filesystem being mounted at /512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 629.659652][T16747] loop6: detected capacity change from 0 to 1024 [ 629.691060][T16737] siw: device registration error -23 [ 629.705846][T16747] EXT4-fs: Ignoring removed orlov option [ 629.768045][T16747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.027995][T16747] syzkaller0: entered promiscuous mode [ 630.033684][T16747] syzkaller0: entered allmulticast mode [ 630.077136][T16763] loop1: detected capacity change from 0 to 512 [ 630.165432][T16763] EXT4-fs (loop1): 1 orphan inode deleted [ 630.174521][T16763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.189165][ T68] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 630.200393][T16763] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.216267][ T68] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 630.297564][T14821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.353947][ T28] audit: type=1400 audit(1778277028.341:1932): avc: denied { name_bind } for pid=16766 comm="syz.2.3759" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 630.376754][T16767] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3759'. [ 630.740496][ T7821] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 631.059019][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.169230][T16774] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 631.198517][ T28] audit: type=1400 audit(1778277029.125:1933): avc: denied { map } for pid=16775 comm="syz.6.3758" path="socket:[53794]" dev="sockfs" ino=53794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 631.313264][T16782] loop2: detected capacity change from 0 to 128 [ 631.561190][T16785] loop8: detected capacity change from 0 to 128 [ 631.577456][ T28] audit: type=1326 audit(1778277029.475:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.2.3760" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b212ecdd9 code=0x7ffc0000 [ 631.624755][T16785] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 631.665150][T16785] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.691772][ T28] audit: type=1326 audit(1778277029.475:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.2.3760" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b212ecdd9 code=0x7ffc0000 [ 631.896634][ T28] audit: type=1326 audit(1778277029.475:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.2.3760" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b212ecdd9 code=0x7ffc0000 [ 632.743899][ T28] audit: type=1326 audit(1778277029.475:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.2.3760" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b212ecdd9 code=0x7ffc0000 [ 632.769822][ T28] audit: type=1326 audit(1778277029.475:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16768 comm="syz.2.3760" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b212ecdd9 code=0x7ffc0000 [ 633.140426][T16817] siw: device registration error -23 [ 633.145956][T16804] 9p: Bad value for 'rfdno' [ 633.221119][ T7821] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 634.228499][T16837] No such timeout policy "syz1" [ 635.588552][T16854] loop2: detected capacity change from 0 to 128 [ 635.762418][T16854] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 635.826375][T16854] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.154253][T16867] loop8: detected capacity change from 0 to 128 [ 637.335010][T16867] EXT4-fs: Ignoring removed oldalloc option [ 637.487661][T16867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 637.497982][T16867] System zones: 1-3, 19-19, 35-36 [ 637.518920][T16867] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 637.535341][T16867] ext4 filesystem being mounted at /517/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 637.666255][T16863] siw: device registration error -23 [ 637.759780][T16875] loop6: detected capacity change from 0 to 512 [ 637.774779][T16875] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 637.786398][T16875] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 637.805010][T16875] EXT4-fs (loop6): orphan cleanup on readonly fs [ 637.821099][T16875] __quota_error: 27 callbacks suppressed [ 637.821172][T16875] Quota error (device loop6): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 637.854722][T16875] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 637.873419][T14006] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 637.884056][T16875] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 637.891219][T16875] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3787: bg 0: block 15: invalid block bitmap [ 637.904220][T16875] loop6: lost filesystem error report for type 5 error -117 [ 637.904458][T16875] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 637.911851][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 637.911867][ C0] EXT4-fs (loop6): initial error at time 1778277035: ext4_validate_block_bitmap:432 [ 637.911887][ C0] EXT4-fs (loop6): last error at time 1778277035: ext4_validate_block_bitmap:432 [ 637.949414][T16875] loop6: lost filesystem error report for type 5 error -117 [ 637.949706][T16875] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #16: comm syz.6.3787: data will be lost [ 637.973253][T16875] EXT4-fs (loop6): 1 truncate cleaned up [ 637.979550][T16875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 637.993862][T16875] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 638.059513][T14821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.429143][ T28] audit: type=1400 audit(1778277035.792:1966): avc: denied { bind } for pid=16883 comm="syz.6.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 638.798474][T16907] loop1: detected capacity change from 0 to 512 [ 638.810178][T16907] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 638.829390][T16907] EXT4-fs (loop1): 1 truncate cleaned up [ 638.835794][T16907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.849546][T16907] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.921920][ T7821] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 638.955471][T16910] loop8: detected capacity change from 0 to 1024 [ 638.965619][T16910] EXT4-fs: Ignoring removed orlov option [ 638.992889][T16910] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.023319][T16913] siw: device registration error -23 [ 639.045536][T16910] syzkaller0: entered promiscuous mode [ 639.051286][T16910] syzkaller0: entered allmulticast mode [ 639.197337][ T7821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.251179][T16934] syzkaller0: entered promiscuous mode [ 640.268819][T16934] syzkaller0: entered allmulticast mode [ 640.339803][T16940] team0: Port device syz_tun added [ 640.360861][T16940] team0: Port device syz_tun removed [ 640.372833][T16940] bridge_slave_0: left allmulticast mode [ 640.387001][T16940] bridge_slave_0: left promiscuous mode [ 640.402044][T16940] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.420609][T16940] bridge_slave_1: left allmulticast mode [ 640.433133][T16940] bridge_slave_1: left promiscuous mode [ 640.445020][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.462129][T16940] bond0: (slave bond_slave_0): Releasing backup interface [ 640.491812][T16940] bond0: (slave bond_slave_1): Releasing backup interface [ 640.531151][T16940] team0: Port device team_slave_0 removed [ 640.550065][T16940] team0: Port device team_slave_1 removed [ 640.563525][T16945] Timeout policy `syz1' can only be used by L3 protocol number 25 [ 640.576299][T16940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.599355][T16940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.644220][T16940] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 640.878613][T16950] loop1: detected capacity change from 0 to 1024 [ 640.922710][T16950] EXT4-fs: Ignoring removed orlov option [ 640.967136][T16950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.210286][T16963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3815'. [ 641.241216][T16950] syzkaller0: entered promiscuous mode [ 641.255201][T16950] syzkaller0: entered allmulticast mode [ 641.329084][T16969] ip6t_REJECT: ECHOREPLY is not supported [ 641.492606][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.575603][ T28] audit: type=1400 audit(1778277039.610:1967): avc: denied { getopt } for pid=16988 comm="syz.0.3824" lport=42195 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 642.690938][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3824'. [ 642.717242][ T28] audit: type=1400 audit(1778277039.721:1968): avc: denied { getattr } for pid=16988 comm="syz.0.3824" lport=42195 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 642.938709][T17000] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 643.381670][T17000] syzkaller0: entered promiscuous mode [ 643.422587][T17010] loop1: detected capacity change from 0 to 128 [ 643.435027][T17000] syzkaller0: entered allmulticast mode [ 643.498771][T17010] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 643.562931][T17010] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.252533][ T28] audit: type=1400 audit(1778277042.082:1969): avc: denied { unmount } for pid=17011 comm="syz.6.3827" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 645.930545][T17047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17047 comm=syz.0.3835 [ 645.968729][T12430] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 646.137069][T17059] siw: device registration error -23 [ 646.183915][ T28] audit: type=1400 audit(1778277042.939:1970): avc: denied { connect } for pid=17052 comm="syz.8.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 646.240176][ T28] audit: type=1400 audit(1778277042.939:1971): avc: denied { write } for pid=17052 comm="syz.8.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 646.752921][T17069] loop2: detected capacity change from 0 to 512 [ 646.979719][T17069] EXT4-fs (loop2): 1 orphan inode deleted [ 647.009564][T17069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.034028][T17069] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.442665][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 647.484924][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 647.561064][T14006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.471205][T17092] FAULT_INJECTION: forcing a failure. [ 648.471205][T17092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.581380][T17092] CPU: 1 UID: 0 PID: 17092 Comm: syz.1.3848 Tainted: G W syzkaller #0 PREEMPT(full) [ 648.581423][T17092] Tainted: [W]=WARN [ 648.581481][T17092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 648.581498][T17092] Call Trace: [ 648.581508][T17092] [ 648.581519][T17092] __dump_stack+0x1d/0x30 [ 648.581556][T17092] dump_stack_lvl+0x95/0xd0 [ 648.581714][T17092] dump_stack+0x15/0x1b [ 648.581733][T17092] should_fail_ex+0x263/0x280 [ 648.581764][T17092] should_fail+0xb/0x20 [ 648.581905][T17092] should_fail_usercopy+0x1a/0x20 [ 648.581936][T17092] _copy_to_user+0x20/0xa0 [ 648.581973][T17092] map_get_next_key+0x277/0x330 [ 648.582070][T17092] __sys_bpf+0x64d/0x7e0 [ 648.582109][T17092] __x64_sys_bpf+0x41/0x50 [ 648.582132][T17092] x64_sys_call+0x10cb/0x3020 [ 648.582197][T17092] do_syscall_64+0x12c/0x3b0 [ 648.582237][T17092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.582266][T17092] RIP: 0033:0x7f90b28acdd9 [ 648.582287][T17092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.582346][T17092] RSP: 002b:00007f90b1307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 648.582366][T17092] RAX: ffffffffffffffda RBX: 00007f90b2b25fa0 RCX: 00007f90b28acdd9 [ 648.582434][T17092] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 648.582452][T17092] RBP: 00007f90b1307090 R08: 0000000000000000 R09: 0000000000000000 [ 648.582469][T17092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.582540][T17092] R13: 00007f90b2b26038 R14: 00007f90b2b25fa0 R15: 00007fffd5643a88 [ 648.582567][T17092] [ 649.199854][T17099] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3850'. [ 650.220670][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3856'. [ 650.507915][T17122] loop1: detected capacity change from 0 to 1024 [ 650.532592][T17122] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 650.544637][T17122] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 650.576988][T17122] EXT4-fs (loop1): invalid journal inode [ 650.584253][T17122] EXT4-fs (loop1): can't get journal size [ 650.627307][T17122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 651.393290][ T28] audit: type=1400 audit(1778277047.744:1972): avc: denied { remount } for pid=17136 comm="syz.8.3861" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 651.520305][ T28] audit: type=1400 audit(1778277047.864:1973): avc: denied { nlmsg_write } for pid=17138 comm="syz.8.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 651.860468][T17143] No such timeout policy "syz1" [ 652.249104][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.698037][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3874'. [ 652.737153][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3874'. [ 654.087266][T17197] loop1: detected capacity change from 0 to 1024 [ 654.164847][T17197] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 654.176733][T17197] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 654.198064][T17197] EXT4-fs (loop1): invalid journal inode [ 654.205338][T17197] EXT4-fs (loop1): can't get journal size [ 654.234181][T17197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 655.433087][ T28] audit: type=1400 audit(1778277051.460:1974): avc: denied { connect } for pid=17201 comm="syz.0.3881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 655.511159][ T28] audit: type=1400 audit(1778277051.460:1975): avc: denied { write } for pid=17201 comm="syz.0.3881" path="socket:[55939]" dev="sockfs" ino=55939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 656.235959][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.790866][T17241] loop1: detected capacity change from 0 to 764 [ 656.847546][T17241] Symlink component flag not implemented [ 656.853678][T17241] Symlink component flag not implemented [ 660.843942][T17282] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3900'. [ 666.065622][T17353] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3919'. [ 666.133305][T17350] loop1: detected capacity change from 0 to 1024 [ 666.148413][T17350] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 666.165240][T17350] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 666.270825][T17350] EXT4-fs (loop1): invalid journal inode [ 666.304022][T17350] EXT4-fs (loop1): can't get journal size [ 666.439590][T17350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 666.909258][T17368] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3921'. [ 667.536281][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.626154][T17379] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3925'. [ 667.891953][T17391] syzkaller0: entered promiscuous mode [ 667.909235][T17391] syzkaller0: entered allmulticast mode [ 667.942917][T17387] siw: device registration error -23 [ 667.954560][T17391] tipc: Enabled bearer , priority 0 [ 667.986576][T17390] tipc: Resetting bearer [ 668.002517][T17390] tipc: Disabling bearer [ 668.101102][T17393] FAULT_INJECTION: forcing a failure. [ 668.101102][T17393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.136275][T17393] CPU: 0 UID: 0 PID: 17393 Comm: syz.1.3931 Tainted: G W syzkaller #0 PREEMPT(full) [ 668.136313][T17393] Tainted: [W]=WARN [ 668.136322][T17393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 668.136335][T17393] Call Trace: [ 668.136383][T17393] [ 668.136394][T17393] __dump_stack+0x1d/0x30 [ 668.136440][T17393] dump_stack_lvl+0x95/0xd0 [ 668.136462][T17393] dump_stack+0x15/0x1b [ 668.136481][T17393] should_fail_ex+0x263/0x280 [ 668.136512][T17393] should_fail+0xb/0x20 [ 668.136589][T17393] should_fail_usercopy+0x1a/0x20 [ 668.136626][T17393] _copy_from_user+0x1c/0xb0 [ 668.136751][T17393] do_ipv6_setsockopt+0x124/0x2130 [ 668.136798][T17393] ? _parse_integer_limit+0x170/0x190 [ 668.136831][T17393] ? _parse_integer+0x27/0x40 [ 668.136854][T17393] ? kstrtoull+0x111/0x140 [ 668.136880][T17393] ? __rcu_read_unlock+0x4e/0x70 [ 668.136901][T17393] ? avc_has_perm_noaudit+0xab/0x130 [ 668.136986][T17393] ipv6_setsockopt+0x59/0x130 [ 668.137011][T17393] tcp_setsockopt+0x98/0xb0 [ 668.137047][T17393] sock_common_setsockopt+0x69/0x80 [ 668.137153][T17393] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 668.137194][T17393] smc_setsockopt+0x183/0x750 [ 668.137271][T17393] ? __pfx_smc_setsockopt+0x10/0x10 [ 668.137447][T17393] __sys_setsockopt+0x184/0x200 [ 668.137473][T17393] __x64_sys_setsockopt+0x64/0x80 [ 668.137498][T17393] x64_sys_call+0x2327/0x3020 [ 668.137529][T17393] do_syscall_64+0x12c/0x3b0 [ 668.137562][T17393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.137642][T17393] RIP: 0033:0x7f90b28acdd9 [ 668.137661][T17393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.137691][T17393] RSP: 002b:00007f90b1307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 668.137717][T17393] RAX: ffffffffffffffda RBX: 00007f90b2b25fa0 RCX: 00007f90b28acdd9 [ 668.137736][T17393] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 668.137828][T17393] RBP: 00007f90b1307090 R08: 000000000000cf8a R09: 0000000000000000 [ 668.137842][T17393] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 668.137861][T17393] R13: 00007f90b2b26038 R14: 00007f90b2b25fa0 R15: 00007fffd5643a88 [ 668.137922][T17393] [ 668.468231][T17396] syzkaller0: entered promiscuous mode [ 668.485235][T17396] syzkaller0: entered allmulticast mode [ 669.128815][T17411] siw: device registration error -23 [ 669.364228][T17415] syzkaller0: entered promiscuous mode [ 669.398479][T17415] syzkaller0: entered allmulticast mode [ 670.149669][T17427] siw: device registration error -23 [ 670.346639][T17437] ================================================================== [ 670.354884][T17437] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 670.362665][T17437] [ 670.365018][T17437] write to 0xffff888102576700 of 8 bytes by task 17434 on cpu 0: [ 670.372769][T17437] mas_wr_store_entry+0x3be9/0x5ad0 [ 670.378025][T17437] mas_store_prealloc+0x43e/0x690 [ 670.383097][T17437] vma_complete+0x3c7/0x850 [ 670.387745][T17437] __split_vma+0x593/0x640 [ 670.392233][T17437] vma_modify+0xb4b/0xca0 [ 670.396601][T17437] vma_modify_flags+0x182/0x210 [ 670.401497][T17437] mprotect_fixup+0x3a2/0x680 [ 670.406235][T17437] do_mprotect_pkey+0x6ae/0x960 [ 670.411127][T17437] __x64_sys_mprotect+0x48/0x60 [ 670.416027][T17437] x64_sys_call+0x2768/0x3020 [ 670.420746][T17437] do_syscall_64+0x12c/0x3b0 [ 670.425371][T17437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.431303][T17437] [ 670.433653][T17437] read to 0xffff888102576700 of 8 bytes by task 17437 on cpu 1: [ 670.441315][T17437] mtree_range_walk+0x350/0x490 [ 670.446213][T17437] mas_walk+0x1cc/0x370 [ 670.450398][T17437] lock_vma_under_rcu+0xc9/0x210 [ 670.455382][T17437] do_user_addr_fault+0x232/0x1050 [ 670.460548][T17437] exc_page_fault+0x62/0xa0 [ 670.465092][T17437] asm_exc_page_fault+0x26/0x30 [ 670.469988][T17437] [ 670.472339][T17437] value changed: 0xffff888105b7430e -> 0xffff888102576700 [ 670.479477][T17437] [ 670.481839][T17437] Reported by Kernel Concurrency Sanitizer on: [ 670.488018][T17437] CPU: 1 UID: 0 PID: 17437 Comm: syz.1.3944 Tainted: G W syzkaller #0 PREEMPT(full) [ 670.498997][T17437] Tainted: [W]=WARN [ 670.502825][T17437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 670.512907][T17437] ==================================================================