last executing test programs: 12m10.981689949s ago: executing program 32 (id=108): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r6, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r10) connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0) unshare(0x22020600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x5}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 11m20.528187015s ago: executing program 33 (id=626): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000001140), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async, rerun: 32) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x3, {{0x2, 0xfffd, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) (async, rerun: 32) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast1}}}, 0x108) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x7ff, 0x0, 0x80000}, 0x100}) (async, rerun: 32) syz_io_uring_setup(0x446d, &(0x7f0000001180)={0x0, 0xb4c0, 0x80, 0x0, 0x2c7}, &(0x7f0000001200)=0x0, &(0x7f0000001240)) (async) syz_io_uring_setup(0x1249, &(0x7f0000000200)={0x0, 0xd59e, 0x1, 0x40000002, 0xbc}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000380)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) (async) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20040818) (async, rerun: 32) sendmsg$sock(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0xa}, 0x4000081) (rerun: 32) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000001340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x48, 0x0, r5, 0x0, &(0x7f0000001280)="9313e2cb3512ccd1c0d9aae4f2e8d341c6e75d8de662700c3af990ad8ee3fc437ee07b15800a9fc9074b33c0ac7d39bad13358e9a0bfbdebf29c19e30a5b9a73eb0908bc261175894de254f0ecbac6af565d94fb87cb84fb3d3e5576120d116efb7291bc9339859aa5789b8c5be6477734b9b6e0372b9e597e66de7941eebf429590403a6b91b7c50fcf8d1265309c43190051e1936c3fee7599358728b4ca19ddf7e86542feef9696373153a62a7e", 0xaf, 0x100, 0x1, {0x0, r6}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 64) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r8, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x0, 0x0) (async, rerun: 32) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001", @ANYRES32=0x0, @ANYBLOB], 0x48) (async) io_uring_setup(0x152a, &(0x7f0000000300)={0x0, 0x48f5, 0x2, 0x3, 0x380}) 9m17.636612851s ago: executing program 34 (id=1753): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x321481d, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x58ee, 0x800, 0x200, 0x13c}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x20040000}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 8m19.293740685s ago: executing program 35 (id=2302): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x0, 0x5, 0x7, 0x3, 0x80, 0x6}, @ipv6=@tcp={0x8, 0x6, "803e11", 0x14, 0x6, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa2, 0x1, 0x0, 0x5}}}}}, 0x4a) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0x20, r8, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xcb, 0x49}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r9, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000006"], 0x54}, 0x2, 0x34005}, 0x0) 6m15.232695301s ago: executing program 36 (id=3538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c7ffffc826a8", 0x0, 0x3a, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) creat(0x0, 0x0) open$dir(0x0, 0xc402, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x7fff, 0x1, &(0x7f0000000b00)=[{0x0, 0x0, 0x3, 0xfffffffffffffffe}], 0x3e0000) ioperm(0x0, 0xd, 0x4000000000000020) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r1, 0x402, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r2, &(0x7f0000000000)=""/90, 0x5a) ioperm(0x9, 0x300000000000, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x800c) ptrace(0x10, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kexec_load(0x7, 0x6, &(0x7f0000000700)=[{0x0, 0x0, 0x1, 0x9}, {&(0x7f0000000180)="d3a9c83017c9f214afb90c67d51e8e575868481eac2ac2d92c0a19f6f082b24c", 0x20, 0xbd0d, 0xffffffffffffd87c}, {&(0x7f00000001c0)="d80cd6499ae6014607d58674aa52823b8220080b67bccd8a7bd9538edd470a3056", 0x21, 0x8, 0xa}, {&(0x7f0000000400)="271260571a4ef58b7fd00785bda0a44fcb05dbbd847f256a131e3926dac5d5ed9e2b11ce3315fa83ae7298ef899ec95efed89374df7f68806939e577fe962966e0bfdfa77f54539a1aab23c261b283452e530b0daa9d8103cca39b6f3f6035768ab8b2481f2a664100d6d491", 0x6c, 0x9, 0x6}, {&(0x7f0000000480)="3346e17c77ac659bfd8164", 0xb, 0x1, 0x8}, {0x0, 0x0, 0x5, 0x70f}], 0x320000) 5m20.420443766s ago: executing program 37 (id=4193): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 5m8.272167657s ago: executing program 38 (id=4293): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916200000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x0, 0x0, 0x800, 0x2, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="180000008b040000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r2}]}, 0x24}}, 0x20008080) 4m58.058529653s ago: executing program 0 (id=4413): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r4, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), &(0x7f0000000a40)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r9}, &(0x7f0000000880), &(0x7f00000008c0)=r8}, 0x20) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0xf0ff, r4, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x20040000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20000000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r13, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4010) 4m57.789903289s ago: executing program 0 (id=4416): unshare(0x28040900) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f00000e3000/0x3000)=nil, 0x3000, 0x2, 0xc111, r1, 0xb0af8000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000100)={[{@nodiscard}, {@dax}]}, 0x0, 0x5e5, &(0x7f00000010c0)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7b5, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000480)={0x47, 0xffbf, 0x4, 0x9}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c000280080003400000000408000180ffffff"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 4m57.331209636s ago: executing program 0 (id=4423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[], 0x60}}, 0x80) 4m56.831904916s ago: executing program 0 (id=4425): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getuid() syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6766aac7000073fffe880000000000000000000000000101ff020000000000000000000000000301"], 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_flash={0x33, 0x19e, './file0\x00'}}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x87) socket(0x6, 0x6, 0x3d) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ac0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) 4m56.338948495s ago: executing program 0 (id=4430): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000640)={0xf97cff8c, 0x8, 'SE Linux', "5a6e5ef5c762f6065c438574d193c85a6d40a1362d8333a2401b1e079f2985d30a87e2ae394ef4e16e5a22eaa237d32041b3f6acd6df01f4f25dac8c5df46e479c06c7781ccb5db23d2fa2ac11a2f955d9b15a5fe67a1018d167925d231986fe1acb1061e1156a3c8f2d354b05d09e0ea1d0822415c4d00cd64b28413a10b7c50fe5ce0cdb9b6dd26a7c79b83039760de50f12340bef6cec520ca80d41fbbf461b67d91ee3200bc7576d9bead2b96d561571648301"}, 0x8) 4m55.729409351s ago: executing program 0 (id=4437): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080), 0x1, 0x51d, &(0x7f0000000200)="$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") r1 = creat(&(0x7f00000007c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x4a242, 0x0) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) write$tcp_congestion(r3, &(0x7f0000000140)='cubic\x00', 0x6) fallocate(r4, 0x0, 0x0, 0x1001ed) fallocate(r3, 0x3, 0x3, 0x10000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000740)={0xc, r1, 0x6, 0x0, 0xa697, 0x3}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x81, 0x0, 0x0, 0x0, 0xe, 0x42718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000780)}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000340)={0x0, @multicast2, 0x4e24, 0x4, 'ovf\x00', 0x28, 0x7fffffff, 0xd}, 0x2c) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000100000a897e75ac9b4d99fb2112812eb6225e10966aa3aa7cc39a96ad2d7519965bd089a2c777e2b8d77b7176c539d76ff91ecd4f5a19fa5978e860b08269bd661eb736b827b4f7faea0d02345da1e2a39b5af9e10a831df93869fc7fc363cff760c465c4857bef1cc9"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095", @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r7, &(0x7f0000000c40)=ANY=[], 0x13) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000406050000000000000000000500000905000100070000000500010007f39c4afc000100070000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') 4m55.728908221s ago: executing program 39 (id=4437): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080), 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r1 = creat(&(0x7f00000007c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x4a242, 0x0) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) write$tcp_congestion(r3, &(0x7f0000000140)='cubic\x00', 0x6) fallocate(r4, 0x0, 0x0, 0x1001ed) fallocate(r3, 0x3, 0x3, 0x10000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000740)={0xc, r1, 0x6, 0x0, 0xa697, 0x3}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x81, 0x0, 0x0, 0x0, 0xe, 0x42718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000780)}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000340)={0x0, @multicast2, 0x4e24, 0x4, 'ovf\x00', 0x28, 0x7fffffff, 0xd}, 0x2c) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000100000a897e75ac9b4d99fb2112812eb6225e10966aa3aa7cc39a96ad2d7519965bd089a2c777e2b8d77b7176c539d76ff91ecd4f5a19fa5978e860b08269bd661eb736b827b4f7faea0d02345da1e2a39b5af9e10a831df93869fc7fc363cff760c465c4857bef1cc9"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095", @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r7, &(0x7f0000000c40)=ANY=[], 0x13) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000406050000000000000000000500000905000100070000000500010007f39c4afc000100070000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') 2m21.282692272s ago: executing program 8 (id=5979): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x2, 0x0, @dev, 0x3}}, [0x1, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1ff]}, 0x0) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r3, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000280), &(0x7f00000002c0)=0x0) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@updsa={0x178, 0x1a, 0x400, 0x70bd2d, 0x25dfdbff, {{@in=@broadcast, @in6=@private2, 0x4e21, 0x0, 0x4e20, 0x800, 0xa, 0x0, 0x80, 0x88, r6, r7}, {@in=@loopback, 0x4d2, 0x16e0f9673596cd19}, @in6=@mcast2, {0x55, 0x8000000000000000, 0x5, 0x48000000, 0x8, 0x5, 0x6, 0x9}, {0x7, 0x9, 0x7, 0x7d43}, {0x8, 0x0, 0xffffffff}, 0x70bd27, 0x3506, 0xa, 0x2, 0x3a, 0x6c}, [@proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@mcast2, @in=@multicast1, 0x2, 0x0, 0x3}}, @extra_flags={0x8, 0x18, 0x3}, @extra_flags={0x8, 0x18, 0x3}, @lifetime_val={0x24, 0x9, {0x1, 0x9, 0x3, 0x3}}, @lifetime_val={0x24, 0x9, {0x260e, 0x475, 0x40}}]}, 0x178}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) syz_emit_ethernet(0x52, &(0x7f0000000200)={@remote, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x44, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp={0x44, 0x4, 0xa, 0x0, 0x9}, @timestamp_prespec={0x44, 0x4, 0xec}, @noop]}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) 2m21.228162245s ago: executing program 8 (id=5981): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) sendmsg$unix(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4000025}, 0x4) close(r0) socket(0x2, 0x3, 0x6) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x28, 0x0, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4088}, 0x840) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 2m20.682665347s ago: executing program 8 (id=5985): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0xf0ff, r4, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x20040000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}}, 0x20}}, 0x20000000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4010) 2m20.340571858s ago: executing program 8 (id=5987): unshare(0x28000600) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x50}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x148) fallocate(r5, 0x3, 0xefd, 0x10000) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119e00000000008510000002000000850000160900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x112) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$int_in(r6, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000001c0)={0x1, 0x7, 0x6c, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) 2m20.1300617s ago: executing program 8 (id=5992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) mmap(&(0x7f0000485000/0x4000)=nil, 0x4000, 0xb, 0x40010, r1, 0x17310000) socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x100, 0x0, 0x3ab}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) (async) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0xe4000) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000000140)) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000}, 0x0) pwrite64(r5, &(0x7f0000000480)="5d09548e457e892e93e297427a1b57daecd8a0fdb65f6f5926d2208ac17efcfc175e987cf059d662edd4db49677b80edc77ea6e131f7d883d9b55f75bae0a15b2852068b740b7905d8f9630fe14df43255f822639f998e9962f1c8aab92d191e1c2a4f9391616d07696f8db4a10d949d371cf64bcdf9ff11f413f69a9736bb2e928d244e501be34146a2a669400970061c522dae23bbd2e08d54a8aa55388d0600719ad29f7e78635bd5ef6bf287ee06b6c73dabaafa63ce8a505426a6e5244a76aeb04c528e5f9e6d7f48c07025951c36", 0xd1, 0x5) socket$igmp6(0xa, 0x3, 0x2) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getcwd(0x0, 0x0) (async) getcwd(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d0100001984"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x22b8, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0x22a4, 0x1, [@m_police={0x2234, 0x12, 0x0, 0x0, {{0xb}, {0x21c0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x1, 0xc0, 0x1, 0x101, 0x52, 0x9, 0x5, 0x4, 0x7dae, 0x9, 0x4, 0x8, 0x1, 0x10001, 0xfffffff8, 0x3, 0x7fff, 0xb, 0x200, 0x6, 0x2, 0x3, 0x1c, 0x5, 0xcfd0, 0x9, 0x0, 0x4, 0x100, 0x0, 0x5, 0x3, 0x0, 0x2daf, 0x3, 0x1, 0x1, 0x6, 0x3e2b, 0x3, 0x4, 0xe3, 0x3, 0x5, 0x6, 0x80000000, 0x6, 0x2, 0x5, 0x0, 0x2, 0x800, 0x9, 0x400, 0x7, 0x24000000, 0xfff, 0x0, 0x6, 0xbebf, 0xe6e1, 0x9, 0x1, 0x6, 0x2, 0x101, 0x0, 0x9, 0x5, 0x10, 0xfffff522, 0x0, 0x4, 0xffffff80, 0xfffff801, 0x1, 0x401, 0x4, 0x4, 0x3, 0x7fffffff, 0x0, 0x2, 0x3, 0x1800, 0x5, 0x13, 0x2, 0x7fff, 0xe1, 0xeb5, 0xfffffff4, 0x0, 0x10000000, 0x7, 0x5, 0x7, 0x2, 0xff, 0x80000001, 0x3, 0x6, 0xcca, 0xcd, 0x2, 0x9, 0x400, 0x2, 0x8, 0x2, 0x4, 0x1, 0x6, 0xb, 0x57, 0xfffffff9, 0x2, 0x40000, 0x400, 0x5, 0x800, 0x7, 0x7ff, 0x2, 0x5, 0x1, 0xe, 0x5, 0x4, 0x5, 0xffff, 0x3, 0xa, 0x5, 0x6, 0x3, 0xff, 0xfffff95c, 0xf1, 0x80000001, 0x6c538ab1, 0x7, 0x0, 0x80, 0x4, 0x6, 0x2, 0x0, 0x1e55, 0x3a, 0x0, 0xffffffae, 0x80000001, 0x2, 0x2e, 0x9, 0x0, 0x4, 0x5, 0xb32c, 0x200, 0x5d, 0x9, 0xf, 0x3, 0x7, 0x8587, 0x4e000000, 0x7fffffff, 0x7, 0x9, 0x6, 0xb8a6, 0x6, 0x8, 0xffffffff, 0x10001, 0x81, 0x400, 0xd3, 0x5d2, 0x4, 0x76fe, 0x0, 0x5282, 0xe4, 0x6, 0x7, 0x3, 0x5, 0x4, 0x7, 0x1, 0x7, 0x7f, 0x2, 0x1, 0x6, 0x9, 0x2, 0x5fca, 0x8, 0x3ce9, 0x6, 0x5, 0x1000, 0xa6, 0x2, 0x3, 0x6, 0x8000, 0x32, 0x19a, 0xfffffe17, 0x7fffffff, 0x5, 0x5, 0x7, 0x9, 0x0, 0x7, 0x3, 0xa611, 0x1, 0x2, 0x2, 0xc7c0, 0x9, 0x9, 0xff, 0x7, 0xa0000000, 0xb, 0x7, 0x8, 0x7, 0x6, 0x9d8, 0x9, 0x58a2, 0x1, 0x8001, 0x7c, 0x7, 0xffff, 0x7, 0x8, 0x7, 0xff, 0x35ab, 0x8, 0x80000000, 0xfa0d173a, 0x7, 0xa31a]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0x3, 0x8, 0x7a78, 0x1b, 0x4, 0x8, 0x0, 0x9, 0xfcae, 0x3, 0x8, 0x80000000, 0x8, 0x0, 0x7000, 0xfffffffd, 0x10000, 0x1, 0xfffffff7, 0x72d5, 0xffffffff, 0x3, 0x0, 0x7fff, 0x1, 0x9, 0x4, 0x7, 0xfffffffb, 0x7fffffff, 0xfab, 0x4, 0x0, 0x7, 0xfff, 0x8, 0xfffff001, 0x1, 0x56, 0x3, 0x5, 0x4, 0x9, 0x2, 0x0, 0xffffffd1, 0x5, 0xd4e6, 0x401, 0x0, 0x65, 0x1, 0x0, 0xb3952bf, 0x1000, 0x2, 0x8, 0xb, 0x1, 0x2, 0x5, 0x9, 0x2, 0x1, 0x1, 0x6, 0x0, 0x3, 0x7, 0x5, 0x4, 0xaea, 0x7, 0x40, 0xe, 0x3a7, 0x99, 0x8, 0x7d9, 0x9, 0x5, 0x1, 0x0, 0x606e, 0xe, 0x5, 0x401, 0xfffffff8, 0x40, 0x9, 0x4, 0x8, 0x5, 0x1, 0x0, 0x1, 0x2, 0x464, 0x7, 0x10, 0x5, 0x4, 0x9, 0x2, 0x8, 0x1, 0x4, 0x44, 0xb483, 0x4, 0x59ee, 0x6bd, 0x5, 0xf, 0x8, 0xd690, 0x80, 0x5, 0x9a71, 0x1, 0xefc, 0x3, 0x4, 0xc, 0x9, 0x7, 0x6, 0x56f2a3f1, 0x101, 0x200, 0x1000, 0xd, 0x6812, 0x3, 0x7, 0x6, 0x3, 0x4, 0x1, 0x10000, 0x574, 0x2, 0xc, 0xd, 0xc00, 0x3, 0x0, 0x7, 0x2, 0x1, 0x8, 0x4, 0x6, 0x15, 0x7fffffff, 0x3ff, 0x1, 0x3, 0x4344, 0x80000001, 0x6, 0x3, 0x2, 0x2, 0x2, 0x5, 0x2, 0xb, 0x7, 0x6, 0x1, 0x80, 0x9, 0xf960, 0x80, 0x3, 0x3ff, 0x7, 0x0, 0x101, 0x4, 0x1, 0x7, 0xffff8c44, 0x9, 0x3, 0x10001, 0x3, 0x8, 0x1, 0x7e9, 0x10000, 0x30b0b40a, 0x8, 0x1, 0x9, 0x5, 0xfff, 0x0, 0x6816, 0x8, 0x5, 0x8, 0x7, 0x6, 0x3, 0x3, 0x800, 0x4, 0x45b, 0x0, 0x8, 0x3, 0x7, 0x4894b913, 0x5, 0x10001, 0xa, 0x200, 0xfffffff1, 0x1, 0x7000, 0x6, 0x2, 0x7, 0x8, 0x1, 0xfffffffa, 0x4, 0x8, 0x3, 0x3, 0x5, 0x100, 0xa, 0x7fff, 0x2, 0x3, 0x4, 0x0, 0x2a, 0x0, 0x0, 0x3, 0x3ff, 0x4, 0x0, 0x2, 0x400, 0x7c3a, 0x9, 0x4, 0x5, 0x3, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x9, 0x3, 0x2, 0xb, 0x4, 0x3, 0x1, 0x3, 0x611d, 0xffff, 0x101, 0x6, 0x6, 0x1, 0x2, 0x41b2, 0x10000, 0x7, 0xeef9, 0x3, 0x3ff, 0x1000, 0x7, 0x7, 0x401, 0x6, 0x7, 0xd322, 0x5, 0x0, 0x5, 0xffffff84, 0x3, 0x3a, 0x81, 0x9, 0x7fff, 0x9, 0x5, 0xb54, 0x9, 0x66d6, 0x100, 0x5, 0x5, 0x4, 0x200, 0x1, 0x74a, 0x1, 0x0, 0x6, 0x4, 0x45, 0x80000001, 0x5, 0x100, 0xde, 0x8, 0xb, 0x42f6, 0x6, 0x1000, 0x40, 0x2, 0x1, 0x582, 0x10001, 0x401, 0x0, 0x6, 0x5, 0x400, 0x6, 0x9, 0x30cd, 0x9, 0xd3, 0x7fffffff, 0x0, 0x3, 0x71, 0x2, 0x8, 0x5, 0x2, 0x7, 0x38, 0x4, 0xa6c, 0x1, 0x0, 0x4, 0x8, 0x4, 0xff, 0x231, 0x9, 0x2, 0x80, 0x9, 0x9c38, 0x3, 0x7, 0x7, 0xd, 0x3, 0x9db, 0x1000, 0x3, 0x3, 0x7fff, 0x80000001, 0x7e, 0xf, 0x9, 0x7, 0x5, 0x8, 0x7, 0x8, 0x8, 0x0, 0xff, 0x0, 0x9, 0x5, 0xa99, 0x1, 0xf, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x3, 0x2, 0x0, 0x800, 0x9, 0x6, 0x7, 0x81, 0x8, 0x2, 0xffffffc0, 0x3, 0x2, 0x7fffffff, 0x5610b7dd, 0x7ff, 0x9, 0x7d, 0x2, 0xfffffffa, 0xffffff01, 0x9, 0xe5af, 0x4, 0x70, 0x7, 0x7, 0x3, 0xd, 0x100, 0x9, 0xea3, 0x81, 0xf6, 0x431e, 0x7, 0x1ff, 0x9, 0x5, 0xffffffb6, 0x3, 0x401, 0x0, 0x2, 0x7, 0x0, 0x32bd, 0x9, 0xffff, 0x962d, 0x5d9b, 0x4e8, 0x7, 0x3, 0x7ff, 0x3, 0x19ab, 0x0, 0x2f, 0x7, 0xfffffffc, 0x400, 0x1000, 0x0, 0x7, 0x6, 0x6, 0x8001, 0x4, 0x3, 0x9, 0x2, 0x8000, 0x4, 0x1, 0x1, 0x3, 0x5, 0x8, 0x6, 0x8, 0x3, 0x81, 0xdd1, 0xebf2, 0x4161, 0x0, 0x7ff, 0xbd, 0xffff, 0x68, 0x0, 0x7, 0x6, 0x4616, 0xe2, 0x9, 0xffffffff, 0x7, 0x8e, 0x1, 0x10, 0x1ff, 0x6, 0x33b, 0xf, 0x9, 0x4, 0x1, 0x80000001, 0x3, 0x6, 0x9, 0x6a145f50, 0x101, 0x9, 0xfffffffe, 0x8, 0x6, 0xab, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x6, 0x3, 0x81, 0x8, 0x9, 0x5, 0x5, 0x8, 0x6, 0x1, 0xe, 0xfffffff9, 0x4, 0x2b02, 0x5, 0xd, 0xe310, 0x8, 0x1, 0x0, 0xb, 0x1, 0x5, 0x3, 0x9, 0x0, 0xe, 0xd08c, 0x40, 0x2266241f, 0xd56, 0x4, 0x2, 0xfea, 0x7, 0x9, 0x3, 0x3fe, 0x6, 0x80000000, 0x5, 0x6, 0x881b, 0x0, 0xe, 0x200, 0x8000, 0x6, 0x5, 0x10001, 0x6, 0x6, 0x8, 0x6, 0xfffffffd, 0x3, 0x5, 0x9, 0x7f, 0xeb8, 0x7, 0x5, 0x71f800, 0x8001, 0x9, 0x6, 0x5, 0x2, 0x1, 0x800, 0x9, 0x3, 0x1, 0x9, 0xff, 0x80000000, 0xffff, 0x5, 0x800, 0x5, 0xff, 0x7ff, 0x9, 0x19, 0x6, 0x9, 0x9, 0x9, 0x7, 0x4, 0x9, 0x32, 0x9, 0xfff, 0x80, 0x1, 0x5, 0x9, 0x0, 0x5, 0x7, 0x4b, 0x9, 0xfffffff8, 0x81, 0x4, 0xa1a8, 0xffff, 0x5124, 0x8, 0x8, 0xeb, 0x8, 0x200, 0x6, 0x2, 0x4, 0x7, 0x9, 0x281, 0x8, 0x7, 0x10, 0x3, 0x3, 0x4, 0x122b65b0, 0x4, 0x4, 0x7fff, 0xd, 0x101, 0x1, 0x4, 0x1, 0x76e1, 0xde, 0xa3b7, 0x2, 0x200, 0x0, 0x9, 0x1, 0x6, 0x3, 0xd8, 0x0, 0x1, 0x1, 0x4, 0xffffffff, 0x3ff, 0x8e, 0x5, 0x6, 0xff, 0x7, 0x8000, 0x86, 0x3, 0x10, 0x3, 0x6, 0x9, 0x6, 0x7, 0x3, 0x100, 0x8, 0x800, 0x8, 0x5, 0x8, 0x7a, 0x7, 0x7, 0x66, 0x6, 0x2, 0x7f, 0x9, 0xc, 0x7, 0x2, 0x468e5d64, 0xa0000000, 0x7fff, 0x5, 0x0, 0x2, 0x1, 0x3, 0x200, 0x6, 0xffffff01, 0x7fffffff, 0xd, 0x2, 0x8, 0x7, 0xfff, 0xd, 0x6, 0x2, 0xf, 0xfffffffc, 0x10000, 0x101, 0x0, 0x8, 0x5, 0x1, 0x76bc6b1d, 0x3, 0x7, 0xff, 0x400, 0x8, 0x1073, 0x2, 0x0, 0xff, 0x24, 0x60000000, 0x278, 0x3c083275, 0x5, 0x3e, 0x1ff, 0x5, 0x2, 0x5, 0x7, 0x0, 0x3, 0x8, 0x1, 0x8, 0xd, 0x2, 0x9, 0xe4, 0x4c5, 0xffff0000, 0x1, 0x4, 0x9, 0x8091, 0x7a, 0x7ff, 0x766b115d, 0x5, 0x75, 0x1237]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x7ff, 0xf, 0x1, 0x81, 0x0, 0x7f, 0xfffffffd, 0xf5, 0x3ff, 0x7f, 0x100, 0x407, 0x2, 0x8, 0x8001, 0x80000000, 0xfffffff9, 0x3, 0xfffffffc, 0xfffffffa, 0x2ac0, 0x894, 0x11e7, 0x3, 0x1000, 0x10001, 0x926c0000, 0x8, 0x9, 0x400, 0x0, 0x4, 0x9, 0xffff5fd8, 0x8, 0x3, 0x2, 0x45, 0x7, 0x7ff, 0xb3, 0x9, 0x8, 0xe764, 0x4, 0x10, 0x6, 0x9, 0xffff8001, 0x80000000, 0x200, 0x3, 0x7, 0x4, 0x1, 0x1, 0x81, 0x7, 0xa1cb, 0x1, 0x9, 0x3, 0x0, 0x0, 0xffffff6b, 0x8f, 0xffff, 0x6, 0x80000001, 0x3, 0x7fffffff, 0x8000, 0x7, 0x8000, 0x8, 0x6, 0x5, 0x7, 0x8, 0x3ff, 0x6, 0xffff, 0x7b, 0x10001, 0x6, 0x7, 0x9, 0x2, 0x4, 0x6, 0x6, 0x5, 0x4, 0x3ff, 0x3, 0xfffffff8, 0x100, 0x0, 0x2, 0xd, 0x1, 0x8000, 0x7fff, 0x7, 0x4, 0xb90, 0xe, 0xaaa6, 0x0, 0x16a, 0x0, 0x4, 0x40, 0x7, 0x1, 0x1, 0x81, 0x1, 0xe, 0x3e, 0x7, 0x1, 0xfc03, 0x8, 0x7f, 0x2, 0x81, 0x8, 0x6, 0x0, 0xffff, 0x8, 0x1, 0xfff, 0x2c9, 0x6, 0x5, 0xffff, 0x7fffffff, 0xb0f, 0x1, 0x8, 0x9, 0xc2, 0x200, 0xe9, 0x401, 0xe, 0xd, 0x1, 0x5, 0x8, 0x8, 0xc, 0x4, 0x4, 0x1ff, 0x7ff, 0xa, 0x1, 0x3, 0x0, 0x100, 0x1, 0x7e0a, 0x2, 0x7fff, 0x7, 0x5, 0x3, 0x7, 0x3, 0x9, 0x14025d3f, 0x7, 0x1, 0xe, 0x800, 0x1000, 0xe, 0xffffff63, 0x1ff, 0x800, 0x10, 0x8000, 0x6, 0x3, 0x7, 0x5, 0x1000, 0x736, 0x100, 0xf, 0x9, 0x6681, 0x6, 0x8, 0xf61, 0x0, 0x6, 0x6, 0xd, 0x8, 0x5, 0x0, 0xd9b, 0x2, 0x0, 0x3, 0x1, 0x3, 0xc9, 0x3ff, 0xa22, 0x1, 0x4e6e, 0x0, 0x7, 0x5, 0x7, 0x0, 0x9, 0x4, 0x6, 0x8, 0xfffff801, 0xfffffff9, 0xff, 0x3, 0x5, 0x1, 0x0, 0xfffffff9, 0x7, 0x7, 0x3, 0x5, 0x80, 0x8, 0xb978, 0x3, 0x6, 0x4, 0x5, 0xfffffffa, 0x80, 0x1ff, 0x10000, 0x2, 0xfa, 0x8, 0x3, 0x4, 0xffff, 0x80]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff5e4, 0x5, 0x0, 0x0, 0x200, {0xa, 0x0, 0xdc20, 0x0, 0x9, 0x6}, {0x9, 0x1, 0x7, 0xd, 0x7fff, 0x4074}, 0x4, 0x9, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x7, 0xffffffff, 0x7fff, 0x1, 0xc416, 0xfffffffc, 0xfffffff1, 0x3, 0x1, 0x1601, 0x2, 0xd8, 0x1, 0xdfff, 0x2, 0xa0, 0x49, 0x7fffffff, 0x9, 0x5, 0xd36, 0x7, 0x7, 0x9, 0x7, 0x7, 0x1, 0x4, 0x8, 0x62, 0x701b, 0x81, 0x8001, 0x4, 0x3, 0x235c, 0x46, 0x9, 0x2, 0xff, 0x9, 0xfffffff6, 0x7fff, 0x8, 0x7fffffff, 0x101, 0x8, 0x6, 0x9, 0x80, 0x6bb, 0x0, 0x40, 0xe0a, 0xd12b, 0x4435, 0x7fff, 0x2, 0xd, 0x2, 0x2, 0x5, 0x400, 0x8, 0x5, 0x2c000, 0x0, 0xffffffff, 0x9, 0x8, 0x5, 0x7, 0x2, 0x3, 0x9, 0x4, 0x6, 0x0, 0x4, 0x7, 0x9, 0x9, 0xa15, 0x4, 0xffffffff, 0x9, 0x2, 0xa, 0x3, 0x0, 0x9, 0x2, 0x7, 0x9, 0x1, 0x3, 0x88, 0x2, 0x4, 0x1, 0x1, 0x9, 0x0, 0x9, 0x0, 0x1, 0x2, 0xffff, 0xb1e5, 0x1, 0x8, 0x5, 0x56, 0x2c1, 0xb022, 0x4, 0x6, 0x5, 0xec, 0x7d, 0x6, 0x5, 0x401, 0x2, 0x40, 0x6, 0x800, 0x7, 0xe, 0x7, 0x0, 0x9, 0xe789, 0x9, 0x8, 0x2, 0x2, 0x10001, 0x80000, 0xffffffff, 0x9b, 0x7fffffff, 0x8, 0x7, 0x4, 0x1000, 0x3, 0xfec, 0xddc4, 0x6, 0x1, 0xb, 0x8f, 0x4, 0xee, 0x9, 0x3, 0x1d33, 0x2, 0x3, 0x40, 0x2, 0x8, 0x6, 0xfffffff8, 0x7f, 0xf, 0xb, 0x1000, 0x6, 0x1, 0x2, 0x2, 0x5, 0xef, 0x100, 0x1, 0x1, 0x7fffffff, 0x8, 0x0, 0x2, 0x6f, 0xffffffff, 0x7, 0x8001, 0x6f2b, 0x800, 0x5, 0x8, 0x7, 0x3, 0x9, 0xa7, 0x4, 0x9, 0xb, 0x0, 0xfffffffa, 0x0, 0x70ddf3b9, 0x9, 0x3, 0x4, 0x1, 0x180, 0x8, 0xff2, 0x7, 0x4, 0x5, 0x5, 0x9, 0x2, 0x9, 0x3, 0x2, 0x401, 0xa17, 0xfffffe01, 0x3ff, 0x8, 0x6, 0xf2, 0x2, 0x5, 0x5, 0x3, 0x8b7, 0x3, 0x6, 0xece5, 0x7, 0x3, 0x851f, 0x81, 0xa5a4, 0xb1, 0x9, 0x7fffffff, 0xfffffffd, 0x3, 0x8, 0x10001, 0x9, 0x8a91, 0x3be6, 0xe62e, 0x3, 0x6, 0x5, 0x5, 0x8, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x2, 0xd32, 0x5, {0x3, 0x0, 0x8, 0x9, 0x1000, 0x2}, {0xb, 0x1, 0x6, 0x9600, 0x4, 0xd}, 0x869, 0x3, 0x9}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0x0, 0x8, 0x2, 0x2, 0x10, 0xffffffff, 0x6, 0x6, 0x7ff, 0x3, 0xff, 0xfff, 0x9, 0xfffffffd, 0xfffffff7, 0x81, 0xc5, 0x5, 0x8, 0xff, 0x8, 0x6, 0x9, 0x6, 0xfffffff9, 0x81, 0x6a, 0x4b49, 0x2, 0x8, 0x1, 0xdf36, 0x7f, 0x7, 0x6, 0x4, 0x3, 0xffffffff, 0x401, 0x2, 0x7ff, 0x5863, 0x1, 0xe9, 0x2, 0x7, 0x4, 0x8, 0x7, 0x3, 0x89a, 0x373e, 0x1, 0x7ab9, 0xfffffff7, 0x1ff, 0x8, 0x5, 0x3498e9fe, 0xe, 0x5, 0x1, 0x8b, 0x80000001, 0xf9, 0x665, 0xcd2c, 0x2, 0x6, 0x7, 0x3, 0xc038, 0x2, 0x46d5, 0x4027, 0x4, 0x4, 0x3, 0x8, 0x4, 0x9, 0x1, 0x0, 0x800, 0xcd, 0x5, 0x0, 0xb0, 0x9, 0x6d6, 0x6, 0x7, 0xe0, 0x10001, 0x82, 0x2, 0x9, 0x7ff, 0x5c, 0x80, 0x0, 0x7, 0xe01, 0x63, 0x8, 0x4, 0x8, 0xfffffffe, 0x8, 0x6, 0x3, 0x0, 0x7, 0x9, 0x284, 0x80, 0x2, 0xffff, 0x86, 0xfffffffd, 0x5, 0x6, 0x6b, 0x5, 0xc275, 0x3, 0x200, 0x5, 0xfffff001, 0x10000, 0x5, 0x8000, 0x1, 0x200, 0x1, 0x0, 0x0, 0x101, 0x1, 0x9, 0x9, 0x5, 0x9, 0x6, 0x280d, 0x2, 0xe63d, 0x8000, 0x1ff, 0x7, 0x2, 0x10000, 0x4, 0x4, 0xfffffffe, 0x3, 0xfffff6f6, 0x0, 0x1, 0x8e, 0x7, 0xd, 0xb, 0x4, 0x67d8, 0x3, 0x48488f55, 0x1, 0x3, 0xf, 0x1000, 0x708e, 0x4, 0x2, 0x7, 0xf99, 0x9, 0x2, 0x5, 0x9, 0x800, 0x4, 0x0, 0x8, 0x80, 0x0, 0x200, 0x3, 0x6, 0x3, 0x4, 0x7, 0x7f8, 0x12f, 0x7ff, 0x9, 0x401, 0x9, 0xfffffffb, 0x1, 0x1, 0x0, 0x9, 0x10001, 0x9, 0x40, 0x7, 0x2, 0x6, 0x3, 0x2, 0xe, 0xff, 0x6, 0x0, 0x2, 0x2, 0x0, 0x100, 0xa1ac, 0x4, 0xb3d, 0x1, 0x4, 0x4, 0x5, 0x1, 0x0, 0xf4, 0xff, 0x3, 0x2, 0xc, 0x2, 0x6, 0x10001, 0x0, 0x2, 0x4000000, 0x3, 0x7, 0x2, 0xfffffffc, 0x7, 0x1, 0x8000, 0x800, 0x7, 0x1, 0x5, 0x7fff, 0x8, 0x8, 0xa]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x72ba7d5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8c}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffcd2, 0x7ff, 0x2efd469f, 0xfffffff0, 0x3ca042f9, 0x9, 0x2, 0x3, 0x0, 0x3, 0x4, 0x100, 0x92, 0x400, 0x2, 0xffffffff, 0x0, 0xf, 0x6, 0x4, 0x5, 0x8, 0x13f2, 0x0, 0x9, 0x0, 0x4, 0x9, 0xd998, 0xfffffff9, 0xfffffffe, 0xffffffff, 0x5, 0x3, 0x0, 0x9, 0x1, 0x6, 0xb, 0xfffffff0, 0x2, 0x81, 0x100, 0x100, 0x4, 0xd09d, 0xfffffffb, 0x5, 0xffffffff, 0x0, 0xffff, 0x2, 0x8, 0x3, 0x6, 0x6, 0x0, 0x80000001, 0x3, 0x9, 0x6, 0x5b, 0xffffffff, 0x0, 0x5, 0xf11, 0x9, 0x8, 0x4, 0x7, 0xfffffff9, 0x7fff, 0x10, 0x1, 0x1ff, 0x0, 0x7, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0x5, 0x2, 0xdb, 0x8, 0x40, 0x1, 0x7, 0x6, 0x6, 0x2, 0x3, 0x7, 0x0, 0x8, 0x21ef692a, 0x1, 0x2, 0x1f26, 0xffffffff, 0x4, 0x2, 0x1, 0x4, 0xef, 0x7, 0x0, 0x6, 0xce46, 0x47af373d, 0x401, 0x401, 0xa2, 0x7, 0x5, 0xe25, 0x2, 0xfff, 0x6, 0xfc14, 0x5, 0xfffff0f2, 0xf400, 0xd76b, 0x1, 0x7, 0x3, 0x3f10, 0x9, 0x6, 0x80000000, 0x1, 0xfffffff7, 0x0, 0x7929, 0x0, 0x1, 0x6, 0x200, 0x4d12, 0xa, 0x800, 0x2, 0x6, 0xfffffc00, 0x4, 0xfffffffa, 0x5c2, 0x6, 0x3, 0x52d4, 0x7, 0x5, 0xffff, 0x9, 0x5, 0xfff, 0x8, 0x6, 0x4, 0x9, 0x10001, 0x3, 0x8, 0x3, 0x8, 0x7, 0x9, 0x8, 0x0, 0x200, 0x9, 0x8, 0x4, 0x8, 0x40, 0x0, 0xa53, 0x8, 0x80e, 0x2, 0x2, 0x0, 0x80000000, 0xdb, 0x5, 0x4000, 0x7fffffff, 0x4, 0x11ce, 0x6, 0xa, 0xa, 0x81, 0xa, 0x4a, 0x80, 0x5, 0xf325, 0x7, 0x7, 0xfffffff8, 0x9, 0x6, 0x7bef, 0x9, 0x5, 0x4, 0xd5c, 0x3, 0x5, 0x6, 0xfffffffd, 0xffffff8f, 0x6, 0x43, 0x8, 0xffffffff, 0xf, 0x4, 0xf, 0x7fffffff, 0x6, 0x0, 0x101, 0x200, 0x7, 0x1, 0xfffffffe, 0x3, 0x6, 0x4, 0x2e, 0xf, 0xa, 0x1, 0xce4c, 0x1, 0x7, 0x2e6, 0xfffffffd, 0x3, 0x2, 0x0, 0x2980000, 0x5, 0x6cb, 0x9, 0x8e9b, 0xc4e, 0x2, 0x732, 0xd24, 0xec5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x401, 0xd, 0x5, {0xf, 0x2, 0x7, 0x860d, 0xfffd, 0xffff0001}, {0x3, 0x1, 0xfa, 0x1, 0x7, 0x3}, 0x7, 0x4, 0xc}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x20000010, 0x2, 0x85, 0x401, {0x5, 0x2, 0x8, 0x9, 0xf2, 0x1}, {0xd5, 0x2, 0xfff9, 0x3, 0x7f, 0x40}, 0x2, 0x4, 0xfffffa68}}]]}, {0x49, 0x6, "726dc08f14eb5e5c4803e5db1a1482c71a3773215220cbddcb026ff91d539b2e167f839d616ea1c81036b2861b41b9befae53e8e92775f1898fa832ebceeffdbc6276a8589"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x5e6, 0x0, {0x0, 0x2, 0x1, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x1, 0xfffd}, 0xe0000000}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x22b8}, 0x1, 0x0, 0x0, 0xe32fa770345bf4de}, 0x0) 2m19.594654082s ago: executing program 8 (id=6001): perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffdba, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd05, 0x4}, 0x8040, 0x6, 0x40000, 0x5, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x9, 0xfffffffffffffff8) 2m19.567992043s ago: executing program 40 (id=6001): perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffdba, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd05, 0x4}, 0x8040, 0x6, 0x40000, 0x5, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x9, 0xfffffffffffffff8) 2m19.390781594s ago: executing program 2 (id=6006): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x48010) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 2m19.229270623s ago: executing program 2 (id=6010): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0xd, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) 2m19.11772942s ago: executing program 2 (id=6012): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, 0x0}]) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x804818, &(0x7f0000000140)={[{@map_off}, {@check_strict}, {@hide}, {@block={'block', 0x3d, 0x400}}, {@unhide}, {@nojoliet}, {@mode={'mode', 0x3d, 0x5a099b93}}, {@nojoliet}]}, 0x2, 0x565, &(0x7f0000000580)="$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") sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f00000001c0)="57979f634a6231500c0e81d7cd6e8a74bfd63a7b8b1c42644d6a56a11202def1dc3eabc23ca9a3545e2bf39ba03a5fa4fcfafb84338f6e57ccfde7eeea85803f4b46aefe24e286c896d9762073fbf532bde8a8bb9f9ceea198a3c013ff6270d53013d4e8f9463222c1b15a9dd9558dce051063dd115858c9a9c5a0e2d630cf7e4e45619731206bb99bb5c68cd5647d67f15e36c945b390313cc795f9088c75b4b74c6c88596f41507eec47817350eafc84c1afb0fa2aeeafbd6b5312c0c36ff7b8bd6073a6cd20b909100c3263f8134c25514b010322f799c018a7b7000226e9a4577fa4820aae9221e138fb6bb3ab26038a9bf54a", 0xf5}, {&(0x7f0000000000)="9b3d9047f65491eed8977884d37c06e8e3750bf4a11a3400ad5f99f3424d4e623a41696dcf80224bbe8c0d469b", 0x2d}, {&(0x7f00000002c0)="d04be9734e1414bd30117c46264d419cffbc45649a16744deb3ade97b1ffb1ef1b6112795add8a85d9cd9d086af5b888192538a1791d2704fa1a99303fe434baf18821bcd6de73eda47b3d619d34a1c0a9884b121405ae15b8a72dfbd7af1ac0857882dfc3075426ad102ec2241741ed19bd18ac216542350168f1acba611d6a28ffc23e1ab2ed29bb7b88de90ed58e6fec6cd41e5ce8c48f7121fa4f4a5b48b1ed0f210c0b3915907014afbe66d7569106bc4a1d14d9a4319ed4c4e5549d854cc840bde9cb2b1a7cc6e604ce5cc8d54a73a305fa9513696edf8d0bb4c2d9634", 0xe0}, {&(0x7f00000003c0)="89383b5d1f36a845a5674c03034db845d10ec25067527227b2719da90f5ace2ba2b58e9e7c92a56751429419d26b860967e8160583dc7663d1d9554ff57ba9ceb8cc04d81c362e7275338ee158bebadb9ccc73d3e21d7830e86a9c45c5979afc05100392e7db3596254c81498124472a33beb5cf502c4f3e7a0a4188ffec9d24ec4d74aaab10b42c618b4606e7be6c666c6443479f6d5b0e53a4aae0d8c78fde8ca71798001daa239149a903b50de813c2a18b881d3d90638124c2101a975863a696729c9259", 0xc6}], 0x5, 0x0, 0x0, 0x24004880}}], 0x1, 0x4080) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000540)={0x1, 0x1, {0x1, 0x14, 0x4, 0x3, 0x1, 0xd, 0x4, 0x68}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) 2m18.94399186s ago: executing program 2 (id=6013): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) close(0x4) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) timerfd_settime(0xffffffffffffffff, 0x6, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2m18.770323141s ago: executing program 2 (id=6014): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) r1 = semget$private(0x0, 0x1, 0x3b1) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semctl$SETVAL(r1, 0x0, 0x10, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[], [{@dont_appraise}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m18.318913627s ago: executing program 2 (id=6019): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x48010) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 2m18.318611587s ago: executing program 41 (id=6019): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x48010) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1m35.524274769s ago: executing program 3 (id=6336): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc417", 0xb}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c950", 0xba}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be", 0x61}, {&(0x7f0000000a00)="a7c652df", 0x4}, {&(0x7f00000021c0)="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", 0x148}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="157873e2c9542e45e27dea3315e396369a51bd63b2c4f6a8272d27ff0675547ec9a31d3a42ecb0583efde7adc254e59416050c1eb7a1fc02536c070f4964e8b18941198253d8da9fbf8c456af254ebf1795878f3a3256ee70c2964d3f010587a5fe800f697966822ccb7cc3257b6f1ed3d66646315c63b79f1c87ada02da4cf577d9dc1daaf1332400dead2760122a2669a387ad030550c0580bd9adc59af055e059c887c0b5c02779310337b803821ccf3aa365e1", 0xb5}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r4, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10) listen(r1, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x20000000000001, 0x80201) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c02000007000000050000000000000f17000000000000612e2e00"], &(0x7f0000005bc0)=""/239, 0x2b, 0xef, 0x9, 0xfff}, 0x28) 1m35.233514206s ago: executing program 3 (id=6338): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb"], 0x0, 0x58, 0x0, 0xa}, 0x28) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000, 0x1}], 0x1) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3c, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9, 0x4]}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 1m34.99551754s ago: executing program 3 (id=6340): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m34.948392563s ago: executing program 3 (id=6341): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x21, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3841dc0000005400810026bd7001000000000700", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="000001000000000000000000000000000000000008000000"], 0x8f}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2804458, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x502, &(0x7f0000000240)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x84242, 0x46) ftruncate(r4, 0x2007ffc) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) r8 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) execveat$binfmt(r8, r6, 0x0, 0x0, 0x100) r9 = dup2(r5, r5) setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0, 0x4e20, 0x6, 0x4e22, 0xfc00, 0x2, 0x20, 0x0, 0x1d, 0x0, 0xee01}, {0x3, 0x0, 0x3, 0x0, 0x5, 0x1, 0x83a, 0x4}, {0x8, 0x7, 0x5, 0x7}, 0x100, 0x6e6bb0, 0x2, 0x0, 0x1}, {{@in=@loopback, 0x4d4, 0xd4}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x2, 0xee, 0x1, 0x80000001, 0x2}}, 0xe8) r10 = socket(0x10, 0x3, 0x4) setresuid(0x0, 0xee00, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0xffffffff, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x1fc, 0x80000a, 0x0, 0x1, 0x400}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x1c, 0xd, 0x1, 0xa, 0xffffffff}}, {0x4}}]}]}, 0x68}}, 0x0) sendfile(r4, r4, 0x0, 0x800000009) 1m34.595355693s ago: executing program 3 (id=6345): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 1m34.504914159s ago: executing program 3 (id=6348): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = mq_open(&(0x7f00000003c0)='ttl\x00', 0x40, 0x16, &(0x7f0000000400)={0x8, 0x3, 0x1, 0x7fff}) mq_timedreceive(r2, &(0x7f0000000540)=""/55, 0x37, 0x100, &(0x7f0000000bc0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x800) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000140)={0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m34.48060994s ago: executing program 42 (id=6348): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = mq_open(&(0x7f00000003c0)='ttl\x00', 0x40, 0x16, &(0x7f0000000400)={0x8, 0x3, 0x1, 0x7fff}) mq_timedreceive(r2, &(0x7f0000000540)=""/55, 0x37, 0x100, &(0x7f0000000bc0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x800) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000140)={0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 18.310133723s ago: executing program 9 (id=7244): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x30000, 0x0) clock_gettime(0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000380)={{r1, r2+10000000}}, 0x0) syz_clone(0x80000000, &(0x7f0000000080)="ef5bb187d4337b7784092671a4510b8c04b209f552e969b0a809c95de5a6e198acc33ff46d481e25bfdd2947a601166e17322345e12fde753218648cf839d3a37cfadea4052fb3577b2bc9a85cc566ba6b49717427d80f48df61f194dff2ef77b0f180ed544cf888f5152c486c79f3968e4ea57f68f6f9431767ea6f5f8741a2fc53312b1ac76a0742e2053d57cf9fbcfc2664a2d41a0dbdc77bbe67382ac09aa312bada3f3137da2a8f3eea1d9ffe594fee23cb345d10214643e2ade8d5058c36f1e7abf3a9", 0xc6, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)='Qz') 17.938931205s ago: executing program 9 (id=7250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) (fail_nth: 1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) 16.863744619s ago: executing program 9 (id=7258): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 16.782401934s ago: executing program 9 (id=7259): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = syz_clone(0x908091, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff03, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1, 0x42, 0x0, 0xfffffffffffffffd, 0x3f}) 16.232480176s ago: executing program 9 (id=7264): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x8, 0x639, 0x10, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7800, 0x1, 0x8, 0x3}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0x9, [@enum64={0xe, 0x1, 0x0, 0x13, 0x1, 0x8, [{0x3, 0x8, 0x1}]}, @datasec={0x8, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x7, 0x8}], "f4"}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x1e, 0x0, 0x7, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x6}}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0xf, 0x1}, {0xe, 0x5}, {0x7, 0x5}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @var={0xe, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x4}]}, @enum64={0xb, 0x3, 0x0, 0x13, 0x0, 0x0, [{0x8, 0x27d, 0x6}, {0x3, 0x16e4, 0x6}, {0x1, 0x1000, 0x1ff}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x0, 0x61, 0x30, 0x30]}}, &(0x7f0000000640)=""/78, 0x115, 0x4e, 0x0, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x7, 0x8, 0x7f, 0x80, r0, 0xea, '\x00', r1, r2, 0x3, 0x5, 0x5, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000440)='\a\x00\x00\x00\x00\x00\x00\x00', 0x8) (async) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000440)='\a\x00\x00\x00\x00\x00\x00\x00', 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x8205, 0x4, 0xf9, 0x0}, &(0x7f0000000080)=0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000007c0)=r5, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={r4, 0x5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={r4, 0x5}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x48080) (async) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x48080) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 14.751408364s ago: executing program 9 (id=7273): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0xc00) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff9, 0x5, 0x200, 0x40, 0x8000, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) truncate(&(0x7f0000000200)='./file0\x00', 0x4711) setgroups(0x3, &(0x7f0000000300)=[r8, r8, r8]) setregid(0xffffffffffffffff, r8) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={r6, 0xee00, r8}, 0xc) tee(r1, r4, 0x8f5, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x13) write(r9, &(0x7f0000000280)="cc", 0x1) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) 14.679151439s ago: executing program 43 (id=7273): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0xc00) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff9, 0x5, 0x200, 0x40, 0x8000, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) truncate(&(0x7f0000000200)='./file0\x00', 0x4711) setgroups(0x3, &(0x7f0000000300)=[r8, r8, r8]) setregid(0xffffffffffffffff, r8) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={r6, 0xee00, r8}, 0xc) tee(r1, r4, 0x8f5, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x13) write(r9, &(0x7f0000000280)="cc", 0x1) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) 5.238662499s ago: executing program 1 (id=7386): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0xffff, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0x8, 0xffffffffffffffff, 0x2) fsopen(&(0x7f00000002c0)='tracefs\x00', 0x0) 5.238017339s ago: executing program 1 (id=7387): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x7, 0xffff}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f0000000200)="44c33b69ebc9e0", 0x7, 0x830, &(0x7f0000000440)={0x11, 0x2, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 5.205029241s ago: executing program 1 (id=7388): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) write$UHID_INPUT(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r9, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) write(r7, &(0x7f0000000640), 0x0) fallocate(r7, 0x20, 0x0, 0x8000) getpeername$tipc(r7, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4004000) recvfrom(r0, 0x0, 0x0, 0x4112, 0x0, 0x0) 4.209541891s ago: executing program 6 (id=7409): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d77e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 2.177946971s ago: executing program 1 (id=7433): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close(0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$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") perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000300)=ANY=[]) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)="9f", 0x1, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0xd, @loopback, 0xc5e}, 0x1c) 1.350613019s ago: executing program 7 (id=7441): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f00000001c0)=""/157, 0x9d, 0x8) pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0x190, 0x190, 0x98, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @private, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_to_bond\x00', {}, {}, 0x6c, 0x0, 0x21}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x5}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @empty, 0xff000000, 0x0, 'vcan0\x00', 'ip_vti0\x00', {}, {}, 0x11, 0x1, 0x1e}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(r4, &(0x7f00000000c0)='io\x00') capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) setpriority(0x1, 0x0, 0xbbb) pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c04000f0080000300", 0x33a) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001900100027bd7000fddbdf251c008009fd00ff00002800000000000000140012000100a7dcd85faf96fcf5e56bb4d0e86ac7ea41b65f000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) sched_setattr(0x0, 0x0, 0x0) r8 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x35a16}], 0x14, 0x7800, 0x0, 0x3) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000500)=0x730, 0x4) exit(0xffff) close_range(r0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d300000018010000e4d400bf00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000d00)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.115418144s ago: executing program 6 (id=7443): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x1, 0xd, 0x4, 0x4, 0x8, 0x8, 0x9, 0x31, 0x2, 0x8, 0x7, 0x1, 0x0, 0x1}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0x0, 0x6}, {0xe}, 0x5, 0x4, 0x1}) 1.039534888s ago: executing program 1 (id=7444): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") (async) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/dev_snmp6\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x0}) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x0}) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) readv(r2, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/68, 0x81}], 0x1) (async) readv(r2, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/68, 0x81}], 0x1) r4 = socket$inet(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="005d63be6fdc5f1a53a06400000000eb03b2e37b33e100000000f81e0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r7 = accept4(r4, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000000)="ea", 0x1) (async) write(r7, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) write(r7, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) r8 = accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0x800) writev(r8, &(0x7f0000000140)=[{&(0x7f00000003c0)="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", 0x105}], 0x1) (async) writev(r8, &(0x7f0000000140)=[{&(0x7f00000003c0)="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", 0x105}], 0x1) sendto$inet6(r1, &(0x7f0000000640)="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", 0x14a, 0x20, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000000640)="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", 0x14a, 0x20, 0x0, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r10, 0x2, 0x1}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={r10, 0x2000000}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={r10, 0x2000000}, 0x8) close(r7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x0) 902.925077ms ago: executing program 6 (id=7445): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/70, 0x46}], 0x1, 0x4, 0x2) pread64(r0, &(0x7f0000002b40)=""/244, 0xf4, 0x9) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000004780)) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x27, 0x1, 0x2, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x6, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000001180)=ANY=[@ANYRES64], 0x13) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 760.322865ms ago: executing program 5 (id=7447): unshare(0x24020400) r0 = socket$inet6(0xa, 0x2, 0x3a) unshare(0x26000400) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r2 = io_uring_setup(0x2cd4, &(0x7f0000000080)={0x0, 0x6d17, 0x4, 0x2, 0x13}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r7, &(0x7f00000014c0)=[{&(0x7f0000000440)="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", 0x9b5}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="580000001000ffff2abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00v'], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) io_uring_setup(0x4354, &(0x7f0000000100)={0x0, 0x403f, 0x1, 0x3, 0x2d2, 0x0, r2}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180)="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", &(0x7f0000001180)=""/75, 0x4}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x18) 746.507676ms ago: executing program 6 (id=7448): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000400)=""/21, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e23, @local}}}, 0x108) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810511000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x2, 0xbffff010}, {0x6}]}, 0x10) 642.669672ms ago: executing program 7 (id=7449): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x7fff, 0x0, 0x0, 0x3e0000) (fail_nth: 1) 574.812116ms ago: executing program 4 (id=7450): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x20) syz_emit_ethernet(0x97, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv4={0x800, @tipc={{0x17, 0x4, 0x1, 0x28, 0x89, 0x67, 0x0, 0x17, 0x6, 0x0, @broadcast, @private=0xa010100, {[@timestamp_prespec={0x44, 0x2c, 0x4e, 0x3, 0xf, [{@private=0xa010100, 0xd8d635b5}, {@private=0xa010102, 0x6}, {@remote, 0x41d8}, {@local, 0x409}, {@loopback, 0x2}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x15, 0x3, [{0x7, 0xf, "9dc0e88263827fa1d79caa2af2"}]}]}}, @payload_named={{{{{0x2d, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x0, 0x0, 0x3, 0x7, 0x2, 0x2, 0xa6e6, 0x8, 0x0, 0x4e23, 0x4e20}, 0x2, 0x1}, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000580)=ANY=[]) mknod(0x0, 0x1000, 0x1) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@loopback, 0x1, 0x720, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x100000000fe, 0x0, 0x800000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3ff}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000240)=0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYRES16=r2, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES16=r3, @ANYBLOB="1f5686f3ede12a1d617b4f91df79334fdf9b4235bf09b9f0efc80fbd74d59c39479c818b70def420f8dacc25bb2cf12df94d7039311b932e7687ac8c03691c231f0b315102e1f458937e3a5f65dcd7a2dc1ebc2979afb0dcd54689e752a36a6d98fb62c79625d414b3351962616dd332acf1c7226a0219834db3a36c489abd0ba9b1ed06a2680106246684e3a24b0f889631286aaa449a04549bfdde621922b2594a1e4bd1112de25df94408ca7d52793fa5979cef332604c9c4b88b", @ANYRESOCT=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffff8c) 466.275532ms ago: executing program 1 (id=7451): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x800}, 0x800, 0x4005, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) syz_emit_ethernet(0xe9, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv4={0x800, @tipc={{0x30, 0x4, 0x1, 0x28, 0xdb, 0x67, 0x0, 0x17, 0x6, 0x0, @broadcast, @private=0xa010100, {[@timestamp_prespec={0x44, 0x2c, 0x4e, 0x3, 0xf, [{@private=0xa010100, 0xd8d635b5}, {@private=0xa010102, 0x6}, {@remote, 0x41d8}, {@local, 0x409}, {@loopback, 0x2}]}, @ra={0x94, 0x2}, @cipso={0x86, 0x15, 0x3, [{0x7, 0xf, "9dc0e88263827fa1d79caa2af2"}]}, @end, @lsrr={0x83, 0x7, 0xc9, [@local]}, @cipso={0x86, 0x5c, 0x3, [{0x1, 0xd, "88a430eedbaff04cca33fd"}, {0x0, 0x6, "644ae028"}, {0x0, 0xf, "b5e0d4222ead70f98ac1fcbf40"}, {0x7, 0x2}, {0x5, 0xd, "5dce1bff56618774f0ffe3"}, {0x0, 0x2}, {0x2bf1bb017507a0d3, 0x10, "09999ab00bc4594e8c69072fa2e8"}, {0x1, 0xa, "49f908250cff3e03"}, {0x1, 0x9, "5c4b36fcb2bf93"}]}]}}, @payload_named={{{{{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x3, 0x7, 0x2, 0x2, 0xa6e6, 0x8, 0x0, 0x4e23, 0x4e20}, 0x2, 0x1}, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000580)=ANY=[]) connect$x25(r1, &(0x7f0000000140), 0x12) mknod(0x0, 0x1000, 0x1) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ff0101000000000000000000000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001fc2000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@loopback, 0x1, 0x720, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x100000000fe, 0x0, 0x800000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3ff}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000240)=0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYRES16=r2, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES16=r4, @ANYBLOB="1f5686f3ede12a1d617b4f91df79334fdf9b4235bf09b9f0efc80fbd74d59c39479c818b70def420f8dacc25bb2cf12df94d7039311b932e7687ac8c03691c231f0b315102e1f458937e3a5f65dcd7a2dc1ebc2979afb0dcd54689e752a36a6d98fb62c79625d414b3351962616dd332acf1c7226a0219834db3a36c489abd0ba9b1ed06a2680106246684e3a24b0f889631286aaa449a04549bfdde621922b2594a1e4bd1112de25df94408ca7d52793fa5979cef332604c9c4b88b", @ANYRESOCT=r4], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$nl_sock_diag(0x10, 0x3, 0x4) read(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffff8c) 441.323974ms ago: executing program 7 (id=7452): mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, 0x0) 330.36365ms ago: executing program 5 (id=7453): r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x1ff, 0x0) 328.485571ms ago: executing program 4 (id=7454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a0101"], 0x23}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 326.021971ms ago: executing program 6 (id=7455): unshare(0x20000400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) 194.972638ms ago: executing program 7 (id=7456): unshare(0x2000600) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x12) 189.659839ms ago: executing program 4 (id=7457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005340)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xffff}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 170.39178ms ago: executing program 6 (id=7458): r0 = socket(0x25, 0x800, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0203060910000000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000abda0f85cc4cd42470b1d4c6935a4c9b79ac3a85c395fd52cdd087f1a57c359a4a8601371cdc4f4aa00000000000000d770bff5973f52d2e1fda3a000026cf6959e01fd61c574fddae47a6b09de6cbb069bb646ddf0c2a7b80e397ef15d099572f69cdb722d5122d9"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0xff80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100e1ffffff00000000370000000e0001006e657464657673696d0000000f00020400d19a8300000000000069007300000000000e000100e9006e657464657673696d3000000800030015000000"], 0x64}}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r8, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r7, r6}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r9, 0x0, 0x1) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req={0x7ffc, 0x6, 0x3, 0xdb3b}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000502000000000000000000000d020000000000000000000005ff0700000000"], &(0x7f0000000f40)=""/4076, 0x32, 0xfec, 0xa, 0x32e}, 0x28) poll(&(0x7f0000000300)=[{r2, 0x80}], 0x1, 0x101) 104.820804ms ago: executing program 5 (id=7459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000080)=""/2}, 0x1c) 104.430044ms ago: executing program 7 (id=7460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17", 0x3}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 102.228154ms ago: executing program 5 (id=7461): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="90", 0x1}, {0x0}], 0x2}}], 0x1, 0x20001000) 87.115105ms ago: executing program 5 (id=7462): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/17, 0x11}], 0x1) 16.974499ms ago: executing program 4 (id=7463): r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) listen(0xffffffffffffffff, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) 16.831599ms ago: executing program 7 (id=7464): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2076) ppoll(&(0x7f0000001040)=[{r1, 0xfae83c30bf5f62f}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 16.727939ms ago: executing program 4 (id=7465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000003800000000000000ffffffff00000002000000000000000000000004000000000a0070803b"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 4.32159ms ago: executing program 4 (id=7466): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000008200)=[{{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000c80)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, 0x0}}], 0x2, 0x844) 0s ago: executing program 5 (id=7467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000001b40)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) kernel console output (not intermixed with test programs): [ 730.444676][T31824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.473015][T31824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.750624][T31833] loop9: detected capacity change from 0 to 8192 [ 730.790664][ T3293] loop9: p1 p3 p4 [ 730.796008][ T3293] loop9: p1 size 477167616 extends beyond EOD, truncated [ 730.807778][T31835] loop1: detected capacity change from 0 to 512 [ 730.809545][ T3293] loop9: p3 start 4294901760 is beyond EOD, truncated [ 730.823153][ T3293] loop9: p4 size 32768 extends beyond EOD, truncated [ 730.842460][T31833] loop9: p1 p3 p4 [ 730.850481][T31833] loop9: p1 size 477167616 extends beyond EOD, truncated [ 730.938248][T31833] loop9: p3 start 4294901760 is beyond EOD, truncated [ 730.965338][T31833] loop9: p4 size 32768 extends beyond EOD, truncated [ 730.981231][T31842] SET target dimension over the limit! [ 731.409251][T26524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 731.560886][T31868] FAULT_INJECTION: forcing a failure. [ 731.560886][T31868] name failslab, interval 1, probability 0, space 0, times 0 [ 731.587060][T31868] CPU: 1 UID: 0 PID: 31868 Comm: syz.7.6875 Tainted: G W syzkaller #0 PREEMPT(full) [ 731.587097][T31868] Tainted: [W]=WARN [ 731.587104][T31868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 731.587124][T31868] Call Trace: [ 731.587235][T31868] [ 731.587245][T31868] __dump_stack+0x1d/0x30 [ 731.587271][T31868] dump_stack_lvl+0x95/0xd0 [ 731.587296][T31868] dump_stack+0x15/0x1b [ 731.587321][T31868] should_fail_ex+0x263/0x280 [ 731.587371][T31868] should_failslab+0x8c/0xb0 [ 731.587406][T31868] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 731.587436][T31868] ? __alloc_skb+0x2d6/0x690 [ 731.587518][T31868] __alloc_skb+0x2d6/0x690 [ 731.587618][T31868] ? __alloc_skb+0x200/0x690 [ 731.587652][T31868] netlink_alloc_large_skb+0xbf/0xf0 [ 731.587685][T31868] netlink_sendmsg+0x40c/0x6f0 [ 731.587746][T31868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.587768][T31868] ____sys_sendmsg+0x5af/0x600 [ 731.587795][T31868] ___sys_sendmsg+0x195/0x1e0 [ 731.587841][T31868] __x64_sys_sendmsg+0xd4/0x160 [ 731.587870][T31868] x64_sys_call+0x194c/0x3020 [ 731.587969][T31868] do_syscall_64+0x12c/0x370 [ 731.587996][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.588021][T31868] RIP: 0033:0x7f30bbabbf79 [ 731.588041][T31868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.588072][T31868] RSP: 002b:00007f30ba517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.588092][T31868] RAX: ffffffffffffffda RBX: 00007f30bbd35fa0 RCX: 00007f30bbabbf79 [ 731.588106][T31868] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 731.588129][T31868] RBP: 00007f30ba517090 R08: 0000000000000000 R09: 0000000000000000 [ 731.588143][T31868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.588173][T31868] R13: 00007f30bbd36038 R14: 00007f30bbd35fa0 R15: 00007ffedd68ed28 [ 731.588233][T31868] [ 731.909525][T31884] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6877'. [ 732.557608][T31937] loop9: detected capacity change from 0 to 1024 [ 732.580040][T31937] ext4: Unknown parameter 'subj_user' [ 732.774255][T31970] FAULT_INJECTION: forcing a failure. [ 732.774255][T31970] name failslab, interval 1, probability 0, space 0, times 0 [ 732.793745][T31969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6886'. [ 732.802979][T31970] CPU: 1 UID: 0 PID: 31970 Comm: syz.7.6884 Tainted: G W syzkaller #0 PREEMPT(full) [ 732.803012][T31970] Tainted: [W]=WARN [ 732.803020][T31970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 732.803035][T31970] Call Trace: [ 732.803058][T31970] [ 732.803065][T31970] __dump_stack+0x1d/0x30 [ 732.803090][T31970] dump_stack_lvl+0x95/0xd0 [ 732.803111][T31970] dump_stack+0x15/0x1b [ 732.803209][T31970] should_fail_ex+0x263/0x280 [ 732.803284][T31970] should_failslab+0x8c/0xb0 [ 732.803313][T31970] __kvmalloc_node_noprof+0x144/0x620 [ 732.803338][T31970] ? vmemdup_user+0x2b/0xd0 [ 732.803374][T31970] vmemdup_user+0x2b/0xd0 [ 732.803411][T31970] map_lookup_elem+0x2e3/0x6b0 [ 732.803449][T31970] __sys_bpf+0x406/0x7e0 [ 732.803540][T31970] __x64_sys_bpf+0x41/0x50 [ 732.803568][T31970] x64_sys_call+0x10cb/0x3020 [ 732.803650][T31970] do_syscall_64+0x12c/0x370 [ 732.803681][T31970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.803705][T31970] RIP: 0033:0x7f30bbabbf79 [ 732.803721][T31970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.803772][T31970] RSP: 002b:00007f30ba517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 732.803797][T31970] RAX: ffffffffffffffda RBX: 00007f30bbd35fa0 RCX: 00007f30bbabbf79 [ 732.803845][T31970] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000001 [ 732.803861][T31970] RBP: 00007f30ba517090 R08: 0000000000000000 R09: 0000000000000000 [ 732.803874][T31970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.803899][T31970] R13: 00007f30bbd36038 R14: 00007f30bbd35fa0 R15: 00007ffedd68ed28 [ 732.803918][T31970] [ 732.816721][T31972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 733.185035][T31984] loop9: detected capacity change from 0 to 128 [ 733.201733][T31984] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 733.214135][T31984] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 733.234053][T31984] FAT-fs (loop9): Filesystem has been set read-only [ 733.261981][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 733.261998][ T28] audit: type=1400 audit(1771016771.729:7653): avc: denied { write } for pid=31989 comm="syz.4.6893" path="socket:[97118]" dev="sockfs" ino=97118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 733.292449][T31984] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 733.301207][T31984] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 733.389437][T31993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 733.970433][T32001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6895'. [ 734.164610][T32009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.241599][T32016] bridge17: entered promiscuous mode [ 734.379046][T32029] loop1: detected capacity change from 0 to 128 [ 734.398523][T32029] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 734.431123][T32029] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 734.439060][T32029] FAT-fs (loop1): Filesystem has been set read-only [ 734.447828][T32029] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 734.515988][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2403.tmp-b7:7' failed: Read-only file system [ 734.529234][T32029] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 734.631841][T32038] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6908'. [ 734.698219][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2403.tmp-b7:7' failed: Read-only file system [ 734.716815][ T3301] udevd[3301]: symlink '../../loop4' '/dev/disk/by-diskseq/2414.tmp-b7:4' failed: Read-only file system [ 734.765182][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2403.tmp-b7:7' failed: Read-only file system [ 734.930908][T32052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.989155][T32029] bio_check_eod: 25345 callbacks suppressed [ 734.989175][T32029] syz.1.6906: attempt to access beyond end of device [ 734.989175][T32029] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 735.010650][T32029] syz.1.6906: attempt to access beyond end of device [ 735.010650][T32029] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 735.025144][T32029] syz.1.6906: attempt to access beyond end of device [ 735.025144][T32029] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 735.039704][T32029] syz.1.6906: attempt to access beyond end of device [ 735.039704][T32029] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 735.053966][T32029] syz.1.6906: attempt to access beyond end of device [ 735.053966][T32029] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 735.100442][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2403.tmp-b7:7' failed: Read-only file system [ 735.148892][T32029] syz.1.6906: attempt to access beyond end of device [ 735.148892][T32029] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 735.181293][ T3293] udevd[3293]: symlink '../../loop5' '/dev/disk/by-diskseq/2408.tmp-b7:5' failed: Read-only file system [ 735.201337][T32029] syz.1.6906: attempt to access beyond end of device [ 735.201337][T32029] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 735.237827][T32029] syz.1.6906: attempt to access beyond end of device [ 735.237827][T32029] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 735.263570][T32029] syz.1.6906: attempt to access beyond end of device [ 735.263570][T32029] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 735.294120][T32029] syz.1.6906: attempt to access beyond end of device [ 735.294120][T32029] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 735.422033][ T3293] udevd[3293]: symlink '../../loop9' '/dev/disk/by-diskseq/2418.tmp-b7:9' failed: Read-only file system [ 735.454714][T32064] loop9: detected capacity change from 0 to 1024 [ 735.473477][ T28] audit: type=1400 audit(1771016773.949:7654): avc: denied { getopt } for pid=32059 comm="syz.5.6916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 735.478443][T32064] ext4: Unknown parameter 'subj_user' [ 735.538469][T32057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.555798][ T3301] udevd[3301]: symlink '../../loop5' '/dev/disk/by-diskseq/2408.tmp-b7:5' failed: Read-only file system [ 735.555816][ T3300] udevd[3300]: symlink '../../loop1' '/dev/disk/by-diskseq/2419.tmp-b7:1' failed: Read-only file system [ 735.588665][ T3293] udevd[3293]: symlink '../../loop9' '/dev/disk/by-diskseq/2420.tmp-b7:9' failed: Read-only file system [ 735.594603][T32057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.605098][ T28] audit: type=1400 audit(1771016774.069:7655): avc: denied { create } for pid=32067 comm="syz.5.6919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 735.692207][ T28] audit: type=1326 audit(1771016774.169:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32077 comm="syz.1.6922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8c7dbf79 code=0x0 [ 735.856474][T32096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6928'. [ 736.044050][T32103] loop1: detected capacity change from 0 to 1024 [ 736.051083][T32103] ext4: Unknown parameter 'subj_user' [ 736.137448][T32090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.153482][T32090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.239931][T32111] sg_write: data in/out 16560671/120 bytes for SCSI command 0x0-- guessing data in; [ 736.239931][T32111] program syz.7.6934 not setting count and/or reply_len properly [ 736.302370][T32119] loop1: detected capacity change from 0 to 1024 [ 736.312367][T32119] EXT4-fs: inline encryption not supported [ 736.344446][T32119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.368510][T32119] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 736.384256][T32119] EXT4-fs (loop1): Remounting filesystem read-only [ 736.405412][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.451612][T32132] loop1: detected capacity change from 0 to 1024 [ 736.479572][T32132] ext4: Unknown parameter 'subj_user' [ 736.491689][T32132] loop1: detected capacity change from 0 to 128 [ 736.650452][T32139] bridge_slave_1: left allmulticast mode [ 736.662367][T32139] bridge_slave_1: left promiscuous mode [ 736.674611][T32139] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.722607][T32144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6945'. [ 736.737487][T32146] sg_write: data in/out 16560671/120 bytes for SCSI command 0x0-- guessing data in; [ 736.737487][T32146] program syz.4.6946 not setting count and/or reply_len properly [ 736.774866][ T28] audit: type=1400 audit(1771016775.250:7657): avc: denied { listen } for pid=32143 comm="syz.5.6945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 737.269528][T32162] bridge1: entered promiscuous mode [ 737.565722][T32176] sg_write: data in/out 16560671/120 bytes for SCSI command 0x0-- guessing data in; [ 737.565722][T32176] program syz.9.6958 not setting count and/or reply_len properly [ 737.646519][T32166] bridge8: entered allmulticast mode [ 737.761343][T32184] loop4: detected capacity change from 0 to 128 [ 737.785300][T32184] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 737.822523][T32184] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 737.839017][T32184] FAT-fs (loop4): Filesystem has been set read-only [ 737.859864][T32184] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 737.867737][T32184] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 738.039926][T32206] loop1: detected capacity change from 0 to 1024 [ 738.089770][T32206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.878895][ T28] audit: type=1400 audit(1771016777.220:7658): avc: denied { mount } for pid=32203 comm="syz.1.6966" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 738.923196][T32220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.943555][T32220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.011836][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.083145][T32234] loop1: detected capacity change from 0 to 1024 [ 739.091486][T32234] ext4: Unknown parameter 'subj_user' [ 739.232568][ T28] audit: type=1326 audit(1771016777.710:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32242 comm="syz.1.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8c7dbf79 code=0x7ffc0000 [ 739.256981][ T28] audit: type=1326 audit(1771016777.710:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32242 comm="syz.1.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8c7dbf79 code=0x7ffc0000 [ 739.281184][ T28] audit: type=1326 audit(1771016777.710:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32242 comm="syz.1.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8c7dbf79 code=0x7ffc0000 [ 739.308764][ T28] audit: type=1326 audit(1771016777.710:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32242 comm="syz.1.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f0c8c7dbf79 code=0x7ffc0000 [ 739.332441][ T28] audit: type=1326 audit(1771016777.710:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32242 comm="syz.1.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8c7dbf79 code=0x7ffc0000 [ 739.366252][ T28] audit: type=1326 audit(1771016777.710:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32242 comm="syz.1.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8c7dbf79 code=0x7ffc0000 [ 739.390433][ T28] audit: type=1326 audit(1771016777.710:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32242 comm="syz.1.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8c7dbf79 code=0x7ffc0000 [ 739.414573][ T28] audit: type=1326 audit(1771016777.710:7666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32242 comm="syz.1.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c8c7dbf79 code=0x7ffc0000 [ 739.441828][ T28] audit: type=1326 audit(1771016777.710:7667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32242 comm="syz.1.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8c7dbf79 code=0x7ffc0000 [ 739.478547][T32248] loop1: detected capacity change from 0 to 1024 [ 739.508808][T32248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 739.508907][T32248] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.514136][T32248] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.6982: lblock 0 mapped to illegal pblock 0 (length 5) [ 739.514706][T32248] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 739.514786][T32248] EXT4-fs (loop1): This should not happen!! Data will be lost [ 739.514786][T32248] [ 739.527792][T32248] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.6982: lblock 0 mapped to illegal pblock 0 (length 1) [ 739.528199][T32248] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 739.528242][T32248] EXT4-fs (loop1): This should not happen!! Data will be lost [ 739.528242][T32248] [ 739.574101][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 739.581763][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-diskseq/2437.tmp-b7:1' failed: Read-only file system [ 739.620882][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 739.622092][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:1' failed: Read-only file system [ 739.629198][ T3301] udevd[3301]: symlink '../../loop5' '/dev/disk/by-diskseq/2408.tmp-b7:5' failed: Read-only file system [ 739.646869][ T3870] udevd[3870]: symlink '../../loop7' '/dev/disk/by-diskseq/2403.tmp-b7:7' failed: Read-only file system [ 739.650871][ T4036] udevd[4036]: symlink '../../loop4' '/dev/disk/by-diskseq/2433.tmp-b7:4' failed: Read-only file system [ 739.656086][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 739.673556][ T3300] udevd[3300]: symlink '../../loop6' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:1' failed: Read-only file system [ 739.674415][ T3300] udevd[3300]: symlink '../../loop1' '/dev/disk/by-diskseq/2437.tmp-b7:1' failed: Read-only file system [ 739.727692][T32263] loop4: detected capacity change from 0 to 1024 [ 739.728189][T32263] ext4: Unknown parameter 'subj_user' [ 739.740599][ T3301] udevd[3301]: symlink '../../loop7' '/dev/disk/by-diskseq/2403.tmp-b7:7' failed: Read-only file system [ 739.851245][T32263] loop4: detected capacity change from 0 to 128 [ 740.320462][T32275] nfs: Unexpected value for 'acl' [ 740.528716][T32293] loop7: detected capacity change from 0 to 512 [ 740.667766][T32299] loop9: detected capacity change from 0 to 8192 [ 740.717616][T32293] EXT4-fs (loop7): 1 orphan inode deleted [ 740.741994][T32293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.870144][T32305] IPVS: set_ctl: invalid protocol: 12 172.20.20.11:21 [ 740.889294][T32305] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20001 [ 740.985963][T32302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.014013][T32302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.024628][T32314] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7005'. [ 741.045757][T32316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7007'. [ 741.615629][T32331] loop5: detected capacity change from 0 to 128 [ 741.640401][T32331] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 741.670188][T32331] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 741.678055][T32331] FAT-fs (loop5): Filesystem has been set read-only [ 741.698866][T32331] bio_check_eod: 9070 callbacks suppressed [ 741.698884][T32331] syz.5.7011: attempt to access beyond end of device [ 741.698884][T32331] loop5: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 741.726901][T32331] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 741.735044][T32331] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 741.743304][T32331] syz.5.7011: attempt to access beyond end of device [ 741.743304][T32331] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 741.759564][T32330] syz.5.7011: attempt to access beyond end of device [ 741.759564][T32330] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 741.795237][T32331] syz.5.7011: attempt to access beyond end of device [ 741.795237][T32331] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 741.826838][T32331] syz.5.7011: attempt to access beyond end of device [ 741.826838][T32331] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 741.845405][T32293] x_tables: duplicate underflow at hook 2 [ 741.858397][T32331] syz.5.7011: attempt to access beyond end of device [ 741.858397][T32331] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 741.905265][T32330] syz.5.7011: attempt to access beyond end of device [ 741.905265][T32330] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 741.906485][T27093] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.955080][T32330] syz.5.7011: attempt to access beyond end of device [ 741.955080][T32330] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 742.009012][T32330] syz.5.7011: attempt to access beyond end of device [ 742.009012][T32330] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 742.039143][T32331] syz.5.7011: attempt to access beyond end of device [ 742.039143][T32331] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 742.219632][T32350] loop1: detected capacity change from 0 to 1024 [ 742.229342][T32350] ext4: Unknown parameter 'subj_user' [ 742.275522][T32354] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7020'. [ 742.353349][T32361] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7022'. [ 742.662659][T32384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7032'. [ 742.701862][T32388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7033'. [ 742.710103][T32386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7031'. [ 742.749354][T32391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7034'. [ 742.758408][T32391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7034'. [ 742.987877][T32404] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7039'. [ 743.019148][T32408] set_capacity_and_notify: 1 callbacks suppressed [ 743.019230][T32408] loop9: detected capacity change from 0 to 128 [ 743.036412][T32408] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 743.056460][T32408] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 743.064432][T32408] FAT-fs (loop9): Filesystem has been set read-only [ 743.078037][T32408] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 743.086255][T32408] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 743.110935][T32414] loop5: detected capacity change from 0 to 512 [ 743.122646][T32414] EXT4-fs: Ignoring removed bh option [ 743.142444][T32414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.155604][T32414] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 743.273446][T27192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.218460][T32524] loop7: detected capacity change from 0 to 128 [ 744.389904][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 744.389923][ T28] audit: type=1400 audit(1771017038.870:7811): avc: denied { checkpoint_restore } for pid=32463 comm="syz.5.7050" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 744.488747][T32544] loop9: detected capacity change from 0 to 1024 [ 744.537420][T32544] ext4: Unknown parameter 'subj_user' [ 744.563606][T32544] loop9: detected capacity change from 0 to 128 [ 744.597544][ T3301] udevd[3301]: symlink '../../loop4' '/dev/disk/by-diskseq/2452.tmp-b7:4' failed: Read-only file system [ 744.618130][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2458.tmp-b7:7' failed: Read-only file system [ 744.622151][ T3300] udevd[3300]: symlink '../../loop5' '/dev/disk/by-diskseq/2455.tmp-b7:5' failed: Read-only file system [ 744.632281][T32554] loop7: detected capacity change from 0 to 128 [ 744.648249][T32554] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 744.669218][T32556] FAULT_INJECTION: forcing a failure. [ 744.669218][T32556] name failslab, interval 1, probability 0, space 0, times 0 [ 744.671055][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2462.tmp-b7:7' failed: Read-only file system [ 744.701985][T32556] CPU: 0 UID: 0 PID: 32556 Comm: syz.5.7066 Tainted: G W syzkaller #0 PREEMPT(full) [ 744.702059][T32556] Tainted: [W]=WARN [ 744.702068][T32556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 744.702090][T32556] Call Trace: [ 744.702100][T32556] [ 744.702110][T32556] __dump_stack+0x1d/0x30 [ 744.702213][T32556] dump_stack_lvl+0x95/0xd0 [ 744.702237][T32556] dump_stack+0x15/0x1b [ 744.702256][T32556] should_fail_ex+0x263/0x280 [ 744.702278][T32556] should_failslab+0x8c/0xb0 [ 744.702311][T32556] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 744.702344][T32556] ? __d_alloc+0x37/0x340 [ 744.702370][T32556] __d_alloc+0x37/0x340 [ 744.702414][T32556] ? selinux_socket_post_create+0x219/0x290 [ 744.702441][T32556] d_alloc_pseudo+0x1e/0x80 [ 744.702467][T32556] alloc_file_pseudo+0x91/0x190 [ 744.702557][T32556] ? alloc_fd+0x389/0x3c0 [ 744.702593][T32556] sock_alloc_file+0x9c/0x1e0 [ 744.702618][T32556] __sys_socket+0x115/0x180 [ 744.702727][T32556] __x64_sys_socket+0x3f/0x50 [ 744.702769][T32556] x64_sys_call+0x11fc/0x3020 [ 744.702824][T32556] do_syscall_64+0x12c/0x370 [ 744.702893][T32556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.702915][T32556] RIP: 0033:0x7f61e382d807 [ 744.702936][T32556] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.702962][T32556] RSP: 002b:00007f61e2264f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 744.702987][T32556] RAX: ffffffffffffffda RBX: 00007f61e3aa6090 RCX: 00007f61e382d807 [ 744.703027][T32556] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 744.703041][T32556] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 744.703056][T32556] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000001 [ 744.703080][T32556] R13: 00007f61e3aa6128 R14: 00007f61e3aa6090 R15: 00007fff20016888 [ 744.703099][T32556] [ 744.705810][T32554] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 744.888748][ T3301] udevd[3301]: symlink '../../loop4' '/dev/disk/by-diskseq/2452.tmp-b7:4' failed: Read-only file system [ 744.898240][ T3293] udevd[3293]: symlink '../../loop9' '/dev/disk/by-diskseq/2461.tmp-b7:9' failed: Read-only file system [ 744.930645][T32554] FAT-fs (loop7): Filesystem has been set read-only [ 744.937442][T32554] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 744.945904][T32561] FAULT_INJECTION: forcing a failure. [ 744.945904][T32561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.949411][ T3293] udevd[3293]: symlink '../../loop9' '/dev/disk/by-diskseq/2461.tmp-b7:9' failed: Read-only file system [ 744.970641][T32554] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 744.983415][ T3293] udevd[3293]: symlink '../../loop9' '/dev/disk/by-diskseq/2463.tmp-b7:9' failed: Read-only file system [ 745.119881][T32561] CPU: 0 UID: 0 PID: 32561 Comm: syz.4.7069 Tainted: G W syzkaller #0 PREEMPT(full) [ 745.119921][T32561] Tainted: [W]=WARN [ 745.119930][T32561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 745.119945][T32561] Call Trace: [ 745.119952][T32561] [ 745.119960][T32561] __dump_stack+0x1d/0x30 [ 745.120004][T32561] dump_stack_lvl+0x95/0xd0 [ 745.120029][T32561] dump_stack+0x15/0x1b [ 745.120052][T32561] should_fail_ex+0x263/0x280 [ 745.120078][T32561] should_fail+0xb/0x20 [ 745.120160][T32561] should_fail_usercopy+0x1a/0x20 [ 745.120187][T32561] _copy_from_user+0x1c/0xb0 [ 745.120243][T32561] do_ipv6_setsockopt+0x124/0x21d0 [ 745.120325][T32561] ? kstrtoull+0x111/0x140 [ 745.120345][T32561] ? __rcu_read_unlock+0x4e/0x70 [ 745.120367][T32561] ? avc_has_perm_noaudit+0xab/0x130 [ 745.120390][T32561] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 745.120481][T32561] ipv6_setsockopt+0x59/0x130 [ 745.120552][T32561] tcp_setsockopt+0x98/0xb0 [ 745.120575][T32561] sock_common_setsockopt+0x69/0x80 [ 745.120607][T32561] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 745.120639][T32561] __sys_setsockopt+0x184/0x200 [ 745.120730][T32561] __x64_sys_setsockopt+0x64/0x80 [ 745.120753][T32561] x64_sys_call+0x2327/0x3020 [ 745.120782][T32561] do_syscall_64+0x12c/0x370 [ 745.120893][T32561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.120917][T32561] RIP: 0033:0x7fb79fb4bf79 [ 745.121013][T32561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.121034][T32561] RSP: 002b:00007fb79e59f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 745.121071][T32561] RAX: ffffffffffffffda RBX: 00007fb79fdc5fa0 RCX: 00007fb79fb4bf79 [ 745.121088][T32561] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 745.121102][T32561] RBP: 00007fb79e59f090 R08: 0000000000000020 R09: 0000000000000000 [ 745.121117][T32561] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 745.121132][T32561] R13: 00007fb79fdc6038 R14: 00007fb79fdc5fa0 R15: 00007ffd7e1e0a48 [ 745.121155][T32561] [ 745.130075][ T28] audit: type=1400 audit(1771017039.610:7812): avc: denied { read } for pid=32565 comm="syz.9.7071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 745.260502][ T3293] udevd[3293]: symlink '../../loop4' '/dev/disk/by-diskseq/2452.tmp-b7:4' failed: Read-only file system [ 745.498466][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-diskseq/2449.tmp-b7:1' failed: Read-only file system [ 745.568346][ T28] audit: type=1400 audit(1771017039.780:7813): avc: denied { setopt } for pid=32565 comm="syz.9.7071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 745.852838][ T28] audit: type=1326 audit(1771017040.330:7814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32589 comm="syz.7.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bbabbf79 code=0x7ffc0000 [ 745.906074][ T28] audit: type=1326 audit(1771017040.330:7815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32589 comm="syz.7.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bbabbf79 code=0x7ffc0000 [ 745.936424][ T28] audit: type=1326 audit(1771017040.330:7816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32589 comm="syz.7.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bbabbf79 code=0x7ffc0000 [ 745.961785][ T28] audit: type=1326 audit(1771017040.330:7817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32589 comm="syz.7.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f30bbabbf79 code=0x7ffc0000 [ 746.002558][ T28] audit: type=1326 audit(1771017040.340:7818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32589 comm="syz.7.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bbabbf79 code=0x7ffc0000 [ 746.045891][ T28] audit: type=1326 audit(1771017040.340:7819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32589 comm="syz.7.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bbabbf79 code=0x7ffc0000 [ 746.074667][ T28] audit: type=1326 audit(1771017040.340:7820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32589 comm="syz.7.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bbabbf79 code=0x7ffc0000 [ 746.166013][T32609] loop5: detected capacity change from 0 to 2048 [ 746.177383][T32609] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 746.205982][T32603] syzkaller0: entered promiscuous mode [ 746.211744][T32603] syzkaller0: entered allmulticast mode [ 746.259501][T32605] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 746.325988][T32624] loop9: detected capacity change from 0 to 1024 [ 746.337511][T32624] ext4: Unknown parameter 'subj_user' [ 746.855621][T32669] __nla_validate_parse: 6 callbacks suppressed [ 746.855641][T32669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7099'. [ 746.909702][T32677] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7101'. [ 746.997408][T32684] loop4: detected capacity change from 0 to 128 [ 747.040764][T32684] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 747.053318][T32684] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 747.108721][T26823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 747.268031][T32738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7107'. [ 747.336084][T32746] loop1: detected capacity change from 0 to 1024 [ 747.354772][T32746] ext4: Unknown parameter 'subj_user' [ 747.419822][T32753] netlink: 220 bytes leftover after parsing attributes in process `syz.7.7113'. [ 747.452846][T32757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7115'. [ 747.683302][ T309] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 747.761650][ T317] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 747.781686][ T322] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7127'. [ 747.801326][ T317] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 747.814485][ T317] FAT-fs (loop1): Filesystem has been set read-only [ 747.845079][ T317] bio_check_eod: 35972 callbacks suppressed [ 747.845102][ T317] syz.1.7126: attempt to access beyond end of device [ 747.845102][ T317] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 747.872300][ T317] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 747.882056][ T317] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 747.890673][ T317] syz.1.7126: attempt to access beyond end of device [ 747.890673][ T317] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 747.909271][ T317] syz.1.7126: attempt to access beyond end of device [ 747.909271][ T317] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 747.933734][ T332] syz.1.7126: attempt to access beyond end of device [ 747.933734][ T332] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 747.952358][ T332] syz.1.7126: attempt to access beyond end of device [ 747.952358][ T332] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 747.978940][ T317] syz.1.7126: attempt to access beyond end of device [ 747.978940][ T317] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 748.006406][ T317] syz.1.7126: attempt to access beyond end of device [ 748.006406][ T317] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 748.021064][ T332] syz.1.7126: attempt to access beyond end of device [ 748.021064][ T332] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 748.050058][ T332] syz.1.7126: attempt to access beyond end of device [ 748.050058][ T332] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 748.064983][ T316] syz.1.7126: attempt to access beyond end of device [ 748.064983][ T316] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 748.123318][ T342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7133'. [ 748.174196][ T344] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7133'. [ 748.188608][ T344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7133'. [ 748.427439][ T357] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7139'. [ 748.499288][ T359] set_capacity_and_notify: 2 callbacks suppressed [ 748.499391][ T359] loop9: detected capacity change from 0 to 512 [ 748.593670][ T359] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.626774][ T359] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 749.095168][T29578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.275133][ T396] loop9: detected capacity change from 0 to 4096 [ 749.309695][ T396] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 749.360333][ T396] EXT4-fs (loop9): mount failed [ 749.493977][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 749.493996][ T28] audit: type=1400 audit(1771017043.971:7964): avc: denied { accept } for pid=404 comm="syz.7.7155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 749.549127][ T405] loop7: detected capacity change from 0 to 512 [ 749.579595][ T378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.590596][ T405] EXT4-fs: Ignoring removed bh option [ 749.601391][ T405] EXT4-fs: Ignoring removed oldalloc option [ 749.608442][ T378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.617087][ T405] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 749.640171][ T3301] udevd[3301]: symlink '../../loop7' '/dev/disk/by-diskseq/2481.tmp-b7:7' failed: Read-only file system [ 749.676472][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2481.tmp-b7:7' failed: Read-only file system [ 749.679141][ T405] EXT4-fs (loop7): 1 truncate cleaned up [ 749.693777][ T405] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.794890][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-diskseq/2477.tmp-b7:1' failed: Read-only file system [ 749.819605][ T28] audit: type=1400 audit(1771017044.301:7965): avc: denied { create } for pid=416 comm="syz.1.7158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 750.161946][ T28] audit: type=1326 audit(1771017044.411:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=416 comm="syz.1.7158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8c7dbf79 code=0x0 [ 750.199134][ T28] audit: type=1400 audit(1771017044.461:7967): avc: denied { bind } for pid=416 comm="syz.1.7158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 750.258715][T27093] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.268925][ T28] audit: type=1400 audit(1771017044.461:7968): avc: denied { write } for pid=416 comm="syz.1.7158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 750.313772][ T3293] udevd[3293]: symlink '../../loop5' '/dev/disk/by-diskseq/2466.tmp-b7:5' failed: Read-only file system [ 750.334461][ T420] loop5: detected capacity change from 0 to 512 [ 750.341055][ T3301] udevd[3301]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 750.341203][ T28] audit: type=1400 audit(1771017044.461:7969): avc: denied { ioctl } for pid=416 comm="syz.1.7158" path="socket:[100001]" dev="sockfs" ino=100001 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 750.389185][ T3301] udevd[3301]: symlink '../../loop7' '/dev/disk/by-diskseq/2481.tmp-b7:7' failed: Read-only file system [ 750.432166][ T3293] udevd[3293]: symlink '../../loop5' '/dev/disk/by-diskseq/2483.tmp-b7:5' failed: Read-only file system [ 750.458334][ T28] audit: type=1400 audit(1771017044.861:7970): avc: denied { ioctl } for pid=421 comm="syz.7.7159" path="socket:[100419]" dev="sockfs" ino=100419 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 750.461506][ T3301] udevd[3301]: symlink '../../loop7' '/dev/disk/by-diskseq/2481.tmp-b7:7' failed: Read-only file system [ 750.487445][ T3293] udevd[3293]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 750.512175][ T420] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 750.553587][ T3293] udevd[3293]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 750.566728][ T420] loop5: detected capacity change from 0 to 128 [ 750.590751][ T420] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 750.630839][ T420] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 750.783892][ T28] audit: type=1400 audit(1771017045.261:7971): avc: denied { write } for pid=419 comm="syz.5.7160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 750.834551][ T28] audit: type=1400 audit(1771017045.281:7972): avc: denied { read } for pid=419 comm="syz.5.7160" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 751.107132][ T446] loop7: detected capacity change from 0 to 164 [ 751.144742][T27192] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 751.145929][ T446] iso9660: Unknown parameter 'ioc' [ 751.216621][ T451] loop5: detected capacity change from 0 to 128 [ 751.219614][ T453] FAULT_INJECTION: forcing a failure. [ 751.219614][ T453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.242206][ T451] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 751.264003][ T453] CPU: 1 UID: 0 PID: 453 Comm: syz.4.7170 Tainted: G W syzkaller #0 PREEMPT(full) [ 751.264042][ T453] Tainted: [W]=WARN [ 751.264051][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 751.264084][ T453] Call Trace: [ 751.264092][ T453] [ 751.264101][ T453] __dump_stack+0x1d/0x30 [ 751.264134][ T453] dump_stack_lvl+0x95/0xd0 [ 751.264162][ T453] dump_stack+0x15/0x1b [ 751.264199][ T453] should_fail_ex+0x263/0x280 [ 751.264220][ T453] should_fail+0xb/0x20 [ 751.264239][ T453] should_fail_usercopy+0x1a/0x20 [ 751.264278][ T453] _copy_to_user+0x20/0xa0 [ 751.264326][ T453] simple_read_from_buffer+0xb5/0x130 [ 751.264361][ T453] proc_fail_nth_read+0x10e/0x150 [ 751.264464][ T453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.264565][ T453] vfs_read+0x1ab/0x7f0 [ 751.264601][ T453] ? __rcu_read_unlock+0x4e/0x70 [ 751.264662][ T453] ? __fget_files+0x184/0x1c0 [ 751.264751][ T453] ? mutex_lock+0x57/0x90 [ 751.264777][ T453] ksys_read+0xdc/0x1a0 [ 751.264872][ T453] __x64_sys_read+0x40/0x50 [ 751.264901][ T453] x64_sys_call+0x2886/0x3020 [ 751.264928][ T453] do_syscall_64+0x12c/0x370 [ 751.264957][ T453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.265028][ T453] RIP: 0033:0x7fb79fb0c84e [ 751.265047][ T453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 751.265067][ T453] RSP: 002b:00007fb79e59efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 751.265091][ T453] RAX: ffffffffffffffda RBX: 00007fb79e59f6c0 RCX: 00007fb79fb0c84e [ 751.265120][ T453] RDX: 000000000000000f RSI: 00007fb79e59f0a0 RDI: 0000000000000005 [ 751.265135][ T453] RBP: 00007fb79e59f090 R08: 0000000000000000 R09: 0000000000000000 [ 751.265150][ T453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.265165][ T453] R13: 00007fb79fdc6038 R14: 00007fb79fdc5fa0 R15: 00007ffd7e1e0a48 [ 751.265229][ T453] [ 751.274961][ T451] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 751.516441][ T457] loop4: detected capacity change from 0 to 1024 [ 751.527068][ T451] FAT-fs (loop5): Filesystem has been set read-only [ 751.547367][ T451] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 751.568277][ T451] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 751.569063][ T457] EXT4-fs: Ignoring removed nobh option [ 751.616805][ T457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 751.663330][ T446] loop7: detected capacity change from 0 to 512 [ 751.751269][ T446] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 751.852047][ T446] EXT4-fs (loop7): 1 truncate cleaned up [ 751.949188][ T457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.048309][ T28] audit: type=1400 audit(1771017302.508:7973): avc: denied { mounton } for pid=454 comm="syz.4.7171" path="/proc/640/task" dev="proc" ino=100493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 752.093949][ T446] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.294274][T26823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.357405][ T477] loop9: detected capacity change from 0 to 512 [ 752.391273][ T477] EXT4-fs (loop9): 1 truncate cleaned up [ 752.397414][ T477] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.480021][T27093] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.568975][T29578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.776871][ T501] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 752.793425][ T501] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 752.818627][ T501] EXT4-fs (loop9): group descriptors corrupted! [ 752.838629][ T503] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 752.858732][ T503] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.917041][T26823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 753.050344][ T514] __nla_validate_parse: 4 callbacks suppressed [ 753.050360][ T514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7189'. [ 753.053988][ T516] Invalid argument reading file caps for ./file0 [ 753.478005][ T3293] loop4: p3 p4 < > [ 753.492039][ T3293] loop4: p3 start 11362048 is beyond EOD, truncated [ 753.527754][ T525] loop4: p3 p4 < > [ 753.532467][ T525] loop4: p3 start 11362048 is beyond EOD, truncated [ 753.788755][ T526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.823603][ T526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.843821][ T536] set_capacity_and_notify: 3 callbacks suppressed [ 753.843839][ T536] loop1: detected capacity change from 0 to 4096 [ 753.906880][ T536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.943072][ T536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7195'. [ 754.003032][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.079226][ T481] syz.5.7179 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 754.095087][ T481] CPU: 1 UID: 0 PID: 481 Comm: syz.5.7179 Tainted: G W syzkaller #0 PREEMPT(full) [ 754.095128][ T481] Tainted: [W]=WARN [ 754.095136][ T481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 754.095242][ T481] Call Trace: [ 754.095252][ T481] [ 754.095261][ T481] __dump_stack+0x1d/0x30 [ 754.095289][ T481] dump_stack_lvl+0x95/0xd0 [ 754.095309][ T481] dump_stack+0x15/0x1b [ 754.095328][ T481] dump_header+0x80/0x240 [ 754.095409][ T481] oom_kill_process+0x295/0x350 [ 754.095506][ T481] out_of_memory+0x97d/0xb80 [ 754.095559][ T481] try_charge_memcg+0x62e/0xa10 [ 754.095595][ T481] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 754.095629][ T481] __swap_cache_prepare_and_add+0x386/0x530 [ 754.095702][ T481] swap_cache_alloc_folio+0xa2/0x120 [ 754.095730][ T481] swap_cluster_readahead+0x26e/0x3d0 [ 754.095793][ T481] swapin_readahead+0xde/0x840 [ 754.095818][ T481] ? __rcu_read_unlock+0x4e/0x70 [ 754.095857][ T481] ? lruvec_stat_mod_folio+0xd2/0x110 [ 754.095887][ T481] ? __folio_end_writeback+0x334/0x360 [ 754.095999][ T481] ? __rcu_read_unlock+0x4e/0x70 [ 754.096020][ T481] ? swap_cache_get_folio+0x26f/0x280 [ 754.096060][ T481] do_swap_page+0x309/0x21f0 [ 754.096093][ T481] ? __rcu_read_lock+0x36/0x50 [ 754.096116][ T481] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 754.096141][ T481] handle_mm_fault+0xb40/0x3020 [ 754.096169][ T481] ? vma_start_read+0x1c7/0x2c0 [ 754.096278][ T481] do_user_addr_fault+0x62f/0x1050 [ 754.096309][ T481] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 754.096394][ T481] ? irqentry_exit+0x3c/0x520 [ 754.096417][ T481] exc_page_fault+0x62/0xa0 [ 754.096496][ T481] asm_exc_page_fault+0x26/0x30 [ 754.096517][ T481] RIP: 0033:0x7f61e36fc579 [ 754.096534][ T481] Code: f0 0f 83 c0 00 00 00 48 89 75 00 49 89 4c 24 f8 48 8b 4d 08 48 8b 55 00 eb 91 0f 1f 80 00 00 00 00 4c 89 ea 4c 89 e6 48 89 df 02 ff ff ff 48 89 d8 48 29 e8 48 3d 80 00 00 00 0f 8e 7d 00 00 [ 754.096594][ T481] RSP: 002b:00007fff20016870 EFLAGS: 00010202 [ 754.096645][ T481] RAX: 00007f61e2fa0650 RBX: 00007f61e2fa0658 RCX: ffffffff817ed93b [ 754.096659][ T481] RDX: 000000000000001d RSI: 00007f61e2fc3630 RDI: 00007f61e2fa0658 [ 754.096673][ T481] RBP: 00007f61e2f71898 R08: 00007f61e3a90000 R09: 00007f61e3aa6128 [ 754.096687][ T481] R10: 0000000000000001 R11: 0000000000000009 R12: 00007f61e2fc3630 [ 754.096706][ T481] R13: 000000000000001d R14: 000000000000a3b3 R15: 0000000000000001 [ 754.096722][ T481] ? walk_update_folio+0x2b/0x570 [ 754.096748][ T481] [ 754.096785][ T481] memory: usage 307200kB, limit 307200kB, failcnt 9284 [ 754.215891][ T544] loop1: detected capacity change from 0 to 512 [ 754.221549][ T481] memory+swap: usage 212760kB, limit 9007199254740988kB, failcnt 0 [ 754.241126][ T544] EXT4-fs: Ignoring removed bh option [ 754.244567][ T481] kmem: usage 178400kB, limit 9007199254740988kB, failcnt 0 [ 754.276801][ T544] EXT4-fs: inline encryption not supported [ 754.289868][ T481] Memory cgroup stats for [ 754.400018][ T544] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 754.414266][ T481] /syz5: [ 754.414547][ T481] cache 7110656 [ 754.421431][ T481] rss 12288 [ 754.424652][ T481] shmem 7110656 [ 754.428247][ T481] mapped_file 1167360 [ 754.432299][ T481] dirty 0 [ 754.435401][ T481] writeback 0 [ 754.438924][ T481] workingset_refault_anon 1649 [ 754.443786][ T481] workingset_refault_file 0 [ 754.449296][ T481] swap 10940416 [ 754.452769][ T481] swapcached 25165824 [ 754.456760][ T481] pgpgin 866021 [ 754.460547][ T481] pgpgout 864277 [ 754.464179][ T481] pgfault 943636 [ 754.467786][ T481] pgmajfault 516 [ 754.471552][ T481] inactive_anon 24576 [ 754.475545][ T481] active_anon 7106560 [ 754.496294][ T481] inactive_file 12288 [ 754.509255][ T481] active_file 0 [ 754.512998][ T481] unevictable 0 [ 754.513614][ T544] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 754.516476][ T481] hierarchical_memory_limit 314572800 [ 754.516490][ T481] hierarchical_memsw_limit 9223372036854771712 [ 754.516502][ T481] total_cache 7110656 [ 754.546441][ T481] total_rss 12288 [ 754.550132][ T481] total_shmem 7110656 [ 754.552905][ T544] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7198: bg 0: block 248: padding at end of block bitmap is not set [ 754.554145][ T481] total_mapped_file 1167360 [ 754.572972][ T481] total_dirty 0 [ 754.576584][ T481] total_writeback 0 [ 754.580472][ T481] total_workingset_refault_anon 1649 [ 754.585859][ T481] total_workingset_refault_file 0 [ 754.591057][ T481] total_swap 10940416 [ 754.595184][ T481] total_swapcached 25165824 [ 754.599732][ T481] total_pgpgin 866021 [ 754.603738][ T481] total_pgpgout 864277 [ 754.608122][ T481] total_pgfault 943636 [ 754.612236][ T481] total_pgmajfault 516 [ 754.616310][ T481] total_inactive_anon 24576 [ 754.620896][ T481] total_active_anon 7106560 [ 754.625410][ T481] total_inactive_file 12288 [ 754.630550][ T481] total_active_file 0 [ 754.631501][ T544] loop1: lost filesystem error report for type 5 error -117 [ 754.634722][ T481] total_unevictable 0 [ 754.646221][ T481] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7179,pid=481,uid=0 [ 754.648026][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 754.660995][ T481] Memory cgroup out of memory: Killed process 481 (syz.5.7179) total-vm:96204kB, anon-rss:1236kB, file-rss:22328kB, shmem-rss:1140kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 754.667243][ C0] EXT4-fs (loop1): last error at time 1771017305: ext4_validate_block_bitmap:441 [ 754.667550][ T544] __quota_error: 75 callbacks suppressed [ 754.667565][ T544] Quota error (device loop1): write_blk: dquota write failed [ 754.727019][ T556] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7201'. [ 754.751783][ T544] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 754.756354][ T550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7200'. [ 754.775606][ T544] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.7198: Failed to acquire dquot type 1 [ 754.787540][ T544] loop1: lost filesystem error report for type 5 error -117 [ 754.788285][ T544] EXT4-fs (loop1): 1 truncate cleaned up [ 754.810265][ T544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 754.844220][ T3293] udevd[3293]: symlink '../../loop5' '/dev/disk/by-diskseq/2492.tmp-b7:5' failed: Read-only file system [ 754.861160][ T544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7198'. [ 754.871939][ T544] netlink: 'syz.1.7198': attribute type 1 has an invalid length. [ 754.880088][ T544] netlink: 'syz.1.7198': attribute type 2 has an invalid length. [ 754.901123][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 754.938507][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-diskseq/2504.tmp-b7:1' failed: Read-only file system [ 754.970478][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-diskseq/2504.tmp-b7:1' failed: Read-only file system [ 755.000821][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-diskseq/2506.tmp-b7:1' failed: Read-only file system [ 755.425975][ T570] loop4: detected capacity change from 0 to 1024 [ 755.443126][ T570] ext4: Unknown parameter 'subj_user' [ 755.461239][ T3293] udevd[3293]: symlink '../../loop4' '/dev/disk/by-diskseq/2505.tmp-b7:4' failed: Read-only file system [ 755.484487][ T3293] udevd[3293]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 755.523689][ T3293] udevd[3293]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 755.545499][ T574] loop4: detected capacity change from 0 to 128 [ 755.546196][ T3293] udevd[3293]: symlink '../../loop4' '/dev/disk/by-diskseq/2507.tmp-b7:4' failed: Read-only file system [ 755.578743][ T574] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 755.621702][ T3293] udevd[3293]: symlink '../../loop4' '/dev/disk/by-diskseq/2507.tmp-b7:4' failed: Read-only file system [ 755.647513][ T3293] udevd[3293]: symlink '../../loop4' '/dev/disk/by-diskseq/2507.tmp-b7:4' failed: Read-only file system [ 756.012503][ T595] loop9: detected capacity change from 0 to 1024 [ 756.034754][ T595] EXT4-fs: dax option not supported [ 756.171895][ T608] loop9: detected capacity change from 0 to 1024 [ 756.195165][ T608] ext4: Unknown parameter 'subj_user' [ 756.245216][ T608] loop9: detected capacity change from 0 to 128 [ 756.328875][ T28] audit: type=1400 audit(1771017306.808:8049): avc: denied { ioctl } for pid=618 comm="syz.7.7218" path="socket:[100661]" dev="sockfs" ino=100661 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 756.413147][ T28] audit: type=1326 audit(1771017306.848:8050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=621 comm="syz.9.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d821bf79 code=0x7ffc0000 [ 756.536556][ T619] loop7: detected capacity change from 0 to 128 [ 756.614959][ T28] audit: type=1326 audit(1771017306.848:8051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=621 comm="syz.9.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d821bf79 code=0x7ffc0000 [ 756.641372][ T28] audit: type=1326 audit(1771017306.848:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=621 comm="syz.9.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d821bf79 code=0x7ffc0000 [ 756.665373][ T28] audit: type=1326 audit(1771017306.848:8053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=621 comm="syz.9.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f67d821bf79 code=0x7ffc0000 [ 756.690690][ T28] audit: type=1326 audit(1771017306.858:8054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=621 comm="syz.9.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d821bf79 code=0x7ffc0000 [ 756.715852][ T28] audit: type=1326 audit(1771017306.858:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=621 comm="syz.9.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d821bf79 code=0x7ffc0000 [ 756.753256][ T637] netlink: 168 bytes leftover after parsing attributes in process `syz.5.7221'. [ 756.812826][ T619] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 756.938107][ T28] audit: type=1326 audit(1771017306.858:8056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=621 comm="syz.9.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d821bf79 code=0x7ffc0000 [ 756.940677][ T619] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 757.097640][ T673] loop4: detected capacity change from 0 to 4096 [ 757.114646][ T673] EXT4-fs: Ignoring removed bh option [ 757.125288][ T673] EXT4-fs: Ignoring removed mblk_io_submit option [ 757.137181][ T679] loop9: detected capacity change from 0 to 1024 [ 757.169481][ T673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.209815][ T684] xt_hashlimit: size too large, truncated to 1048576 [ 757.229820][ T679] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.280605][ T673] FAULT_INJECTION: forcing a failure. [ 757.280605][ T673] name failslab, interval 1, probability 0, space 0, times 0 [ 757.293464][ T673] CPU: 0 UID: 0 PID: 673 Comm: syz.4.7224 Tainted: G W syzkaller #0 PREEMPT(full) [ 757.293554][ T673] Tainted: [W]=WARN [ 757.293561][ T673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 757.293575][ T673] Call Trace: [ 757.293582][ T673] [ 757.293590][ T673] __dump_stack+0x1d/0x30 [ 757.293614][ T673] dump_stack_lvl+0x95/0xd0 [ 757.293643][ T673] dump_stack+0x15/0x1b [ 757.293723][ T673] should_fail_ex+0x263/0x280 [ 757.293812][ T673] should_failslab+0x8c/0xb0 [ 757.293898][ T673] kmem_cache_alloc_noprof+0x66/0x400 [ 757.293941][ T673] ? ext4_mb_new_blocks+0x2f0/0x1f00 [ 757.294021][ T673] ext4_mb_new_blocks+0x2f0/0x1f00 [ 757.294084][ T673] ? __kmalloc_noprof+0x1e3/0x4e0 [ 757.294128][ T673] ? ext4_inode_to_goal_block+0x1bd/0x1d0 [ 757.294180][ T673] ext4_ext_map_blocks+0xdc3/0x2f50 [ 757.294257][ T673] ? bdev_getblk+0x35a/0x3f0 [ 757.294278][ T673] ? ext4_get_group_desc+0x16b/0x190 [ 757.294312][ T673] ? ext4_fc_track_inode+0x9f/0x5f0 [ 757.294407][ T673] ext4_map_create_blocks+0xce/0x3a0 [ 757.294452][ T673] ext4_map_blocks+0x594/0x970 [ 757.294483][ T673] ext4_iomap_begin+0x901/0xf10 [ 757.294508][ T673] ? find_get_block_common+0x672/0x890 [ 757.294571][ T673] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 757.294595][ T673] iomap_iter+0x3f7/0x800 [ 757.294695][ T673] ? should_failslab+0x8c/0xb0 [ 757.294724][ T673] __iomap_dio_rw+0x848/0x14a0 [ 757.294877][ T673] iomap_dio_rw+0x40/0x90 [ 757.294895][ T673] ext4_file_write_iter+0xcaa/0xfa0 [ 757.294929][ T673] iter_file_splice_write+0x6bc/0xa80 [ 757.295020][ T673] ? __pfx_iter_file_splice_write+0x10/0x10 [ 757.295070][ T673] do_splice+0x970/0x10b0 [ 757.295100][ T673] ? __rcu_read_unlock+0x4e/0x70 [ 757.295119][ T673] ? __fget_files+0x184/0x1c0 [ 757.295140][ T673] __se_sys_splice+0x26c/0x3a0 [ 757.295229][ T673] __x64_sys_splice+0x78/0x90 [ 757.295307][ T673] x64_sys_call+0x16ef/0x3020 [ 757.295333][ T673] do_syscall_64+0x12c/0x370 [ 757.295362][ T673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.295382][ T673] RIP: 0033:0x7fb79fb4bf79 [ 757.295403][ T673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.295421][ T673] RSP: 002b:00007fb79e59f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 757.295504][ T673] RAX: ffffffffffffffda RBX: 00007fb79fdc5fa0 RCX: 00007fb79fb4bf79 [ 757.295521][ T673] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 757.295534][ T673] RBP: 00007fb79e59f090 R08: 00000000088000cc R09: 0000000000000000 [ 757.295550][ T673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.295564][ T673] R13: 00007fb79fdc6038 R14: 00007fb79fdc5fa0 R15: 00007ffd7e1e0a48 [ 757.295691][ T673] [ 757.635652][T29578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.647247][T27093] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 757.884015][T26823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.012071][ T694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.056102][ T694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.433024][ T716] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 758.480671][ T716] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 758.518139][ T716] EXT4-fs (loop5): group descriptors corrupted! [ 759.039749][ T811] FAULT_INJECTION: forcing a failure. [ 759.039749][ T811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.058399][ T826] set_capacity_and_notify: 1 callbacks suppressed [ 759.058415][ T826] loop5: detected capacity change from 0 to 128 [ 759.084898][ T811] CPU: 1 UID: 0 PID: 811 Comm: syz.1.7242 Tainted: G W syzkaller #0 PREEMPT(full) [ 759.084937][ T811] Tainted: [W]=WARN [ 759.084945][ T811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 759.084958][ T811] Call Trace: [ 759.084964][ T811] [ 759.085037][ T811] __dump_stack+0x1d/0x30 [ 759.085098][ T811] dump_stack_lvl+0x95/0xd0 [ 759.085123][ T811] dump_stack+0x15/0x1b [ 759.085147][ T811] should_fail_ex+0x263/0x280 [ 759.085174][ T811] should_fail+0xb/0x20 [ 759.085273][ T811] should_fail_usercopy+0x1a/0x20 [ 759.085297][ T811] _copy_from_user+0x1c/0xb0 [ 759.085369][ T811] get_itimerspec64+0x4c/0x1b0 [ 759.085395][ T811] __x64_sys_timerfd_settime+0x89/0x140 [ 759.085472][ T811] x64_sys_call+0x1e5c/0x3020 [ 759.085593][ T811] do_syscall_64+0x12c/0x370 [ 759.085623][ T811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.085682][ T811] RIP: 0033:0x7f0c8c7dbf79 [ 759.085700][ T811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.085720][ T811] RSP: 002b:00007f0c8b237028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 759.085744][ T811] RAX: ffffffffffffffda RBX: 00007f0c8ca55fa0 RCX: 00007f0c8c7dbf79 [ 759.085762][ T811] RDX: 0000200000000380 RSI: 0000000000000000 RDI: ffffffffffffffff [ 759.085827][ T811] RBP: 00007f0c8b237090 R08: 0000000000000000 R09: 0000000000000000 [ 759.085843][ T811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.085857][ T811] R13: 00007f0c8ca56038 R14: 00007f0c8ca55fa0 R15: 00007fff60c3cde8 [ 759.085879][ T811] [ 759.637118][ T854] netlink: 80 bytes leftover after parsing attributes in process `syz.7.7251'. [ 759.773817][ T859] loop7: detected capacity change from 0 to 512 [ 759.825513][ T859] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 759.851440][ T3293] udevd[3293]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 759.879381][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2527.tmp-b7:7' failed: Read-only file system [ 759.909536][ T859] /dev/sg0: Can't lookup blockdev [ 759.934157][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2527.tmp-b7:7' failed: Read-only file system [ 759.970921][ T859] loop7: detected capacity change from 0 to 4096 [ 760.037255][ T859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.080937][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2527.tmp-b7:7' failed: Read-only file system [ 760.186316][T27093] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.197389][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2529.tmp-b7:7' failed: Read-only file system [ 760.268293][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 760.268309][ T28] audit: type=1326 audit(1771017566.749:8130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=847 comm="syz.9.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f67d81dc84e code=0x7fc00000 [ 760.291930][ T843] syz.1.7248 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 760.316845][ T3301] udevd[3301]: symlink '../../loop4' '/dev/disk/by-diskseq/2522.tmp-b7:4' failed: Read-only file system [ 760.323509][ T867] loop4: detected capacity change from 0 to 128 [ 760.337279][ T3293] udevd[3293]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 760.361031][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2529.tmp-b7:7' failed: Read-only file system [ 760.372358][ T843] CPU: 0 UID: 0 PID: 843 Comm: syz.1.7248 Tainted: G W syzkaller #0 PREEMPT(full) [ 760.372414][ T843] Tainted: [W]=WARN [ 760.372423][ T843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 760.372500][ T843] Call Trace: [ 760.372509][ T843] [ 760.372517][ T843] __dump_stack+0x1d/0x30 [ 760.372547][ T843] dump_stack_lvl+0x95/0xd0 [ 760.372586][ T843] dump_stack+0x15/0x1b [ 760.372607][ T843] dump_header+0x80/0x240 [ 760.372709][ T843] oom_kill_process+0x295/0x350 [ 760.372741][ T843] out_of_memory+0x97d/0xb80 [ 760.372770][ T843] try_charge_memcg+0x62e/0xa10 [ 760.372857][ T843] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 760.372883][ T843] __swap_cache_prepare_and_add+0x386/0x530 [ 760.372982][ T843] swap_cache_alloc_folio+0xa2/0x120 [ 760.373041][ T843] swap_cluster_readahead+0x36b/0x3d0 [ 760.373068][ T843] swapin_readahead+0xde/0x840 [ 760.373089][ T843] ? _raw_spin_unlock+0x9/0x30 [ 760.373117][ T843] ? swap_put_entries_cluster+0x385/0x3a0 [ 760.373159][ T843] ? swap_put_entries_cluster+0xe1/0x3a0 [ 760.373183][ T843] ? __rcu_read_unlock+0x4e/0x70 [ 760.373235][ T843] ? swap_cache_get_folio+0x26f/0x280 [ 760.373288][ T843] do_swap_page+0x309/0x21f0 [ 760.373372][ T843] ? css_rstat_updated+0xbb/0x280 [ 760.373401][ T843] ? __rcu_read_lock+0x36/0x50 [ 760.373418][ T843] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 760.373466][ T843] handle_mm_fault+0xb40/0x3020 [ 760.373491][ T843] ? vma_start_read+0x1c7/0x2c0 [ 760.373598][ T843] do_user_addr_fault+0x62f/0x1050 [ 760.373649][ T843] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 760.373670][ T843] ? irqentry_exit+0x3c/0x520 [ 760.373690][ T843] exc_page_fault+0x62/0xa0 [ 760.373746][ T843] asm_exc_page_fault+0x26/0x30 [ 760.373765][ T843] RIP: 0033:0x7f0c8c690780 [ 760.373781][ T843] Code: 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 [ 760.373799][ T843] RSP: 002b:00007fff60c3ce78 EFLAGS: 00010246 [ 760.373816][ T843] RAX: 0000000000000000 RBX: ffffffff81dfaee4 RCX: 0000000000000000 [ 760.373863][ T843] RDX: 0000000000000ee4 RSI: ffffffff81dfaee4 RDI: 0000000000000006 [ 760.373876][ T843] RBP: 0000000000000008 R08: 00007f0c8ca40000 R09: 00007f0c8ca42000 [ 760.373889][ T843] R10: 0000000081dfaee8 R11: 0000000000000006 R12: 00007f0c8ca56128 [ 760.373902][ T843] R13: 0000000000000008 R14: ffffffff81dfaec1 R15: 00007f0c8d585720 [ 760.373915][ T843] ? selinux_bpf+0x11/0xe0 [ 760.373946][ T843] ? selinux_bpf+0x34/0xe0 [ 760.374018][ T843] ? selinux_bpf+0x34/0xe0 [ 760.374104][ T843] [ 760.374111][ T843] memory: usage 307200kB, limit 307200kB, failcnt 7777 [ 760.492523][ T3301] udevd[3301]: symlink '../../loop4' '/dev/disk/by-diskseq/2531.tmp-b7:4' failed: Read-only file system [ 760.554994][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2529.tmp-b7:7' failed: Read-only file system [ 760.597861][ T843] memory+swap: usage 264736kB, limit 9007199254740988kB, failcnt 0 [ 760.718222][ T843] kmem: usage 209544kB, limit 9007199254740988kB, failcnt 0 [ 760.725928][ T843] Memory cgroup stats for /syz1: [ 760.726247][ T843] cache 4096 [ 760.733188][ T874] loop9: detected capacity change from 0 to 512 [ 760.738517][ T843] rss 12288 [ 760.744133][ T843] shmem 4096 [ 760.747383][ T843] mapped_file 413696 [ 760.751800][ T843] dirty 0 [ 760.754749][ T843] writeback 0 [ 760.759138][ T843] workingset_refault_anon 49 [ 760.784064][ T843] workingset_refault_file 0 [ 760.819880][ T874] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.832575][ T843] swap 21737472 [ 760.836116][ T843] swapcached 26914816 [ 760.848295][ T843] pgpgin 750347 [ 760.854080][ T843] pgpgout 750340 [ 760.862143][ T843] pgfault 661088 [ 760.865710][ T843] pgmajfault 52 [ 760.870220][ T843] inactive_anon 0 [ 760.873890][ T843] active_anon 12288 [ 760.877883][ T843] inactive_file 0 [ 760.881633][ T843] active_file 8192 [ 760.885358][ T843] unevictable 4096 [ 760.889500][ T843] hierarchical_memory_limit 314572800 [ 760.894981][ T843] hierarchical_memsw_limit 9223372036854771712 [ 760.901599][ T843] total_cache 4096 [ 760.905565][ T843] total_rss 12288 [ 760.909497][ T843] total_shmem 4096 [ 760.909645][ T874] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.913248][ T843] total_mapped_file 413696 [ 760.913260][ T843] total_dirty 0 [ 760.931685][ T843] total_writeback 0 [ 760.937679][ T843] total_workingset_refault_anon 49 [ 760.947675][ T843] total_workingset_refault_file 0 [ 760.952785][ T843] total_swap 21737472 [ 760.956896][ T843] total_swapcached 26914816 [ 760.962870][ T843] total_pgpgin 750347 [ 760.966926][ T843] total_pgpgout 750340 [ 760.971044][ T843] total_pgfault 661088 [ 760.975195][ T843] total_pgmajfault 52 [ 760.987682][ T843] total_inactive_anon 0 [ 760.991906][ T843] total_active_anon 12288 [ 760.996246][ T843] total_inactive_file 0 [ 761.009641][ T843] total_active_file 8192 [ 761.013924][ T843] total_unevictable 4096 [ 761.043979][ T900] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7263'. [ 761.044740][ T843] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7248,pid=843,uid=0 [ 761.094108][ T28] audit: type=1400 audit(1771017567.569:8131): avc: denied { rmdir } for pid=29578 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 761.116625][ T843] Memory cgroup out of memory: Killed process 843 (syz.1.7248) total-vm:94156kB, anon-rss:1240kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 761.141118][T29578] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 761.159869][T29578] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 761.238678][T29578] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 761.360842][T29578] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 761.394478][ T28] audit: type=1400 audit(1771017567.869:8132): avc: denied { ioctl } for pid=924 comm="syz.1.7265" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 761.445642][T29578] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 761.526212][T29578] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 761.580744][T29578] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 761.642137][T29578] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 761.718290][T29578] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 761.813787][T29578] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 761.920433][ T933] loop1: detected capacity change from 0 to 512 [ 761.983412][ T933] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 761.996528][ T842] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.047354][ T933] EXT4-fs (loop1): 1 truncate cleaned up [ 762.063525][ T933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.129146][ T964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.141796][ T964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.256181][ T972] loop7: detected capacity change from 0 to 764 [ 762.298065][ T972] rock: directory entry would overflow storage [ 762.314379][ T972] rock: sig=0x5245, size=8, remaining=5 [ 762.352034][ T28] audit: type=1400 audit(1771017568.830:8133): avc: denied { mount } for pid=971 comm="syz.7.7270" name="/" dev="loop7" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 762.403650][ T28] audit: type=1400 audit(1771017568.860:8134): avc: denied { unmount } for pid=27093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 762.523778][ T28] audit: type=1400 audit(1771017569.000:8135): avc: denied { map } for pid=976 comm="syz.7.7272" path="socket:[100879]" dev="sockfs" ino=100879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 762.612488][ T28] audit: type=1400 audit(1771017569.000:8136): avc: denied { read } for pid=976 comm="syz.7.7272" path="socket:[100879]" dev="sockfs" ino=100879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 762.878049][ T982] netlink: 'syz.5.7275': attribute type 1 has an invalid length. [ 762.899671][ T982] 8021q: adding VLAN 0 to HW filter on device bond3 [ 762.907848][ T984] loop7: detected capacity change from 0 to 128 [ 762.920156][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.965157][ T986] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7278'. [ 763.041868][ T982] bond3: (slave veth5): Enslaving as an active interface with a down link [ 763.069922][ T997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.077243][ T997] bond3: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 763.131347][ T1003] FAULT_INJECTION: forcing a failure. [ 763.131347][ T1003] name failslab, interval 1, probability 0, space 0, times 0 [ 763.148229][ T1003] CPU: 0 UID: 0 PID: 1003 Comm: syz.7.7281 Tainted: G W syzkaller #0 PREEMPT(full) [ 763.148268][ T1003] Tainted: [W]=WARN [ 763.148278][ T1003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 763.148361][ T1003] Call Trace: [ 763.148370][ T1003] [ 763.148380][ T1003] __dump_stack+0x1d/0x30 [ 763.148412][ T1003] dump_stack_lvl+0x95/0xd0 [ 763.148441][ T1003] dump_stack+0x15/0x1b [ 763.148468][ T1003] should_fail_ex+0x263/0x280 [ 763.148493][ T1003] should_failslab+0x8c/0xb0 [ 763.148579][ T1003] __kmalloc_cache_node_noprof+0x6b/0x470 [ 763.148602][ T1003] ? __get_vm_area_node+0x106/0x1d0 [ 763.148624][ T1003] ? __rcu_read_unlock+0x4e/0x70 [ 763.148648][ T1003] __get_vm_area_node+0x106/0x1d0 [ 763.148819][ T1003] __vmalloc_node_range_noprof+0x291/0x12b0 [ 763.148922][ T1003] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 763.149001][ T1003] ? _parse_integer_limit+0x170/0x190 [ 763.149032][ T1003] ? _parse_integer+0x27/0x40 [ 763.149051][ T1003] ? kstrtoull+0x111/0x140 [ 763.149080][ T1003] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 763.149112][ T1003] __vmalloc_noprof+0xa4/0xf0 [ 763.149136][ T1003] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 763.149185][ T1003] bpf_prog_alloc_no_stats+0x47/0x390 [ 763.149218][ T1003] ? bpf_prog_alloc+0x2a/0x150 [ 763.149284][ T1003] bpf_prog_alloc+0x3c/0x150 [ 763.149314][ T1003] bpf_prog_create_from_user+0x7d/0x260 [ 763.149339][ T1003] ? __pfx_seccomp_check_filter+0x10/0x10 [ 763.149372][ T1003] do_seccomp+0x5f7/0xa50 [ 763.149397][ T1003] ? fput+0x8f/0xc0 [ 763.149420][ T1003] ? ksys_write+0x194/0x1a0 [ 763.149501][ T1003] __x64_sys_seccomp+0x40/0x50 [ 763.149577][ T1003] x64_sys_call+0x3f9/0x3020 [ 763.149646][ T1003] do_syscall_64+0x12c/0x370 [ 763.149677][ T1003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.149744][ T1003] RIP: 0033:0x7f30bbabbf79 [ 763.149763][ T1003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.149785][ T1003] RSP: 002b:00007f30ba517028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 763.149808][ T1003] RAX: ffffffffffffffda RBX: 00007f30bbd35fa0 RCX: 00007f30bbabbf79 [ 763.149847][ T1003] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000001 [ 763.149862][ T1003] RBP: 00007f30ba517090 R08: 0000000000000000 R09: 0000000000000000 [ 763.149877][ T1003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.149892][ T1003] R13: 00007f30bbd36038 R14: 00007f30bbd35fa0 R15: 00007ffedd68ed28 [ 763.149914][ T1003] [ 763.150149][ T1003] syz.7.7281: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 763.176459][ T996] program syz.4.7279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 763.187097][ T1003] ,cpuset=/,mems_allowed=0 [ 763.428587][ T1003] CPU: 0 UID: 0 PID: 1003 Comm: syz.7.7281 Tainted: G W syzkaller #0 PREEMPT(full) [ 763.428624][ T1003] Tainted: [W]=WARN [ 763.428632][ T1003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 763.428653][ T1003] Call Trace: [ 763.428733][ T1003] [ 763.428743][ T1003] __dump_stack+0x1d/0x30 [ 763.428774][ T1003] dump_stack_lvl+0x95/0xd0 [ 763.428809][ T1003] dump_stack+0x15/0x1b [ 763.428883][ T1003] warn_alloc+0x145/0x1c0 [ 763.428919][ T1003] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 763.428995][ T1003] ? _parse_integer_limit+0x170/0x190 [ 763.429020][ T1003] ? _parse_integer+0x27/0x40 [ 763.429038][ T1003] ? kstrtoull+0x111/0x140 [ 763.429060][ T1003] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 763.429114][ T1003] __vmalloc_noprof+0xa4/0xf0 [ 763.429143][ T1003] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 763.429204][ T1003] bpf_prog_alloc_no_stats+0x47/0x390 [ 763.429242][ T1003] ? bpf_prog_alloc+0x2a/0x150 [ 763.429385][ T1003] bpf_prog_alloc+0x3c/0x150 [ 763.429512][ T1003] bpf_prog_create_from_user+0x7d/0x260 [ 763.429534][ T1003] ? __pfx_seccomp_check_filter+0x10/0x10 [ 763.429562][ T1003] do_seccomp+0x5f7/0xa50 [ 763.429592][ T1003] ? fput+0x8f/0xc0 [ 763.429615][ T1003] ? ksys_write+0x194/0x1a0 [ 763.429648][ T1003] __x64_sys_seccomp+0x40/0x50 [ 763.429691][ T1003] x64_sys_call+0x3f9/0x3020 [ 763.429715][ T1003] do_syscall_64+0x12c/0x370 [ 763.429744][ T1003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.429833][ T1003] RIP: 0033:0x7f30bbabbf79 [ 763.429852][ T1003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.429873][ T1003] RSP: 002b:00007f30ba517028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 763.429897][ T1003] RAX: ffffffffffffffda RBX: 00007f30bbd35fa0 RCX: 00007f30bbabbf79 [ 763.429942][ T1003] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000001 [ 763.429963][ T1003] RBP: 00007f30ba517090 R08: 0000000000000000 R09: 0000000000000000 [ 763.429976][ T1003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.429992][ T1003] R13: 00007f30bbd36038 R14: 00007f30bbd35fa0 R15: 00007ffedd68ed28 [ 763.430015][ T1003] [ 763.430070][ T1003] Mem-Info: [ 763.652088][ T1003] active_anon:13173 inactive_anon:1 isolated_anon:0 [ 763.652088][ T1003] active_file:24522 inactive_file:2891 isolated_file:0 [ 763.652088][ T1003] unevictable:841 dirty:105 writeback:0 [ 763.652088][ T1003] slab_reclaimable:4281 slab_unreclaimable:25460 [ 763.652088][ T1003] mapped:30049 shmem:3386 pagetables:4209 [ 763.652088][ T1003] sec_pagetables:0 bounce:0 [ 763.652088][ T1003] kernel_misc_reclaimable:0 [ 763.652088][ T1003] free:1757855 free_pcp:18965 free_cma:0 [ 763.719855][ T989] chnl_net:caif_netlink_parms(): no params data found [ 763.729378][ T1003] Node 0 active_anon:53852kB inactive_anon:4kB active_file:98088kB inactive_file:13536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120196kB dirty:420kB writeback:0kB shmem:13544kB kernel_stack:5568kB pagetables:16952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 763.732226][ T1011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7282'. [ 763.771669][ T1013] loop4: detected capacity change from 0 to 128 [ 763.783113][ T1013] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 763.792617][ T1003] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.832968][ T1003] lowmem_reserve[]: 0 2879 7858 7858 [ 763.838915][ T1003] Node 0 DMA32 free:2945092kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948616kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 763.871901][ T1003] lowmem_reserve[]: 0 0 4978 4978 [ 763.876978][ T1003] Node 0 Normal free:4071448kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53852kB inactive_anon:4kB active_file:98088kB inactive_file:13536kB unevictable:0kB writepending:420kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:71940kB local_pcp:22284kB free_cma:0kB [ 763.926354][ T1016] loop5: detected capacity change from 0 to 512 [ 763.938014][ T1016] msdos: Unknown parameter 'c6ԇ”1őB‚‘ˆF6—' [ 763.945951][ T1003] lowmem_reserve[]: 0 0 0 0 [ 763.950624][ T1003] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 763.963586][ T1003] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 6*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 1*256kB (M) 2*512kB (M) 2*1024kB (M) 4*2048kB (M) 716*4096kB (M) = 2945092kB [ 763.990391][ T28] audit: type=1400 audit(1771017570.470:8137): avc: denied { bind } for pid=1018 comm="syz.4.7285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 764.002680][ T1003] Node 0 Normal: 5192*4kB (UME) 3010*8kB (UME) 933*16kB (UME) 1534*32kB (UME) 901*64kB (UME) 535*128kB (UME) 341*256kB (UME) 226*512kB (UM) 158*1024kB (UME) 107*2048kB (UM) 794*4096kB (UM) = 4071168kB [ 764.043955][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.051394][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.058715][ T1003] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 764.068626][ T989] bridge_slave_0: entered allmulticast mode [ 764.096267][ T1003] 31282 total pagecache pages [ 764.101098][ T1003] 20 pages in swap cache [ 764.105521][ T1003] Free swap = 115788kB [ 764.110272][ T989] bridge_slave_0: entered promiscuous mode [ 764.118194][ T1026] loop4: detected capacity change from 0 to 128 [ 764.119193][ T1003] Total swap = 124996kB [ 764.129109][ T1003] 2097051 pages RAM [ 764.132932][ T1003] 0 pages HighMem/MovableOnly [ 764.135266][ T1028] loop5: detected capacity change from 0 to 2048 [ 764.137696][ T1003] 81497 pages reserved [ 764.156408][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.175809][ T1026] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 764.187191][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.203577][ T989] bridge_slave_1: entered allmulticast mode [ 764.210108][ T1028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.223156][ T989] bridge_slave_1: entered promiscuous mode [ 764.230685][ T1028] sit0: entered promiscuous mode [ 764.237029][ T1036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=1036 comm=syz.7.7290 [ 764.238713][ T1028] netlink: 'syz.5.7288': attribute type 1 has an invalid length. [ 764.257943][ T1028] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7288'. [ 764.279451][ T989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.290263][ T989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.316959][ T989] team0: Port device team_slave_0 added [ 764.323955][ T989] team0: Port device team_slave_1 added [ 764.338634][ T28] audit: type=1400 audit(1771017570.820:8138): avc: denied { getopt } for pid=1037 comm="syz.4.7291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 764.365951][ T1024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.381645][ T989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.388950][ T989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.417620][ T1043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57368 sclass=netlink_route_socket pid=1043 comm=syz.4.7293 [ 764.417738][ T1024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.435941][ T989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.453243][ T1045] loop7: detected capacity change from 0 to 128 [ 764.460882][ T989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.468863][ T1045] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 764.490654][ T989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.528987][ T989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.540736][ T1028] netlink: 'syz.5.7288': attribute type 12 has an invalid length. [ 764.609732][T27192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.619520][ T989] hsr_slave_0: entered promiscuous mode [ 764.625679][ T989] hsr_slave_1: entered promiscuous mode [ 764.653121][ T989] debugfs: 'hsr0' already exists in 'hsr' [ 764.659217][ T989] Cannot create hsr debugfs directory [ 764.797303][ T1070] loop5: detected capacity change from 0 to 128 [ 764.807967][ T1070] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 764.878410][ T3293] udevd[3293]: symlink '../../loop5' '/dev/disk/by-diskseq/2550.tmp-b7:5' failed: Read-only file system [ 764.898022][ T28] audit: type=1400 audit(1771017571.370:8139): avc: denied { ioctl } for pid=1078 comm="syz.5.7302" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 764.903397][ T3293] udevd[3293]: symlink '../../loop5' '/dev/disk/by-diskseq/2550.tmp-b7:5' failed: Read-only file system [ 764.979434][ T3293] udevd[3293]: symlink '../../loop5' '/dev/disk/by-diskseq/2551.tmp-b7:5' failed: Read-only file system [ 765.003622][ T989] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 765.016465][ T1088] loop5: detected capacity change from 0 to 128 [ 765.026324][ T989] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 765.036737][ T989] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 765.060039][ T3293] udevd[3293]: symlink '../../loop5' '/dev/disk/by-diskseq/2552.tmp-b7:5' failed: Read-only file system [ 765.072976][ T989] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 765.073958][ T1088] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 765.092595][ T3293] udevd[3293]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 765.117187][ T1088] ext4 filesystem being mounted at /229/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 765.123619][ T3293] udevd[3293]: symlink '../../loop5' '/dev/disk/by-diskseq/2552.tmp-b7:5' failed: Read-only file system [ 765.178295][ T989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.178608][ T3293] udevd[3293]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 765.192590][ T989] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.218431][ T989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 765.228858][ T989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 765.252070][T20568] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.255176][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-diskseq/2539.tmp-b7:1' failed: Read-only file system [ 765.259209][T20568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.330214][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2548.tmp-b7:7' failed: Read-only file system [ 765.348370][ T3301] udevd[3301]: symlink '../../loop1' '/dev/disk/by-diskseq/2539.tmp-b7:1' failed: Read-only file system [ 765.385411][T27192] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 765.409121][T20568] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.416363][T20568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.440714][ T28] audit: type=1400 audit(1771017571.920:8140): avc: denied { ioctl } for pid=1123 comm="syz.7.7305" path="socket:[102005]" dev="sockfs" ino=102005 ioctlcmd=0x5870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 765.571745][ T28] audit: type=1400 audit(1771017571.920:8141): avc: denied { read } for pid=1123 comm="syz.7.7305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 765.622242][ T1141] loop5: detected capacity change from 0 to 512 [ 765.630445][ T1141] EXT4-fs: Ignoring removed bh option [ 765.635974][ T1141] EXT4-fs: Ignoring removed oldalloc option [ 765.665511][ T1143] loop1: detected capacity change from 0 to 512 [ 765.676112][ T1143] EXT4-fs: Ignoring removed bh option [ 765.694422][ T989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.701481][ T1141] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 765.701625][ T1143] EXT4-fs: Ignoring removed oldalloc option [ 765.739041][ T1141] EXT4-fs (loop5): 1 truncate cleaned up [ 765.750304][ T1141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.791545][ T1115] loop4: detected capacity change from 0 to 512 [ 765.795321][ T1143] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 765.838544][T27192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.848317][ T1115] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 765.866161][ T1143] EXT4-fs (loop1): 1 truncate cleaned up [ 765.872591][ T1143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.903016][ T1115] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 765.918199][ T1115] EXT4-fs (loop4): group descriptors corrupted! [ 766.069309][ T989] veth0_vlan: entered promiscuous mode [ 766.093231][ T989] veth1_vlan: entered promiscuous mode [ 766.126043][ T989] veth0_macvtap: entered promiscuous mode [ 766.140675][ T989] veth1_macvtap: entered promiscuous mode [ 766.157570][ T989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.171068][ T989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.183006][ T349] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.194679][ T349] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.229829][ T349] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.263585][ T349] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.292619][ T28] audit: type=1400 audit(1771017828.766:8142): avc: denied { write } for pid=989 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 766.348893][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.380811][ T28] audit: type=1400 audit(1771017828.766:8143): avc: denied { open } for pid=989 comm="syz-executor" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 766.424476][ T1200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7276'. [ 766.477392][ T28] audit: type=1400 audit(1771017828.816:8144): avc: denied { write } for pid=1196 comm="syz.6.7276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 766.547530][ T28] audit: type=1400 audit(1771017829.016:8145): avc: denied { mount } for pid=1218 comm="syz.7.7322" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 766.612559][ T1231] loop6: detected capacity change from 0 to 512 [ 766.612791][ T28] audit: type=1400 audit(1771017829.016:8146): avc: denied { remount } for pid=1218 comm="syz.7.7322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 766.641323][ T28] audit: type=1400 audit(1771017829.056:8147): avc: denied { unmount } for pid=27093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 766.681204][ T1231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.696110][ T1231] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.727950][ T1229] loop7: detected capacity change from 0 to 512 [ 766.779573][ T1229] EXT4-fs: Ignoring removed bh option [ 766.786488][ T1244] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7326'. [ 766.803567][ T1229] EXT4-fs: Ignoring removed oldalloc option [ 766.814233][ T1229] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 766.856135][ T1229] EXT4-fs (loop7): 1 truncate cleaned up [ 766.903833][ T1244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.937695][ T30] bridge_slave_0: left allmulticast mode [ 766.938099][ T1229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.943366][ T30] bridge_slave_0: left promiscuous mode [ 766.943611][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.031187][T27093] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.073638][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.118570][ T989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.128630][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.138654][ T30] bond0 (unregistering): Released all slaves [ 767.340611][ T30] hsr_slave_0: left promiscuous mode [ 767.357945][ T30] hsr_slave_1: left promiscuous mode [ 767.363736][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.377931][T27192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.957523][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.167386][ T1321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7337'. [ 768.344087][ T1335] netlink: 'syz.5.7340': attribute type 83 has an invalid length. [ 768.378397][ T30] team0 (unregistering): Port device team_slave_1 removed [ 768.400292][ T30] team0 (unregistering): Port device team_slave_0 removed [ 768.419582][ T1345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7339'. [ 768.554930][ T1356] nfs: Unexpected value for 'acl' [ 768.588946][ T1356] EXT4-fs: inline encryption not supported [ 768.693021][ T1356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.712926][ T1356] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 768.760154][ T1356] EXT4-fs (loop6): Remounting filesystem read-only [ 768.798298][ T989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.039375][ T28] audit: type=1400 audit(1771017831.517:8148): avc: denied { read } for pid=1400 comm="syz.4.7345" path="socket:[102574]" dev="sockfs" ino=102574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 769.185995][ T1413] set_capacity_and_notify: 2 callbacks suppressed [ 769.186013][ T1413] loop1: detected capacity change from 0 to 128 [ 769.205265][ T1416] netlink: 'syz.7.7348': attribute type 3 has an invalid length. [ 769.214529][ T1413] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 769.281380][ T28] audit: type=1400 audit(1771017831.757:8149): avc: denied { recv } for pid=1418 comm="syz.7.7349" saddr=10.128.0.163 src=30036 daddr=10.128.1.61 dest=52666 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 769.362170][ T1431] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7352'. [ 769.393620][ T1433] loop7: detected capacity change from 0 to 512 [ 769.438370][ T1433] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.7353: inode has both inline data and extents flags [ 769.474128][ T1433] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 769.474310][ T1433] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.7353: couldn't read orphan inode 15 (err -117) [ 769.483518][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 769.483542][ C0] EXT4-fs (loop7): initial error at time 1771017831: ext4_orphan_get:1391: inode 15 [ 769.483585][ C0] EXT4-fs (loop7): last error at time 1771017831: ext4_orphan_get:1391: inode 15 [ 769.521162][ T1433] loop7: lost filesystem error report for type 5 error -117 [ 769.524419][ T1433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.556245][T27093] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.321453][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-diskseq/2570.tmp-b7:1' failed: Read-only file system [ 770.372767][ T1489] loop1: detected capacity change from 0 to 512 [ 770.387280][ T1489] EXT4-fs: Ignoring removed bh option [ 770.405133][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-diskseq/2573.tmp-b7:1' failed: Read-only file system [ 770.436705][ T1489] EXT4-fs: Ignoring removed oldalloc option [ 770.444304][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 770.460300][ T1489] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 770.493941][ T1489] EXT4-fs (loop1): 1 truncate cleaned up [ 770.509852][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-diskseq/2573.tmp-b7:1' failed: Read-only file system [ 770.521792][ T1489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.555643][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 770.600678][ T3293] udevd[3293]: symlink '../../loop4' '/dev/disk/by-diskseq/2558.tmp-b7:4' failed: Read-only file system [ 770.613846][ T28] audit: type=1400 audit(1771017833.097:8150): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 770.659593][ T3301] udevd[3301]: symlink '../../loop4' '/dev/disk/by-diskseq/2558.tmp-b7:4' failed: Read-only file system [ 770.660404][ T3293] udevd[3293]: symlink '../../loop6' '/dev/disk/by-diskseq/2568.tmp-b7:6' failed: Read-only file system [ 770.671341][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.694551][ T28] audit: type=1400 audit(1771017833.097:8151): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 770.736321][ T3301] udevd[3301]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 770.759322][ T3301] udevd[3301]: symlink '../../loop1' '/dev/disk/by-diskseq/2573.tmp-b7:1' failed: Read-only file system [ 770.906778][ T1517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7364'. [ 770.966439][ T1525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7367'. [ 770.975920][ T1525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7367'. [ 770.985333][ T1525] FAULT_INJECTION: forcing a failure. [ 770.985333][ T1525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.006531][ T1527] loop6: detected capacity change from 0 to 128 [ 771.028521][ T1527] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 771.047412][ T1525] CPU: 0 UID: 0 PID: 1525 Comm: syz.1.7367 Tainted: G W syzkaller #0 PREEMPT(full) [ 771.047559][ T1525] Tainted: [W]=WARN [ 771.047567][ T1525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 771.047578][ T1525] Call Trace: [ 771.047585][ T1525] [ 771.047594][ T1525] __dump_stack+0x1d/0x30 [ 771.047689][ T1525] dump_stack_lvl+0x95/0xd0 [ 771.047716][ T1525] dump_stack+0x15/0x1b [ 771.047739][ T1525] should_fail_ex+0x263/0x280 [ 771.047766][ T1525] should_fail+0xb/0x20 [ 771.047807][ T1525] should_fail_usercopy+0x1a/0x20 [ 771.047847][ T1525] _copy_to_user+0x20/0xa0 [ 771.047871][ T1525] simple_read_from_buffer+0xb5/0x130 [ 771.047976][ T1525] proc_fail_nth_read+0x10e/0x150 [ 771.048006][ T1525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 771.048094][ T1525] vfs_read+0x1ab/0x7f0 [ 771.048122][ T1525] ? __rcu_read_unlock+0x4e/0x70 [ 771.048142][ T1525] ? __fget_files+0x184/0x1c0 [ 771.048162][ T1525] ? mutex_lock+0x57/0x90 [ 771.048221][ T1525] ksys_read+0xdc/0x1a0 [ 771.048247][ T1525] __x64_sys_read+0x40/0x50 [ 771.048271][ T1525] x64_sys_call+0x2886/0x3020 [ 771.048297][ T1525] do_syscall_64+0x12c/0x370 [ 771.048352][ T1525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.048438][ T1525] RIP: 0033:0x7f0c8c79c84e [ 771.048493][ T1525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 771.048560][ T1525] RSP: 002b:00007f0c8b236fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 771.048657][ T1525] RAX: ffffffffffffffda RBX: 00007f0c8b2376c0 RCX: 00007f0c8c79c84e [ 771.048686][ T1525] RDX: 000000000000000f RSI: 00007f0c8b2370a0 RDI: 0000000000000004 [ 771.048700][ T1525] RBP: 00007f0c8b237090 R08: 0000000000000000 R09: 0000000000000000 [ 771.048715][ T1525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.048728][ T1525] R13: 00007f0c8ca56038 R14: 00007f0c8ca55fa0 R15: 00007fff60c3cde8 [ 771.048751][ T1525] [ 771.291029][ T28] audit: type=1326 audit(1771017833.757:8152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79fb4bf79 code=0x7ffc0000 [ 771.328720][ T28] audit: type=1326 audit(1771017833.767:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb79fb4bf79 code=0x7ffc0000 [ 771.356144][ T28] audit: type=1326 audit(1771017833.767:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79fb4bf79 code=0x7ffc0000 [ 771.386579][ T28] audit: type=1326 audit(1771017833.767:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb79fb4bf79 code=0x7ffc0000 [ 771.410745][ T28] audit: type=1326 audit(1771017833.767:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79fb4bf79 code=0x7ffc0000 [ 771.434420][ T28] audit: type=1326 audit(1771017833.767:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb79fb4bf79 code=0x7ffc0000 [ 771.458217][ T28] audit: type=1326 audit(1771017833.767:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79fb4bf79 code=0x7ffc0000 [ 771.505858][ T28] audit: type=1326 audit(1771017833.767:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1529 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fb79fb4bf79 code=0x7ffc0000 [ 771.568686][ T1558] sctp: [Deprecated]: syz.4.7373 (pid 1558) Use of int in max_burst socket option deprecated. [ 771.568686][ T1558] Use struct sctp_assoc_value instead [ 771.588397][ T1556] loop6: detected capacity change from 0 to 512 [ 771.595306][ T1556] ext4: Unknown parameter '0' [ 771.606766][ T1556] loop6: detected capacity change from 0 to 256 [ 771.829123][ T1570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7377'. [ 771.838835][ T1570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7377'. [ 771.895689][ T1572] program syz.1.7378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.906893][ T1576] loop6: detected capacity change from 0 to 128 [ 771.934905][ T1576] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 772.129310][ T1595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7387'. [ 772.191543][ T1600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.222052][ T1600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.503670][ T1625] loop5: detected capacity change from 0 to 1024 [ 772.510830][ T1625] EXT4-fs: Ignoring removed mblk_io_submit option [ 772.517848][ T1625] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 772.531460][ T1627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7398'. [ 772.680387][ T1638] program syz.7.7401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 772.713137][ T1635] loop4: detected capacity change from 0 to 8192 [ 772.829944][ T3293] loop4: p1 p2 p3 p4[DM] [ 772.834524][ T3293] loop4: p1 size 835329 extends beyond EOD, truncated [ 772.887988][ T3293] loop4: p3 start 134217728 is beyond EOD, truncated [ 772.895653][ T3293] loop4: p4 size 262144 extends beyond EOD, truncated [ 772.913794][ T1635] loop4: p1 p2 p3 p4[DM] [ 772.913985][ T1643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7400'. [ 772.925948][ T1635] loop4: p1 size 835329 extends beyond EOD, truncated [ 772.979409][ T1635] loop4: p3 start 134217728 is beyond EOD, truncated [ 772.997614][ T1635] loop4: p4 size 262144 extends beyond EOD, truncated [ 773.101613][ T1653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7408'. [ 773.126160][ T1658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7410'. [ 773.148300][ T1653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7408'. [ 773.157729][ T1653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7408'. [ 773.167725][ T1653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7408'. [ 773.544529][ T1666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.570134][ T1666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.621625][ T1672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.631320][ T1672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.261367][ T1688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 774.340721][ T1697] smc: net device hsr0 applied user defined pnetid SYZ2 [ 774.395306][ T1705] loop7: detected capacity change from 0 to 512 [ 774.402279][ T1705] EXT4-fs: Ignoring removed bh option [ 774.410274][ T1705] EXT4-fs: Ignoring removed oldalloc option [ 774.420566][ T1703] loop5: detected capacity change from 0 to 512 [ 774.428168][ T1705] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 774.435563][ T1703] EXT4-fs: Ignoring removed bh option [ 774.443987][ T1703] EXT4-fs: Ignoring removed oldalloc option [ 774.451281][ T1705] EXT4-fs (loop7): 1 truncate cleaned up [ 774.457558][ T1705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.475602][ T1703] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 774.496525][ T1703] EXT4-fs (loop5): 1 truncate cleaned up [ 774.503178][ T1703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.583147][T27192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.583340][T27093] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.615983][ T1715] sock: sock_set_timeout: `syz.5.7429' (pid 1715) tries to set negative timeout [ 775.207550][T20365] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 775.215676][T20365] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 775.341870][ T3293] udevd[3293]: symlink '../../loop4' '/dev/disk/by-diskseq/2586.tmp-b7:4' failed: Read-only file system [ 775.366529][ T1727] loop1: detected capacity change from 0 to 512 [ 775.373341][ T1736] loop4: detected capacity change from 0 to 1024 [ 775.379879][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-diskseq/2591.tmp-b7:1' failed: Read-only file system [ 775.381197][ T3293] udevd[3293]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 775.391929][ T1727] EXT4-fs: Ignoring removed oldalloc option [ 775.410651][ T1727] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 775.412790][ T1736] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 775.431085][ T1736] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 775.440101][ T3301] udevd[3301]: symlink '../../loop4' '/dev/disk/by-diskseq/2592.tmp-b7:4' failed: Read-only file system [ 775.452363][ T1727] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #11: comm syz.1.7433: corrupted in-inode xattr: invalid ea_ino [ 775.467898][ T3301] udevd[3301]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 775.479831][ T1727] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 775.480076][ T1727] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.7433: couldn't read orphan inode 11 (err -117) [ 775.489252][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 775.489275][ C0] EXT4-fs (loop1): initial error at time 1771017837: ext4_iget_extra_inode:5025: inode 11 [ 775.489315][ C0] EXT4-fs (loop1): last error at time 1771017837: ext4_iget_extra_inode:5025: inode 11 [ 775.503958][ T1727] loop1: lost filesystem error report for type 5 error -117 [ 775.549871][ T3301] udevd[3301]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 775.551896][ T1740] loop7: detected capacity change from 0 to 1024 [ 775.591512][ T3301] udevd[3301]: symlink '../../loop4' '/dev/disk/by-diskseq/2592.tmp-b7:4' failed: Read-only file system [ 775.609005][ T3300] udevd[3300]: symlink '../../loop5' '/dev/disk/by-diskseq/2590.tmp-b7:5' failed: Read-only file system [ 775.618763][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-diskseq/2589.tmp-b7:7' failed: Read-only file system [ 775.622679][ T1727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.636227][ T3293] udevd[3293]: symlink '../../loop7' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:7' failed: Read-only file system [ 775.681734][ T1738] bond1: option all_slaves_active: invalid value (5) [ 775.792433][ T1738] bond1 (unregistering): Released all slaves [ 775.869598][ T1749] loop5: detected capacity change from 0 to 512 [ 775.907315][ T1749] EXT4-fs: Ignoring removed bh option [ 775.913124][ T1749] EXT4-fs: Ignoring removed oldalloc option [ 775.919818][ T1749] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 775.931863][ T1749] EXT4-fs (loop5): 1 truncate cleaned up [ 775.938272][ T1749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.047309][T20559] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.058849][T20559] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.083113][T20559] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.092601][T20559] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.336194][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.340722][T27192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.345410][ T28] kauditd_printk_skb: 307 callbacks suppressed [ 776.345425][ T28] audit: type=1400 audit(1771017838.817:8467): avc: denied { associate } for pid=1752 comm="syz.7.7441" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 776.405678][ T1761] loop1: detected capacity change from 0 to 256 [ 776.426259][T20559] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.487146][T20559] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.495891][T20559] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.586983][ T1761] FAT-fs (loop1): Directory bread(block 64) failed [ 776.594118][ T1761] FAT-fs (loop1): Directory bread(block 65) failed [ 776.604784][ T1761] FAT-fs (loop1): Directory bread(block 66) failed [ 776.611754][T20559] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.645953][ T1761] FAT-fs (loop1): Directory bread(block 67) failed [ 776.660656][ T1772] vlan2: entered promiscuous mode [ 776.664035][ T1761] FAT-fs (loop1): Directory bread(block 68) failed [ 776.673057][ T1772] macvtap0: entered promiscuous mode [ 776.686934][ T1761] FAT-fs (loop1): Directory bread(block 69) failed [ 776.703709][ T1761] FAT-fs (loop1): Directory bread(block 70) failed [ 776.716817][ T1761] FAT-fs (loop1): Directory bread(block 71) failed [ 776.743783][ T1761] FAT-fs (loop1): Directory bread(block 72) failed [ 776.762065][ T1783] loop4: detected capacity change from 0 to 128 [ 776.763021][ T1781] FAULT_INJECTION: forcing a failure. [ 776.763021][ T1781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.770318][ T1761] FAT-fs (loop1): Directory bread(block 73) failed [ 776.821196][ T1783] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 776.821813][ T1781] CPU: 0 UID: 0 PID: 1781 Comm: syz.7.7449 Tainted: G W syzkaller #0 PREEMPT(full) [ 776.821908][ T1781] Tainted: [W]=WARN [ 776.821917][ T1781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 776.821929][ T1781] Call Trace: [ 776.821937][ T1781] [ 776.821946][ T1781] __dump_stack+0x1d/0x30 [ 776.821994][ T1781] dump_stack_lvl+0x95/0xd0 [ 776.822017][ T1781] dump_stack+0x15/0x1b [ 776.822038][ T1781] should_fail_ex+0x263/0x280 [ 776.822062][ T1781] should_fail+0xb/0x20 [ 776.822083][ T1781] should_fail_usercopy+0x1a/0x20 [ 776.822192][ T1781] _copy_from_user+0x1c/0xb0 [ 776.822218][ T1781] memdup_user+0x5e/0xd0 [ 776.822247][ T1781] __se_sys_kexec_load+0x109/0x160 [ 776.822272][ T1781] __x64_sys_kexec_load+0x55/0x70 [ 776.822357][ T1781] x64_sys_call+0x16c0/0x3020 [ 776.822383][ T1781] do_syscall_64+0x12c/0x370 [ 776.822411][ T1781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.822434][ T1781] RIP: 0033:0x7f30bbabbf79 [ 776.822464][ T1781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.822483][ T1781] RSP: 002b:00007f30ba517028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 776.822516][ T1781] RAX: ffffffffffffffda RBX: 00007f30bbd35fa0 RCX: 00007f30bbabbf79 [ 776.822531][ T1781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007fff [ 776.822544][ T1781] RBP: 00007f30ba517090 R08: 0000000000000000 R09: 0000000000000000 [ 776.822557][ T1781] R10: 00000000003e0000 R11: 0000000000000246 R12: 0000000000000001 [ 776.822585][ T1781] R13: 00007f30bbd36038 R14: 00007f30bbd35fa0 R15: 00007ffedd68ed28 [ 776.822604][ T1781] [ 777.031675][ T1786] loop1: detected capacity change from 0 to 128 [ 777.042901][ T1786] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 777.055776][ T1788] netlink: 'syz.5.7453': attribute type 12 has an invalid length. [ 777.075551][ T1788] netlink: 'syz.5.7453': attribute type 29 has an invalid length. [ 777.083701][ T28] audit: type=1400 audit(1771017839.547:8468): avc: denied { getopt } for pid=1784 comm="syz.7.7452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 777.083895][ T1788] __nla_validate_parse: 8 callbacks suppressed [ 777.083910][ T1788] netlink: 148 bytes leftover after parsing attributes in process `syz.5.7453'. [ 777.119582][ T1786] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 777.127733][ T1786] FAT-fs (loop1): Filesystem has been set read-only [ 777.156908][ T1786] bio_check_eod: 21302 callbacks suppressed [ 777.157002][ T1786] syz.1.7451: attempt to access beyond end of device [ 777.157002][ T1786] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 777.208698][ T1800] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7458'. [ 777.210168][ T1786] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 777.254282][ T1786] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 777.313043][ T1786] syz.1.7451: attempt to access beyond end of device [ 777.313043][ T1786] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 777.336317][ T1814] syz.1.7451: attempt to access beyond end of device [ 777.336317][ T1814] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 777.382150][ T1814] ================================================================== [ 777.382180][ T1786] syz.1.7451: attempt to access beyond end of device [ 777.382180][ T1786] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 777.390267][ T1814] BUG: KCSAN: data-race in filemap_read_folio / filemap_read_folio [ 777.390298][ T1814] [ 777.390305][ T1814] read-write to 0xffff8881670352e0 of 4 bytes by task 1786 on cpu 1: [ 777.390325][ T1814] filemap_read_folio+0xea/0x110 [ 777.427253][ T1814] filemap_fault+0x5c8/0xb90 [ 777.431858][ T1814] __do_fault+0xbc/0x200 [ 777.436132][ T1814] handle_mm_fault+0x11d7/0x3020 [ 777.441104][ T1814] __get_user_pages+0x1023/0x1ea0 [ 777.443381][ T1786] syz.1.7451: attempt to access beyond end of device [ 777.443381][ T1786] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 777.446147][ T1814] __mm_populate+0x242/0x390 [ 777.464464][ T1814] vm_mmap_pgoff+0x23b/0x2d0 [ 777.469094][ T1814] ksys_mmap_pgoff+0x267/0x310 [ 777.473885][ T1814] x64_sys_call+0x14df/0x3020 [ 777.478594][ T1814] do_syscall_64+0x12c/0x370 [ 777.483225][ T1814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.489137][ T1814] [ 777.491474][ T1814] read-write to 0xffff8881670352e0 of 4 bytes by task 1814 on cpu 0: [ 777.499553][ T1814] filemap_read_folio+0xea/0x110 [ 777.501409][ T1786] syz.1.7451: attempt to access beyond end of device [ 777.501409][ T1786] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 777.504507][ T1814] filemap_fault+0x5c8/0xb90 [ 777.504534][ T1814] __do_fault+0xbc/0x200 [ 777.527043][ T1814] handle_mm_fault+0x11d7/0x3020 [ 777.531992][ T1814] do_user_addr_fault+0x3fd/0x1050 [ 777.537115][ T1814] exc_page_fault+0x62/0xa0 [ 777.541625][ T1814] asm_exc_page_fault+0x26/0x30 [ 777.546484][ T1814] rep_movs_alternative+0x4a/0x90 [ 777.551533][ T1814] _copy_from_user+0x6f/0xb0 [ 777.556141][ T1814] __se_sys_mount+0x10d/0x2e0 [ 777.560841][ T1814] __x64_sys_mount+0x67/0x80 [ 777.565453][ T1814] x64_sys_call+0x2d61/0x3020 [ 777.570141][ T1814] do_syscall_64+0x12c/0x370 [ 777.574739][ T1814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.580643][ T1814] [ 777.582979][ T1814] value changed: 0x00000020 -> 0x00000008 [ 777.588695][ T1814] [ 777.591019][ T1814] Reported by Kernel Concurrency Sanitizer on: [ 777.597175][ T1814] CPU: 0 UID: 0 PID: 1814 Comm: syz.1.7451 Tainted: G W syzkaller #0 PREEMPT(full) [ 777.608030][ T1814] Tainted: [W]=WARN [ 777.611835][ T1814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 777.621891][ T1814] ================================================================== [ 777.630578][ T1786] syz.1.7451: attempt to access beyond end of device [ 777.630578][ T1786] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 777.650196][ T1785] syz.1.7451: attempt to access beyond end of device [ 777.650196][ T1785] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 777.668404][ T1785] syz.1.7451: attempt to access beyond end of device [ 777.668404][ T1785] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 777.695364][ T1814] syz.1.7451: attempt to access beyond end of device [ 777.695364][ T1814] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128