last executing test programs: 28m53.555798431s ago: executing program 32 (id=730): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x2400c000) close_range(r0, 0xffffffffffffffff, 0x0) 21m7.807687872s ago: executing program 33 (id=3161): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000003440), r3) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000680)={[{@dioread_lock}, {@noblock_validity}, {@nojournal_checksum}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@dax_never}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r6, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, 0x0) unshare(0x2a020400) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3f, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 20m27.945679085s ago: executing program 34 (id=3232): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 19m50.89265226s ago: executing program 35 (id=3289): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 14m31.604690718s ago: executing program 36 (id=4194): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x8000) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x20, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90) close(r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4m50.432290923s ago: executing program 37 (id=5962): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4000001) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r3, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x1) 3m37.58830931s ago: executing program 38 (id=6195): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000d80)={{0x0, 0x5, 0x5, 0x1, 0x3, 0x5, 0x5, 0xcb, 0x7, 0x1, 0x0, 0x1ff, 0x7, 0x4c, 0xa}}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x9020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, r2, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x48) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x420, 0xe52, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x22c}}, 0x0) chroot(0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) keyctl$reject(0x13, 0x0, 0xaad2, 0x201, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x1f0, 0x1f0, 0x210, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x4e24, 0x4e24, 0x4e24, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0xfd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x1, 'pptp\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0xf, 0x26, 0x19, 0x2c, 0x8, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x25, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) 3m16.639756524s ago: executing program 39 (id=6249): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b1"], 0x50}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) 3m13.138425294s ago: executing program 40 (id=6276): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, 0x4) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x7b9, &(0x7f0000000880)="$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") getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x2, 0x69}, &(0x7f00000001c0)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000000)=@rnullb, 0x0, &(0x7f0000000040)) 3m10.035934711s ago: executing program 7 (id=6287): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xff, 0x3, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m9.653755653s ago: executing program 7 (id=6288): io_setup(0x0, &(0x7f0000000040)) clock_gettime(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 2m54.585218454s ago: executing program 41 (id=6288): io_setup(0x0, &(0x7f0000000040)) clock_gettime(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 2m31.498736036s ago: executing program 42 (id=6480): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x853, 0x6}, 0x0, 0x0, 0xfffffffd, 0x1, 0xe8a5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pread64(r0, 0x0, 0x0, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x10) pipe(&(0x7f00000000c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5435, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd7a, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x56e60cb920c3db7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m27.18174029s ago: executing program 43 (id=6501): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$bind(0x0, 0x0, 0x0, 0x111091, 0x0) mount$bind(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5435, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001480)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x56e60cb920c3db7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) 2m20.031437064s ago: executing program 44 (id=6565): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_procfs$namespace(r0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_UNALIGN(0x6, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b376", 0x6}], 0x1}}], 0x2, 0x40) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) close(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m5.839176477s ago: executing program 45 (id=6639): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1m30.456429353s ago: executing program 6 (id=7444): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"/261], 0x0, 0x32}, 0x28) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7fff, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) futex(0x0, 0x7, 0x2, 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x1f6}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r1], 0xffffffffffffff6e}, 0x4004004) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x600003, 0x11) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$char_usb(r0, &(0x7f00000001c0), 0x1) syz_clone3(&(0x7f0000000800)={0x8000000, &(0x7f0000000540), &(0x7f0000000580)=0x0, &(0x7f00000006c0), {0x1c}, &(0x7f0000000700)=""/38, 0x26, &(0x7f0000000740)=""/78, &(0x7f00000007c0), 0x0, {r0}}, 0x58) r6 = syz_open_dev$vcsn(&(0x7f0000000880), 0xffffffffffffffb4, 0x400000) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x1, 0x2, 0x6, 0x0, 0x2, 0x2b420, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100, 0x0, @perf_config_ext={0xffffffff, 0x8000000000000000}, 0x2000, 0x80000001, 0x5, 0x0, 0x1, 0x3, 0x3, 0x0, 0xa3d}, r5, 0x2, r6, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @void}, 0x10) 1m30.251350619s ago: executing program 6 (id=7446): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@init_itable}, {@sysvgroups}, {@orlov}]}, 0x1, 0x4cf, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) openat(r0, 0x0, 0x800, 0x155) 1m29.943909889s ago: executing program 6 (id=7453): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x38, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xf28c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e22, 0x66, @mcast2, 0x80000000}]}, &(0x7f0000000480)=0x10) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) syz_clone(0x2a004000, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 1m29.943689209s ago: executing program 8 (id=7454): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) mknodat(r1, &(0x7f0000000140)='./file2\x00', 0xc000, 0x0) 1m29.811779953s ago: executing program 8 (id=7456): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x853, 0x6}, 0x0, 0x0, 0xfffffffd, 0x1, 0xe8a5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pread64(r0, 0x0, 0x0, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r5, 0x5435, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001480)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd7a, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x56e60cb920c3db7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) write$P9_RGETLOCK(r2, 0x0, 0x200002e6) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000005c0)}], 0x3}}], 0x1, 0x801) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000140)=0x4) read(r1, &(0x7f00000012c0)=""/4096, 0x1000) fcntl$setpipe(r2, 0x407, 0x7000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) 1m28.770883916s ago: executing program 8 (id=7460): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x1461b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r2}, 0x38) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 1m28.691315978s ago: executing program 8 (id=7462): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x853, 0x6}, 0x0, 0x0, 0xfffffffd, 0x1, 0xe8a5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pread64(r0, 0x0, 0x0, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSW2(0xffffffffffffffff, 0x5435, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x56e60cb920c3db7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) write$P9_RGETLOCK(r1, 0x0, 0x200002e6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000140)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m28.078610477s ago: executing program 6 (id=7464): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x853, 0x6}, 0x0, 0x0, 0xfffffffd, 0x1, 0xe8a5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pread64(r0, 0x0, 0x0, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r5, 0x5435, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001480)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd7a, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x56e60cb920c3db7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) write$P9_RGETLOCK(r2, 0x0, 0x200002e6) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000005c0)}], 0x3}}], 0x1, 0x801) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000140)=0x4) read(r1, &(0x7f00000012c0)=""/4096, 0x1000) fcntl$setpipe(r2, 0x407, 0x7000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) 1m27.639458201s ago: executing program 8 (id=7465): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4000001) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)={[{@utf8}, {@uid}, {@nojoliet}, {@nocompress}, {@showassoc}, {@map_acorn}, {@mode={'mode', 0x3d, 0x8}}, {@map_normal}, {@mode={'mode', 0x3d, 0x4}}, {@map_off}, {@dmode={'dmode', 0x3d, 0x9fbc}}, {@iocharset={'iocharset', 0x3d, 'default'}}], [{@euid_eq}]}, 0x2, 0xa45, &(0x7f00000007c0)="$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") munmap(&(0x7f000025f000/0x1000)=nil, 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r4, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1m27.488257176s ago: executing program 8 (id=7466): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x0, 0x0) flock(r2, 0x2) mknodat(r1, &(0x7f0000000140)='./file2\x00', 0xc000, 0x0) 1m27.433641977s ago: executing program 46 (id=7466): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x0, 0x0) flock(r2, 0x2) mknodat(r1, &(0x7f0000000140)='./file2\x00', 0xc000, 0x0) 1m23.492601681s ago: executing program 6 (id=7476): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xa100, 0x150) fcntl$notify(r0, 0x402, 0x80000034) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x40000029) close(r1) 1m22.706988615s ago: executing program 6 (id=7485): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_procfs$namespace(r0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_UNALIGN(0x6, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b376", 0x6}], 0x1}}], 0x2, 0x40) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) close(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m22.636201968s ago: executing program 47 (id=7485): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_procfs$namespace(r0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_UNALIGN(0x6, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b376", 0x6}], 0x1}}], 0x2, 0x40) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) close(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m15.363671595s ago: executing program 0 (id=7523): r0 = socket(0x11, 0x3, 0x1) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {0x0}, {&(0x7f0000000500)="55f0e46e7aeb504dca2fb5", 0xb}, {&(0x7f00000001c0)="f66b93da97ee56908f3fd8cd480ac874f57d668e80326ea1", 0x18}], 0x4}, 0x40011) 1m15.135917051s ago: executing program 7 (id=7467): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') 1m14.956230947s ago: executing program 0 (id=7525): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x10001, @loopback, 0xc}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m14.852465031s ago: executing program 0 (id=7527): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x1461b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r4}, 0x38) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 1m14.821053531s ago: executing program 7 (id=7528): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x853, 0x6}, 0x0, 0x0, 0xfffffffd, 0x1, 0xe8a5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) pipe(&(0x7f00000000c0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x5435, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x56e60cb920c3db7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000140)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m14.54725166s ago: executing program 7 (id=7531): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8040, &(0x7f0000000380)={[{@noload}, {@data_err_ignore}, {@bh}, {@noload}, {@errors_remount}, {@discard}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) 1m14.23109322s ago: executing program 7 (id=7533): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 1m14.159350132s ago: executing program 48 (id=7533): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 1m13.977665398s ago: executing program 0 (id=7535): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x853, 0x6}, 0x0, 0x0, 0xfffffffd, 0x1, 0xe8a5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) pipe(0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x5435, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m13.798813473s ago: executing program 0 (id=7541): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x853, 0x6}, 0x0, 0x0, 0xfffffffd, 0x1, 0xe8a5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) pipe(0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x5435, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000140)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m13.540150402s ago: executing program 0 (id=7546): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000d80)={{0x0, 0x5, 0x5, 0x1, 0x3, 0x5, 0x5, 0xcb, 0x7, 0x1, 0x0, 0x1ff, 0x7, 0x4c, 0xa}}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x9020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, r2, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x48) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x420, 0xe52, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x22c}}, 0x0) chroot(0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) keyctl$reject(0x13, 0x0, 0xaad2, 0x201, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) 1m13.503139633s ago: executing program 49 (id=7546): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000d80)={{0x0, 0x5, 0x5, 0x1, 0x3, 0x5, 0x5, 0xcb, 0x7, 0x1, 0x0, 0x1ff, 0x7, 0x4c, 0xa}}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x9020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, r2, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x48) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x420, 0xe52, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x22c}}, 0x0) chroot(0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) keyctl$reject(0x13, 0x0, 0xaad2, 0x201, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6012000800103afffe8000000000000000000000000000bbff020000000000000000000000000001860090780100020000000000000000007caf887411ababd28ec7ce128bd62211304a1ba37ea6b550a00f75f1963e49ce18692cff2bfb360a4757c5e18e4bf4490b03c7eaa4b9e425b98b9f1ead9fd59cbff84ec7e0d183a9304f3b5f671fe72fc4b23c951e1d504ae8003ac36a8050f849d79ed0cd476c141a39034f2543b6cead39afc3cae476c3d11a55fc414498e8e15d9778940ca9e3128a456bda8ca5329e8c0c439d8c8a3e9e84e9fa88f6b674e3bfae588df1574722533e50b9c12f321f35b1fa1f244bae5b"], 0x0) 1m9.926720125s ago: executing program 9 (id=7561): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x1461b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r4}, 0x38) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 1m9.11459939s ago: executing program 9 (id=7563): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='personality\x00') lseek(r1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f00000001c0), 0x5, 0x4c6, &(0x7f0000000840)="$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") chdir(&(0x7f0000000140)='./file0\x00') socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100), 0x0, 0x52e, &(0x7f0000001500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000200010011"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], 0x50) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf25370000000c0099000500000071000000080057001b0000000800a10002000000050018011900000008009f00000000000800a0008100000008002700030000000800a000000200000800a1004000000008002600cc15000008009f0007000000"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000008) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) setsockopt(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)="c5f57724d0e33b90b1c156936b696f2fcd0517ee9d8b5bf08d1f0bd7066b93c45f8c4b82e1c404f2f0a9f8f1ffafef7040371dde14e32b6e53b30cc20ce28f41fd4cfc2819867c21526edc34ff2cd9c62e7dab539a2420b5b3fa406ff5433a9babf24338728aaeb1b8dc02e5e20aa9e22d7ee88776a286fd207727d206c7ec3cc515ae8a7493d428683606bf1658e7f15283160416fdaf9047d47d876a975ce7ea00496a0f7d90a05d34290ebb9b79", 0xaf) 1m8.15837298s ago: executing program 9 (id=7566): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x10001, @loopback, 0xc}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000006c0)}}], 0x1, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m7.800702091s ago: executing program 9 (id=7571): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x853, 0x6}, 0x0, 0x0, 0xfffffffd, 0x1, 0xe8a5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) pipe(0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x5435, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000140)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900"], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m7.681742275s ago: executing program 9 (id=7573): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x1461b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r4}, 0x38) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 1m6.964128167s ago: executing program 9 (id=7576): io_setup(0x0, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 1m6.901947919s ago: executing program 50 (id=7576): io_setup(0x0, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 5.065266532s ago: executing program 5 (id=8023): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000640)={[{@delalloc}, {@grpid}, {@bh}, {@nouid32}, {@noauto_da_alloc}, {@journal_async_commit}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@noacl}, {@norecovery}, {@nodelalloc}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x5, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), 0x0}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x4000000, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) close_range(r0, r2, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r4 = syz_open_dev$loop(&(0x7f0000000140), 0xb, 0x80000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000000)={r4, 0x611, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "2809532cf626a66022488056c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f0000000000000000da00", "90be8b1c5512406c7f00", [0x4, 0x2]}}) 4.880932848s ago: executing program 5 (id=8026): perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x6, 0x0, 0x6, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xe, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f00000001c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r0, &(0x7f0000000340)='\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x45, 0x0, 0x0, 0x80, 0x0, 0x5, 0x40403, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x17}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.652685975s ago: executing program 5 (id=8031): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x1461b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r4}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 2.623057418s ago: executing program 2 (id=8034): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000003c0)={[{@quota}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@block_validity}, {@nodelalloc}, {@quota}, {@nolazytime}, {@grpjquota}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0xff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}]}, 0x3, 0x452, &(0x7f0000000780)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x4003}) writev(r0, &(0x7f00000000c0), 0x0) 2.2486172s ago: executing program 2 (id=8038): unshare(0x26020480) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x100) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r3 = io_uring_setup(0x4af1, &(0x7f00000003c0)={0x0, 0x27a3, 0x80, 0x1, 0xe}) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd030, 0x6, 0x0, 0x0, 0xfffffffffffeffff, 0x40000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f0000000f00)=ANY=[@ANYBLOB="8eabeb4e9924bfd7aaa18db66de5423c242e3abd208a253d769829081957fff7759c7c4aa860e7127f69c29af4a42e813b4625e46d79554e057332d6101968442ff280b186acd3ff9591f18ce38c68d6070b8192d32b58fb4b6c05245b03407fe996a9816e9d2504b454b6845f8c20b2910752bced44e9c0f177a181a573ea6ba95111e5272c6a49649f8a109dda77e6710d7856102e9449b6b5b462b33443d8eddcb80004000000000000000000000000000000000000008dedfa2835a0936128727b40feca1468f12bd0473ee0daff49aa92d21b080d020a69a4b477c3c959486bca6d235fd773e0b539", @ANYRES64=r5], &(0x7f0000000000)='GPL\x00', 0x6, 0x98, &(0x7f0000000d80)=""/152, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x94) syz_io_uring_setup(0x168d, &(0x7f0000000500)={0x0, 0x555e, 0x1000, 0x2, 0x800289, 0x0, r3}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000200)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r7, &(0x7f00000094c0)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000003640)=[{&(0x7f0000002300)="86", 0x1}], 0x1}}, {{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, 0x0, 0x0, &(0x7f0000004400)=ANY=[], 0x10}}], 0x2, 0x8014) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000700), 0x1, 0x579, &(0x7f00000007c0)="$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") sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000000010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c6d7230000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x3, &(0x7f0000000180)=[r9, r9, r9]) setregid(0x0, r9) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, r4}, 0xffbe) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r10, 0x9, 0x101, 0x0, 0x0) socket$inet(0x2, 0x5, 0x969) 1.884261421s ago: executing program 2 (id=8039): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x4040004) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x3, 0x5, 0x3, 0x1, 0x0, 0x3, 0x400, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x8408, 0x5, 0x7, 0x3, 0x3ff, 0x3, 0x9, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x31e9, 0x3}, 0x1400, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafbffff7ffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e00001400000011"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a01010000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) 1.882710321s ago: executing program 4 (id=8051): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000003c0)={[{@quota}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@block_validity}, {@nodelalloc}, {@quota}, {@nolazytime}, {@grpjquota}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0xff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}]}, 0x3, 0x452, &(0x7f0000000780)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x4003}) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 1.810641543s ago: executing program 2 (id=8040): perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x6, 0x0, 0x6, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xe, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x45, 0x0, 0x0, 0x80, 0x0, 0x5, 0x40403, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x17}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.768242585s ago: executing program 3 (id=8041): perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x6, 0x0, 0x6, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xe, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f00000001c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r0, &(0x7f0000000340)='\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x45, 0x0, 0x0, 0x80, 0x0, 0x5, 0x40403, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x17}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.671536258s ago: executing program 3 (id=8043): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a3200000000140000001100"], 0x78}}, 0x400c084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 1.60810019s ago: executing program 4 (id=8044): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000640)={[{@delalloc}, {@grpid}, {@bh}, {@nouid32}, {@noauto_da_alloc}, {@journal_async_commit}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@noacl}, {@norecovery}, {@nodelalloc}]}, 0xfe, 0x495, &(0x7f0000000e40)="$eJzs3M9vFFUcAPDvzO6WgmIr4g8QpIpG4o+Wlh9y8KLRhIMmJnrAeKptIZVCDa2JEKLVAx4NiXfjf2E86cWoF0286t2QEMMF1Mua2Zltl2W33dIfS9vPJ5n2zczrvvedmTf75r3tBrBlDWQ/koj7I+KPiOjLV2/PMJD/unXj8tg/Ny6PJVGtvv13Ust388blsXrW+t/dl69Uq8X6thblXnkvYnRqauJCsT40e+7DoZmLl16cPDd6ZuLMxPmREyeOHtnfc3zk2KrEmcV1c+8n0/v2nHz36ptjp66+/3NSjjzuaIpjtQzkR7elZ1a7sC7b2ZCuHdh5B35dSLe6EuimUkRkp6tSa/99UYrt8/v64vXPm/P3rncFgTVTrVari9yV56rAJpbE0nl6izsFsJkUjwC159/6so7dj667/kr+AJTFfatY8j3lSPPEgUrT8+1qGoiIU3P/fp0tsUbjEAAAjb7P+j8vtOr/pfFInujJfjxQzKH0R8SDEbErIh6KiN0R8XBELe+jEfHYMstvniG5s/+TXrvr4DqQ9f9eLua2bu//pfUs/aVibWct/kpyenJq4nBxTA5FZdvpyWRieJEyfnjt9y/b7Wvs/2VLVn69L1jU49r2plH38dHZ0RUF3eD6ZxF7yxG3KtEUfxL1aZwkIvZExN67LGPyuXLbfUvHv4j2L9ux6jcRz+bnfy6a4q9L2s5PDr90fOTYUG9MTRweql8Vd/rltytvNW0q1RMrin8VZOd/R8vrfz7+/qQ3YubipbO1+dqZ5Zdx5c8v2j7TdHL9lxcGqE/uLK7/nuSd2oaeYsfHo7OzF4YjepI37tw+svBq9fV6/iz+Qwdbt/9dsXAkHo+IfRGxPyKeyB4Ki7o/GRFPRcTBReL/6dWnP1h+/OszV5rFP77U+Y/G87/8ROnsj98tHX92j2t3/o/WUoeKLZ3c/zqt4EqOHQAAAGwUae0z8Ek6mJSLdJoODuaf4d8dO9Kp6ZnZ509Pf3R+PP+sfH9U0vpIV1/DeOhwMTbc3/Da/Q37jxTjxl+VttfWB8emp8a7GDeQt/Na+5+/F+TtP/NXqdu1A9ZcPo+WdrsaQBeswjw6sEFp/7A1JYu2/8q61gVYf97/Yetq1f4/bZt78Ns1rQywrrz/w9bVQfufy3+17xUAG5P3f9i6tH/Yktr+b3zadld2u1jBtwGsTeK/4vsM75X6bP5EpPdENTZcIoll/lW54y+zWEai2pe3/2zLttbNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFP4PwAA//+dU9wM") perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x5, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), 0x0}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x4000000, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) close_range(r0, r2, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r4 = syz_open_dev$loop(&(0x7f0000000140), 0xb, 0x80000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000000)={r4, 0x611, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "2809532cf626a66022488056c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f0000000000000000da00", "90be8b1c5512406c7f00", [0x4, 0x2]}}) 1.60246735s ago: executing program 2 (id=8045): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x1461b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, 0x0, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r4}, 0x38) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 1.5834456s ago: executing program 5 (id=8047): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x60000600) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000535000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) unshare(0x22020600) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x81) setresgid(0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0xffffff34, 0x0}, 0x7}], 0x1, 0x60, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20cc16, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x3, 0x22e, &(0x7f0000000480)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x81, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) timer_create(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sync() sync() sync() bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1.406026556s ago: executing program 4 (id=8048): perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x6, 0x0, 0x6, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xe, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r1, &(0x7f0000000340)='\x00', 0x1) splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x45, 0x0, 0x0, 0x80, 0x0, 0x5, 0x40403, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x17}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 982.329829ms ago: executing program 1 (id=8052): unshare(0x26020480) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x100) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r3 = io_uring_setup(0x4af1, &(0x7f00000003c0)={0x0, 0x27a3, 0x80, 0x1, 0xe}) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd030, 0x6, 0x0, 0x0, 0xfffffffffffeffff, 0x40000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f0000000f00)=ANY=[@ANYBLOB="8eabeb4e9924bfd7aaa18db66de5423c242e3abd208a253d769829081957fff7759c7c4aa860e7127f69c29af4a42e813b4625e46d79554e057332d6101968442ff280b186acd3ff9591f18ce38c68d6070b8192d32b58fb4b6c05245b03407fe996a9816e9d2504b454b6845f8c20b2910752bced44e9c0f177a181a573ea6ba95111e5272c6a49649f8a109dda77e6710d7856102e9449b6b5b462b33443d8eddcb80004000000000000000000000000000000000000008dedfa2835a0936128727b40feca1468f12bd0473ee0daff49aa92d21b080d020a69a4b477c3c959486bca6d235fd773e0b539", @ANYRES64=r5], &(0x7f0000000000)='GPL\x00', 0x6, 0x98, &(0x7f0000000d80)=""/152, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x94) syz_io_uring_setup(0x168d, &(0x7f0000000500)={0x0, 0x555e, 0x1000, 0x2, 0x800289, 0x0, r3}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000200)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) socket$netlink(0x10, 0x3, 0x14) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r6, &(0x7f00000094c0)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000003640)=[{&(0x7f0000002300)="86", 0x1}], 0x1}}, {{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, 0x0, 0x0, &(0x7f0000004400)=ANY=[], 0x10}}], 0x2, 0x8014) 981.294629ms ago: executing program 4 (id=8053): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) 915.884591ms ago: executing program 4 (id=8054): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0xff, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x80000000, 0xfffffffd, 0x3, 0xabca, 0x85, 0x3ff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c1ff000400000000000000181d00fe8000000000000000000000b5112039fe09000000ffff0000000000000000aa4e224e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6110000190780ffd00020000"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001500)={0x0, 0x23, &(0x7f0000002700)=[{&(0x7f0000001540)="540acd915dbcb094f42e5c7d8ae6a683853e4e430d73ece08ba9370b0636bccfbdf5bfe628464f013caa5c3419da6e5db7a82a13348c49aa5f4bc2013c2631545fb906d36fd85d2f1c8d530cd675963963072559cd95c78cb14f60e1e010d700dd8a18d4fd19484c639a23615b6f2aaa23c6f6cd60fdded1beb8d4e21119b03d6b73241d"}, {&(0x7f0000001600)="76858233c22b75745bf31a871d1fe042b37d89392a25e8c7a3c605e12cedf94cf87f460387e4d34d1e25ed7172530059c6eb64ec1dd92f535d3d909f96c12e2b1a95a37c29e029562bee5cbe2875d3b7587ef87c5ec9ddaf38d0c14ac1ba05308f8b82b0880c8b0172"}, {&(0x7f0000001680)="fb1169d39c875059f2116578b182ea10aba228ca83d15a6137e8978390dd3df8237af44f56fe12d0f20b23fd8f77aa891597846289"}, {&(0x7f00000016c0)="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"}]}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) r3 = syz_clone(0x1000, &(0x7f0000000140)="4a981825cdb07b0f43946ffcb4", 0xd, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000003c0)="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") shmctl$SHM_LOCK(r2, 0xb) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000013c0), 0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f00000014c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040225bd7000fedbdf25070000002800070073797303656d5f753a6f626a6563745f723a736f756e645f6405000000655f743a823000050001000100000008000400ffffffff080005007f000001"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x1) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) shmctl$SHM_LOCK(r2, 0xb) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="78487660ea132fae50ca972842f5b3344c8edb2f7881070041a6b73d8f5e5b660a936b2edbc79d0262ade3ff0100000000000077fcb3004841bbd7c3bece7dbdafbe4c3fbf665e0e61e550cf659036800a00bb38830efa86e354f5eea226fbc49aef3b829d81d8976f778fb11591d800dbea5e24dd684a", 0x1}, {&(0x7f0000000200)="00000000c44eb72e5348222724b9663a5907c511b94c5946a3315c8eed70a48fe7f599b45ab0b5e577fc00008d54aecc9b5a68be1d3efb26787f3457a38b357468946aee9c6f94e9e93da77221a9bd24cb32132b9ca82c7b4da4623db5b3f8759952ced476617951d4d8f445f2690105ce37841ec97279068a4307a49263031f53c992e48abf89ac385bc1044744c4d02553c7d1b353017164b2a2dec104d2565f00be53befa9f8ab457e882a6ef462b4e216e3010c71c590a8160a2e32fb9d7af20585ccd7771fa3a47799d74989136f2bcb5d0052f302e0c00"/232, 0xfffffffffffffee3}, {&(0x7f0000000100)="9c", 0x1}], 0x3) 914.975762ms ago: executing program 1 (id=8055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x70}}, 0x0) (fail_nth: 2) 856.150043ms ago: executing program 1 (id=8056): perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x6, 0x0, 0x6, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xe, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f00000001c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r0, &(0x7f0000000340)='\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x45, 0x0, 0x0, 0x80, 0x0, 0x5, 0x40403, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x17}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 787.464665ms ago: executing program 3 (id=8057): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000003c0)={[{@quota}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@block_validity}, {@nodelalloc}, {@quota}, {@nolazytime}, {@grpjquota}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0xff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}]}, 0x3, 0x452, &(0x7f0000000780)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x4003}) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 660.53289ms ago: executing program 1 (id=8058): perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x6, 0x0, 0x6, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xe, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x45, 0x0, 0x0, 0x80, 0x0, 0x5, 0x40403, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x17}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 660.24499ms ago: executing program 2 (id=8059): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x1461b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r4}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 562.515092ms ago: executing program 1 (id=8060): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000640)={[{@delalloc}, {@grpid}, {@bh}, {@nouid32}, {@noauto_da_alloc}, {@journal_async_commit}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@noacl}, {@norecovery}, {@nodelalloc}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x5, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), 0x0}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x4000000, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) close_range(r0, r2, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r4 = syz_open_dev$loop(&(0x7f0000000140), 0xb, 0x80000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000000)={r4, 0x611, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "2809532cf626a66022488056c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f0000000000000000da00", "90be8b1c5512406c7f00", [0x4, 0x2]}}) 562.217662ms ago: executing program 4 (id=8061): perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0x9}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f5, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xb5d5, 0xc000, 0xc, 0xa0002ff}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r2 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[r2], 0x1) preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x33, 0x2000051b) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000)=0x1201a, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x14, 0x0, 0x0) 561.957452ms ago: executing program 5 (id=8062): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x4040004) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x3, 0x5, 0x3, 0x1, 0x0, 0x3, 0x400, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x8408, 0x5, 0x7, 0x3, 0x3ff, 0x3, 0x9, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x31e9, 0x3}, 0x1400, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafbffff7ffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e00001400000011"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a01010000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) 213.369073ms ago: executing program 1 (id=8063): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x83, 0x7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r2, 0x5) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x800c0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xe58b, 0x830d}, 0x0, 0x3, 0x0, 0x7, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r6, 0x0, 0x440e0) r7 = socket$kcm(0x10, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x5) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r8 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000040)={0x90, @tick, 0x0, {0x6, 0x9}, 0x8a, 0x1, 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf2505fff8"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close_range(r0, r1, 0x0) 152.084985ms ago: executing program 5 (id=8064): perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x6, 0x0, 0x6, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xe, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r1, &(0x7f0000000340)='\x00', 0x1) splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x45, 0x0, 0x0, 0x80, 0x0, 0x5, 0x40403, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x17}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 75.007698ms ago: executing program 3 (id=8065): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) 28.761239ms ago: executing program 3 (id=8066): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r0, &(0x7f00000094c0)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000003640)=[{&(0x7f0000002300)="86", 0x1}], 0x1}}, {{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, 0x0, 0x0, &(0x7f0000004400)=ANY=[], 0x10}}], 0x2, 0x8014) 0s ago: executing program 3 (id=8067): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a3200000000140000001100"], 0x78}}, 0x400c084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) kernel console output (not intermixed with test programs): 9][ C0] EXT4-fs (loop5): last error at time 2000000640: ext4_orphan_get:1423 [ 1771.372193][ T1664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1771.387802][ T1662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1771.529087][ T1691] EXT4-fs: Ignoring removed mblk_io_submit option [ 1771.543810][ T1691] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1771.568872][ T1691] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.7663: invalid indirect mapped block 83886080 (level 1) [ 1771.583784][ T1691] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1771.584007][ T1691] EXT4-fs (loop5): Remounting filesystem read-only [ 1771.593618][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1771.593646][ C0] EXT4-fs (loop5): initial error at time 2000000640: ext4_free_branches:1023: inode 16 [ 1771.593708][ C0] EXT4-fs (loop5): last error at time 2000000640: ext4_free_branches:1023: inode 16 [ 1771.627766][ T1691] EXT4-fs (loop5): 1 orphan inode deleted [ 1771.633938][ T1691] EXT4-fs (loop5): 1 truncate cleaned up [ 1771.779207][ T1729] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1771.793727][ T1729] EXT4-fs (loop5): shut down requested (2) [ 1772.177592][ T1802] set_capacity_and_notify: 10 callbacks suppressed [ 1772.177614][ T1802] loop5: detected capacity change from 0 to 1024 [ 1772.193774][ T1802] EXT4-fs: Ignoring removed bh option [ 1772.217312][ T1802] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1772.282306][ T1820] loop5: detected capacity change from 0 to 512 [ 1772.307955][ T1819] loop1: detected capacity change from 0 to 512 [ 1772.315926][ T1819] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1772.316389][ T1820] EXT4-fs: Ignoring removed bh option [ 1772.351408][ T1820] EXT4-fs (loop5): 1 truncate cleaned up [ 1772.369022][ T1819] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1772.445267][ T1833] loop5: detected capacity change from 0 to 512 [ 1772.453886][ T1833] EXT4-fs: inline encryption not supported [ 1772.480536][ T1833] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.7672: bad orphan inode 15 [ 1772.499128][ T1833] loop5: lost filesystem error report for type 5 error -117 [ 1772.500630][ T1833] ext4_test_bit(bit=14, block=5) = 0 [ 1772.508264][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1772.508287][ C0] EXT4-fs (loop5): initial error at time 2000000641: ext4_orphan_get:1423 [ 1772.508335][ C0] EXT4-fs (loop5): last error at time 2000000641: ext4_orphan_get:1423 [ 1772.604485][ T1848] loop1: detected capacity change from 0 to 512 [ 1772.630406][ T1848] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1772.646235][ T1854] loop4: detected capacity change from 0 to 512 [ 1772.652771][ T1848] EXT4-fs (loop1): shut down requested (2) [ 1772.653645][ T1854] EXT4-fs: Ignoring removed bh option [ 1772.670988][ T1854] EXT4-fs (loop4): 1 truncate cleaned up [ 1772.731427][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 1772.731451][ T28] audit: type=1400 audit(2000000641.524:1811): avc: denied { write } for pid=1850 comm="syz.4.7681" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1772.802502][ T1861] siw: device registration error -23 [ 1772.876561][ T1854] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1772.977021][ T1866] loop4: detected capacity change from 0 to 512 [ 1772.986155][ T1866] EXT4-fs: Ignoring removed bh option [ 1773.012195][ T1866] EXT4-fs (loop4): 1 truncate cleaned up [ 1773.038098][ T1871] loop3: detected capacity change from 0 to 512 [ 1773.085409][ T28] audit: type=1400 audit(2000000641.874:1812): avc: denied { write } for pid=1865 comm="syz.4.7683" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1773.118892][ T1871] EXT4-fs: Ignoring removed mblk_io_submit option [ 1773.136799][ T1871] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1773.171674][ T1871] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7684: invalid indirect mapped block 83886080 (level 1) [ 1773.193923][ T1871] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1773.194104][ T1871] EXT4-fs (loop3): Remounting filesystem read-only [ 1773.204709][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1773.204729][ C0] EXT4-fs (loop3): initial error at time 2000000641: ext4_free_branches:1023: inode 16 [ 1773.204763][ C0] EXT4-fs (loop3): last error at time 2000000641: ext4_free_branches:1023: inode 16 [ 1773.234388][ T28] audit: type=1400 audit(2000000642.024:1813): avc: denied { write } for pid=1867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1773.238448][ T1871] EXT4-fs (loop3): 1 orphan inode deleted [ 1773.283698][ T1871] EXT4-fs (loop3): 1 truncate cleaned up [ 1773.315149][ T28] audit: type=1400 audit(2000000642.094:1814): avc: denied { write } for pid=1882 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1773.411144][ T28] audit: type=1400 audit(2000000642.174:1815): avc: denied { write } for pid=1870 comm="syz.3.7684" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1773.545015][ T1900] loop2: detected capacity change from 0 to 512 [ 1773.580096][ T1905] loop1: detected capacity change from 0 to 512 [ 1773.588402][ T1900] EXT4-fs: inline encryption not supported [ 1773.611422][ T1907] EXT4-fs: Ignoring removed bh option [ 1773.627649][ T1900] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.7690: bad orphan inode 15 [ 1773.640481][ T1907] EXT4-fs (loop4): 1 truncate cleaned up [ 1773.648825][ T1900] loop2: lost filesystem error report for type 5 error -117 [ 1773.648958][ T1900] ext4_test_bit(bit=14, block=5) = 0 [ 1773.656653][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1773.656677][ C0] EXT4-fs (loop2): initial error at time 2000000642: ext4_orphan_get:1423 [ 1773.656709][ C0] EXT4-fs (loop2): last error at time 2000000642: ext4_orphan_get:1423 [ 1773.665053][ T28] audit: type=1400 audit(2000000642.454:1816): avc: denied { write } for pid=1906 comm="syz.4.7693" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1773.724917][ T1905] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1773.740967][ T28] audit: type=1400 audit(2000000642.534:1817): avc: denied { write } for pid=1904 comm="syz.1.7692" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1773.767374][ T1905] EXT4-fs (loop1): shut down requested (2) [ 1773.793356][ T1914] EXT4-fs: Ignoring removed bh option [ 1773.806092][ T1914] EXT4-fs (loop5): 1 truncate cleaned up [ 1773.830154][ T28] audit: type=1400 audit(2000000642.614:1818): avc: denied { write } for pid=1913 comm="syz.5.7694" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1773.866090][ T1916] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1773.892247][ T1921] EXT4-fs: Ignoring removed bh option [ 1773.908655][ T28] audit: type=1400 audit(2000000642.704:1819): avc: denied { write } for pid=1915 comm="syz.2.7695" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1773.919380][ T1923] EXT4-fs: Ignoring removed mblk_io_submit option [ 1773.940876][ T1921] EXT4-fs (loop1): 1 truncate cleaned up [ 1773.950796][ T28] audit: type=1400 audit(2000000642.744:1820): avc: denied { write } for pid=1920 comm="syz.1.7696" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1773.955034][ T1923] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1774.003872][ T1923] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.7697: invalid indirect mapped block 83886080 (level 1) [ 1774.020800][ T1923] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1774.021041][ T1923] EXT4-fs (loop4): Remounting filesystem read-only [ 1774.031490][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1774.031511][ C1] EXT4-fs (loop4): initial error at time 2000000642: ext4_free_branches:1023: inode 16 [ 1774.031537][ C1] EXT4-fs (loop4): last error at time 2000000642: ext4_free_branches:1023: inode 16 [ 1774.066197][ T1923] EXT4-fs (loop4): 1 orphan inode deleted [ 1774.077003][ T1923] EXT4-fs (loop4): 1 truncate cleaned up [ 1774.130764][ T1934] EXT4-fs: Ignoring removed mblk_io_submit option [ 1774.151882][ T1934] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1774.170126][ T1934] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.7699: invalid indirect mapped block 83886080 (level 1) [ 1774.186477][ T1934] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1774.186738][ T1934] EXT4-fs (loop2): Remounting filesystem read-only [ 1774.196624][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1774.196647][ C0] EXT4-fs (loop2): initial error at time 2000000642: ext4_free_branches:1023: inode 16 [ 1774.196685][ C0] EXT4-fs (loop2): last error at time 2000000642: ext4_free_branches:1023: inode 16 [ 1774.241928][ T1934] EXT4-fs (loop2): 1 orphan inode deleted [ 1774.248136][ T1934] EXT4-fs (loop2): 1 truncate cleaned up [ 1774.343922][ T1943] siw: device registration error -23 [ 1774.376113][ T1950] EXT4-fs: Ignoring removed mblk_io_submit option [ 1774.416042][ T1950] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1774.434268][ T1950] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.7706: invalid indirect mapped block 83886080 (level 1) [ 1774.449324][ T1950] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1774.449472][ T1950] EXT4-fs (loop4): Remounting filesystem read-only [ 1774.458883][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1774.458915][ C0] EXT4-fs (loop4): initial error at time 2000000643: ext4_free_branches:1023: inode 16 [ 1774.458951][ C0] EXT4-fs (loop4): last error at time 2000000643: ext4_free_branches:1023: inode 16 [ 1774.559011][ T1955] siw: device registration error -23 [ 1774.565467][ T1950] EXT4-fs (loop4): 1 orphan inode deleted [ 1774.584525][ T1950] EXT4-fs (loop4): 1 truncate cleaned up [ 1774.623869][ T1957] EXT4-fs: inline encryption not supported [ 1774.633902][ T1957] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.7704: bad orphan inode 15 [ 1774.673093][ T1957] loop2: lost filesystem error report for type 5 error -117 [ 1774.673413][ T1957] ext4_test_bit(bit=14, block=5) = 0 [ 1774.681300][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1774.681324][ C0] EXT4-fs (loop2): initial error at time 2000000643: ext4_orphan_get:1423 [ 1774.681349][ C0] EXT4-fs (loop2): last error at time 2000000643: ext4_orphan_get:1423 [ 1774.830483][ T1960] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1774.859659][ T1964] EXT4-fs: Ignoring removed bh option [ 1774.861002][ T1960] EXT4-fs (loop4): shut down requested (2) [ 1774.939153][ T1964] EXT4-fs (loop2): 1 truncate cleaned up [ 1774.974653][ T1967] EXT4-fs: Ignoring removed mblk_io_submit option [ 1775.010159][ T1969] EXT4-fs: Ignoring removed bh option [ 1775.093695][ T1969] EXT4-fs (loop1): 1 truncate cleaned up [ 1775.107027][ T1967] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1775.191088][ T1973] EXT4-fs: Ignoring removed mblk_io_submit option [ 1775.198771][ T1973] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1775.214160][ T1967] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.7709: invalid indirect mapped block 83886080 (level 1) [ 1775.236404][ T1967] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1775.237231][ T1973] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.7711: invalid indirect mapped block 83886080 (level 1) [ 1775.245621][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1775.267943][ C1] EXT4-fs (loop5): initial error at time 2000000644: ext4_free_branches:1023: inode 16 [ 1775.270524][ T1973] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1775.278085][ C1] EXT4-fs (loop5): last error at time 2000000644: ext4_free_branches:1023: inode 16 [ 1775.302350][ T1967] EXT4-fs (loop5): Remounting filesystem read-only [ 1775.305619][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1775.310616][ T1967] EXT4-fs (loop5): 1 orphan inode deleted [ 1775.315390][ C1] EXT4-fs (loop4): initial error at time 2000000644: ext4_free_branches:1023: inode 16 [ 1775.331467][ C1] EXT4-fs (loop4): last error at time 2000000644: ext4_free_branches:1023: inode 16 [ 1775.333130][ T1973] EXT4-fs (loop4): Remounting filesystem read-only [ 1775.349294][ T1967] EXT4-fs (loop5): 1 truncate cleaned up [ 1775.360978][ T1973] EXT4-fs (loop4): 1 orphan inode deleted [ 1775.367265][ T1973] EXT4-fs (loop4): 1 truncate cleaned up [ 1775.403236][ T1977] EXT4-fs: Ignoring removed bh option [ 1775.418943][ T1977] EXT4-fs (loop1): 1 truncate cleaned up [ 1775.472218][ T1984] EXT4-fs: Ignoring removed mblk_io_submit option [ 1775.479882][ T1990] EXT4-fs: inline encryption not supported [ 1775.494239][ T1990] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.7718: bad orphan inode 15 [ 1775.508342][ T1984] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1775.522234][ T1990] loop3: lost filesystem error report for type 5 error -117 [ 1775.523711][ T1990] ext4_test_bit(bit=14, block=5) = 0 [ 1775.531112][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1775.531151][ C1] EXT4-fs (loop3): initial error at time 2000000644: ext4_orphan_get:1423 [ 1775.531174][ C1] EXT4-fs (loop3): last error at time 2000000644: ext4_orphan_get:1423 [ 1775.551665][ T1984] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.7723: invalid indirect mapped block 83886080 (level 1) [ 1775.576881][ T1984] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1775.578464][ T1984] EXT4-fs (loop2): Remounting filesystem read-only [ 1775.588096][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1775.588143][ C1] EXT4-fs (loop2): initial error at time 2000000644: ext4_free_branches:1023: inode 16 [ 1775.588170][ C1] EXT4-fs (loop2): last error at time 2000000644: ext4_free_branches:1023: inode 16 [ 1775.621569][ T1984] EXT4-fs (loop2): 1 orphan inode deleted [ 1775.627726][ T1984] EXT4-fs (loop2): 1 truncate cleaned up [ 1775.677980][ T2002] EXT4-fs: Ignoring removed bh option [ 1775.684906][ T2002] EXT4-fs (loop1): 1 truncate cleaned up [ 1775.748723][ T2008] EXT4-fs: Ignoring removed bh option [ 1775.761847][ T2008] EXT4-fs (loop2): 1 truncate cleaned up [ 1775.833552][ T2010] siw: device registration error -23 [ 1776.118017][ T2018] EXT4-fs: Ignoring removed bh option [ 1776.126057][ T2019] EXT4-fs: Ignoring removed bh option [ 1776.135840][ T2018] EXT4-fs (loop1): 1 truncate cleaned up [ 1776.154874][ T2019] EXT4-fs (loop2): 1 truncate cleaned up [ 1776.206115][ T2019] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1776.232788][ T2023] EXT4-fs: Ignoring removed mblk_io_submit option [ 1776.245070][ T2023] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1776.259498][ T2023] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7726: invalid indirect mapped block 83886080 (level 1) [ 1776.287953][ T2023] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1776.288096][ T2023] EXT4-fs (loop1): Remounting filesystem read-only [ 1776.297615][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1776.297639][ C0] EXT4-fs (loop1): initial error at time 2000000645: ext4_free_branches:1023: inode 16 [ 1776.297687][ C0] EXT4-fs (loop1): last error at time 2000000645: ext4_free_branches:1023: inode 16 [ 1776.333831][ T2023] EXT4-fs (loop1): 1 orphan inode deleted [ 1776.339777][ T2023] EXT4-fs (loop1): 1 truncate cleaned up [ 1776.425355][ T2035] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1776.445518][ T2036] EXT4-fs: inline encryption not supported [ 1776.480962][ T2036] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.7732: bad orphan inode 15 [ 1776.491906][ T2042] EXT4-fs: Ignoring removed mblk_io_submit option [ 1776.499853][ T2036] loop2: lost filesystem error report for type 5 error -117 [ 1776.505665][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1776.519901][ C1] EXT4-fs (loop2): initial error at time 2000000645: ext4_orphan_get:1423 [ 1776.521911][ T2042] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1776.528654][ C1] EXT4-fs (loop2): last error at time 2000000645: ext4_orphan_get:1423 [ 1776.540939][ T2036] ext4_test_bit(bit=14, block=5) = 0 [ 1776.592924][ T2047] EXT4-fs: Ignoring removed bh option [ 1776.615667][ T2042] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7736: invalid indirect mapped block 83886080 (level 1) [ 1776.639993][ T2047] EXT4-fs (loop3): 1 truncate cleaned up [ 1776.654486][ T2042] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1776.655616][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1776.671665][ C0] EXT4-fs (loop1): initial error at time 2000000645: ext4_free_branches:1023: inode 16 [ 1776.681536][ C0] EXT4-fs (loop1): last error at time 2000000645: ext4_free_branches:1023: inode 16 [ 1776.692420][ T2042] EXT4-fs (loop1): Remounting filesystem read-only [ 1776.699425][ T2042] EXT4-fs (loop1): 1 orphan inode deleted [ 1776.705223][ T2042] EXT4-fs (loop1): 1 truncate cleaned up [ 1776.770532][ T2045] FAULT_INJECTION: forcing a failure. [ 1776.770532][ T2045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1776.809956][ T2045] CPU: 0 UID: 0 PID: 2045 Comm: syz.5.7739 Not tainted syzkaller #0 PREEMPT(lazy) [ 1776.810119][ T2045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1776.810132][ T2045] Call Trace: [ 1776.810139][ T2045] [ 1776.810147][ T2045] __dump_stack+0x1d/0x30 [ 1776.810230][ T2045] dump_stack_lvl+0x95/0xd0 [ 1776.810253][ T2045] dump_stack+0x15/0x1b [ 1776.810273][ T2045] should_fail_ex+0x263/0x280 [ 1776.810296][ T2045] should_fail_alloc_page+0xf2/0x100 [ 1776.810405][ T2045] __alloc_frozen_pages_noprof+0x108/0x350 [ 1776.810477][ T2045] alloc_pages_mpol+0xb3/0x260 [ 1776.810517][ T2045] alloc_migration_target_by_mpol+0x11b/0x2a0 [ 1776.810551][ T2045] migrate_pages_batch+0x35b/0x2010 [ 1776.810590][ T2045] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1776.810761][ T2045] ? __walk_page_range+0x324/0x340 [ 1776.810794][ T2045] migrate_pages+0x102e/0x1860 [ 1776.810897][ T2045] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1776.810930][ T2045] ? mbind_range+0xb5/0x430 [ 1776.811024][ T2045] __se_sys_mbind+0xc98/0xdd0 [ 1776.811052][ T2045] __x64_sys_mbind+0x78/0x90 [ 1776.811092][ T2045] x64_sys_call+0x2b72/0x3020 [ 1776.811120][ T2045] do_syscall_64+0x12c/0x3b0 [ 1776.811157][ T2045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.811184][ T2045] RIP: 0033:0x7f651d38ce59 [ 1776.811243][ T2045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.811266][ T2045] RSP: 002b:00007f651bde7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1776.811368][ T2045] RAX: ffffffffffffffda RBX: 00007f651d605fa0 RCX: 00007f651d38ce59 [ 1776.811386][ T2045] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 1776.811468][ T2045] RBP: 00007f651bde7090 R08: 0000000000000000 R09: 0000000000000002 [ 1776.811481][ T2045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1776.811494][ T2045] R13: 00007f651d606038 R14: 00007f651d605fa0 R15: 00007ffc619275a8 [ 1776.811515][ T2045] [ 1776.817691][ T2060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7744'. [ 1777.026635][ T2060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7744'. [ 1777.162130][ T2069] FAULT_INJECTION: forcing a failure. [ 1777.162130][ T2069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1777.201791][ T2069] CPU: 1 UID: 0 PID: 2069 Comm: syz.5.7746 Not tainted syzkaller #0 PREEMPT(lazy) [ 1777.201827][ T2069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1777.201843][ T2069] Call Trace: [ 1777.201850][ T2069] [ 1777.201858][ T2069] __dump_stack+0x1d/0x30 [ 1777.201945][ T2069] dump_stack_lvl+0x95/0xd0 [ 1777.201965][ T2069] dump_stack+0x15/0x1b [ 1777.201988][ T2069] should_fail_ex+0x263/0x280 [ 1777.202053][ T2069] should_fail_alloc_page+0xf2/0x100 [ 1777.202090][ T2069] __alloc_frozen_pages_noprof+0x108/0x350 [ 1777.202120][ T2069] alloc_pages_mpol+0xb3/0x260 [ 1777.202148][ T2069] folio_alloc_mpol_noprof+0x39/0x80 [ 1777.202184][ T2069] shmem_get_folio_gfp+0x3da/0xd60 [ 1777.202209][ T2069] shmem_fault+0xf6/0x250 [ 1777.202231][ T2069] handle_mm_fault+0x1a26/0x2e70 [ 1777.202318][ T2069] ? __pfx_shmem_fault+0x10/0x10 [ 1777.202371][ T2069] __get_user_pages+0x1290/0x1f10 [ 1777.202403][ T2069] ? path_openat+0x1ab2/0x2050 [ 1777.202510][ T2069] faultin_page_range+0x107/0x4d0 [ 1777.202609][ T2069] madvise_do_behavior+0x19f/0xa10 [ 1777.202634][ T2069] ? 0xffffffff81000000 [ 1777.202698][ T2069] ? __rcu_read_unlock+0x4e/0x70 [ 1777.202721][ T2069] do_madvise+0x10e/0x190 [ 1777.202761][ T2069] __x64_sys_madvise+0x63/0x80 [ 1777.202783][ T2069] x64_sys_call+0x1eff/0x3020 [ 1777.202828][ T2069] do_syscall_64+0x12c/0x3b0 [ 1777.202889][ T2069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.202911][ T2069] RIP: 0033:0x7f651d38ce59 [ 1777.203001][ T2069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1777.203061][ T2069] RSP: 002b:00007f651bde7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1777.203083][ T2069] RAX: ffffffffffffffda RBX: 00007f651d605fa0 RCX: 00007f651d38ce59 [ 1777.203190][ T2069] RDX: 0000000000000017 RSI: 0000000000c00304 RDI: 0000200000000000 [ 1777.203225][ T2069] RBP: 00007f651bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.203240][ T2069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.203254][ T2069] R13: 00007f651d606038 R14: 00007f651d605fa0 R15: 00007ffc619275a8 [ 1777.203289][ T2069] [ 1777.214071][ T2073] set_capacity_and_notify: 26 callbacks suppressed [ 1777.214089][ T2073] loop1: detected capacity change from 0 to 512 [ 1777.344408][ T2077] loop2: detected capacity change from 0 to 512 [ 1777.468480][ T2077] EXT4-fs: inline encryption not supported [ 1777.476220][ T2073] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1777.493269][ T2077] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.7750: bad orphan inode 15 [ 1777.505017][ T2077] loop2: lost filesystem error report for type 5 error -117 [ 1777.505217][ T2077] ext4_test_bit(bit=14, block=5) = 0 [ 1777.512906][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1777.512928][ C0] EXT4-fs (loop2): initial error at time 2000000646: ext4_orphan_get:1423 [ 1777.512953][ C0] EXT4-fs (loop2): last error at time 2000000646: ext4_orphan_get:1423 [ 1777.692781][ T2088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1777.723522][ T2088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1777.739802][ T2093] loop3: detected capacity change from 0 to 512 [ 1777.773522][ T2093] EXT4-fs: Ignoring removed mblk_io_submit option [ 1777.784433][ T2088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1777.792391][ T2093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1777.826601][ T2093] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7756: invalid indirect mapped block 83886080 (level 1) [ 1777.852900][ T2088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1777.883967][ T2093] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1777.885332][ T2088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1777.894519][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1777.894543][ C1] EXT4-fs (loop3): initial error at time 2000000646: ext4_free_branches:1023: inode 16 [ 1777.894571][ C1] EXT4-fs (loop3): last error at time 2000000646: ext4_free_branches:1023: inode 16 [ 1777.907776][ T2093] EXT4-fs (loop3): Remounting filesystem read-only [ 1777.911485][ T2088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1777.945023][ T2088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1777.955820][ T2093] EXT4-fs (loop3): 1 orphan inode deleted [ 1777.960256][ T2088] veth1_vlan: left promiscuous mode [ 1777.962528][ T2093] EXT4-fs (loop3): 1 truncate cleaned up [ 1777.989629][ T2088] veth0_vlan: left promiscuous mode [ 1778.002756][ T2088] veth0_vlan: entered promiscuous mode [ 1778.019708][ T2088] veth1_vlan: entered promiscuous mode [ 1778.026471][ T2104] netlink: 'syz.2.7757': attribute type 1 has an invalid length. [ 1778.038177][ T2104] netlink: 'syz.2.7757': attribute type 3 has an invalid length. [ 1778.047681][ T2088] veth1_macvtap: left promiscuous mode [ 1778.061007][ T2104] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7757'. [ 1778.071720][ T2088] veth0_macvtap: left promiscuous mode [ 1778.087802][ T2088] veth0_macvtap: entered promiscuous mode [ 1778.094343][ T2088] veth1_macvtap: entered promiscuous mode [ 1778.103209][ T2088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1778.112479][ T2088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1778.142888][ T2088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1778.151916][ T2088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1778.163428][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.170569][ T8043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1778.180260][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.187392][ T8043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1778.216365][ T2156] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.225993][ T2156] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.235733][ T2156] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.245117][ T2156] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.291362][ T2113] loop1: detected capacity change from 0 to 512 [ 1778.304261][ T2113] EXT4-fs: Ignoring removed bh option [ 1778.322857][ T2113] EXT4-fs (loop1): 1 truncate cleaned up [ 1778.333676][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1778.333693][ T28] audit: type=1400 audit(2000000647.134:1837): avc: denied { write } for pid=2112 comm="syz.1.7761" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1778.452048][ T2116] FAULT_INJECTION: forcing a failure. [ 1778.452048][ T2116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.479883][ T2116] CPU: 1 UID: 0 PID: 2116 Comm: syz.3.7760 Not tainted syzkaller #0 PREEMPT(lazy) [ 1778.479913][ T2116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1778.479927][ T2116] Call Trace: [ 1778.479934][ T2116] [ 1778.479943][ T2116] __dump_stack+0x1d/0x30 [ 1778.479971][ T2116] dump_stack_lvl+0x95/0xd0 [ 1778.480065][ T2116] dump_stack+0x15/0x1b [ 1778.480163][ T2116] should_fail_ex+0x263/0x280 [ 1778.480195][ T2116] should_fail+0xb/0x20 [ 1778.480234][ T2116] should_fail_usercopy+0x1a/0x20 [ 1778.480256][ T2116] _copy_to_user+0x20/0xa0 [ 1778.480349][ T2116] simple_read_from_buffer+0xb5/0x130 [ 1778.480411][ T2116] proc_fail_nth_read+0x10e/0x150 [ 1778.480444][ T2116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1778.480505][ T2116] vfs_read+0x1ab/0x7f0 [ 1778.480536][ T2116] ? __rcu_read_unlock+0x4e/0x70 [ 1778.480560][ T2116] ? __fget_files+0x184/0x1c0 [ 1778.480583][ T2116] ? mutex_lock+0x57/0x90 [ 1778.480615][ T2116] ksys_read+0xdc/0x1a0 [ 1778.480670][ T2116] __x64_sys_read+0x40/0x50 [ 1778.480703][ T2116] x64_sys_call+0x2886/0x3020 [ 1778.480727][ T2116] do_syscall_64+0x12c/0x3b0 [ 1778.480767][ T2116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.480811][ T2116] RIP: 0033:0x7ff234dfd68e [ 1778.480828][ T2116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1778.480846][ T2116] RSP: 002b:00007ff23386dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1778.480936][ T2116] RAX: ffffffffffffffda RBX: 00007ff23386e6c0 RCX: 00007ff234dfd68e [ 1778.480954][ T2116] RDX: 000000000000000f RSI: 00007ff23386e0a0 RDI: 0000000000000005 [ 1778.480967][ T2116] RBP: 00007ff23386e090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.480980][ T2116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.480992][ T2116] R13: 00007ff2350b6128 R14: 00007ff2350b6090 R15: 00007fff5c1110c8 [ 1778.481011][ T2116] [ 1778.693035][ T2121] loop1: detected capacity change from 0 to 512 [ 1778.701340][ T2122] loop5: detected capacity change from 0 to 512 [ 1778.706360][ T2121] EXT4-fs: Ignoring removed bh option [ 1778.710961][ T2122] EXT4-fs: inline encryption not supported [ 1778.734374][ T2122] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.7764: bad orphan inode 15 [ 1778.746004][ T2122] loop5: lost filesystem error report for type 5 error -117 [ 1778.749353][ T2122] ext4_test_bit(bit=14, block=5) = 0 [ 1778.765606][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1778.772600][ C0] EXT4-fs (loop5): initial error at time 2000000647: ext4_orphan_get:1423 [ 1778.773301][ T2121] EXT4-fs (loop1): 1 truncate cleaned up [ 1778.783177][ C0] EXT4-fs (loop5): last error at time 2000000647: ext4_orphan_get:1423 [ 1778.842510][ T28] audit: type=1400 audit(2000000647.634:1838): avc: denied { write } for pid=2119 comm="syz.1.7762" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1778.893633][ T28] audit: type=1400 audit(2000000647.684:1839): avc: denied { write } for pid=2127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1778.962439][ T28] audit: type=1400 audit(2000000647.724:1840): avc: denied { write } for pid=2141 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1779.017051][ T2150] loop3: detected capacity change from 0 to 512 [ 1779.023394][ T2145] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7765'. [ 1779.045197][ T2150] EXT4-fs: Ignoring removed mblk_io_submit option [ 1779.073521][ T2150] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1779.074465][ T2145] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7765'. [ 1779.113617][ T2150] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7767: invalid indirect mapped block 83886080 (level 1) [ 1779.141909][ T2150] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1779.142105][ T2150] EXT4-fs (loop3): Remounting filesystem read-only [ 1779.152177][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1779.152199][ C0] EXT4-fs (loop3): initial error at time 2000000647: ext4_free_branches:1023: inode 16 [ 1779.152232][ C0] EXT4-fs (loop3): last error at time 2000000647: ext4_free_branches:1023: inode 16 [ 1779.186090][ T2150] EXT4-fs (loop3): 1 orphan inode deleted [ 1779.192149][ T2150] EXT4-fs (loop3): 1 truncate cleaned up [ 1779.206815][ T28] audit: type=1400 audit(2000000647.994:1841): avc: denied { write } for pid=2151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1779.255142][ T2169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7779'. [ 1779.302131][ T2169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7779'. [ 1779.320829][ T28] audit: type=1400 audit(2000000647.994:1842): avc: denied { write } for pid=2149 comm="syz.3.7767" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1779.357966][ T28] audit: type=1400 audit(2000000648.074:1843): avc: denied { write } for pid=2172 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1779.435074][ T2184] loop3: detected capacity change from 0 to 512 [ 1779.448303][ T2184] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1779.464843][ T28] audit: type=1400 audit(2000000648.264:1844): avc: denied { write } for pid=2177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1779.488760][ T28] audit: type=1400 audit(2000000648.264:1845): avc: denied { write } for pid=2190 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1779.577146][ T2184] ext4 filesystem being mounted at /44/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1779.593938][ T28] audit: type=1400 audit(2000000648.384:1846): avc: denied { write } for pid=2174 comm="syz.3.7770" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1779.635079][ T2204] loop2: detected capacity change from 0 to 512 [ 1779.649386][ T2204] EXT4-fs: Ignoring removed bh option [ 1779.665470][ T2204] EXT4-fs (loop2): 1 truncate cleaned up [ 1779.756502][ T2216] loop2: detected capacity change from 0 to 512 [ 1779.763637][ T2216] EXT4-fs: Ignoring removed bh option [ 1779.787212][ T2216] EXT4-fs (loop2): 1 truncate cleaned up [ 1779.880516][ T2225] EXT4-fs: Ignoring removed orlov option [ 1779.986175][ T2237] EXT4-fs: inline encryption not supported [ 1780.003480][ T2237] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.7775: bad orphan inode 15 [ 1780.033442][ T2237] loop2: lost filesystem error report for type 5 error -117 [ 1780.034632][ T2237] ext4_test_bit(bit=14, block=5) = 0 [ 1780.042325][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1780.042352][ C1] EXT4-fs (loop2): initial error at time 2000000648: ext4_orphan_get:1423 [ 1780.042400][ C1] EXT4-fs (loop2): last error at time 2000000648: ext4_orphan_get:1423 [ 1780.052644][ T2247] EXT4-fs: Ignoring removed bh option [ 1780.093888][ T2247] EXT4-fs (loop3): 1 truncate cleaned up [ 1780.200373][ T2264] EXT4-fs: Ignoring removed mblk_io_submit option [ 1780.221523][ T2264] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1780.260740][ T2264] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.7782: invalid indirect mapped block 83886080 (level 1) [ 1780.266463][ T2271] EXT4-fs: Ignoring removed bh option [ 1780.281668][ T2264] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1780.281854][ T2264] EXT4-fs (loop2): Remounting filesystem read-only [ 1780.291574][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1780.291596][ C0] EXT4-fs (loop2): initial error at time 2000000649: ext4_free_branches:1023: inode 16 [ 1780.291629][ C0] EXT4-fs (loop2): last error at time 2000000649: ext4_free_branches:1023: inode 16 [ 1780.308662][ T2271] EXT4-fs (loop3): 1 truncate cleaned up [ 1780.346121][ T2264] EXT4-fs (loop2): 1 orphan inode deleted [ 1780.352521][ T2264] EXT4-fs (loop2): 1 truncate cleaned up [ 1780.383072][ T2274] siw: device registration error -23 [ 1780.829938][ T2282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7790'. [ 1780.888236][ T2287] EXT4-fs: inline encryption not supported [ 1780.903285][ T2287] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.7789: bad orphan inode 15 [ 1780.919853][ T2287] loop5: lost filesystem error report for type 5 error -117 [ 1780.920166][ T2287] ext4_test_bit(bit=14, block=5) = 0 [ 1780.956490][ T2285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1780.971626][ T2284] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1780.994846][ T2285] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1781.043254][ T2284] ext4 filesystem being mounted at /276/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1781.123006][ T2302] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7795'. [ 1781.139501][ T2304] EXT4-fs: Ignoring removed bh option [ 1781.146053][ T2302] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7795'. [ 1781.155371][ T2306] EXT4-fs: Ignoring removed mblk_io_submit option [ 1781.170639][ T2304] EXT4-fs (loop1): 1 truncate cleaned up [ 1781.202098][ T2306] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1781.214851][ T2306] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7797: invalid indirect mapped block 83886080 (level 1) [ 1781.231596][ T2306] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1781.231827][ T2306] EXT4-fs (loop3): Remounting filesystem read-only [ 1781.241373][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1781.241392][ C1] EXT4-fs (loop3): initial error at time 2000000650: ext4_free_branches:1023: inode 16 [ 1781.241418][ C1] EXT4-fs (loop3): last error at time 2000000650: ext4_free_branches:1023: inode 16 [ 1781.275133][ T2306] EXT4-fs (loop3): 1 orphan inode deleted [ 1781.281079][ T2306] EXT4-fs (loop3): 1 truncate cleaned up [ 1781.329832][ T2314] EXT4-fs: Ignoring removed mblk_io_submit option [ 1781.374628][ T2314] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1781.402834][ T2318] EXT4-fs: inline encryption not supported [ 1781.413367][ T2314] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7799: invalid indirect mapped block 83886080 (level 1) [ 1781.442261][ T2318] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.7801: bad orphan inode 15 [ 1781.463116][ T2314] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1781.463284][ T2314] EXT4-fs (loop1): Remounting filesystem read-only [ 1781.473280][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1781.473300][ C0] EXT4-fs (loop1): initial error at time 2000000650: ext4_free_branches:1023: inode 16 [ 1781.473327][ C0] EXT4-fs (loop1): last error at time 2000000650: ext4_free_branches:1023: inode 16 [ 1781.507453][ T2318] loop2: lost filesystem error report for type 5 error -117 [ 1781.508739][ T2314] EXT4-fs (loop1): 1 orphan inode deleted [ 1781.510984][ T2318] ext4_test_bit(bit=14, block=5) = 0 [ 1781.516117][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1781.516149][ C1] EXT4-fs (loop2): initial error at time 2000000650: ext4_orphan_get:1423 [ 1781.516171][ C1] EXT4-fs (loop2): last error at time 2000000650: ext4_orphan_get:1423 [ 1781.516203][ T2314] EXT4-fs (loop1): 1 truncate cleaned up [ 1781.535987][ T2323] batadv_slave_1: entered promiscuous mode [ 1781.702800][ T2325] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1781.763813][ T2325] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1782.113895][ T2337] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1782.138106][ T2321] batadv_slave_1: left promiscuous mode [ 1782.296365][ T2342] set_capacity_and_notify: 14 callbacks suppressed [ 1782.296384][ T2342] loop3: detected capacity change from 0 to 512 [ 1782.313028][ T2337] ext4 filesystem being mounted at /47/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1782.338062][ T2342] EXT4-fs: Ignoring removed bh option [ 1782.350204][ T2342] EXT4-fs (loop3): 1 truncate cleaned up [ 1782.379995][ T2347] loop1: detected capacity change from 0 to 512 [ 1782.389425][ T2347] EXT4-fs: Ignoring removed mblk_io_submit option [ 1782.402885][ T2347] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1782.417226][ T2347] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7810: invalid indirect mapped block 83886080 (level 1) [ 1782.432823][ T2347] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1782.433034][ T2347] EXT4-fs (loop1): Remounting filesystem read-only [ 1782.442539][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1782.442567][ C0] EXT4-fs (loop1): initial error at time 2000000651: ext4_free_branches:1023: inode 16 [ 1782.442614][ C0] EXT4-fs (loop1): last error at time 2000000651: ext4_free_branches:1023: inode 16 [ 1782.478698][ T2347] EXT4-fs (loop1): 1 orphan inode deleted [ 1782.485009][ T2347] EXT4-fs (loop1): 1 truncate cleaned up [ 1782.505398][ T2350] loop3: detected capacity change from 0 to 512 [ 1782.512943][ T2350] EXT4-fs: Ignoring removed bh option [ 1782.522368][ T2350] ext3: Unknown parameter 'noacl' [ 1782.533500][ T2350] Invalid logical block size (1553) [ 1782.569101][ T2352] FAULT_INJECTION: forcing a failure. [ 1782.569101][ T2352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1782.590427][ T2352] CPU: 0 UID: 0 PID: 2352 Comm: syz.4.7811 Not tainted syzkaller #0 PREEMPT(lazy) [ 1782.590457][ T2352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1782.590513][ T2352] Call Trace: [ 1782.590520][ T2352] [ 1782.590528][ T2352] __dump_stack+0x1d/0x30 [ 1782.590555][ T2352] dump_stack_lvl+0x95/0xd0 [ 1782.590576][ T2352] dump_stack+0x15/0x1b [ 1782.590599][ T2352] should_fail_ex+0x263/0x280 [ 1782.590641][ T2352] should_fail+0xb/0x20 [ 1782.590660][ T2352] should_fail_usercopy+0x1a/0x20 [ 1782.590683][ T2352] _copy_from_user+0x1c/0xb0 [ 1782.590739][ T2352] __sys_sendto+0x1ca/0x490 [ 1782.590768][ T2352] __x64_sys_sendto+0x76/0x90 [ 1782.590870][ T2352] x64_sys_call+0x2d35/0x3020 [ 1782.590942][ T2352] do_syscall_64+0x12c/0x3b0 [ 1782.590978][ T2352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.591004][ T2352] RIP: 0033:0x7f50806cce59 [ 1782.591066][ T2352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1782.591108][ T2352] RSP: 002b:00007f507f11f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1782.591131][ T2352] RAX: ffffffffffffffda RBX: 00007f5080945fa0 RCX: 00007f50806cce59 [ 1782.591144][ T2352] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 1782.591157][ T2352] RBP: 00007f507f11f090 R08: 0000200000000180 R09: 0000000000000014 [ 1782.591171][ T2352] R10: 00000000000440a4 R11: 0000000000000246 R12: 0000000000000001 [ 1782.591206][ T2352] R13: 00007f5080946038 R14: 00007f5080945fa0 R15: 00007ffdc6600758 [ 1782.591226][ T2352] [ 1782.784509][ T2359] loop2: detected capacity change from 0 to 512 [ 1782.789221][ T2362] loop1: detected capacity change from 0 to 512 [ 1782.807344][ T2359] EXT4-fs: Ignoring removed mblk_io_submit option [ 1782.838338][ T2359] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1782.857902][ T2354] loop4: detected capacity change from 0 to 512 [ 1782.886622][ T2354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1782.896833][ T2359] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.7814: invalid indirect mapped block 83886080 (level 1) [ 1782.912411][ T2362] EXT4-fs: Ignoring removed mblk_io_submit option [ 1782.931272][ T2359] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1782.937732][ T2374] __nla_validate_parse: 1 callbacks suppressed [ 1782.937748][ T2374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7817'. [ 1782.947728][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1782.947769][ C0] EXT4-fs (loop2): initial error at time 2000000651: ext4_free_branches:1023: inode 16 [ 1782.947806][ C0] EXT4-fs (loop2): last error at time 2000000651: ext4_free_branches:1023: inode 16 [ 1782.948228][ T2359] EXT4-fs (loop2): Remounting filesystem read-only [ 1782.955569][ T2362] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1783.011171][ T2359] EXT4-fs (loop2): 1 orphan inode deleted [ 1783.022594][ T2362] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7823: invalid indirect mapped block 83886080 (level 1) [ 1783.027403][ T2359] EXT4-fs (loop2): 1 truncate cleaned up [ 1783.046171][ T2362] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1783.046440][ T2362] EXT4-fs (loop1): Remounting filesystem read-only [ 1783.053716][ T2354] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1783.055851][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1783.055873][ C0] EXT4-fs (loop1): initial error at time 2000000651: ext4_free_branches:1023: inode 16 [ 1783.055907][ C0] EXT4-fs (loop1): last error at time 2000000651: ext4_free_branches:1023: inode 16 [ 1783.065372][ T2362] EXT4-fs (loop1): 1 orphan inode deleted [ 1783.106785][ T2362] EXT4-fs (loop1): 1 truncate cleaned up [ 1783.197736][ T2391] netlink: 'syz.1.7818': attribute type 1 has an invalid length. [ 1783.200462][ T2395] loop4: detected capacity change from 0 to 512 [ 1783.212095][ T2391] netlink: 'syz.1.7818': attribute type 3 has an invalid length. [ 1783.225277][ T2395] EXT4-fs: Ignoring removed bh option [ 1783.253373][ T2401] FAULT_INJECTION: forcing a failure. [ 1783.253373][ T2401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1783.254313][ T2391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7818'. [ 1783.267991][ T2401] CPU: 1 UID: 0 PID: 2401 Comm: syz.2.7826 Not tainted syzkaller #0 PREEMPT(lazy) [ 1783.268021][ T2401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1783.268035][ T2401] Call Trace: [ 1783.268043][ T2401] [ 1783.268053][ T2401] __dump_stack+0x1d/0x30 [ 1783.268099][ T2401] dump_stack_lvl+0x95/0xd0 [ 1783.268177][ T2401] dump_stack+0x15/0x1b [ 1783.268234][ T2401] should_fail_ex+0x263/0x280 [ 1783.268257][ T2401] should_fail+0xb/0x20 [ 1783.268276][ T2401] should_fail_usercopy+0x1a/0x20 [ 1783.268300][ T2401] _copy_from_user+0x1c/0xb0 [ 1783.268403][ T2401] ___sys_sendmsg+0xc1/0x1e0 [ 1783.268444][ T2401] __x64_sys_sendmsg+0xd4/0x160 [ 1783.268476][ T2401] x64_sys_call+0x194c/0x3020 [ 1783.268541][ T2401] do_syscall_64+0x12c/0x3b0 [ 1783.268577][ T2401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1783.268698][ T2401] RIP: 0033:0x7f6bd563ce59 [ 1783.268716][ T2401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1783.268745][ T2401] RSP: 002b:00007f6bd4097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1783.268774][ T2401] RAX: ffffffffffffffda RBX: 00007f6bd58b5fa0 RCX: 00007f6bd563ce59 [ 1783.268790][ T2401] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1783.268805][ T2401] RBP: 00007f6bd4097090 R08: 0000000000000000 R09: 0000000000000000 [ 1783.268820][ T2401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1783.268832][ T2401] R13: 00007f6bd58b6038 R14: 00007f6bd58b5fa0 R15: 00007ffe0258c5f8 [ 1783.268866][ T2401] [ 1783.445186][ T2395] EXT4-fs (loop4): 1 truncate cleaned up [ 1783.456247][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 1783.456261][ T28] audit: type=1400 audit(2000000652.254:1872): avc: denied { write } for pid=2394 comm="syz.4.7822" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1783.521096][ T2410] loop2: detected capacity change from 0 to 512 [ 1783.563453][ T2410] EXT4-fs: Ignoring removed bh option [ 1783.577914][ T28] audit: type=1400 audit(2000000652.374:1873): avc: denied { getopt } for pid=2413 comm="syz.4.7829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1783.610832][ T2410] EXT4-fs (loop2): 1 truncate cleaned up [ 1783.628263][ T2421] loop4: detected capacity change from 0 to 512 [ 1783.638977][ T28] audit: type=1400 audit(2000000652.414:1874): avc: denied { write } for pid=2409 comm="syz.2.7828" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1783.670169][ T2421] EXT4-fs: Ignoring removed mblk_io_submit option [ 1783.681305][ T2421] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1783.699370][ T2421] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.7830: invalid indirect mapped block 83886080 (level 1) [ 1783.714328][ T2421] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1783.714480][ T2421] EXT4-fs (loop4): Remounting filesystem read-only [ 1783.723929][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1783.723948][ C1] EXT4-fs (loop4): initial error at time 2000000652: ext4_free_branches:1023: inode 16 [ 1783.723976][ C1] EXT4-fs (loop4): last error at time 2000000652: ext4_free_branches:1023: inode 16 [ 1783.731303][ T28] audit: type=1400 audit(2000000652.524:1875): avc: denied { write } for pid=2411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1783.737898][ T2421] EXT4-fs (loop4): 1 orphan inode deleted [ 1783.786941][ T2421] EXT4-fs (loop4): 1 truncate cleaned up [ 1783.818017][ T28] audit: type=1400 audit(2000000652.604:1876): avc: denied { write } for pid=2420 comm="syz.4.7830" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1783.856325][ T2431] loop3: detected capacity change from 0 to 512 [ 1783.874974][ T2431] EXT4-fs: Ignoring removed mblk_io_submit option [ 1783.919265][ T28] audit: type=1400 audit(2000000652.644:1877): avc: denied { write } for pid=2429 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1783.919321][ T2431] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1783.957108][ T2434] EXT4-fs: Ignoring removed nobh option [ 1783.984996][ T2437] EXT4-fs: Ignoring removed nobh option [ 1783.998656][ T2431] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7831: invalid indirect mapped block 83886080 (level 1) [ 1784.002447][ T2434] EXT4-fs: Ignoring removed bh option [ 1784.019079][ T2437] EXT4-fs: Ignoring removed bh option [ 1784.028044][ T2437] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1784.039625][ T2431] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1784.045607][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1784.062172][ C0] EXT4-fs (loop3): initial error at time 2000000652: ext4_free_branches:1023: inode 16 [ 1784.072170][ C0] EXT4-fs (loop3): last error at time 2000000652: ext4_free_branches:1023: inode 16 [ 1784.082138][ T2431] EXT4-fs (loop3): Remounting filesystem read-only [ 1784.093326][ T2431] EXT4-fs (loop3): 1 orphan inode deleted [ 1784.099491][ T2431] EXT4-fs (loop3): 1 truncate cleaned up [ 1784.107492][ T2434] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1784.153757][ T28] audit: type=1400 audit(2000000652.944:1878): avc: denied { write } for pid=2438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1784.179651][ T2437] FAULT_INJECTION: forcing a failure. [ 1784.179651][ T2437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1784.204052][ T2437] CPU: 0 UID: 0 PID: 2437 Comm: syz.2.7833 Not tainted syzkaller #0 PREEMPT(lazy) [ 1784.204166][ T2437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1784.204180][ T2437] Call Trace: [ 1784.204187][ T2437] [ 1784.204196][ T2437] __dump_stack+0x1d/0x30 [ 1784.204220][ T2437] dump_stack_lvl+0x95/0xd0 [ 1784.204261][ T2437] dump_stack+0x15/0x1b [ 1784.204283][ T2437] should_fail_ex+0x263/0x280 [ 1784.204328][ T2437] should_fail+0xb/0x20 [ 1784.204408][ T2437] should_fail_usercopy+0x1a/0x20 [ 1784.204431][ T2437] _copy_to_user+0x20/0xa0 [ 1784.204505][ T2437] simple_read_from_buffer+0xb5/0x130 [ 1784.204542][ T2437] proc_fail_nth_read+0x10e/0x150 [ 1784.204594][ T2437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1784.204707][ T2437] vfs_read+0x1ab/0x7f0 [ 1784.204736][ T2437] ? __rcu_read_unlock+0x4e/0x70 [ 1784.204758][ T2437] ? __fget_files+0x184/0x1c0 [ 1784.204783][ T2437] ? mutex_lock+0x57/0x90 [ 1784.204813][ T2437] ksys_read+0xdc/0x1a0 [ 1784.204887][ T2437] __x64_sys_read+0x40/0x50 [ 1784.204921][ T2437] x64_sys_call+0x2886/0x3020 [ 1784.204949][ T2437] do_syscall_64+0x12c/0x3b0 [ 1784.205049][ T2437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.205072][ T2437] RIP: 0033:0x7f6bd55fd68e [ 1784.205089][ T2437] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1784.205109][ T2437] RSP: 002b:00007f6bd4096fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1784.205161][ T2437] RAX: ffffffffffffffda RBX: 00007f6bd40976c0 RCX: 00007f6bd55fd68e [ 1784.205178][ T2437] RDX: 000000000000000f RSI: 00007f6bd40970a0 RDI: 0000000000000008 [ 1784.205252][ T2437] RBP: 00007f6bd4097090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.205267][ T2437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1784.205279][ T2437] R13: 00007f6bd58b6038 R14: 00007f6bd58b5fa0 R15: 00007ffe0258c5f8 [ 1784.205300][ T2437] [ 1784.414898][ T28] audit: type=1400 audit(2000000652.994:1879): avc: denied { write } for pid=2430 comm="syz.3.7831" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1784.472341][ T28] audit: type=1400 audit(2000000653.264:1880): avc: denied { write } for pid=2456 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1784.557553][ T2469] ext4: Unknown parameter 'smackfsdef' [ 1784.583688][ T2471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7841'. [ 1784.609179][ T2473] EXT4-fs: Ignoring removed bh option [ 1784.612881][ T2469] netem: change failed [ 1784.646589][ T2473] EXT4-fs (loop2): 1 truncate cleaned up [ 1784.674377][ T28] audit: type=1400 audit(2000000653.464:1881): avc: denied { write } for pid=2472 comm="syz.2.7839" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1784.741098][ T2482] EXT4-fs: Ignoring removed mblk_io_submit option [ 1784.786340][ T2482] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1784.830393][ T2482] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.7842: invalid indirect mapped block 83886080 (level 1) [ 1784.896441][ T2482] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1784.896608][ T2482] EXT4-fs (loop4): Remounting filesystem read-only [ 1784.906316][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1784.906340][ C0] EXT4-fs (loop4): initial error at time 2000000653: ext4_free_branches:1023: inode 16 [ 1784.906378][ C0] EXT4-fs (loop4): last error at time 2000000653: ext4_free_branches:1023: inode 16 [ 1785.069851][ T2482] EXT4-fs (loop4): 1 orphan inode deleted [ 1785.096919][ T2482] EXT4-fs (loop4): 1 truncate cleaned up [ 1785.116122][ T2495] FAULT_INJECTION: forcing a failure. [ 1785.116122][ T2495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1785.197092][ T2495] CPU: 0 UID: 0 PID: 2495 Comm: syz.5.7843 Not tainted syzkaller #0 PREEMPT(lazy) [ 1785.197125][ T2495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1785.197193][ T2495] Call Trace: [ 1785.197200][ T2495] [ 1785.197210][ T2495] __dump_stack+0x1d/0x30 [ 1785.197305][ T2495] dump_stack_lvl+0x95/0xd0 [ 1785.197327][ T2495] dump_stack+0x15/0x1b [ 1785.197431][ T2495] should_fail_ex+0x263/0x280 [ 1785.197516][ T2495] should_fail+0xb/0x20 [ 1785.197535][ T2495] should_fail_usercopy+0x1a/0x20 [ 1785.197557][ T2495] _copy_to_user+0x20/0xa0 [ 1785.197643][ T2495] simple_read_from_buffer+0xb5/0x130 [ 1785.197679][ T2495] proc_fail_nth_read+0x10e/0x150 [ 1785.197712][ T2495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1785.197739][ T2495] vfs_read+0x1ab/0x7f0 [ 1785.197794][ T2495] ? kmem_cache_free+0xca/0x380 [ 1785.197821][ T2495] ? xfd_validate_state+0x45/0xf0 [ 1785.197905][ T2495] ksys_read+0xdc/0x1a0 [ 1785.197936][ T2495] __x64_sys_read+0x40/0x50 [ 1785.197967][ T2495] x64_sys_call+0x2886/0x3020 [ 1785.198063][ T2495] do_syscall_64+0x12c/0x3b0 [ 1785.198110][ T2495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.198137][ T2495] RIP: 0033:0x7f651d34d68e [ 1785.198157][ T2495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1785.198215][ T2495] RSP: 002b:00007f651bdc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1785.198237][ T2495] RAX: ffffffffffffffda RBX: 00007f651bdc66c0 RCX: 00007f651d34d68e [ 1785.198335][ T2495] RDX: 000000000000000f RSI: 00007f651bdc60a0 RDI: 0000000000000007 [ 1785.198349][ T2495] RBP: 00007f651bdc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.198365][ T2495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.198379][ T2495] R13: 00007f651d606128 R14: 00007f651d606090 R15: 00007ffc619275a8 [ 1785.198408][ T2495] [ 1785.718204][ T2552] program syz.3.7849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1785.799060][ T2564] netlink: 'syz.5.7852': attribute type 10 has an invalid length. [ 1785.885106][ T2574] EXT4-fs: Ignoring removed bh option [ 1785.939678][ T2574] EXT4-fs (loop1): 1 truncate cleaned up [ 1786.006589][ T2586] vfat: Unknown parameter '000000000000000000000050xffffffffffffffff' [ 1786.107000][ T2564] team0 (unregistering): Port device team_slave_0 removed [ 1786.135830][ T2579] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1786.148201][ T2564] team0 (unregistering): Port device team_slave_1 removed [ 1786.164211][ T2579] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1786.198472][ T2579] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1786.228519][ T2579] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1786.242185][ T2579] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1786.262225][ T2579] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1786.273767][ T2579] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1786.289805][ T2579] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1786.319106][ T2579] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1786.327309][ T2597] EXT4-fs: Ignoring removed bh option [ 1786.346488][ T2597] ext3: Unknown parameter 'noacl' [ 1786.388745][ T2579] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1786.851437][ T2645] EXT4-fs mount: 154 callbacks suppressed [ 1786.851477][ T2645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1786.884636][ T2645] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1787.204446][ T525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1787.228680][ T2678] netlink: 'syz.3.7870': attribute type 10 has an invalid length. [ 1787.252348][ T2680] ext4: Unknown parameter 'smackfsdef' [ 1787.267754][ T2678] team0 (unregistering): Port device team_slave_0 removed [ 1787.307801][ T2678] team0 (unregistering): Port device team_slave_1 removed [ 1787.318815][ T2680] netem: change failed [ 1787.329813][ T2681] set_capacity_and_notify: 12 callbacks suppressed [ 1787.329842][ T2681] loop3: detected capacity change from 0 to 128 [ 1787.360417][ T2681] vfat: Unknown parameter '000000000000000000000050xffffffffffffffff' [ 1787.553822][ T2699] siw: device registration error -23 [ 1787.812217][ T2704] macvtap1: entered promiscuous mode [ 1787.820986][ T2704] macvtap1: entered allmulticast mode [ 1787.828564][ T2704] veth1_vlan: entered allmulticast mode [ 1788.071818][ T2707] loop2: detected capacity change from 0 to 512 [ 1788.080115][ T2707] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1788.094738][ T2711] FAULT_INJECTION: forcing a failure. [ 1788.094738][ T2711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.109261][ T2711] CPU: 1 UID: 0 PID: 2711 Comm: syz.5.7885 Not tainted syzkaller #0 PREEMPT(lazy) [ 1788.109324][ T2711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1788.109338][ T2711] Call Trace: [ 1788.109345][ T2711] [ 1788.109354][ T2711] __dump_stack+0x1d/0x30 [ 1788.109384][ T2711] dump_stack_lvl+0x95/0xd0 [ 1788.109467][ T2711] dump_stack+0x15/0x1b [ 1788.109512][ T2711] should_fail_ex+0x263/0x280 [ 1788.109647][ T2711] should_fail+0xb/0x20 [ 1788.109670][ T2711] should_fail_usercopy+0x1a/0x20 [ 1788.109704][ T2711] _copy_to_user+0x20/0xa0 [ 1788.109731][ T2711] simple_read_from_buffer+0xb5/0x130 [ 1788.109769][ T2711] proc_fail_nth_read+0x10e/0x150 [ 1788.109799][ T2711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1788.109908][ T2711] vfs_read+0x1ab/0x7f0 [ 1788.109959][ T2711] ? __rcu_read_unlock+0x4e/0x70 [ 1788.109980][ T2711] ? __fget_files+0x184/0x1c0 [ 1788.110015][ T2711] ? mutex_lock+0x57/0x90 [ 1788.110043][ T2711] ksys_read+0xdc/0x1a0 [ 1788.110073][ T2711] __x64_sys_read+0x40/0x50 [ 1788.110163][ T2711] x64_sys_call+0x2886/0x3020 [ 1788.110297][ T2711] do_syscall_64+0x12c/0x3b0 [ 1788.110338][ T2711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.110393][ T2711] RIP: 0033:0x7f651d34d68e [ 1788.110412][ T2711] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1788.110434][ T2711] RSP: 002b:00007f651bde6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1788.110454][ T2711] RAX: ffffffffffffffda RBX: 00007f651bde76c0 RCX: 00007f651d34d68e [ 1788.110537][ T2711] RDX: 000000000000000f RSI: 00007f651bde70a0 RDI: 0000000000000004 [ 1788.110627][ T2711] RBP: 00007f651bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.110642][ T2711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.110655][ T2711] R13: 00007f651d606038 R14: 00007f651d605fa0 R15: 00007ffc619275a8 [ 1788.110735][ T2711] [ 1788.111479][ T2707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1788.188804][ T2718] loop5: detected capacity change from 0 to 512 [ 1788.195804][ T2707] ext4 filesystem being mounted at /295/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1788.215174][ T2718] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1788.358840][ T2718] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.7887: inode #1792: comm syz.5.7887: iget: illegal inode # [ 1788.358915][ T2718] loop5: lost filesystem error report for type 5 error -117 [ 1788.359283][ T2718] EXT4-fs (loop5): no journal found [ 1788.359317][ T2718] EXT4-fs (loop5): can't get journal size [ 1788.359738][ T2718] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1788.360047][ T2718] EXT4-fs (loop5): failed to initialize system zone (-22) [ 1788.360110][ T2718] EXT4-fs (loop5): mount failed [ 1788.433210][T29066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1788.463770][ T2721] loop3: detected capacity change from 0 to 512 [ 1788.475451][ T2721] EXT4-fs: Ignoring removed bh option [ 1788.487078][ T2723] netlink: 'syz.2.7889': attribute type 10 has an invalid length. [ 1788.514476][ T2721] EXT4-fs (loop3): 1 truncate cleaned up [ 1788.522002][ T2721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1788.551760][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1788.551845][ T28] audit: type=1400 audit(2000000657.344:1903): avc: denied { write } for pid=2720 comm="syz.3.7888" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1788.584396][ T2723] team0 (unregistering): Port device team_slave_1 removed [ 1788.618090][ T2737] loop2: detected capacity change from 0 to 128 [ 1788.624971][ T2737] vfat: Unknown parameter '000000000000000000000050xffffffffffffffff' [ 1788.649800][ T2732] FAULT_INJECTION: forcing a failure. [ 1788.649800][ T2732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.664038][ T2732] CPU: 1 UID: 0 PID: 2732 Comm: syz.5.7892 Not tainted syzkaller #0 PREEMPT(lazy) [ 1788.664069][ T2732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1788.664085][ T2732] Call Trace: [ 1788.664093][ T2732] [ 1788.664102][ T2732] __dump_stack+0x1d/0x30 [ 1788.664177][ T2732] dump_stack_lvl+0x95/0xd0 [ 1788.664197][ T2732] dump_stack+0x15/0x1b [ 1788.664215][ T2732] should_fail_ex+0x263/0x280 [ 1788.664338][ T2732] should_fail+0xb/0x20 [ 1788.664358][ T2732] should_fail_usercopy+0x1a/0x20 [ 1788.664383][ T2732] _copy_to_user+0x20/0xa0 [ 1788.664410][ T2732] simple_read_from_buffer+0xb5/0x130 [ 1788.664501][ T2732] proc_fail_nth_read+0x10e/0x150 [ 1788.664529][ T2732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1788.664556][ T2732] vfs_read+0x1ab/0x7f0 [ 1788.664692][ T2732] ? __rcu_read_unlock+0x4e/0x70 [ 1788.664717][ T2732] ? __fget_files+0x184/0x1c0 [ 1788.664741][ T2732] ? mutex_lock+0x57/0x90 [ 1788.664792][ T2732] ksys_read+0xdc/0x1a0 [ 1788.664824][ T2732] __x64_sys_read+0x40/0x50 [ 1788.664850][ T2732] x64_sys_call+0x2886/0x3020 [ 1788.664917][ T2732] do_syscall_64+0x12c/0x3b0 [ 1788.665017][ T2732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.665044][ T2732] RIP: 0033:0x7f651d34d68e [ 1788.665063][ T2732] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1788.665137][ T2732] RSP: 002b:00007f651bdc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1788.665189][ T2732] RAX: ffffffffffffffda RBX: 00007f651bdc66c0 RCX: 00007f651d34d68e [ 1788.665204][ T2732] RDX: 000000000000000f RSI: 00007f651bdc60a0 RDI: 0000000000000004 [ 1788.665218][ T2732] RBP: 00007f651bdc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.665231][ T2732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.665244][ T2732] R13: 00007f651d606128 R14: 00007f651d606090 R15: 00007ffc619275a8 [ 1788.665262][ T2732] [ 1789.020101][ T525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1790.157867][ T2756] loop4: detected capacity change from 0 to 512 [ 1790.260651][ T2757] siw: device registration error -23 [ 1790.297258][ T2756] EXT4-fs: Ignoring removed mblk_io_submit option [ 1790.387555][ T2756] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1790.463297][ T2756] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.7900: invalid indirect mapped block 83886080 (level 1) [ 1790.505822][ T2756] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1790.506069][ T2756] EXT4-fs (loop4): Remounting filesystem read-only [ 1790.522102][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1790.522127][ C0] EXT4-fs (loop4): initial error at time 2000000659: ext4_free_branches:1023: inode 16 [ 1790.522154][ C0] EXT4-fs (loop4): last error at time 2000000659: ext4_free_branches:1023: inode 16 [ 1790.558899][ T28] audit: type=1326 audit(2000000659.354:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2765 comm="syz.5.7904" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f651d38ce59 code=0x0 [ 1790.600995][ T2756] EXT4-fs (loop4): 1 orphan inode deleted [ 1790.607484][ T2756] EXT4-fs (loop4): 1 truncate cleaned up [ 1790.614126][ T2756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1790.642042][ T2761] loop1: detected capacity change from 0 to 512 [ 1790.649303][T32551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1790.660197][ T2761] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1790.716680][ T2761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1790.761354][ T2782] syzkaller0: entered promiscuous mode [ 1790.769572][ T2782] syzkaller0: entered allmulticast mode [ 1790.773346][ T2761] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1790.789655][ T2782] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.7907'. [ 1790.812616][ T28] audit: type=1400 audit(2000000659.604:1905): avc: denied { write } for pid=2760 comm="syz.1.7911" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1790.852647][ T2778] loop3: detected capacity change from 0 to 256 [ 1790.895562][ T1028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.010874][ T2778] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1791.023964][ T2778] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1791.036572][ T2778] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1791.050304][ T2778] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1791.051301][ T2790] loop1: detected capacity change from 0 to 256 [ 1791.062637][ T2778] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1791.086008][ T2794] loop4: detected capacity change from 0 to 256 [ 1791.104311][ T2778] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1791.127108][ T2778] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1791.142691][ T2778] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1791.156544][ T2778] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1791.167670][ T2775] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1791.181509][ T2790] FAULT_INJECTION: forcing a failure. [ 1791.181509][ T2790] name failslab, interval 1, probability 0, space 0, times 0 [ 1791.199174][ T2790] CPU: 1 UID: 0 PID: 2790 Comm: syz.1.7912 Not tainted syzkaller #0 PREEMPT(lazy) [ 1791.199205][ T2790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1791.199220][ T2790] Call Trace: [ 1791.199227][ T2790] [ 1791.199235][ T2790] __dump_stack+0x1d/0x30 [ 1791.199259][ T2790] dump_stack_lvl+0x95/0xd0 [ 1791.199283][ T2790] dump_stack+0x15/0x1b [ 1791.199304][ T2790] should_fail_ex+0x263/0x280 [ 1791.199327][ T2790] should_failslab+0x8c/0xb0 [ 1791.199359][ T2790] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1791.199403][ T2790] ? vm_area_dup+0x33/0x2c0 [ 1791.199437][ T2790] vm_area_dup+0x33/0x2c0 [ 1791.199471][ T2790] __split_vma+0xe9/0x640 [ 1791.199506][ T2790] vms_gather_munmap_vmas+0x2bc/0x850 [ 1791.199540][ T2790] mmap_region+0x7cd/0x20d0 [ 1791.199571][ T2790] ? avc_has_perm+0x101/0x190 [ 1791.199600][ T2790] ? perf_swevent_event+0x49b/0x4d0 [ 1791.199626][ T2790] ? tracing_gen_ctx_irq_test+0xe4/0x120 [ 1791.199676][ T2790] do_mmap+0x9b2/0xbd0 [ 1791.199700][ T2790] ? selinux_mmap_file+0x5d/0x70 [ 1791.199728][ T2790] vm_mmap_pgoff+0x183/0x2d0 [ 1791.199765][ T2790] ksys_mmap_pgoff+0x267/0x310 [ 1791.199793][ T2790] x64_sys_call+0x14df/0x3020 [ 1791.199820][ T2790] do_syscall_64+0x12c/0x3b0 [ 1791.199850][ T2790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.199872][ T2790] RIP: 0033:0x7f8ebb97ce59 [ 1791.199888][ T2790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.199908][ T2790] RSP: 002b:00007f8eba3cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1791.199932][ T2790] RAX: ffffffffffffffda RBX: 00007f8ebbbf5fa0 RCX: 00007f8ebb97ce59 [ 1791.199946][ T2790] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 1791.199960][ T2790] RBP: 00007f8eba3cf090 R08: 0000000000000009 R09: 0000000000000000 [ 1791.199974][ T2790] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 1791.199988][ T2790] R13: 00007f8ebbbf6038 R14: 00007f8ebbbf5fa0 R15: 00007ffff21027a8 [ 1791.200005][ T2790] [ 1791.474820][ T2799] macvtap1: entered promiscuous mode [ 1791.492066][ T2799] macvtap1: entered allmulticast mode [ 1791.500756][ T2799] veth1_vlan: entered allmulticast mode [ 1791.574180][ T2805] EXT4-fs: Ignoring removed mblk_io_submit option [ 1791.612019][ T2805] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1791.640153][ T2805] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7918: invalid indirect mapped block 83886080 (level 1) [ 1791.648462][ T2814] FAULT_INJECTION: forcing a failure. [ 1791.648462][ T2814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.668970][ T2805] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1791.673230][ T2805] EXT4-fs (loop3): Remounting filesystem read-only [ 1791.682852][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1791.682877][ C1] EXT4-fs (loop3): initial error at time 2000000660: ext4_free_branches:1023: inode 16 [ 1791.682911][ C1] EXT4-fs (loop3): last error at time 2000000660: ext4_free_branches:1023: inode 16 [ 1791.736240][ T2814] CPU: 1 UID: 0 PID: 2814 Comm: syz.5.7931 Not tainted syzkaller #0 PREEMPT(lazy) [ 1791.736271][ T2814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1791.736285][ T2814] Call Trace: [ 1791.736293][ T2814] [ 1791.736303][ T2814] __dump_stack+0x1d/0x30 [ 1791.736332][ T2814] dump_stack_lvl+0x95/0xd0 [ 1791.736356][ T2814] dump_stack+0x15/0x1b [ 1791.736429][ T2814] should_fail_ex+0x263/0x280 [ 1791.736451][ T2814] should_fail+0xb/0x20 [ 1791.736469][ T2814] should_fail_usercopy+0x1a/0x20 [ 1791.736845][ T2814] _copy_from_user+0x1c/0xb0 [ 1791.736878][ T2814] ___sys_sendmsg+0xc1/0x1e0 [ 1791.737017][ T2814] __x64_sys_sendmsg+0xd4/0x160 [ 1791.737068][ T2814] x64_sys_call+0x194c/0x3020 [ 1791.737165][ T2814] do_syscall_64+0x12c/0x3b0 [ 1791.737202][ T2814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.737238][ T2814] RIP: 0033:0x7f651d38ce59 [ 1791.737255][ T2814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.737348][ T2814] RSP: 002b:00007f651bde7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1791.737389][ T2814] RAX: ffffffffffffffda RBX: 00007f651d605fa0 RCX: 00007f651d38ce59 [ 1791.737441][ T2814] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1791.737454][ T2814] RBP: 00007f651bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 1791.737468][ T2814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1791.737481][ T2814] R13: 00007f651d606038 R14: 00007f651d605fa0 R15: 00007ffc619275a8 [ 1791.737562][ T2814] [ 1791.739576][ T2805] EXT4-fs (loop3): 1 orphan inode deleted [ 1791.918310][ T2805] EXT4-fs (loop3): 1 truncate cleaned up [ 1791.924532][ T2805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1791.955406][ T2820] FAULT_INJECTION: forcing a failure. [ 1791.955406][ T2820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.955448][ T2820] CPU: 1 UID: 0 PID: 2820 Comm: syz.5.7922 Not tainted syzkaller #0 PREEMPT(lazy) [ 1791.955540][ T2820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1791.955554][ T2820] Call Trace: [ 1791.955561][ T2820] [ 1791.955569][ T2820] __dump_stack+0x1d/0x30 [ 1791.955662][ T2820] dump_stack_lvl+0x95/0xd0 [ 1791.955686][ T2820] dump_stack+0x15/0x1b [ 1791.955762][ T2820] should_fail_ex+0x263/0x280 [ 1791.955785][ T2820] should_fail+0xb/0x20 [ 1791.955803][ T2820] should_fail_usercopy+0x1a/0x20 [ 1791.955831][ T2820] _copy_from_user+0x1c/0xb0 [ 1791.955887][ T2820] __sys_bind+0x106/0x290 [ 1791.955912][ T2820] __x64_sys_bind+0x3f/0x50 [ 1791.955935][ T2820] x64_sys_call+0x2b30/0x3020 [ 1791.955959][ T2820] do_syscall_64+0x12c/0x3b0 [ 1791.955992][ T2820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.956082][ T2820] RIP: 0033:0x7f651d38ce59 [ 1791.956099][ T2820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.956119][ T2820] RSP: 002b:00007f651bde7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1791.956142][ T2820] RAX: ffffffffffffffda RBX: 00007f651d605fa0 RCX: 00007f651d38ce59 [ 1791.956157][ T2820] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 1791.956301][ T2820] RBP: 00007f651bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 1791.956316][ T2820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1791.956330][ T2820] R13: 00007f651d606038 R14: 00007f651d605fa0 R15: 00007ffc619275a8 [ 1791.956349][ T2820] [ 1791.974040][ T525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1792.022222][ T2825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1792.328084][ T2839] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1792.335806][ T2822] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.347422][ T2833] set_capacity_and_notify: 3 callbacks suppressed [ 1792.347438][ T2833] loop1: detected capacity change from 0 to 256 [ 1792.363306][ T2822] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1792.365551][ T2839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1792.375517][ T2822] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1792.398134][ T2822] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1792.403437][ T2833] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.410187][ T2822] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1792.415735][ T2839] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1792.425848][ T2821] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1792.436601][ T2833] FAULT_INJECTION: forcing a failure. [ 1792.436601][ T2833] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.446751][ T2821] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1792.467762][ T2833] CPU: 0 UID: 0 PID: 2833 Comm: syz.1.7925 Not tainted syzkaller #0 PREEMPT(lazy) [ 1792.467792][ T2833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1792.467805][ T2833] Call Trace: [ 1792.467813][ T2833] [ 1792.467822][ T2833] __dump_stack+0x1d/0x30 [ 1792.467848][ T2833] dump_stack_lvl+0x95/0xd0 [ 1792.467869][ T2833] dump_stack+0x15/0x1b [ 1792.467889][ T2833] should_fail_ex+0x263/0x280 [ 1792.467911][ T2833] should_failslab+0x8c/0xb0 [ 1792.467943][ T2833] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1792.467977][ T2833] ? vm_area_dup+0x33/0x2c0 [ 1792.468011][ T2833] vm_area_dup+0x33/0x2c0 [ 1792.468044][ T2833] __split_vma+0xe9/0x640 [ 1792.468079][ T2833] vms_gather_munmap_vmas+0x2bc/0x850 [ 1792.468111][ T2833] mmap_region+0x7cd/0x20d0 [ 1792.468142][ T2833] ? avc_has_perm+0x101/0x190 [ 1792.468173][ T2833] ? perf_swevent_event+0x49b/0x4d0 [ 1792.468198][ T2833] ? tracing_gen_ctx_irq_test+0xe4/0x120 [ 1792.468243][ T2833] do_mmap+0x9b2/0xbd0 [ 1792.468272][ T2833] ? selinux_mmap_file+0x5d/0x70 [ 1792.468298][ T2833] vm_mmap_pgoff+0x183/0x2d0 [ 1792.468333][ T2833] ksys_mmap_pgoff+0x267/0x310 [ 1792.468357][ T2833] x64_sys_call+0x14df/0x3020 [ 1792.468382][ T2833] do_syscall_64+0x12c/0x3b0 [ 1792.468417][ T2833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.468440][ T2833] RIP: 0033:0x7f8ebb97ce59 [ 1792.468460][ T2833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1792.468480][ T2833] RSP: 002b:00007f8eba3cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1792.468501][ T2833] RAX: ffffffffffffffda RBX: 00007f8ebbbf5fa0 RCX: 00007f8ebb97ce59 [ 1792.468517][ T2833] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 1792.468531][ T2833] RBP: 00007f8eba3cf090 R08: 0000000000000009 R09: 0000000000000000 [ 1792.468545][ T2833] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 1792.468558][ T2833] R13: 00007f8ebbbf6038 R14: 00007f8ebbbf5fa0 R15: 00007ffff21027a8 [ 1792.468579][ T2833] [ 1792.502145][ T28] audit: type=1400 audit(2000000661.304:1906): avc: denied { write } for pid=2838 comm="syz.3.7928" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1792.503663][ T2821] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1792.611783][ T28] audit: type=1400 audit(2000000661.414:1907): avc: denied { map } for pid=2845 comm="syz.1.7932" path="/dev/ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1792.633475][ T2822] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1792.755912][ T2822] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1792.771552][ T2822] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1792.794550][ T525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1792.841368][ T28] audit: type=1400 audit(2000000661.624:1908): avc: denied { write } for pid=2850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1792.908056][ T2870] loop3: detected capacity change from 0 to 512 [ 1792.929435][ T2870] EXT4-fs: Ignoring removed mblk_io_submit option [ 1792.941472][ T28] audit: type=1400 audit(2000000661.704:1909): avc: denied { write } for pid=2871 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1792.988419][ T2874] FAULT_INJECTION: forcing a failure. [ 1792.988419][ T2874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1793.004492][ T2870] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1793.014229][ T2874] CPU: 0 UID: 0 PID: 2874 Comm: syz.1.7937 Not tainted syzkaller #0 PREEMPT(lazy) [ 1793.014260][ T2874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1793.014274][ T2874] Call Trace: [ 1793.014286][ T2874] [ 1793.014303][ T2874] __dump_stack+0x1d/0x30 [ 1793.014363][ T2874] dump_stack_lvl+0x95/0xd0 [ 1793.014386][ T2874] dump_stack+0x15/0x1b [ 1793.014442][ T2874] should_fail_ex+0x263/0x280 [ 1793.014462][ T2874] should_fail+0xb/0x20 [ 1793.014478][ T2874] should_fail_usercopy+0x1a/0x20 [ 1793.014502][ T2874] _copy_from_user+0x1c/0xb0 [ 1793.014594][ T2874] __se_sys_msgctl+0x212/0x2a0 [ 1793.014624][ T2874] __x64_sys_msgctl+0x43/0x50 [ 1793.014807][ T2874] x64_sys_call+0xacf/0x3020 [ 1793.014902][ T2874] do_syscall_64+0x12c/0x3b0 [ 1793.014937][ T2874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.014962][ T2874] RIP: 0033:0x7f8ebb97ce59 [ 1793.014980][ T2874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.014999][ T2874] RSP: 002b:00007f8eba3cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 1793.015048][ T2874] RAX: ffffffffffffffda RBX: 00007f8ebbbf5fa0 RCX: 00007f8ebb97ce59 [ 1793.015065][ T2874] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1793.015086][ T2874] RBP: 00007f8eba3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.015100][ T2874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.015187][ T2874] R13: 00007f8ebbbf6038 R14: 00007f8ebbbf5fa0 R15: 00007ffff21027a8 [ 1793.015279][ T2874] [ 1793.196001][ T2870] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7936: invalid indirect mapped block 83886080 (level 1) [ 1793.247190][ T2870] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1793.248223][ T2870] EXT4-fs (loop3): Remounting filesystem read-only [ 1793.257488][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1793.257511][ C1] EXT4-fs (loop3): initial error at time 2000000662: ext4_free_branches:1023: inode 16 [ 1793.257547][ C1] EXT4-fs (loop3): last error at time 2000000662: ext4_free_branches:1023: inode 16 [ 1793.291484][ T2870] EXT4-fs (loop3): 1 orphan inode deleted [ 1793.298087][ T2870] EXT4-fs (loop3): 1 truncate cleaned up [ 1793.305009][ T2870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1793.348998][ T28] audit: type=1400 audit(2000000662.144:1910): avc: denied { write } for pid=2875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1793.349634][ T525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1793.408035][ T28] audit: type=1400 audit(2000000662.204:1911): avc: denied { write } for pid=2907 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1793.429164][ T2911] loop3: detected capacity change from 0 to 512 [ 1793.429574][ T2911] EXT4-fs: Ignoring removed nobh option [ 1793.429598][ T2911] ext3: Unknown parameter 'uid>00000000000000000000' [ 1793.527846][ T28] audit: type=1400 audit(2000000662.324:1912): avc: denied { ioctl } for pid=2919 comm="syz.3.7948" path="socket:[107698]" dev="sockfs" ino=107698 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1793.563346][ T2918] FAULT_INJECTION: forcing a failure. [ 1793.563346][ T2918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1793.594510][ T2918] CPU: 0 UID: 0 PID: 2918 Comm: syz.1.7947 Not tainted syzkaller #0 PREEMPT(lazy) [ 1793.594542][ T2918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1793.594556][ T2918] Call Trace: [ 1793.594626][ T2918] [ 1793.594636][ T2918] __dump_stack+0x1d/0x30 [ 1793.594666][ T2918] dump_stack_lvl+0x95/0xd0 [ 1793.594691][ T2918] dump_stack+0x15/0x1b [ 1793.594713][ T2918] should_fail_ex+0x263/0x280 [ 1793.594745][ T2918] should_fail+0xb/0x20 [ 1793.594764][ T2918] should_fail_usercopy+0x1a/0x20 [ 1793.594838][ T2918] _copy_from_user+0x1c/0xb0 [ 1793.594899][ T2918] ___sys_sendmsg+0xc1/0x1e0 [ 1793.594960][ T2918] __x64_sys_sendmsg+0xd4/0x160 [ 1793.594995][ T2918] x64_sys_call+0x194c/0x3020 [ 1793.595038][ T2918] do_syscall_64+0x12c/0x3b0 [ 1793.595152][ T2918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.595222][ T2918] RIP: 0033:0x7f8ebb97ce59 [ 1793.595238][ T2918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.595268][ T2918] RSP: 002b:00007f8eba3ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1793.595292][ T2918] RAX: ffffffffffffffda RBX: 00007f8ebbbf6090 RCX: 00007f8ebb97ce59 [ 1793.595333][ T2918] RDX: 0000000000000008 RSI: 0000200000000480 RDI: 0000000000000008 [ 1793.595349][ T2918] RBP: 00007f8eba3ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.595364][ T2918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.595379][ T2918] R13: 00007f8ebbbf6128 R14: 00007f8ebbbf6090 R15: 00007ffff21027a8 [ 1793.595402][ T2918] [ 1793.775564][ T2926] loop5: detected capacity change from 0 to 512 [ 1793.798934][ T2926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1793.817560][ T2926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1793.833097][ T2926] ext4 filesystem being mounted at /87/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1793.852158][ T28] audit: type=1400 audit(2000000662.644:1913): avc: denied { write } for pid=2925 comm="syz.5.7950" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1793.879003][ T28] audit: type=1400 audit(2000000662.674:1914): avc: denied { read } for pid=2929 comm="syz.2.7951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1793.911277][ T588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1793.951686][ T2935] loop5: detected capacity change from 0 to 512 [ 1793.958944][ T2935] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1793.969411][ T2935] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7953: bg 0: block 393: padding at end of block bitmap is not set [ 1793.983816][ T2935] loop5: lost filesystem error report for type 5 error -117 [ 1793.984128][ T2935] EXT4-fs (loop5): Remounting filesystem read-only [ 1793.985610][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1793.994494][ T2935] EXT4-fs (loop5): 2 truncates cleaned up [ 1793.998058][ C1] EXT4-fs (loop5): initial error at time 2000000662: ext4_validate_block_bitmap:441 [ 1794.005295][ T2935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1794.010827][ C1] [ 1794.010837][ C1] EXT4-fs (loop5): last error at time 2000000662: ext4_validate_block_bitmap:441 [ 1794.049124][ T28] audit: type=1400 audit(2000000662.844:1915): avc: denied { write } for pid=2934 comm="syz.5.7953" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1794.080160][ T588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1794.136263][ T2941] loop5: detected capacity change from 0 to 512 [ 1794.144646][ T2941] EXT4-fs: Ignoring removed mblk_io_submit option [ 1794.152767][ T2941] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1794.164464][ T2941] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.7955: invalid indirect mapped block 83886080 (level 1) [ 1794.180393][ T2941] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1794.180540][ T2941] EXT4-fs (loop5): Remounting filesystem read-only [ 1794.190479][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1794.190503][ C0] EXT4-fs (loop5): initial error at time 2000000662: ext4_free_branches:1023: inode 16 [ 1794.190529][ C0] EXT4-fs (loop5): last error at time 2000000662: ext4_free_branches:1023: inode 16 [ 1794.226379][ T2949] loop2: detected capacity change from 0 to 512 [ 1794.233537][ T2941] EXT4-fs (loop5): 1 orphan inode deleted [ 1794.255967][ T2949] EXT4-fs: Ignoring removed bh option [ 1794.264954][ T2941] EXT4-fs (loop5): 1 truncate cleaned up [ 1794.274586][ T2949] ext3: Unknown parameter 'noacl' [ 1794.288042][ T2941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1794.370339][ T2955] SELinux: Context : is not valid (left unmapped). [ 1794.374790][ T28] audit: type=1400 audit(2000000663.164:1916): avc: denied { mac_admin } for pid=2954 comm="syz.2.7960" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1794.399708][ T2951] loop4: detected capacity change from 0 to 512 [ 1794.401545][ T28] audit: type=1400 audit(2000000663.184:1917): avc: denied { relabelto } for pid=2954 comm="syz.2.7960" name="rdma.current" dev="tmpfs" ino=1644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 1794.432166][ T588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1794.440775][ T28] audit: type=1400 audit(2000000663.184:1918): avc: denied { associate } for pid=2954 comm="syz.2.7960" name="rdma.current" dev="tmpfs" ino=1644 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 1794.467919][ T28] audit: type=1400 audit(2000000663.184:1919): avc: denied { unlink } for pid=29066 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 1794.477063][ T2951] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1794.502702][ T2951] System zones: 0-2, 18-18, 34-34 [ 1794.536433][ T2961] loop5: detected capacity change from 0 to 512 [ 1794.625172][ T2966] loop1: detected capacity change from 0 to 512 [ 1794.678720][ T2951] EXT4-fs (loop4): 1 orphan inode deleted [ 1794.689321][ T2961] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1794.699139][ T2966] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1794.712122][ T8043] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1794.728619][ T2951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1794.746961][ T8043] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1 [ 1794.761184][ T2966] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7963: bg 0: block 393: padding at end of block bitmap is not set [ 1794.779973][ T2951] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1794.796205][ T2961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1794.813748][ T8043] EXT4-fs (loop4): Remounting filesystem read-only [ 1794.822310][ T2966] loop1: lost filesystem error report for type 5 error -117 [ 1794.822856][ T2966] EXT4-fs (loop1): Remounting filesystem read-only [ 1794.830547][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1794.830566][ C0] EXT4-fs (loop1): initial error at time 2000000663: ext4_validate_block_bitmap:441 [ 1794.830602][ C0] EXT4-fs (loop1): last error at time 2000000663: ext4_validate_block_bitmap:441 [ 1794.867577][ T2961] ext4 filesystem being mounted at /92/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1794.924963][ T28] audit: type=1400 audit(2000000663.694:1920): avc: denied { write } for pid=2960 comm="syz.5.7962" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1794.962216][ T2966] EXT4-fs (loop1): 2 truncates cleaned up [ 1794.968535][ T2966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1794.991213][ T588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1794.996656][ T28] audit: type=1400 audit(2000000663.794:1921): avc: denied { write } for pid=2965 comm="syz.1.7963" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1795.045057][ T1028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1795.066890][ T2976] bridge_slave_0: left allmulticast mode [ 1795.078922][T32551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1795.093114][ T2976] bridge_slave_0: left promiscuous mode [ 1795.104824][ T2976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.119331][ T2976] bridge_slave_1: left allmulticast mode [ 1795.125994][ T2976] bridge_slave_1: left promiscuous mode [ 1795.137193][ T2976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.148344][ T2976] bond0: (slave bond_slave_0): Releasing backup interface [ 1795.180870][ T2976] bond0: (slave bond_slave_1): Releasing backup interface [ 1795.207736][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1795.229659][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1795.238492][ T2989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.248375][ T2989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.274000][ T2976] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1795.323217][ T2990] iso9660: Unknown parameter 'euid' [ 1795.336602][ T2990] FAULT_INJECTION: forcing a failure. [ 1795.336602][ T2990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.350504][ T2990] CPU: 1 UID: 0 PID: 2990 Comm: syz.5.7968 Not tainted syzkaller #0 PREEMPT(lazy) [ 1795.350540][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1795.350553][ T2990] Call Trace: [ 1795.350560][ T2990] [ 1795.350569][ T2990] __dump_stack+0x1d/0x30 [ 1795.350647][ T2990] dump_stack_lvl+0x95/0xd0 [ 1795.350669][ T2990] dump_stack+0x15/0x1b [ 1795.350693][ T2990] should_fail_ex+0x263/0x280 [ 1795.350718][ T2990] should_fail+0xb/0x20 [ 1795.350737][ T2990] should_fail_usercopy+0x1a/0x20 [ 1795.350779][ T2990] _copy_from_user+0x1c/0xb0 [ 1795.350804][ T2990] ___sys_sendmsg+0xc1/0x1e0 [ 1795.350842][ T2990] __x64_sys_sendmsg+0xd4/0x160 [ 1795.350879][ T2990] x64_sys_call+0x194c/0x3020 [ 1795.350905][ T2990] do_syscall_64+0x12c/0x3b0 [ 1795.351003][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.351026][ T2990] RIP: 0033:0x7f651d38ce59 [ 1795.351042][ T2990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.351084][ T2990] RSP: 002b:00007f651bda5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1795.351108][ T2990] RAX: ffffffffffffffda RBX: 00007f651d606180 RCX: 00007f651d38ce59 [ 1795.351125][ T2990] RDX: 0000000000000008 RSI: 0000200000000480 RDI: 0000000000000007 [ 1795.351141][ T2990] RBP: 00007f651bda5090 R08: 0000000000000000 R09: 0000000000000000 [ 1795.351157][ T2990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1795.351169][ T2990] R13: 00007f651d606218 R14: 00007f651d606180 R15: 00007ffc619275a8 [ 1795.351245][ T2990] [ 1795.517454][ T2976] netlink: 5720 bytes leftover after parsing attributes in process `syz.3.7964'. [ 1795.534805][ T2976] netlink: 5720 bytes leftover after parsing attributes in process `syz.3.7964'. [ 1795.546234][ T2986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1795.784882][ T2997] iso9660: Unknown parameter 'euid' [ 1796.053573][ T3001] EXT4-fs: Ignoring removed bh option [ 1796.066521][ T3001] ext3: Unknown parameter 'noacl' [ 1796.079195][T32551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1796.122578][ T3006] EXT4-fs: Ignoring removed mblk_io_submit option [ 1796.141617][ T3006] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1796.172489][ T3006] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.7972: invalid indirect mapped block 83886080 (level 1) [ 1796.188812][ T3006] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1796.189006][ T3006] EXT4-fs (loop4): Remounting filesystem read-only [ 1796.198501][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1796.198520][ C0] EXT4-fs (loop4): initial error at time 2000000664: ext4_free_branches:1023: inode 16 [ 1796.198547][ C0] EXT4-fs (loop4): last error at time 2000000664: ext4_free_branches:1023: inode 16 [ 1796.233080][ T3006] EXT4-fs (loop4): 1 orphan inode deleted [ 1796.240891][ T3006] EXT4-fs (loop4): 1 truncate cleaned up [ 1796.247863][ T3006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1796.275476][T32551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1796.303094][ T3011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7975'. [ 1796.331062][ T3013] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7976'. [ 1796.348309][ T3009] loop5: p1 < > p2 p4 < p5 > [ 1796.356186][ T3009] loop5: partition table partially beyond EOD, truncated [ 1796.390726][ T3009] loop5: p1 start 134217728 is beyond EOD, truncated [ 1796.397860][ T3009] loop5: p2 size 67072 extends beyond EOD, truncated [ 1796.406322][ T3009] loop5: p5 size 67072 extends beyond EOD, truncated [ 1796.429140][ T2982] loop5: p1 < > p2 p4 < p5 > [ 1796.434991][ T2982] loop5: partition table partially beyond EOD, truncated [ 1796.446068][ T3013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1796.459351][ T2982] loop5: p1 start 134217728 is beyond EOD, truncated [ 1796.466551][ T2982] loop5: p2 size 67072 extends beyond EOD, truncated [ 1796.475345][ T2982] loop5: p5 size 67072 extends beyond EOD, truncated [ 1796.495383][T26928] udevd[26928]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1796.497045][T26813] udevd[26813]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1796.550072][T27391] udevd[27391]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 1796.572818][ T3024] siw: device registration error -23 [ 1796.585525][ T3025] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #12: comm syz.4.7976: corrupted in-inode xattr: e_name out of bounds [ 1796.660733][T27391] udevd[27391]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 1796.676147][T26928] udevd[26928]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1796.692786][T26813] udevd[26813]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1796.836287][ T3025] EXT4-fs (loop4): Remounting filesystem read-only [ 1797.012839][T32551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1797.040116][ T3034] EXT4-fs: Ignoring removed bh option [ 1797.046097][ T3034] ext3: Unknown parameter 'noacl' [ 1797.076648][ T3036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7981'. [ 1797.092226][ T3036] vlan2: entered promiscuous mode [ 1797.099068][ T3036] bond_slave_1: entered promiscuous mode [ 1797.138976][ T3038] siw: device registration error -23 [ 1797.159399][ T3039] iso9660: Unknown parameter 'euid' [ 1797.352166][ T3041] EXT4-fs: Ignoring removed bh option [ 1797.389726][ T3041] ext3: Unknown parameter 'noacl' [ 1797.914048][ T3048] set_capacity_and_notify: 11 callbacks suppressed [ 1797.914067][ T3048] loop1: detected capacity change from 0 to 512 [ 1797.927669][ T3048] EXT4-fs: Ignoring removed mblk_io_submit option [ 1797.935689][ T3048] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1797.964869][ T3048] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7985: invalid indirect mapped block 83886080 (level 1) [ 1797.982176][ T3048] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1797.983607][ T3048] EXT4-fs (loop1): Remounting filesystem read-only [ 1797.993966][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1797.993989][ C0] EXT4-fs (loop1): initial error at time 2000000666: ext4_free_branches:1023: inode 16 [ 1797.994017][ C0] EXT4-fs (loop1): last error at time 2000000666: ext4_free_branches:1023: inode 16 [ 1798.035803][ T3048] EXT4-fs (loop1): 1 orphan inode deleted [ 1798.055516][ T3048] EXT4-fs (loop1): 1 truncate cleaned up [ 1798.083770][ T3048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1798.100422][ T3051] loop5: detected capacity change from 0 to 512 [ 1798.132693][ T3051] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1798.155811][ T1028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1798.172506][ T3061] loop3: detected capacity change from 0 to 512 [ 1798.178501][ T3051] System zones: 0-2, 18-18, 34-34 [ 1798.180572][ T3061] EXT4-fs: Ignoring removed bh option [ 1798.202350][ T3063] loop1: detected capacity change from 0 to 512 [ 1798.209872][ T3061] ext3: Unknown parameter 'noacl' [ 1798.218395][ T3063] EXT4-fs: Ignoring removed bh option [ 1798.242578][ T3051] EXT4-fs (loop5): 1 orphan inode deleted [ 1798.244117][ T3063] ext3: Unknown parameter 'noacl' [ 1798.255968][ T2156] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 1798.259435][ T3051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1798.282585][ T3051] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1798.298354][ T2156] EXT4-fs (loop5): Remounting filesystem read-only [ 1798.351021][ T3067] siw: device registration error -23 [ 1799.177458][ T3075] netlink: 'syz.1.7994': attribute type 10 has an invalid length. [ 1799.218220][ T3075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1799.226894][ T3075] team0: Port device netdevsim2 added [ 1799.254372][ T3079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7997'. [ 1799.272107][ T588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1799.278528][ T3079] vlan2: entered promiscuous mode [ 1799.291554][ T3079] bond_slave_1: entered promiscuous mode [ 1799.315072][ T3084] loop1: detected capacity change from 0 to 1764 [ 1799.322297][ T3084] iso9660: Unknown parameter 'euid' [ 1799.351356][ T3077] loop2: detected capacity change from 0 to 4096 [ 1799.375136][ T3077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1799.467677][ T3095] loop4: detected capacity change from 0 to 512 [ 1799.475052][ T3095] EXT4-fs: Ignoring removed mblk_io_submit option [ 1799.499076][ T3095] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1799.523421][ T3097] loop5: detected capacity change from 0 to 512 [ 1799.530732][ T3095] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.8002: invalid indirect mapped block 83886080 (level 1) [ 1799.546451][ T3097] ext4: Unknown parameter 'measure' [ 1799.563856][ T3095] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1799.565752][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1799.579460][ T3095] EXT4-fs (loop4): Remounting filesystem read-only [ 1799.582087][ C1] EXT4-fs (loop4): initial error at time 2000000668: ext4_free_branches:1023: inode 16 [ 1799.599292][ C1] EXT4-fs (loop4): last error at time 2000000668: ext4_free_branches:1023: inode 16 [ 1799.611353][ T3095] EXT4-fs (loop4): 1 orphan inode deleted [ 1799.619135][ T3095] EXT4-fs (loop4): 1 truncate cleaned up [ 1799.623943][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1799.624015][ T28] audit: type=1400 audit(2000000668.424:1925): avc: denied { write } for pid=3076 comm="syz.2.7996" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1799.625746][ T3095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1799.698260][T32551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1799.730120][T29066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1799.792923][ T3112] FAULT_INJECTION: forcing a failure. [ 1799.792923][ T3112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1799.808344][ T3112] CPU: 1 UID: 0 PID: 3112 Comm: syz.4.8004 Not tainted syzkaller #0 PREEMPT(lazy) [ 1799.808378][ T3112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1799.808391][ T3112] Call Trace: [ 1799.808398][ T3112] [ 1799.808486][ T3112] __dump_stack+0x1d/0x30 [ 1799.808538][ T3112] dump_stack_lvl+0x95/0xd0 [ 1799.808563][ T3112] dump_stack+0x15/0x1b [ 1799.808582][ T3112] should_fail_ex+0x263/0x280 [ 1799.808603][ T3112] should_fail+0xb/0x20 [ 1799.808698][ T3112] should_fail_usercopy+0x1a/0x20 [ 1799.808724][ T3112] _copy_from_user+0x1c/0xb0 [ 1799.808749][ T3112] ___sys_sendmsg+0xc1/0x1e0 [ 1799.808787][ T3112] __x64_sys_sendmsg+0xd4/0x160 [ 1799.808845][ T3112] x64_sys_call+0x194c/0x3020 [ 1799.808874][ T3112] do_syscall_64+0x12c/0x3b0 [ 1799.808913][ T3112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.808943][ T3112] RIP: 0033:0x7f50806cce59 [ 1799.808966][ T3112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1799.808984][ T3112] RSP: 002b:00007f507f0fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1799.809074][ T3112] RAX: ffffffffffffffda RBX: 00007f5080946090 RCX: 00007f50806cce59 [ 1799.809092][ T3112] RDX: 0000000000008000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1799.809108][ T3112] RBP: 00007f507f0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.809124][ T3112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.809189][ T3112] R13: 00007f5080946128 R14: 00007f5080946090 R15: 00007ffdc6600758 [ 1799.809213][ T3112] [ 1799.814987][ T3113] siw: device registration error -23 [ 1800.686537][ T3136] FAULT_INJECTION: forcing a failure. [ 1800.686537][ T3136] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.704156][ T3125] loop1: detected capacity change from 0 to 512 [ 1800.711726][ T3130] loop2: detected capacity change from 0 to 512 [ 1800.711724][ T3136] CPU: 1 UID: 0 PID: 3136 Comm: syz.4.8013 Not tainted syzkaller #0 PREEMPT(lazy) [ 1800.711754][ T3136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1800.711768][ T3136] Call Trace: [ 1800.711774][ T3136] [ 1800.711783][ T3136] __dump_stack+0x1d/0x30 [ 1800.711859][ T3136] dump_stack_lvl+0x95/0xd0 [ 1800.711882][ T3136] dump_stack+0x15/0x1b [ 1800.711903][ T3136] should_fail_ex+0x263/0x280 [ 1800.711948][ T3136] ? __se_sys_memfd_create+0x1df/0x3b0 [ 1800.712024][ T3136] should_failslab+0x8c/0xb0 [ 1800.712125][ T3136] __kmalloc_cache_noprof+0x5f/0x400 [ 1800.712250][ T3136] __se_sys_memfd_create+0x1df/0x3b0 [ 1800.712281][ T3136] __x64_sys_memfd_create+0x31/0x40 [ 1800.712310][ T3136] x64_sys_call+0x1f22/0x3020 [ 1800.712369][ T3136] do_syscall_64+0x12c/0x3b0 [ 1800.712404][ T3136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.712485][ T3136] RIP: 0033:0x7f50806cce59 [ 1800.712558][ T3136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1800.712579][ T3136] RSP: 002b:00007f507f11ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1800.712601][ T3136] RAX: ffffffffffffffda RBX: 0000000000000453 RCX: 00007f50806cce59 [ 1800.712617][ T3136] RDX: 00007f507f11eee0 RSI: 0000000000000000 RDI: 00007f5080762f4f [ 1800.712633][ T3136] RBP: 0000200000000f80 R08: 00000000ffffffff R09: 0000000000000000 [ 1800.712648][ T3136] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000300 [ 1800.712692][ T3136] R13: 00007f507f11eee0 R14: 00007f507f11eea0 R15: 0000200000000b40 [ 1800.712716][ T3136] [ 1800.809738][ T3125] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1800.824182][ T3140] EXT4-fs: Ignoring removed mblk_io_submit option [ 1800.831600][ T3125] System zones: [ 1800.917215][ T3140] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1800.922022][ T3125] 0-2 [ 1800.930682][ T3130] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1800.950034][ T3125] , 18-18, 34-34 [ 1800.966327][ T3125] EXT4-fs (loop1): 1 orphan inode deleted [ 1800.972673][ T3125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1800.990970][ T3140] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.8014: invalid indirect mapped block 83886080 (level 1) [ 1800.995942][ T2156] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1801.006589][ T3140] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1801.017516][ T3125] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1801.019251][ T2156] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 1801.028180][ T3140] EXT4-fs (loop4): Remounting filesystem read-only [ 1801.038227][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1801.038249][ C0] EXT4-fs (loop4): initial error at time 2000000669: ext4_free_branches:1023: inode 16 [ 1801.038289][ C0] EXT4-fs (loop4): last error at time 2000000669: ext4_free_branches:1023: inode 16 [ 1801.070503][ T3130] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.8012: corrupted xattr entries [ 1801.073897][ T2156] EXT4-fs (loop1): Remounting filesystem read-only [ 1801.084212][ T3130] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1801.103938][ T3140] EXT4-fs (loop4): 1 orphan inode deleted [ 1801.109879][ T3130] EXT4-fs (loop2): 1 truncate cleaned up [ 1801.113413][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1801.113433][ C1] EXT4-fs (loop2): initial error at time 2000000669: xattr_find_entry:337: inode 15 [ 1801.113462][ C1] EXT4-fs (loop2): last error at time 2000000669: xattr_find_entry:337: inode 15 [ 1801.113605][ T3140] EXT4-fs (loop4): 1 truncate cleaned up [ 1801.114031][ T3140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1801.145807][ T3130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1801.217228][T32551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1801.229850][ T1028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1801.284499][T29066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1801.310768][ T3156] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8020'. [ 1801.386650][ T3160] siw: device registration error -23 [ 1801.935190][ T3154] loop1: p1 < > p2 p4 < p5 > [ 1802.010441][ T3156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1802.034306][ T3154] loop1: partition table partially beyond EOD, truncated [ 1802.053908][ T3154] loop1: p1 start 134217728 is beyond EOD, truncated [ 1802.069400][ T28] audit: type=1400 audit(2000000670.864:1926): avc: denied { write } for pid=3155 comm="syz.5.8020" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1802.071446][ T3154] loop1: p2 size 67072 extends beyond EOD, truncated [ 1802.114433][ T3165] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #12: comm syz.5.8020: corrupted in-inode xattr: e_name out of bounds [ 1802.150558][ T3154] loop1: p5 size 67072 extends beyond EOD, truncated [ 1802.161805][ T3165] EXT4-fs (loop5): Remounting filesystem read-only [ 1802.186059][T26928] udevd[26928]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1802.187538][T26813] udevd[26813]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 1802.199072][ T2917] udevd[2917]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1802.301112][ T588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1825.551724][ T3175] set_capacity_and_notify: 3 callbacks suppressed [ 1825.551754][ T3175] loop4: detected capacity change from 0 to 1024 [ 1825.573209][ T3175] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 1825.573209][ T3175] [ 1825.600420][ T3181] loop5: detected capacity change from 0 to 512 [ 1825.647574][ T3181] EXT4-fs: Ignoring removed bh option [ 1825.661434][ T3181] ext3: Unknown parameter 'noacl' [ 1825.731449][ T3183] loop2: detected capacity change from 0 to 256 [ 1826.017449][ T3174] loop1: detected capacity change from 0 to 2048 [ 1827.045726][ T3174] loop1: p2 p3 p7 [ 1827.936225][ T3207] siw: device registration error -23 [ 1828.004913][ T3210] loop2: detected capacity change from 0 to 512 [ 1828.029509][ T3210] EXT4-fs: Ignoring removed mblk_io_submit option [ 1828.073744][ T3210] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1828.124533][ T3210] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.8034: invalid indirect mapped block 83886080 (level 1) [ 1828.158236][ T3210] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1828.163401][ T3210] EXT4-fs (loop2): Remounting filesystem read-only [ 1828.173300][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1828.173339][ C1] EXT4-fs (loop2): initial error at time 2000000696: ext4_free_branches:1023: inode 16 [ 1828.173369][ C1] EXT4-fs (loop2): last error at time 2000000696: ext4_free_branches:1023: inode 16 [ 1828.229890][ T3222] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8037'. [ 1828.248484][ T3218] loop3: detected capacity change from 0 to 8192 [ 1828.255443][ T3210] EXT4-fs (loop2): 1 orphan inode deleted [ 1828.261675][ T3210] EXT4-fs (loop2): 1 truncate cleaned up [ 1828.268183][ T3210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1828.284420][ T3211] udevd[3211]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1828.284798][ T3184] udevd[3184]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 1828.306462][ T3182] udevd[3182]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1828.312666][ T3223] loop1: detected capacity change from 0 to 2048 [ 1828.324737][ T3218] loop3: p1 < > p2 p4 < p5 > [ 1828.329828][ T3218] loop3: partition table partially beyond EOD, truncated [ 1828.337702][ T3218] loop3: p1 start 134217728 is beyond EOD, truncated [ 1828.344773][ T3218] loop3: p2 size 67072 extends beyond EOD, truncated [ 1828.355685][T29066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.358179][ T3218] loop3: p5 size 67072 extends beyond EOD, truncated [ 1828.378363][ T3228] loop4: detected capacity change from 0 to 512 [ 1828.385620][ T3228] EXT4-fs: Ignoring removed mblk_io_submit option [ 1828.395208][ T3228] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1828.407917][ T3228] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.8049: invalid indirect mapped block 83886080 (level 1) [ 1828.440177][ T3223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1828.441015][ T3231] loop2: detected capacity change from 0 to 1024 [ 1828.459621][ T3228] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1828.465601][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1828.472580][ T3231] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 1828.472580][ T3231] [ 1828.475466][ C1] EXT4-fs (loop4): initial error at time 2000000697: ext4_free_branches:1023: inode 16 [ 1828.504296][ C1] EXT4-fs (loop4): last error at time 2000000697: ext4_free_branches:1023: inode 16 [ 1828.507878][ T3228] EXT4-fs (loop4): Remounting filesystem read-only [ 1828.528107][ T3228] EXT4-fs (loop4): 1 orphan inode deleted [ 1828.534358][ T3228] EXT4-fs (loop4): 1 truncate cleaned up [ 1828.549216][ T3215] udevd[3215]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1828.555891][ T28] audit: type=1400 audit(2000000697.344:1927): avc: denied { write } for pid=3221 comm="syz.1.8037" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1828.559914][ T3211] udevd[3211]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 1828.582935][ T3228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1828.611752][ T3182] udevd[3182]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1828.625164][ T3223] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #12: comm syz.1.8037: corrupted in-inode xattr: e_name out of bounds [ 1828.666102][ T3223] EXT4-fs (loop1): Remounting filesystem read-only [ 1828.686164][T32551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.733388][ T3235] loop4: detected capacity change from 0 to 512 [ 1828.751934][ T3235] EXT4-fs: Ignoring removed mblk_io_submit option [ 1828.775913][ T3235] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1828.817298][ T3235] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.8051: invalid indirect mapped block 83886080 (level 1) [ 1828.845009][ T3235] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1828.845592][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1828.863232][ T3235] EXT4-fs (loop4): Remounting filesystem read-only [ 1828.863947][ C1] EXT4-fs (loop4): initial error at time 2000000697: ext4_free_branches:1023: inode 16 [ 1828.871300][ T3235] EXT4-fs (loop4): 1 orphan inode deleted [ 1828.884451][ C1] EXT4-fs (loop4): last error at time 2000000697: ext4_free_branches:1023: inode 16 [ 1828.907271][ T1028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.917103][ T3235] EXT4-fs (loop4): 1 truncate cleaned up [ 1828.923592][ T3235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1828.964961][T32551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1829.018739][ T3249] EXT4-fs: Ignoring removed bh option [ 1829.024822][ T3249] ext3: Unknown parameter 'noacl' [ 1829.659446][ T3266] xt_hashlimit: size too large, truncated to 1048576 [ 1829.828395][ T3275] EXT4-fs: Ignoring removed mblk_io_submit option [ 1829.884148][ T3275] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1829.925745][ T3275] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.8057: invalid indirect mapped block 83886080 (level 1) [ 1829.965644][ T3275] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1829.966154][ T3275] EXT4-fs (loop3): Remounting filesystem read-only [ 1829.976483][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1829.976509][ C0] EXT4-fs (loop3): initial error at time 2000000698: ext4_free_branches:1023: inode 16 [ 1829.976536][ C0] EXT4-fs (loop3): last error at time 2000000698: ext4_free_branches:1023: inode 16 [ 1830.067503][ T3284] EXT4-fs: Ignoring removed bh option [ 1830.082974][ T3284] ext3: Unknown parameter 'noacl' [ 1830.329998][ T3275] EXT4-fs (loop3): 1 orphan inode deleted [ 1830.395546][ T3275] EXT4-fs (loop3): 1 truncate cleaned up [ 1830.477928][ T3275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1830.530707][ T525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1830.643861][ T3295] netlink: 'syz.1.8063': attribute type 29 has an invalid length. [ 1830.668111][ T3295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8063'. [ 1830.681296][ T3272] ================================================================== [ 1830.689668][ T3272] BUG: KCSAN: data-race in __kernel_write_iter / set_task_ioprio [ 1830.697741][ T3272] [ 1830.700062][ T3272] write to 0xffff888104ee1a38 of 8 bytes by task 3304 on cpu 1: [ 1830.708387][ T3272] set_task_ioprio+0x24e/0x270 [ 1830.713643][ T3272] __se_sys_ioprio_set+0x24f/0x5a0 [ 1830.718843][ T3272] __x64_sys_ioprio_set+0x43/0x50 [ 1830.724031][ T3272] x64_sys_call+0x2bbf/0x3020 [ 1830.728790][ T3272] do_syscall_64+0x12c/0x3b0 [ 1830.733557][ T3272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.739611][ T3272] [ 1830.742007][ T3272] read to 0xffff888104ee1a38 of 8 bytes by task 3272 on cpu 0: [ 1830.750056][ T3272] __kernel_write_iter+0xdb/0x590 [ 1830.755421][ T3272] dump_user_range+0xa73/0xd00 [ 1830.760440][ T3272] elf_core_dump+0x21a2/0x2330 [ 1830.766242][ T3272] coredump_write+0xabd/0xdb0 [ 1830.771068][ T3272] vfs_coredump+0x26dd/0x31e0 [ 1830.775982][ T3272] get_signal+0xd5c/0xf20 [ 1830.780564][ T3272] arch_do_signal_or_restart+0x96/0x480 [ 1830.787263][ T3272] irqentry_exit+0x145/0x5d0 [ 1830.792319][ T3272] exc_general_protection+0x155/0x1e0 [ 1830.798900][ T3272] asm_exc_general_protection+0x26/0x30 [ 1830.805053][ T3272] [ 1830.807679][ T3272] value changed: 0x0000000000000000 -> 0xffff8881324ed6d0 [ 1830.815042][ T3272] [ 1830.817519][ T3272] Reported by Kernel Concurrency Sanitizer on: [ 1830.823914][ T3272] CPU: 0 UID: 0 PID: 3272 Comm: syz.4.8054 Not tainted syzkaller #0 PREEMPT(lazy) [ 1830.833280][ T3272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1830.843504][ T3272] ================================================================== [ 1830.970326][ T3306] siw: device registration error -23