last executing test programs: 5m21.516427353s ago: executing program 4 (id=25): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() r1 = openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc854) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000f0f000/0x4000)=nil, &(0x7f0000f01000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r2 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32], 0x20) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 5m21.117106245s ago: executing program 4 (id=27): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xbc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0xd}, [@CTA_EXPECT_NAT={0x74, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x464, 0x400, 0x70bd2b, 0x25dfdbfd, "46a765f534e6b2f0238b9a445437b6e7259cbadf9bc868ab0295ecb64ed3596c84efff179a8941bcc625fd2ba69ccba40a907ae052349b9b57cb2b14715ef865", ["", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd23, 0x25dfdbfc, {0xa, 0x0, 0x5, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x24}, 0x1, 0x20000, 0x0, 0x24044855}, 0x9080) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x1}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) 5m18.891955633s ago: executing program 4 (id=30): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, '.\x00'}, 0x6e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1409], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa1400198008000100040000000800"], 0x44}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000002440)={@mcast2, 0x0}, &(0x7f0000002480)=0x14) sendmsg$inet(r3, &(0x7f0000002540)={&(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000002380)=[{0x0}, {&(0x7f0000001dc0)="32f43676f20dc771d97e93365be7abd5deade058b71075fe2d8d099cd20a6f841de80a19a66d9c347917", 0x2a}, {&(0x7f0000001f00)="a2b5c2db6779e0a641af9ca6416b3ba4958ecbf755c8692d34753f8769404f8ccfaf327b4824c483c6b3f62af58b51162c01676f101670f0eb2d5059badd6e13f8681a7e453bfcca5ca0e7a68d23154645607cf2eedfcb518049c886f4cc30", 0x5f}, {&(0x7f0000001fc0)="85ba04b2c40059cd28aa9c98f1382c1c3eaf43593ad6516344b0c46203279f7c039353f74e095f31b712bfe6ca38df3d470d7c42462794b9ad2d94d80e19a8c258ebc4ae51a944d7a4fbbb97957a8542f5c3e83c08a0e3103bc48bd2bfc72df79dfec598219d9d4808a3950e6a28ad0e37efba4e59c2329897abb63da52689b69b753d2859bdc30d2c1236a6f9c9ee66e9c9907ec831acd0", 0x98}, {&(0x7f00000020c0)="10f68f0d8b688fc8290e2f852c3b8d4baf1a82612ab6391f098ca266b6b5356e296c254476183444ac72da947eedbe65da61555a883a16b83738a102f9fad1e86a942b4a995092fa8d8fc29ac910089a61a78ee8eec7f8e0e19124d1a318f615cd833f9eb63fb7a78a0b9dcd0167ea8d9a53ad0477fdf538859d2493ee84286058c8c8f9593b25afc5f14ae7d1459f76f9d3211f207493e56744bee826b5fa53f5e7a7a4c3f2deee0a04e4ebaa111c2f061b997882fbe352f3e82f655aca940bfa82eb38bac41cca7cffaacb36487e9fd2421ac0df0d4dd357882a936216f57c548398495008c8060a51f9431d3f8175883d", 0xf2}, {&(0x7f00000021c0)}, {&(0x7f0000002240)="c2bda60d29c37a8860b465d14c77921dee84879d0ea7a1d488cd3032df371faf234e82fd0b002509931af5836937d8a21611d16279ae6937ca896fad89b822f371eb3bf7ba41e74d3cbcf6aa90dc550e4363a6f5c4410ae6ac955cf933d9adb4bcdad6fd6915c50f53a4a686cdddf8251537dda81b15eeb768c3ee1f35d5bda94c20970fe82a65a352599dd82ca9a92297740920c74aacc936aad6407c63bc465b4300498d44f95fa2e9a9bd9db123c9e44bd64c8ebb094cae2eb02dba6f9134cfb9736768d6a6d25c74f9d93bbb5d386228d75de6c7b4217941416831abccb26ec0b4edf74e84d09c", 0xe9}, {&(0x7f0000002340)="db54dfa009956eb2a2a4c3764d87e43dc400c8a059f5279ecde8486d2e298beb2f6bde0f0634bf416e70ed", 0x2b}], 0x8, &(0x7f00000024c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x18}}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x68}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.pending_reads\x00', 0x1814c1, 0x49) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) write$nci(r5, &(0x7f0000000300)=ANY=[], 0xc) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) 5m17.920896123s ago: executing program 4 (id=31): socket$netlink(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x21) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x721, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a00000004000000040000000200000034050000", @ANYRES32=0x1, @ANYBLOB="00000011b4f40600000000000000000059ae8f7d9dc0b863a22089d8e11da100000b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000740)={[{@noblock_validity}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@noauto_da_alloc}]}, 0x6, 0x5fa, &(0x7f0000001000)="$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") getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = accept(r5, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mmap$IORING_OFF_SQES(0x0, 0x6, 0x1000002, 0x30, 0xffffffffffffffff, 0x10000000) fallocate(r6, 0x2, 0x4, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x6c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x7}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0x1ff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x6c}}, 0x8000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x1a, r7, 0x0, &(0x7f0000000040)) ptrace(0x8, r7) 5m16.793659018s ago: executing program 4 (id=34): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xfffffffc, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x50) ustat(0x2, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0xa) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg(r6, &(0x7f000000cf00), 0x400000000000062, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x102) write$P9_RVERSION(r7, 0x0, 0x13) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m16.3967994s ago: executing program 4 (id=38): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) stat(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580), 0x840000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug}, {@fscache}, {@cache_none}, {@uname={'uname', 0x3d, 'ext4\x00'}}, {@version_u}, {@ignoreqv}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x31, 0x37, 0x63, 0x34, 0x50, 0x32, 0x62], 0x2d, [0x33, 0x38, 0x37, 0x63], 0x2d, [0x35, 0x66, 0x30, 0x31], 0x2d, [0x66, 0x62, 0x37, 0x64], 0x2d, [0x36, 0x64, 0x37, 0x0, 0x61, 0x36, 0x65, 0x33]}}}, {@hash}, {@euid_eq={'euid', 0x3d, r3}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xe226}}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = msgget$private(0x0, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000140)=""/88) socket(0x9, 0x80002, 0x0) 5m16.39342928s ago: executing program 32 (id=38): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$eJzs3c+PG1cdAPDvzP6w86PdBHqAqpAAhYCieLNOG1W9NLmAUFUJUXFAHNJl11ktseMQe0t3icT2bwAJBCf4EzggcUDqiQM3jkgcEFI5IAWIQFkESEYznt04WVtxYq/d7H4+0mR+vHnzfU/O+D0/e+cFcGSdjYjtiJiPiHciYqE4nhRLXOku2Xn3791Z2bl3ZyWJTuftvyd5enYsevJkThTXLEfE178S8e1kf9zW5taN5Xq9drvYX2w3bi22NrcurDeW12prtZvV6uWlyxdfu/RqdWx1PdP45d0vr7/5jd/8+lMf/n77S9/PinWySOutxzh1qz63FyczGxFvHkSwKZgp1vP7Ul7qn+HKwZaHJ5NGxMci4rP5/b8QM/n/TgDgMOt0fhqdhd59AOCwyz7/nywnaSUi0rToBFS6Y3gvxPG03my1z19vbtxc7Y6VnYq59Pp6vXbxdOmP381Pnkuy/aU8LU/P96uP7F+KiNMR8aPSsXy/stKsr06nywMAR96J/Duwov2PiH+V0rRSGSprn2/1AIBnRnkKOQGA6eptxUtTLAcAMDk+xQPA0TNE+1982b994GUBACbD538AOHq0/wBw9Dxp++83ggDwTPvaW29lS2eneP716rubG3PNdy+s1lo3Ko2NlcpK8/atylqzuZY/s6fxUOZjPdtFn6DebN5aeiU23lts11rtxdbm1rVGc+Nm+1r+XO9rtbmJ1g4A6Of0mQ/+kETE9uvH8iV65nLQVsPhlk67AMDUzDzYrJ140sw6CPBMe7rZvv4z9nIAkzdUE553En534GUBpqPvw7zLfTcf9pMnCOJ3xvCRcu6Tw4//75/jGXiWGf+Ho2vmqXK9MfZyAJP3dOP/wGHQ6SSPzvk/v5cEABxKI/yEr/ODcXVCgKl63GTeY/n+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ZkxHxnUjSSj4XeJr9m1YqEc9FxKmYS66v12sXI+L5OBMRc6Vsf2nahQYARpT+NSnm/zq38PLJR1Pnk3+X8nVEfO9nb//4veV2+/ZSdvwfe8dLu9OHVR/kG2FeQQBgOJ3SkCfm7Xe1WPd8kL9/787K7nJQhezn7tX4XzEV8crOvTv50k2ZjexgRDnvSxz/ZxKzRZ5yRLwYETNjiL/9fkR8ol/9k3xs5FQx82lv/ChiPzfR+OlD8dM8rbvOOl8fH0NZ4Kj54GpEXOl3/6VxNl/3v//L+TvU6O5e7V5s971vpyf+bBFppk/87J4/O2yMV3771X0HOwvdtPcjXpztFz/Zi58MiP/ykPH/9NKnf/jGgLTOzyPORf/4vbEW241bi63NrQvrjeW12lo5qtXLS5cvvnbp1epiPka9uDtSvd/fXj///KCyZfU/PiB+uW/95/fyfn7I+v/iv+986zMPdkuPxv/i5/q//i/0jd+VtYlfeDhMZ1D85eO/Gjh9dxZ/dUD9H/f6nx+m8hHx4V+2Voc8FQCYgNbm1o3ler12e6SNNHY647jOvo2siMOdvNtdHC3on+MgavGUG3MjV2daG7N7fcXxXvmb2RUnXJ107LUYaeP+pGJN7z0JmIwHN/20SwIAAAAAAAAAAAAAAAwyiT9dmnYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLz+HwAA//+WydIx") bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) stat(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580), 0x840000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug}, {@fscache}, {@cache_none}, {@uname={'uname', 0x3d, 'ext4\x00'}}, {@version_u}, {@ignoreqv}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x31, 0x37, 0x63, 0x34, 0x50, 0x32, 0x62], 0x2d, [0x33, 0x38, 0x37, 0x63], 0x2d, [0x35, 0x66, 0x30, 0x31], 0x2d, [0x66, 0x62, 0x37, 0x64], 0x2d, [0x36, 0x64, 0x37, 0x0, 0x61, 0x36, 0x65, 0x33]}}}, {@hash}, {@euid_eq={'euid', 0x3d, r3}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xe226}}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = msgget$private(0x0, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000140)=""/88) socket(0x9, 0x80002, 0x0) 2m28.258940769s ago: executing program 1 (id=777): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x141341) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r0 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) close(r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}, 0x4, 0x0, 0x8, 0x9, 0x11, 0x7, 0xb}, &(0x7f00000003c0)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="1f6e8749a4e2bc8a57ad07e771bf1464a3a43f4d190ef3412738d37f996f82e1499c0af7d52fdb02ee9056d5c3aef0113a0398ae36ded2860d0d5ac852322d41a185057469eff2f7af85e96969ccb54a0d44ee32ce"], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a4f88c488542ce40f02e96150527bd7000fb8b57da1fb5c813a6c2873207473fe0d8f6fdfef3491f916230af9f8828005a408d04", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000300000000000000f7ffff0000000000777f8f0aa6925558b44167f07d5a8affd4d4cce4c98e4163a66c8910effcf79ef91194108f544bee732bfd386b5b25bd45c466dff90013fd642d74df5d39ffc510b6d1a3005a0d16a7f7d39c3f139f8bd2da3a68156e0f8ee9ad5c205b0e8e80afb589828d0a2c5bee", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000230000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') pread64(r4, 0x0, 0x0, 0x19a55d1a) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, 0x0, 0x6, 0x3) 2m28.132076843s ago: executing program 1 (id=779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) r2 = socket(0x28, 0x5, 0xc8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, &(0x7f0000000080)=0x41) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, r1, 0xb) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4004001}, 0x24008000) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008002}, 0x20) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x7d, &(0x7f0000000480)={0x0, 0x2}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) mprotect(&(0x7f00001e9000/0x4000)=nil, 0x4000, 0x5) socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x19a55d1a) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000900)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18010, &(0x7f0000000300)=ANY=[@ANYBLOB="646f74732c646f733178666c6f7070792c646f74732c6e6f63610a002c616c6c6f775f7574696d653d303030303130303030303030303030303030373737c273000000000000732c646f74732c6e6f646f74732c6572400172733d7265696d6d757461626c652c646f74732c66303030303030303030303030ec482c6e66733d7374616c655f72772c646f733178866c6f7070792c646f74732c64656275672c6e6f646f74732c646f74732c646f74732c00"/192], 0x1, 0x243, &(0x7f0000000540)="$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") syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 2m27.001412248s ago: executing program 1 (id=780): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x840000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x31, 0x37, 0x63, 0x34, 0x50, 0x32, 0x62], 0x2d, [0x33, 0x38, 0x37, 0x63], 0x2d, [0x35, 0x66, 0x30, 0x31], 0x2d, [0x66, 0x62, 0x37, 0x64], 0x2d, [0x36, 0x64, 0x37, 0x0, 0x61, 0x36, 0x65, 0x33]}}}, {@hash}, {@euid_eq}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xe226}}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = msgget$private(0x0, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000140)=""/88) socket(0x9, 0x80002, 0x0) 2m25.554073612s ago: executing program 1 (id=792): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000003", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) io_uring_setup(0x3cf9, &(0x7f00000000c0)={0x0, 0xfc5a, 0x0, 0x1, 0xcf}) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 2m25.382610098s ago: executing program 1 (id=794): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_io_uring_setup(0xaad, &(0x7f0000000300)={0x0, 0x4, 0x40, 0x22, 0x1b}, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x2}]}, 0x1}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400000003002000184102", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001a0000000100"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1e00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0xfffffffffffffeff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) pipe(&(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$packet(0x11, 0x3, 0x300) r6 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r6, 0x58, &(0x7f0000000340)}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f00000002c0), r8, r7}}, 0x18) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000000c0)={0x1467, 0x16, 0x0, 0x0, 0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) 2m23.378409959s ago: executing program 1 (id=804): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x100, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0xd}, [@CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x464, 0x400, 0x70bd2b, 0x25dfdbfd, "46a765f534e6b2f0238b9a445437b6e7259cbadf9bc868ab0295ecb64ed3596c84efff179a8941bcc625fd2ba69ccba40a907ae052349b9b57cb2b14715ef865", ["", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd23, 0x25dfdbfc, {0xa, 0x0, 0x5, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x24}, 0x1, 0x20000, 0x0, 0x24044855}, 0x9080) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x1}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) 2m7.924669844s ago: executing program 33 (id=804): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x100, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0xd}, [@CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x464, 0x400, 0x70bd2b, 0x25dfdbfd, "46a765f534e6b2f0238b9a445437b6e7259cbadf9bc868ab0295ecb64ed3596c84efff179a8941bcc625fd2ba69ccba40a907ae052349b9b57cb2b14715ef865", ["", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd23, 0x25dfdbfc, {0xa, 0x0, 0x5, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x24}, 0x1, 0x20000, 0x0, 0x24044855}, 0x9080) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x1}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) 8.376801879s ago: executing program 3 (id=1632): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, 0x0) 8.359817349s ago: executing program 3 (id=1633): socket$kcm(0x10, 0x2, 0x0) syz_ublk_setup_io_uring(0x68f5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x14, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x204010, &(0x7f0000000200), 0xfe, 0x46e, &(0x7f00000007c0)="$eJzs3MtvVFUYAPDvTjst5WEr4gMEra9IfLS0PGThBqOJC01MdIFxNZZCkIEaWhMgRNEYXBoS98aliX+BG3Fj1JWJW90bE0LYSFxdc2fuHcYyM+20U0aZ3y+55Zy5Zzjnu+ce5sw53AYwsCazH0nE1oj4LSLG69l/F5is/3HzxlhEXJxLIk3fvJ7Uyv114+JcUbR435Z6Jh3qUO/ldyIq1er82Tw/vXT6/enF8xeeP3m6cmL+xPyZ2cOHD+zfM3Jo9mBP4tyWtXXXhwu7d7769pXX545eefenb7L2bs3PN8fRK5P1q9vSU9mPUq9r7J9tTelkuI8NoSvZGM26q1wb/+MxFGONc+Pxyid9bRywodK0lI62P30pTdN0U60ccPdJjG0YUMUHffb9tzhWP3vYut7pR99dOxKNdYyb+VE/M9z4el7ewPonI+Lopb+/zI7YoHUIAIBmV49ExHOt5n+leKCp3D353tBERNwbEdsj4r6I2BER90fUyj4YEQ91Wf/yHZLb5z/p+JoCW6Vs/vdibW9r+fyvsTkzMZTnttXiT+L4yer8vvya7I3yaJaf6VDH9y//+nm7c83zv+zI6i/mgnk7/hxetkB3rFKurCfmZtc+johkokX8SRTbONn8eGdE7Ory7y72hE4+8/XudmVWjr+DHuwzpV9FPF3v/0uxLP5C0nZ/cuaFQ7MHpzdFdX7fdHFX3O7nXy6/0a7+dcXfA9euprG55f3fiH8i2RSxeP7Cqdp+7WL3dVz+/bO232nWdv8vVUaSt2rpkfy1c5WlpbMzESPJa7e/PnvrvUX+XGVpJGbq9//eJ1qP/+1x60o8HBHZTbwnIh6JiEfztj8WEY9HxKcd4v/xpSff6z7+DqvyPZTFf2yl/o/m/u8ycb1SHTr1w7fdx1/I+v9ALbU3fyXr/5XiWm0D13PtAAAA4P+iVNvFT0pTjXSpNDVV/z/8O2JzqbqwuPTs8YUPzhyr7/ZPRLlUrHTV14PLSbH+OdGUn12W35+vG38xNFbLT80tVLtdKwZ6a0ub8Z/5o9MDPMDdwfNaMLiMfxhcxj8MLuMfBpfxD4Or1fj/qA/tAO68FT7/x+5UO4A7z/wfBpfxD4PL+IeB1PbZ+NLaH/mXaJEYXemC9ybx3ciGV5EnotT3q1qOiP9E5642UYy6duG0fNfwqn+ZxRoToy1P9e/fJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF76JwAA///jGNH6") unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}}, 0x14}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2097, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) shutdown(r1, 0x1) sendmmsg(r1, &(0x7f0000000100), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x301002, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000d80)="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"}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8010, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 7.082106759s ago: executing program 3 (id=1646): r0 = socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffd, 0x100, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3, 0x794, 0x4e23, 0xc, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x0, 0x37e9, 0x2f92) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{}, 0xc9b, 0x7, 0x1}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x6000000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000003403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e6114440000000000db430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) epoll_create1(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0x5, &(0x7f0000000240)={@loopback, @empty, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7e, 0x6b}, 0x3c) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x1, @mcast2}, {0xa, 0x4e24, 0x100, @remote, 0x8}, 0x1, {[0xa1ad, 0x7d98, 0x5, 0x85f0, 0xfffffffe, 0x1fffff, 0x8, 0x3]}}, 0x5c) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x22f92) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, 0xffffffffffffffff) 6.281239864s ago: executing program 3 (id=1653): modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x90, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0x11}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="000088a8", 0x5e0, 0x14000b01, &(0x7f00000000c0)={0x11, 0x8100, r1, 0x1, 0x80, 0x6, @multicast}, 0x14) 5.753827681s ago: executing program 3 (id=1656): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x239f, &(0x7f0000000380)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3c, 0x1000, 0x3a, 0x7ff, 0xf83, 0x24}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x6, 0x8, 0xff80}) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) fcntl$setstatus(r5, 0x4, 0x42800) write(r5, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r5, 0x5402, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) 5.702493082s ago: executing program 2 (id=1657): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x5, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) 5.276444985s ago: executing program 2 (id=1661): syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) io_uring_setup(0x7d0a, &(0x7f0000000080)={0x0, 0x11fb, 0x2, 0x2, 0x8b}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) file_setattr(r0, 0x0, 0x0, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x11, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc0a4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xc}, 0x9006, 0xe9f0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7}, r1, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) capget(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7f, 0x4, 0x200003, 0xcf5, 0x7, 0xfff}) lseek(0xffffffffffffffff, 0xc8, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x200, 0x1000006, @loopback, 0x97}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000010ffffffffffff00000000000086dd69ee052001d02cfffc020000000000000000000000000001ff0200000000000000000000000000013c00000000000000040108000100000087"], 0x20a) 3.20625164s ago: executing program 3 (id=1670): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_io_uring_setup(0xaad, &(0x7f0000000300)={0x0, 0x4, 0x40, 0x22, 0x1b}, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x2}]}, 0x1}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000300200018410200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001a0000000100"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x1e00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) pipe(&(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$packet(0x11, 0x3, 0x300) r6 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r6, 0x58, &(0x7f0000000340)}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f00000002c0), r8, r7}}, 0x18) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000000c0)={0x1467, 0x16, 0x0, 0x0, 0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) 2.454132294s ago: executing program 5 (id=1672): modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x90, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0x11}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="000088a8", 0x5e0, 0x14000b01, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0x80, 0x6, @multicast}, 0x14) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x6a, 0x10, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xfffffe01, 0x800) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001eefdffffff0200000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x44010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}}, 0x20008040) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f00000001c0), 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.132023394s ago: executing program 2 (id=1674): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0xfffffffd, 0x30000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x4c}}, 0x0) 2.022058047s ago: executing program 0 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000079000000000000000000000a14000000060a010400000000000000000200ffff140000001100010000000000000000000000000a"], 0x3c}}, 0x0) 2.021643257s ago: executing program 2 (id=1678): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x11c0ad, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xb, 0x8, 0x0, 0x7, 0x3, 0x4, 0xf000, 0x2}}, @TCA_U32_HASH={0x8, 0x2, 0x8001}, @TCA_U32_INDEV={0x14, 0x8, 'gretap0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x4}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2b}]}}]}, 0x70}}, 0x24040094) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'lo\x00'}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a7ec80adaf5235, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x2d32, &(0x7f0000000840)={0x0, 0x55b8, 0x2000, 0x2, 0xf2}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000800)={&(0x7f00000004c0)=@sco, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/9, 0x9}, {&(0x7f0000000600)=""/213, 0xd5}], 0x2}, 0x40000141) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, 0x0, 0x40d4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r6, 0x2f, 0x0, @void}, 0x1a) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r7, r6, 0x4, r6}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="01000000000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x13, 0x64, &(0x7f0000000c40)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x84, '\x00', r5, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xb, 0x9, 0xfffff000}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x3, 0x5, 0xc, 0x2}, {0x4, 0x4, 0x5, 0x9}, {0x2, 0x3, 0x4, 0x3}, {0x3, 0x3, 0x6, 0xe077cfe8eeff70ee}], 0x10, 0x40}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@block_validity}, {}, {@errors_continue}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200), &(0x7f0000000c80)=ANY=[], 0x700, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1.949336569s ago: executing program 0 (id=1679): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0xa, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x4, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x44201, 0x0) fallocate(r2, 0x17, 0x254, 0x1250) setsockopt$inet6_group_source_req(r2, 0x29, 0x1, &(0x7f00000002c0)={0x4, {{0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, {{0xa, 0x4e22, 0xcf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0x108) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000880)={0x1, {{0xa, 0x4e21, 0x8, @empty}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, {{0xa, 0x4e23, 0x81, @loopback, 0x6}}]}, 0x190) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x32, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 1.703240757s ago: executing program 5 (id=1680): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x20031, 0xffffffffffffffff, 0x3b762000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118c00000000008510000002000000850000008a80000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000980)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$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") (fail_nth: 3) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x400) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000154000/0x4000)=nil, 0x1000) syz_emit_ethernet(0x56, &(0x7f0000000c40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd611cc82500203cfffe80000000000000000000000000000bfe8000000000000000000000000000aa2c0300000000000004043be5c637c9102001000000000000000000000000000108969bd8d732c3112e6fdc26c829e16c65f7688dcf2f236a19c18e042150d70b41c89a040000000311f6f58237e2275c12221655bc5fff88e3440f99ad6a256c2d8a2ba21f32e5b56b420967a44272486cefa53d4ad96ef7cb0524e8ab96fa8dbc50336ba96a05fca100b0c8fa725c8faba429a670c8820277fad4cb3b965b681800"/229], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000a80)={[{@noload}, {@nodiscard}, {@auto_da_alloc}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@data_err_ignore}, {@debug}]}, 0xff, 0x45c, &(0x7f0000000d80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x5, 0x3, 0x40000000008, 0x7f, 0xfffffff8, 0x3}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, 0x0) madvise(&(0x7f00000ee000/0x1000)=nil, 0x1000, 0xd) mkdirat(r0, &(0x7f0000000200)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000880)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x400000000000007}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nomblk_io_submit}, {@noacl}, {@jqfmt_vfsv0}, {@noinit_itable}, {@minixdf}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") ioctl$KDGKBDIACR(r3, 0x4b4a, 0x0) 1.347181509s ago: executing program 6 (id=1681): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x24010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x2, 0x9, 0x4, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1.219751642s ago: executing program 2 (id=1682): modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x90, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0x11}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="000088a8", 0x5e0, 0x14000b01, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0x80, 0x6, @multicast}, 0x14) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x6a, 0x10, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xfffffe01, 0x800) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001eefdffffff0200000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x44010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}}, 0x20008040) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.142350264s ago: executing program 6 (id=1683): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x31, &(0x7f0000000180)="b1", 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x4}]}) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) io_uring_setup(0x6141, &(0x7f0000000280)={0x0, 0x6641, 0x100, 0x3, 0x60, 0x0, r2}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xdcfc070a45b548a7, 0x4, &(0x7f0000001080)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000002f80), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf2510000000060011002d00000008000100", @ANYRES32=0x0, @ANYBLOB="040010000f002100bd67c3dd347eb6b14e338ffec94c4bc739c35a191a18596760861f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.107419665s ago: executing program 6 (id=1684): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x30, &(0x7f0000000700), 0x1, 0x676, &(0x7f0000000740)="$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") 1.032595808s ago: executing program 0 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x18, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000100)={0x2c, r2, 0x4, 0x4, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3ff, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x4, 0xe}]}, 0x2c}}, 0x10) 918.276102ms ago: executing program 6 (id=1686): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x141341) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r0 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') close(r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}, 0x4, 0x0, 0x8, 0x9, 0x11, 0x7, 0xb}, &(0x7f00000003c0)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="1f6e8749a4e2bc8a57ad07e771bf1464a3a43f4d190ef3412738d37f996f82e1499c0af7d52fdb02ee9056d5c3aef0113a0398ae36ded2860d0d5ac852322d41a185057469eff2f7af85e96969ccb54a0d44ee32ce"], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a4f88c488542ce40f02e96150527bd7000fb8b57da1fb5c813a6c2873207473fe0d8f6fdfef3491f916230af9f8828005a408d04", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000300000000000000f7ffff0000000000777f8f0aa6925558b44167f07d5a8affd4d4cce4c98e4163a66c8910effcf79ef91194108f544bee732bfd386b5b25bd45c466dff90013fd642d74df5d39ffc510b6d1a3005a0d16a7f7d39c3f139f8bd2da3a68156e0f8ee9ad5c205b0e8e80afb589828d0a2c5bee", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000230000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') pread64(r4, 0x0, 0x0, 0x19a55d1a) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, 0x0, 0x6, 0x3) 861.049033ms ago: executing program 6 (id=1687): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 800.370935ms ago: executing program 5 (id=1688): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) timer_gettime(r0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) 624.795551ms ago: executing program 6 (id=1689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)={0x20, r1, 0x1, 0x4070bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4807}, 0x8080) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nobarrier}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@noauto_da_alloc}, {@acl}, {@errors_remount}]}, 0x0, 0x4a3, &(0x7f0000000880)="$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") (async, rerun: 64) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write(r4, &(0x7f0000000340), 0x11000) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x47d, 0x7, 0x5}, 0x10) 624.258511ms ago: executing program 5 (id=1690): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syncfs(r0) r1 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18, 0xcc040}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00], 'wlan0\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x552}]}, 0x34}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001200010a00000000000000008087e0"], 0x26}}, 0x0) 597.958601ms ago: executing program 5 (id=1691): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x4, 0x200) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 586.587742ms ago: executing program 0 (id=1692): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8f, 0x0, 0x7fff0000}]}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x4}) 481.929335ms ago: executing program 0 (id=1693): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) accept$phonet_pipe(r0, 0x0, &(0x7f0000001040)) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 423.693887ms ago: executing program 2 (id=1694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x4, 0x7832}, 0x4, 0x0, 0x10004, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060128750000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x2000000, 0x0, 0x20000810}, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x103301) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000004dc0)=0x1000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x24008040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5, 0xffffffffffffffff, 0x60ff}, 0xc) r6 = socket(0xc0237289a4ab0985, 0xc08, 0x1) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000080)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) futex(&(0x7f0000000280), 0x80, 0x0, &(0x7f0000000300), 0x0, 0x2) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8, 0x0) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x39, 0x0) msgrcv(0x0, &(0x7f00000002c0)={0x0, ""/184}, 0xc0, 0x2, 0x2000) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000000901040000000000000000000000080c00048008000140fffff8010900010073797a31000000000900010073797a30000000000800034000000104"], 0x40}}, 0x801) ftruncate(r7, 0x4a8e) 305.552801ms ago: executing program 5 (id=1695): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0xa, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x4, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x44201, 0x0) fallocate(r2, 0x17, 0x254, 0x1250) setsockopt$inet6_group_source_req(r2, 0x29, 0x1, &(0x7f00000002c0)={0x4, {{0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, {{0xa, 0x4e22, 0xcf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0x108) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000880)={0x1, {{0xa, 0x4e21, 0x8, @empty}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, {{0xa, 0x4e23, 0x81, @loopback, 0x6}}]}, 0x190) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x32, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 0s ago: executing program 0 (id=1696): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0xfffffe2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {}]}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/149, 0x37, 0x95, 0x1}, 0x28) setxattr$incfs_size(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), &(0x7f0000000080)=0xffffffffffffffff, 0x8, 0x0) getresgid(0x0, 0x0, 0x0) llistxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=""/13, 0xd) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000028c0)={r3, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000002840)=[0xa10c], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r4 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x6, 0x9, 0x4, 0x0, 0x7fffffff, 0x1401c, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x8400, 0x8, 0x6, 0x3, 0x8, 0x7, 0x0, 0x0, 0x2, 0x0, 0x5a79}, 0xffffffffffffffff, 0x1, r0, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000140)='netdevsim0\x00') r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8931, &(0x7f0000000080)) kernel console output (not intermixed with test programs): fs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 282.700384][ T7919] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 282.741666][ T7925] xt_CT: No such helper "netbios-ns" [ 282.746704][ T7919] bridge0: port 3(gretap0) entered disabled state [ 282.750996][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1201'. [ 282.753571][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.769773][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.865828][ T7944] random: crng reseeded on system resumption [ 285.674763][ T7956] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 285.784030][ T7967] set_capacity_and_notify: 2 callbacks suppressed [ 285.784044][ T7967] loop2: detected capacity change from 0 to 128 [ 285.859356][ T7974] loop5: detected capacity change from 0 to 1024 [ 285.875222][ T7974] EXT4-fs: Ignoring removed orlov option [ 285.895252][ T7974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.897830][ T7980] loop6: detected capacity change from 0 to 1764 [ 285.914318][ T28] audit: type=1400 audit(1782165305.532:895): avc: denied { write } for pid=7973 comm="syz.5.1216" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.943430][ T28] audit: type=1400 audit(1782165305.532:896): avc: denied { write } for pid=7973 comm="syz.5.1216" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.947036][ T7985] bond1: entered promiscuous mode [ 285.966938][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.970333][ T7985] bond1: entered allmulticast mode [ 285.989412][ T7987] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1217'. [ 286.027098][ T7989] loop2: detected capacity change from 0 to 1764 [ 286.035528][ T28] audit: type=1400 audit(1782165305.532:897): avc: denied { lock } for pid=7973 comm="syz.5.1216" path="/275/file1/cpuset.effective_mems" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 286.081609][ T7985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.213632][ T7991] loop2: detected capacity change from 0 to 764 [ 287.265436][ T7991] rock: directory entry would overflow storage [ 287.271693][ T7991] rock: sig=0x5245, size=8, remaining=5 [ 287.314963][ T7998] loop5: detected capacity change from 0 to 1764 [ 287.402402][ T8008] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1225'. [ 287.537690][ T8012] loop6: detected capacity change from 0 to 1024 [ 287.611219][ T8012] EXT4-fs: Ignoring removed bh option [ 287.640542][ T8021] FAULT_INJECTION: forcing a failure. [ 287.640542][ T8021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.654096][ T8021] CPU: 0 UID: 0 PID: 8021 Comm: syz.0.1230 Not tainted syzkaller #0 PREEMPT(lazy) [ 287.654125][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.654139][ T8021] Call Trace: [ 287.654146][ T8021] [ 287.654178][ T8021] __dump_stack+0x1d/0x30 [ 287.654203][ T8021] dump_stack_lvl+0x95/0xd0 [ 287.654225][ T8021] dump_stack+0x15/0x1b [ 287.654245][ T8021] should_fail_ex+0x25e/0x270 [ 287.654327][ T8021] should_fail+0xb/0x20 [ 287.654416][ T8021] should_fail_usercopy+0x1a/0x20 [ 287.654524][ T8021] _copy_to_user+0x20/0xa0 [ 287.654572][ T8021] simple_read_from_buffer+0xb5/0x130 [ 287.654610][ T8021] proc_fail_nth_read+0x10e/0x150 [ 287.654733][ T8021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.654753][ T8021] vfs_read+0x18e/0x7c0 [ 287.654779][ T8021] ? __rcu_read_unlock+0x4e/0x70 [ 287.654806][ T8021] ? __fget_files+0x184/0x1c0 [ 287.654902][ T8021] ? mutex_lock+0x57/0x90 [ 287.654934][ T8021] ksys_read+0xdc/0x1a0 [ 287.654954][ T8021] __x64_sys_read+0x40/0x50 [ 287.654974][ T8021] x64_sys_call+0x2886/0x3020 [ 287.655035][ T8021] do_syscall_64+0x136/0x3c0 [ 287.655128][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.655151][ T8021] RIP: 0033:0x7fde2850d68e [ 287.655168][ T8021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 287.655188][ T8021] RSP: 002b:00007fde26fa6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.655258][ T8021] RAX: ffffffffffffffda RBX: 00007fde26fa76c0 RCX: 00007fde2850d68e [ 287.655273][ T8021] RDX: 000000000000000f RSI: 00007fde26fa70a0 RDI: 0000000000000004 [ 287.655315][ T8021] RBP: 00007fde26fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 287.655327][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.655338][ T8021] R13: 00007fde287c6038 R14: 00007fde287c5fa0 R15: 00007ffd1c057668 [ 287.655401][ T8021] [ 287.669657][ T28] audit: type=1400 audit(1782165307.292:898): avc: denied { ioctl } for pid=8016 comm="syz.2.1228" path="socket:[20444]" dev="sockfs" ino=20444 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 287.792587][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 287.998084][ T8012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.045000][ T8019] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1228'. [ 288.137281][ T28] audit: type=1400 audit(1782165307.702:899): avc: denied { write } for pid=8011 comm="syz.6.1226" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.165749][ T8012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=8012 comm=syz.6.1226 [ 288.275293][ T11] IPVS: starting estimator thread 0... [ 288.294301][ T8043] netlink: 'syz.2.1235': attribute type 10 has an invalid length. [ 288.326051][ T8043] process 'syz.2.1235' launched '/dev/fd/11' with NULL argv: empty string added [ 288.339182][ T6642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.372029][ T8050] loop0: detected capacity change from 0 to 512 [ 288.373695][ T28] audit: type=1400 audit(1782165308.002:900): avc: denied { execute_no_trans } for pid=8041 comm="syz.2.1235" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 288.380710][ T8045] IPVS: using max 2304 ests per chain, 115200 per kthread [ 288.418566][ T8052] loop6: detected capacity change from 0 to 512 [ 288.432657][ T8043] loop2: detected capacity change from 0 to 512 [ 288.458329][ T8043] EXT4-fs: Ignoring removed nobh option [ 288.465502][ T8052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.467677][ T8050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.490862][ T8052] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.503730][ T8052] FAULT_INJECTION: forcing a failure. [ 288.503730][ T8052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.525791][ T8050] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.526051][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.6.1237 Not tainted syzkaller #0 PREEMPT(lazy) [ 288.526079][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.526097][ T8052] Call Trace: [ 288.526179][ T8052] [ 288.526187][ T8052] __dump_stack+0x1d/0x30 [ 288.526215][ T8052] dump_stack_lvl+0x95/0xd0 [ 288.526270][ T8052] dump_stack+0x15/0x1b [ 288.526290][ T8052] should_fail_ex+0x25e/0x270 [ 288.526317][ T8052] should_fail+0xb/0x20 [ 288.526363][ T8052] should_fail_usercopy+0x1a/0x20 [ 288.526392][ T8052] _copy_from_user+0x1c/0xb0 [ 288.526484][ T8052] do_sock_getsockopt+0x122/0x570 [ 288.526526][ T8052] ? vfs_write+0x848/0x990 [ 288.526562][ T8052] __x64_sys_getsockopt+0x11d/0x1a0 [ 288.526627][ T8052] x64_sys_call+0x2dcf/0x3020 [ 288.526720][ T8052] do_syscall_64+0x136/0x3c0 [ 288.526744][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.526767][ T8052] RIP: 0033:0x7f042c03ce59 [ 288.526784][ T8052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.526802][ T8052] RSP: 002b:00007f042aa8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 288.526824][ T8052] RAX: ffffffffffffffda RBX: 00007f042c2b5fa0 RCX: 00007f042c03ce59 [ 288.526850][ T8052] RDX: 0000000000000082 RSI: 0000000000000084 RDI: 0000000000000008 [ 288.526864][ T8052] RBP: 00007f042aa8f090 R08: 0000200000001040 R09: 0000000000000000 [ 288.526879][ T8052] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.526900][ T8052] R13: 00007f042c2b6038 R14: 00007f042c2b5fa0 R15: 00007ffcf73aae48 [ 288.526920][ T8052] [ 288.675239][ T8043] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #3: comm syz.2.1235: corrupted inode contents [ 288.715909][ T6642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.723499][ T8043] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 288.730885][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 288.747552][ C1] EXT4-fs (loop2): initial error at time 1782165308: ext4_do_update_inode:5742: inode 3 [ 288.758356][ C1] EXT4-fs (loop2): last error at time 1782165308: ext4_do_update_inode:5742: inode 3 [ 288.847031][ T8043] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #3: comm syz.2.1235: mark_inode_dirty error [ 288.858402][ T8043] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 288.858816][ T8043] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #3: comm syz.2.1235: corrupted inode contents [ 288.880138][ T8043] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 288.880332][ T8043] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.1235: mark_inode_dirty error [ 288.901697][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.911307][ T8043] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 288.911529][ T8043] Quota error (device loop2): write_blk: dquota write failed [ 288.928852][ T8043] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 288.996749][ T8070] FAULT_INJECTION: forcing a failure. [ 288.996749][ T8070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.012614][ T8070] CPU: 0 UID: 0 PID: 8070 Comm: syz.0.1242 Not tainted syzkaller #0 PREEMPT(lazy) [ 289.012683][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 289.012696][ T8070] Call Trace: [ 289.012702][ T8070] [ 289.012785][ T8070] __dump_stack+0x1d/0x30 [ 289.012807][ T8070] dump_stack_lvl+0x95/0xd0 [ 289.012826][ T8070] dump_stack+0x15/0x1b [ 289.012842][ T8070] should_fail_ex+0x25e/0x270 [ 289.012888][ T8070] should_fail+0xb/0x20 [ 289.012923][ T8070] should_fail_usercopy+0x1a/0x20 [ 289.013013][ T8070] _copy_to_user+0x20/0xa0 [ 289.013046][ T8070] simple_read_from_buffer+0xb5/0x130 [ 289.013073][ T8070] proc_fail_nth_read+0x10e/0x150 [ 289.013095][ T8070] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.013192][ T8070] vfs_read+0x18e/0x7c0 [ 289.013224][ T8070] ? __rcu_read_unlock+0x4e/0x70 [ 289.013248][ T8070] ? __fget_files+0x184/0x1c0 [ 289.013284][ T8070] ? mutex_lock+0x57/0x90 [ 289.013313][ T8070] ksys_read+0xdc/0x1a0 [ 289.013335][ T8070] __x64_sys_read+0x40/0x50 [ 289.013374][ T8070] x64_sys_call+0x2886/0x3020 [ 289.013395][ T8070] do_syscall_64+0x136/0x3c0 [ 289.013491][ T8070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.013510][ T8070] RIP: 0033:0x7fde2850d68e [ 289.013585][ T8070] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 289.013616][ T8070] RSP: 002b:00007fde26fa6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.013639][ T8070] RAX: ffffffffffffffda RBX: 00007fde26fa76c0 RCX: 00007fde2850d68e [ 289.013675][ T8070] RDX: 000000000000000f RSI: 00007fde26fa70a0 RDI: 000000000000002e [ 289.013690][ T8070] RBP: 00007fde26fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.013704][ T8070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.013719][ T8070] R13: 00007fde287c6038 R14: 00007fde287c5fa0 R15: 00007ffd1c057668 [ 289.013739][ T8070] [ 289.018014][ T8043] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1235: Failed to acquire dquot type 0 [ 289.240152][ T8043] loop2: lost filesystem error report for type 5 error -117 [ 289.240531][ T8043] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1235: corrupted inode contents [ 289.260536][ T8043] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 289.260824][ T8043] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.1235: mark_inode_dirty error [ 289.293774][ T8043] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 289.294217][ T8043] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1235: corrupted inode contents [ 289.341828][ T8043] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 289.406202][ T8043] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1235: mark_inode_dirty error [ 289.557997][ T8043] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 289.618996][ T8043] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1235: corrupted inode contents [ 289.722223][ T8043] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 289.725086][ T8043] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 289.743404][ T8043] loop2: lost filesystem error report for type 5 error -117 [ 289.743630][ T8043] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1235: corrupted inode contents [ 289.763973][ T8043] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 289.764597][ T8043] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.1235: mark_inode_dirty error [ 289.786704][ T8043] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 289.796617][ T8043] loop2: lost filesystem error report for type 5 error -117 [ 289.796985][ T8043] EXT4-fs (loop2): 1 truncate cleaned up [ 289.811099][ T8043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.847128][ T8043] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.880187][ T8043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.974566][ T8084] 8021q: VLANs not supported on gre0 [ 290.170858][ T23] IPVS: starting estimator thread 0... [ 290.179940][ T28] audit: type=1400 audit(1782165309.802:901): avc: denied { lock } for pid=8089 comm="syz.2.1249" path="socket:[21546]" dev="sockfs" ino=21546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.209547][ T8091] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20001 [ 290.291174][ T8093] IPVS: using max 2304 ests per chain, 115200 per kthread [ 290.449190][ T28] audit: type=1400 audit(1782165310.072:902): avc: denied { ioctl } for pid=8096 comm="syz.2.1252" path="socket:[21568]" dev="sockfs" ino=21568 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 290.480855][ T28] audit: type=1400 audit(1782165310.072:903): avc: denied { name_bind } for pid=8096 comm="syz.2.1252" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 290.483012][ T8099] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1253'. [ 290.523132][ T8099] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 290.898581][ T28] audit: type=1400 audit(1782165310.522:904): avc: denied { write } for pid=8117 comm="syz.5.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.929299][ T8116] set_capacity_and_notify: 2 callbacks suppressed [ 290.929378][ T8116] loop0: detected capacity change from 0 to 512 [ 290.984037][ T8116] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.000198][ T8116] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 291.051021][ T8116] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 291.063282][ T8122] loop5: detected capacity change from 0 to 1764 [ 291.066351][ T8116] EXT4-fs (loop0): orphan cleanup on readonly fs [ 291.090117][ T8116] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1258: Invalid block bitmap block 0 in block_group 0 [ 291.105183][ T8116] loop0: lost filesystem error report for type 5 error -117 [ 291.108346][ T8116] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1258: Invalid block bitmap block 0 in block_group 0 [ 291.116197][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 291.116227][ C0] EXT4-fs (loop0): last error at time 1782165310: ext4_read_block_bitmap_nowait:483 [ 291.149544][ T8116] loop0: lost filesystem error report for type 5 error -117 [ 291.151594][ T8116] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1258: Invalid block bitmap block 0 in block_group 0 [ 291.188727][ T8116] loop0: lost filesystem error report for type 5 error -117 [ 291.190384][ T8116] Quota error (device loop0): write_blk: dquota write failed [ 291.206166][ T8116] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1258: Failed to acquire dquot type 1 [ 291.218330][ T8116] loop0: lost filesystem error report for type 5 error -28 [ 291.220564][ T8116] EXT4-fs (loop0): 1 orphan inode deleted [ 291.236763][ T49] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 291.248417][ T49] loop0: lost filesystem error report for type 5 error -117 [ 291.257538][ T8116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.745306][ T8132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8132 comm=syz.6.1262 [ 291.760349][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.988532][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8149 comm=syz.0.1269 [ 292.946613][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 292.946634][ T28] audit: type=1400 audit(1782165312.572:917): avc: denied { ioctl } for pid=8172 comm="syz.6.1275" path="socket:[21684]" dev="sockfs" ino=21684 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 293.226059][ T8177] loop6: detected capacity change from 0 to 1764 [ 293.399692][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8178 comm=syz.3.1277 [ 293.978100][ T8186] random: crng reseeded on system resumption [ 294.040389][ T8190] loop6: detected capacity change from 0 to 1764 [ 295.300230][ T8193] netlink: 'syz.3.1281': attribute type 3 has an invalid length. [ 295.653323][ T28] audit: type=1400 audit(1782165315.252:918): avc: denied { connect } for pid=8187 comm="syz.3.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 295.690181][ T8206] loop2: detected capacity change from 0 to 1764 [ 295.875685][ T8211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8211 comm=syz.6.1287 [ 295.986907][ T8213] loop2: detected capacity change from 0 to 764 [ 296.030763][ T8213] rock: directory entry would overflow storage [ 296.036978][ T8213] rock: sig=0x5245, size=8, remaining=5 [ 296.295432][ T8216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8216 comm=syz.5.1288 [ 296.599831][ T28] audit: type=1326 audit(1782165316.222:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.1292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f919a3fce59 code=0x0 [ 296.787174][ T8236] random: crng reseeded on system resumption [ 297.691492][ T8246] loop2: detected capacity change from 0 to 1764 [ 299.070679][ T8245] random: crng reseeded on system resumption [ 299.607040][ T8248] loop6: detected capacity change from 0 to 512 [ 299.633119][ T8248] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.694617][ T8248] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 299.863650][ T8248] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 299.873548][ T8258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8258 comm=syz.5.1301 [ 299.897524][ T8248] EXT4-fs (loop6): orphan cleanup on readonly fs [ 299.950766][ T8261] C: renamed from veth1_to_team (while UP) [ 299.956770][ T28] audit: type=1400 audit(1782165319.572:920): avc: denied { kexec_image_load } for pid=8260 comm="syz.3.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 299.981190][ T8248] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1298: Invalid block bitmap block 0 in block_group 0 [ 300.026498][ T8261] netlink: 'syz.3.1302': attribute type 3 has an invalid length. [ 300.054656][ T8248] loop6: lost filesystem error report for type 5 error -117 [ 300.055387][ T8261] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1302'. [ 300.062780][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 300.062804][ C1] EXT4-fs (loop6): last error at time 1782165319: ext4_read_block_bitmap_nowait:483 [ 300.089016][ T8248] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1298: Invalid block bitmap block 0 in block_group 0 [ 300.111930][ T8261] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 300.127227][ T8248] loop6: lost filesystem error report for type 5 error -117 [ 300.220366][ T8248] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1298: Invalid block bitmap block 0 in block_group 0 [ 300.254043][ T8248] loop6: lost filesystem error report for type 5 error -117 [ 300.265307][ T8248] Quota error (device loop6): write_blk: dquota write failed [ 300.287397][ T8277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8277 comm=syz.3.1309 [ 300.315899][ T8248] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 300.347536][ T8248] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1298: Failed to acquire dquot type 1 [ 300.403224][ T8248] loop6: lost filesystem error report for type 5 error -28 [ 300.445558][ T8248] EXT4-fs (loop6): 1 orphan inode deleted [ 300.647577][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 301.327932][ T5235] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 301.357726][ T5235] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 1 [ 301.908869][ T5235] loop6: lost filesystem error report for type 5 error -117 [ 301.914259][ T8248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 302.889795][ T8284] Bluetooth: hci0: command 0x1003 tx timeout [ 302.921314][ T3616] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 302.955970][ T6642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.921935][ T8295] random: crng reseeded on system resumption [ 304.215655][ T8300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8300 comm=syz.5.1314 [ 304.305931][ T8301] loop6: detected capacity change from 0 to 1024 [ 304.325091][ T8303] loop0: detected capacity change from 0 to 1764 [ 304.344640][ T8301] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 304.418068][ T8301] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.1313: lblock 2 mapped to illegal pblock 2 (length 1) [ 304.539776][ T8310] loop3: detected capacity change from 0 to 128 [ 304.552830][ T8315] loop2: detected capacity change from 0 to 128 [ 304.614493][ T8301] fserror_report: 1 callbacks suppressed [ 304.614511][ T8301] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 304.620605][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 304.636069][ C0] EXT4-fs (loop6): initial error at time 1782165324: ext4_map_blocks:791: inode 3: block 2 [ 304.646109][ C0] EXT4-fs (loop6): last error at time 1782165324: ext4_map_blocks:791: inode 3: block 2 [ 304.665807][ T8301] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 304.674212][ T8301] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.1313: lblock 0 mapped to illegal pblock 48 (length 1) [ 304.702302][ T28] audit: type=1400 audit(1782165324.322:921): avc: denied { watch_reads } for pid=8317 comm="syz.5.1320" path="/300" dev="tmpfs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 304.724100][ T8301] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 304.791301][ T8301] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 304.836039][ T8301] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1313: Failed to acquire dquot type 0 [ 304.933788][ T8301] loop6: lost filesystem error report for type 5 error -117 [ 304.937307][ T8301] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 305.065957][ T8301] loop6: lost filesystem error report for type 5 error -117 [ 305.066925][ T8301] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.1313: mark_inode_dirty error [ 305.177429][ T8301] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 305.195711][ T8301] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 305.241469][ T8301] EXT4-fs (loop6): 1 orphan inode deleted [ 305.247710][ T8301] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.274649][ T68] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 305.318312][ T68] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 305.349310][ T68] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 305.357566][ T8327] loop5: detected capacity change from 0 to 136 [ 305.504167][ T28] audit: type=1400 audit(1782165325.132:922): avc: denied { accept } for pid=8326 comm="syz.5.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 305.552871][ T8341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8341 comm=syz.2.1327 [ 305.594780][ T6642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.595050][ T6642] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 305.595185][ T6642] loop6: lost filesystem error report for type 5 error -117 [ 305.595304][ T6642] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 305.595355][ T6642] loop6: lost filesystem error report for type 5 error -117 [ 305.595682][ T6642] EXT4-fs error (device loop6): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 305.595706][ T6642] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 306.804580][ T8351] random: crng reseeded on system resumption [ 307.164242][ T8354] loop0: detected capacity change from 0 to 128 [ 307.220365][ T8356] loop3: detected capacity change from 0 to 512 [ 307.391514][ T8356] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 307.409337][ T8356] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 307.451690][ T8356] System zones: 0-1, 15-15, 18-18, 34-34 [ 307.468858][ T8358] loop5: detected capacity change from 0 to 1764 [ 307.485152][ T8356] EXT4-fs (loop3): orphan cleanup on readonly fs [ 307.519020][ T8356] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 307.805536][ T8356] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 307.980906][ T8356] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 307.994583][ T8367] FAULT_INJECTION: forcing a failure. [ 307.994583][ T8367] name failslab, interval 1, probability 0, space 0, times 0 [ 308.007502][ T8367] CPU: 1 UID: 60929 PID: 8367 Comm: syz.0.1334 Not tainted syzkaller #0 PREEMPT(lazy) [ 308.007585][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.007598][ T8367] Call Trace: [ 308.007606][ T8367] [ 308.007614][ T8367] __dump_stack+0x1d/0x30 [ 308.007639][ T8367] dump_stack_lvl+0x95/0xd0 [ 308.007661][ T8367] dump_stack+0x15/0x1b [ 308.007686][ T8367] should_fail_ex+0x25e/0x270 [ 308.007709][ T8367] should_failslab+0x8c/0xb0 [ 308.007733][ T8367] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 308.007778][ T8367] ? security_inode_alloc+0x37/0x100 [ 308.007802][ T8367] ? security_inode_alloc+0x37/0x100 [ 308.007827][ T8367] security_inode_alloc+0x37/0x100 [ 308.007850][ T8367] inode_init_always_gfp+0x495/0x4e0 [ 308.007905][ T8367] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 308.007928][ T8367] alloc_inode+0x58/0x170 [ 308.008028][ T8367] new_inode+0x1d/0xe0 [ 308.008082][ T8367] shmem_get_inode+0x24e/0x7a0 [ 308.008108][ T8367] __shmem_file_setup+0x14f/0x260 [ 308.008136][ T8367] shmem_file_setup+0x3b/0x50 [ 308.008231][ T8367] memfd_alloc_file+0x4e/0x300 [ 308.008263][ T8367] __se_sys_memfd_create+0x2e1/0x3b0 [ 308.008291][ T8367] __x64_sys_memfd_create+0x31/0x40 [ 308.008359][ T8367] x64_sys_call+0x1f22/0x3020 [ 308.008384][ T8367] do_syscall_64+0x136/0x3c0 [ 308.008410][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.008432][ T8367] RIP: 0033:0x7fde2854ce59 [ 308.008447][ T8367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.008486][ T8367] RSP: 002b:00007fde26fa6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 308.008527][ T8367] RAX: ffffffffffffffda RBX: 0000000000000478 RCX: 00007fde2854ce59 [ 308.008540][ T8367] RDX: 00007fde26fa6ee0 RSI: 0000000000000000 RDI: 00007fde285e304f [ 308.008552][ T8367] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 308.008565][ T8367] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 308.008577][ T8367] R13: 00007fde26fa6ee0 R14: 00007fde26fa6ea0 R15: 0000200000000000 [ 308.008597][ T8367] [ 308.120751][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 308.297937][ T8356] EXT4-fs (loop3): 1 truncate cleaned up [ 308.353749][ T8356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.496815][ T8369] bridge0: port 3(gretap0) entered disabled state [ 308.519044][ T28] audit: type=1400 audit(1782165328.082:923): avc: denied { mounton } for pid=8355 comm="syz.3.1332" path="/246/file2/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 308.552847][ T8356] __vm_enough_memory: pid: 8356, comm: syz.3.1332, bytes: 4503599627366400 not enough memory for the allocation [ 308.702861][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.710111][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.925508][ T8369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.948569][ T8369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.111420][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.669875][ T8399] loop5: detected capacity change from 0 to 128 [ 309.874890][ T8404] loop2: detected capacity change from 0 to 1024 [ 309.896881][ T8404] EXT4-fs: Ignoring removed bh option [ 310.176581][ T8404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.300491][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'. [ 310.346139][ T8417] netlink: 'syz.0.1349': attribute type 2 has an invalid length. [ 310.410600][ T28] audit: type=1400 audit(1782165330.022:924): avc: denied { write } for pid=8403 comm="syz.2.1346" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 310.433731][ T8404] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=8404 comm=syz.2.1346 [ 310.480938][ T8418] loop0: detected capacity change from 0 to 128 [ 310.536539][ T8418] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.560122][ T28] audit: type=1400 audit(1782165330.102:925): avc: denied { ioctl } for pid=8416 comm="syz.0.1349" path="net:[4026532388]" dev="nsfs" ino=4026532388 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 310.621892][ T8418] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 310.681613][ T8426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8426 comm=syz.5.1351 [ 310.879906][ T3294] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.020507][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.270151][ T8434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1355'. [ 311.309106][ T8434] netlink: 'syz.0.1355': attribute type 5 has an invalid length. [ 311.345536][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1355'. [ 311.688546][ T28] audit: type=1400 audit(1782165331.312:926): avc: denied { connect } for pid=8440 comm="syz.0.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 311.890162][ T8447] loop0: detected capacity change from 0 to 1024 [ 311.900717][ T8447] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 311.928676][ T8447] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.1358: lblock 2 mapped to illegal pblock 2 (length 1) [ 311.961342][ T8453] loop5: detected capacity change from 0 to 164 [ 312.012737][ T8453] ISOFS: unable to read i-node block [ 312.030786][ T8447] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.030902][ T8447] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 312.048131][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 312.048154][ C1] EXT4-fs (loop0): initial error at time 1782165331: ext4_map_blocks:791: inode 3: block 2 [ 312.048220][ C1] EXT4-fs (loop0): last error at time 1782165331: ext4_map_blocks:791: inode 3: block 2 [ 312.087799][ T8453] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 312.092098][ T8447] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.1358: lblock 0 mapped to illegal pblock 48 (length 1) [ 312.126691][ T8447] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.126812][ T8447] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 312.167902][ T8447] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1358: Failed to acquire dquot type 0 [ 312.179643][ T8457] loop6: detected capacity change from 0 to 512 [ 312.198634][ T8447] loop0: lost filesystem error report for type 5 error -117 [ 312.198893][ T8447] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 312.218386][ T8457] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 312.234936][ T8447] loop0: lost filesystem error report for type 5 error -117 [ 312.235177][ T8447] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.1358: mark_inode_dirty error [ 312.235435][ T8457] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.1362: bad orphan inode 131083 [ 312.253653][ T8447] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 312.267380][ T8457] loop6: lost filesystem error report for type 5 error -117 [ 312.278100][ T8450] loop2: detected capacity change from 0 to 512 [ 312.279082][ T8457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.302113][ T8447] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 312.325789][ T8447] EXT4-fs (loop0): 1 orphan inode deleted [ 312.336654][ T8450] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.338665][ T28] audit: type=1400 audit(1782165331.962:927): avc: denied { write } for pid=8456 comm="syz.6.1362" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.344063][ T310] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 312.365514][ T8447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.402383][ T28] audit: type=1400 audit(1782165332.022:928): avc: denied { ioctl } for pid=8452 comm="syz.5.1360" path="socket:[22158]" dev="sockfs" ino=22158 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 312.406407][ T310] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.427486][ T310] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 312.450490][ T8450] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 312.469106][ T310] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 312.481644][ T8450] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 312.490385][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1362'. [ 312.493386][ T8450] EXT4-fs (loop2): orphan cleanup on readonly fs [ 312.543765][ T8450] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1359: Invalid block bitmap block 0 in block_group 0 [ 312.591446][ T8450] loop2: lost filesystem error report for type 5 error -117 [ 312.597075][ T8450] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1359: Invalid block bitmap block 0 in block_group 0 [ 312.606593][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 312.606765][ C0] EXT4-fs (loop2): last error at time 1782165332: ext4_read_block_bitmap_nowait:483 [ 312.637869][ T8468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8468 comm=syz.6.1362 [ 312.663921][ T8450] loop2: lost filesystem error report for type 5 error -117 [ 312.667837][ T8450] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1359: Invalid block bitmap block 0 in block_group 0 [ 312.670089][ T28] audit: type=1400 audit(1782165332.292:929): avc: denied { write } for pid=8456 comm="syz.6.1362" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.689057][ T8450] loop2: lost filesystem error report for type 5 error -117 [ 312.734089][ T6642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.752637][ T8450] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1359: Invalid block bitmap block 0 in block_group 0 [ 312.767193][ T8450] loop2: lost filesystem error report for type 5 error -117 [ 312.768911][ T8450] Quota error (device loop2): write_blk: dquota write failed [ 312.785547][ T8450] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1359: Failed to acquire dquot type 1 [ 312.816372][ T8450] loop2: lost filesystem error report for type 5 error -28 [ 312.824148][ T8450] EXT4-fs (loop2): 1 orphan inode deleted [ 312.934244][ T68] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 1 [ 312.952008][ T68] loop2: lost filesystem error report for type 5 error -117 [ 312.957343][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.976020][ T8450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.991617][ T3294] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 313.042384][ T3294] loop0: lost filesystem error report for type 5 error -117 [ 313.048541][ T3294] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 313.072194][ T3294] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 313.090883][ T3294] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 313.113472][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.166409][ T8483] loop2: detected capacity change from 0 to 512 [ 313.176807][ T8483] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 313.196496][ T8483] loop2: detected capacity change from 0 to 164 [ 313.206105][ T8483] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 313.249722][ T8490] loop2: detected capacity change from 0 to 512 [ 313.283314][ T8490] EXT4-fs: Ignoring removed bh option [ 313.316875][ T8490] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 313.405277][ T8490] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1369: corrupted in-inode xattr: e_value size too large [ 313.421319][ T8490] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 313.421532][ T8490] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1369: couldn't read orphan inode 15 (err -117) [ 313.430764][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 313.430787][ C1] EXT4-fs (loop2): initial error at time 1782165333: ext4_iget_extra_inode:5180: inode 15 [ 313.430822][ C1] EXT4-fs (loop2): last error at time 1782165333: ext4_iget_extra_inode:5180: inode 15 [ 313.502026][ T8490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.854563][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.224245][ T8498] EXT4-fs: Ignoring removed bh option [ 314.287328][ T8498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.324982][ T8498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=8498 comm=syz.0.1371 [ 315.406157][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.423185][ T8507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8507 comm=syz.2.1370 [ 315.800706][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 316.225398][ T8511] set_capacity_and_notify: 1 callbacks suppressed [ 316.225450][ T8511] loop3: detected capacity change from 0 to 1764 [ 317.644617][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 317.644690][ T28] audit: type=1400 audit(1782165337.272:931): avc: denied { wake_alarm } for pid=8514 comm="syz.2.1375" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 317.981176][ T8530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1380'. [ 318.006476][ T8530] loop3: detected capacity change from 0 to 512 [ 318.012206][ T8532] loop2: detected capacity change from 0 to 1024 [ 318.013735][ T8530] EXT4-fs: inline encryption not supported [ 318.032538][ T8532] EXT4-fs: Ignoring removed bh option [ 318.039786][ T8530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 318.058375][ T8530] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 318.070342][ T8532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.093580][ T28] audit: type=1400 audit(1782165337.712:932): avc: denied { write } for pid=8531 comm="syz.2.1381" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.106601][ T8532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=8532 comm=syz.2.1381 [ 318.116770][ T8530] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 318.143613][ T8530] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1380: bg 0: block 248: padding at end of block bitmap is not set [ 318.158101][ T8530] fserror_report: 2 callbacks suppressed [ 318.158118][ T8530] loop3: lost filesystem error report for type 5 error -117 [ 318.164216][ T8530] Quota error (device loop3): write_blk: dquota write failed [ 318.170589][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 318.171870][ T8530] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 318.179299][ C0] EXT4-fs (loop3): last error at time 1782165337: ext4_validate_block_bitmap:441 [ 318.185631][ T8530] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1380: Failed to acquire dquot type 1 [ 318.185663][ T8530] loop3: lost filesystem error report for type 5 error -28 [ 318.186141][ T8530] EXT4-fs (loop3): 1 truncate cleaned up [ 318.195559][ C0] [ 318.232055][ T8530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 318.343131][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 318.355970][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.408341][ T8544] loop2: detected capacity change from 0 to 1024 [ 318.417468][ T8544] EXT4-fs: Ignoring removed bh option [ 318.436374][ T8544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.453031][ T28] audit: type=1400 audit(1782165338.082:933): avc: denied { write } for pid=8543 comm="syz.2.1384" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.477999][ T8544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=8544 comm=syz.2.1384 [ 318.504477][ T8550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8550 comm=syz.3.1386 [ 318.656974][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.775754][ T8559] loop0: detected capacity change from 0 to 512 [ 318.800515][ T8559] EXT4-fs: Ignoring removed bh option [ 318.818425][ T8559] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 318.846545][ T8559] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1390: corrupted in-inode xattr: e_value size too large [ 318.863976][ T8559] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 318.864207][ T8559] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1390: couldn't read orphan inode 15 (err -117) [ 318.873543][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 318.873566][ C1] EXT4-fs (loop0): initial error at time 1782165338: ext4_iget_extra_inode:5180: inode 15 [ 318.873603][ C1] EXT4-fs (loop0): last error at time 1782165338: ext4_iget_extra_inode:5180: inode 15 [ 318.911778][ T8559] loop0: lost filesystem error report for type 5 error -117 [ 318.925930][ T8559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.044232][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.091886][ T8565] netlink: 'syz.2.1389': attribute type 21 has an invalid length. [ 319.100943][ T8565] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1389'. [ 319.578027][ T8567] loop3: detected capacity change from 0 to 512 [ 319.748830][ T8567] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 319.844816][ T8567] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1392: bad orphan inode 131083 [ 319.862549][ T8567] loop3: lost filesystem error report for type 5 error -117 [ 319.863287][ T8567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.927303][ T28] audit: type=1400 audit(1782165339.552:934): avc: denied { write } for pid=8566 comm="syz.3.1392" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.047868][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'. [ 320.117700][ T8555] syz.6.1387 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 320.159159][ T8574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8574 comm=syz.3.1392 [ 320.183743][ T8555] CPU: 0 UID: 0 PID: 8555 Comm: syz.6.1387 Not tainted syzkaller #0 PREEMPT(lazy) [ 320.183854][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 320.183870][ T8555] Call Trace: [ 320.183878][ T8555] [ 320.183890][ T8555] __dump_stack+0x1d/0x30 [ 320.183916][ T8555] dump_stack_lvl+0x95/0xd0 [ 320.184035][ T8555] dump_stack+0x15/0x1b [ 320.184058][ T8555] dump_header+0x80/0x240 [ 320.184086][ T8555] oom_kill_process+0x295/0x350 [ 320.184120][ T8555] out_of_memory+0x981/0xbc0 [ 320.184176][ T8555] try_charge_memcg+0x621/0xa00 [ 320.184216][ T8555] ? __rcu_read_unlock+0x4e/0x70 [ 320.184260][ T8555] __memcg_kmem_charge_page+0x199/0x3a0 [ 320.184319][ T8555] __alloc_frozen_pages_noprof+0x18a/0x350 [ 320.184385][ T8555] alloc_pages_mpol+0xa9/0x1d0 [ 320.184454][ T8555] alloc_pages_noprof+0x8f/0x140 [ 320.184486][ T8555] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 320.184526][ T8555] __kvmalloc_node_noprof+0x3a0/0x590 [ 320.184614][ T8555] ? futex_hash_allocate+0x192/0x920 [ 320.184636][ T8555] ? futex_hash_allocate+0x192/0x920 [ 320.184655][ T8555] ? futex_hash_allocate+0x192/0x920 [ 320.184679][ T8555] futex_hash_allocate+0x192/0x920 [ 320.184747][ T8555] ? cap_task_prctl+0x13f/0x6b0 [ 320.184806][ T8555] futex_hash_prctl+0xd8/0xf0 [ 320.184825][ T8555] __se_sys_prctl+0x4f4/0x13b0 [ 320.184852][ T8555] __x64_sys_prctl+0x67/0x80 [ 320.184893][ T8555] x64_sys_call+0x2533/0x3020 [ 320.184916][ T8555] do_syscall_64+0x136/0x3c0 [ 320.184941][ T8555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.185000][ T8555] RIP: 0033:0x7f042c03ce59 [ 320.185019][ T8555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.185040][ T8555] RSP: 002b:00007f042aa6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 320.185061][ T8555] RAX: ffffffffffffffda RBX: 00007f042c2b6090 RCX: 00007f042c03ce59 [ 320.185098][ T8555] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 320.185111][ T8555] RBP: 00007f042c0d2e6f R08: 0000000000000000 R09: 0000000000000000 [ 320.185125][ T8555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.185138][ T8555] R13: 00007f042c2b6128 R14: 00007f042c2b6090 R15: 00007ffcf73aae48 [ 320.185158][ T8555] [ 320.189599][ T8555] memory: usage 307200kB, limit 307200kB, failcnt 670 [ 320.459811][ T28] audit: type=1400 audit(1782165340.082:935): avc: denied { write } for pid=8566 comm="syz.3.1392" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.517671][ T8555] memory+swap: usage 226752kB, limit 9007199254740988kB, failcnt 0 [ 320.536144][ T8555] kmem: usage 209088kB, limit 9007199254740988kB, failcnt 0 [ 320.549718][ T8555] Memory cgroup stats for /syz6: [ 320.549940][ T8555] cache 0 [ 320.570325][ T8555] rss 4096 [ 320.580737][ T8555] shmem 0 [ 320.593877][ T8555] mapped_file 0 [ 320.606089][ T8555] dirty 0 [ 320.619841][ T8555] writeback 0 [ 320.626152][ T8555] workingset_refault_anon 205 [ 320.642095][ T8555] workingset_refault_file 500 [ 320.654953][ T8555] swap 954368 [ 320.664509][ T8555] swapcached 2965504 [ 320.677097][ T8555] pgpgin 112964 [ 320.687743][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.714301][ T8555] pgpgout 112963 [ 320.728483][ T8582] loop0: detected capacity change from 0 to 512 [ 320.736714][ T8555] pgfault 91864 [ 320.751753][ T8555] pgmajfault 130 [ 320.768705][ T8582] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1396: iget: bad i_size value: 38620345925642 [ 320.780296][ T8555] inactive_anon 0 [ 320.782429][ T8582] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 320.789601][ T8582] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1396: couldn't read orphan inode 15 (err -117) [ 320.798802][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 320.798822][ C1] EXT4-fs (loop0): initial error at time 1782165340: ext4_orphan_get:1399: inode 15 [ 320.798867][ C1] EXT4-fs (loop0): last error at time 1782165340: ext4_orphan_get:1399: inode 15 [ 320.805795][ T8555] active_anon 4096 [ 320.813652][ T8582] loop0: lost filesystem error report for type 5 error -117 [ 320.823691][ T8555] inactive_file 0 [ 320.834090][ T8582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.852888][ T8555] active_file 0 [ 320.852914][ T8555] unevictable 0 [ 320.852975][ T8555] hierarchical_memory_limit 314572800 [ 320.852986][ T8555] hierarchical_memsw_limit 9223372036854771712 [ 320.852998][ T8555] total_cache 0 [ 320.853005][ T8555] total_rss 4096 [ 320.853012][ T8555] total_shmem 0 [ 320.853021][ T8555] total_mapped_file 0 [ 320.853087][ T8555] total_dirty 0 [ 320.853096][ T8555] total_writeback 0 [ 320.853105][ T8555] total_workingset_refault_anon 205 [ 320.853116][ T8555] total_workingset_refault_file 500 [ 320.853126][ T8555] total_swap 954368 [ 320.853167][ T8555] total_swapcached 2965504 [ 320.853177][ T8555] total_pgpgin 112964 [ 320.853186][ T8555] total_pgpgout 112963 [ 320.853196][ T8555] total_pgfault 91864 [ 320.853205][ T8555] total_pgmajfault 130 [ 320.853214][ T8555] total_inactive_anon 0 [ 320.853222][ T8555] total_active_anon 4096 [ 320.853232][ T8555] total_inactive_file 0 [ 320.853241][ T8555] total_active_file 0 [ 320.853251][ T8555] total_unevictable 0 [ 320.961568][ T8555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1387,pid=8551,uid=0 [ 320.963173][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.976231][ T8555] Memory cgroup out of memory: Killed process 8551 (syz.6.1387) total-vm:96348kB, anon-rss:1232kB, file-rss:22364kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 321.083677][ T8597] loop0: detected capacity change from 0 to 1024 [ 321.097048][ T8597] EXT4-fs: Ignoring removed bh option [ 321.127316][ T8597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.142727][ T28] audit: type=1400 audit(1782165340.772:936): avc: denied { write } for pid=8595 comm="syz.0.1399" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 321.166130][ T8597] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=8597 comm=syz.0.1399 [ 321.203881][ T8604] loop2: detected capacity change from 0 to 512 [ 321.215279][ T8604] EXT4-fs: Ignoring removed nobh option [ 321.231663][ T8604] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 321.242148][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.242974][ T8604] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.1401: inode has both inline data and extents flags [ 321.265190][ T8604] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 321.266106][ T8604] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1401: couldn't read orphan inode 13 (err -117) [ 321.275847][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 321.275874][ C0] EXT4-fs (loop2): initial error at time 1782165340: ext4_orphan_get:1399: inode 13 [ 321.275977][ C0] EXT4-fs (loop2): last error at time 1782165340: ext4_orphan_get:1399: inode 13 [ 321.289198][ T8608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8608 comm=syz.0.1402 [ 321.331509][ T8604] loop2: lost filesystem error report for type 5 error -117 [ 321.337821][ T8604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.384987][ T28] audit: type=1400 audit(1782165341.012:937): avc: denied { write } for pid=8603 comm="syz.2.1401" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 321.405722][ T8604] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 321.446431][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.464844][ T8614] ±ÿ]×0¢ÊÞª: renamed from lo (while UP) [ 321.475950][ T8614] loop2: detected capacity change from 0 to 512 [ 321.483018][ T8614] EXT4-fs: Ignoring removed mblk_io_submit option [ 321.490305][ T8614] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 321.501304][ T8614] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 321.509465][ T8614] EXT4-fs (loop2): orphan cleanup on readonly fs [ 321.516189][ T8614] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1403: bg 0: block 361: padding at end of block bitmap is not set [ 321.530782][ T8614] loop2: lost filesystem error report for type 5 error -117 [ 321.531015][ T8614] EXT4-fs (loop2): Remounting filesystem read-only [ 321.544870][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 321.544894][ C1] EXT4-fs (loop2): initial error at time 1782165341: ext4_validate_block_bitmap:441 [ 321.544917][ C1] EXT4-fs (loop2): last error at time 1782165341: ext4_validate_block_bitmap:441 [ 321.570438][ T8614] EXT4-fs (loop2): 1 truncate cleaned up [ 321.576720][ T8614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 321.594340][ T8614] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1403: dx entry: limit 0 != root limit 125 [ 321.606226][ T8614] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1403: Corrupt directory, running e2fsck is recommended [ 321.676759][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 321.740836][ T8629] loop3: detected capacity change from 0 to 128 [ 321.747217][ T8626] loop5: detected capacity change from 0 to 512 [ 321.757327][ T8629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 321.771506][ T8626] EXT4-fs: Ignoring removed bh option [ 321.791771][ T8629] System zones: 1-3, 19-19, 35-36 [ 321.901533][ T8629] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 321.923005][ T8626] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 321.932353][ T8629] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 321.967171][ T8626] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.1408: corrupted in-inode xattr: e_value size too large [ 321.981577][ T8626] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 321.981870][ T8626] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1408: couldn't read orphan inode 15 (err -117) [ 321.991080][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 321.991102][ C1] EXT4-fs (loop5): initial error at time 1782165341: ext4_iget_extra_inode:5180: inode 15 [ 321.991135][ C1] EXT4-fs (loop5): last error at time 1782165341: ext4_iget_extra_inode:5180: inode 15 [ 321.993953][ T28] audit: type=1400 audit(1782165341.622:938): avc: denied { write } for pid=8628 comm="syz.3.1410" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 322.003466][ T8626] loop5: lost filesystem error report for type 5 error -117 [ 322.052194][ T8626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.115860][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.157610][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.649350][ T8654] vti0: entered promiscuous mode [ 322.654500][ T8654] vti0: entered allmulticast mode [ 323.127992][ T8662] loop6: detected capacity change from 0 to 128 [ 323.173336][ T8662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 323.193870][ T8662] System zones: 1-3, 19-19, 35-36 [ 323.212922][ T8662] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 323.246597][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 323.246612][ T28] audit: type=1400 audit(1782165342.872:941): avc: denied { append } for pid=8668 comm="syz.2.1424" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 323.280771][ T8662] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 323.346946][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8673 comm=syz.0.1425 [ 323.426653][ T6642] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.672780][ T28] audit: type=1400 audit(1782165343.302:942): avc: denied { getopt } for pid=8687 comm="syz.6.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 324.312786][ T8695] loop2: detected capacity change from 0 to 1764 [ 324.313178][ T8698] netlink: 'syz.0.1433': attribute type 1 has an invalid length. [ 324.373728][ T8698] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1433'. [ 324.578959][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 324.598392][ T8710] loop2: detected capacity change from 0 to 764 [ 324.605708][ T8710] iso9660: Bad value for 'session' [ 325.061985][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1439'. [ 325.208880][ T8725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8725 comm=syz.2.1445 [ 325.276919][ T8730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8730 comm=syz.5.1448 [ 325.356912][ T8739] netlink: 'syz.6.1450': attribute type 1 has an invalid length. [ 325.379329][ T8739] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1450'. [ 325.825598][ T8753] loop5: detected capacity change from 0 to 128 [ 326.523619][ T8779] netlink: 'syz.5.1464': attribute type 1 has an invalid length. [ 326.535705][ T8780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8780 comm=syz.6.1463 [ 326.556334][ T8779] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1464'. [ 326.815114][ T8794] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 326.880485][ T8794] bridge0: port 3(gretap0) entered disabled state [ 326.887174][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.894653][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.171095][ T28] audit: type=1326 audit(1782165346.802:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.2.1471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919a3fce59 code=0x7ffc0000 [ 327.310989][ T28] audit: type=1326 audit(1782165346.802:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.2.1471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919a3fce59 code=0x7ffc0000 [ 327.414766][ T28] audit: type=1326 audit(1782165346.832:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.2.1471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f919a3fce59 code=0x7ffc0000 [ 327.490669][ T28] audit: type=1326 audit(1782165346.832:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.2.1471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919a3fce59 code=0x7ffc0000 [ 327.528172][ T8812] loop2: detected capacity change from 0 to 512 [ 327.554364][ T8812] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1471: Unrecognised inode hash code 255 [ 327.580445][ T28] audit: type=1326 audit(1782165346.832:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.2.1471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919a3fce59 code=0x7ffc0000 [ 327.634833][ T8812] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1471: Corrupt directory, running e2fsck is recommended [ 327.694841][ T28] audit: type=1326 audit(1782165346.832:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.2.1471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f919a3fce59 code=0x7ffc0000 [ 327.724883][ T8812] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 327.733704][ T8812] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1471: corrupted in-inode xattr: e_name out of bounds [ 327.763750][ T8812] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 327.765396][ T8812] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1471: couldn't read orphan inode 15 (err -117) [ 327.774616][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 327.774639][ C1] EXT4-fs (loop2): initial error at time 1782165347: ext4_iget_extra_inode:5180: inode 15 [ 327.774666][ C1] EXT4-fs (loop2): last error at time 1782165347: ext4_iget_extra_inode:5180: inode 15 [ 327.784812][ T28] audit: type=1326 audit(1782165346.832:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.2.1471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919a3fce59 code=0x7ffc0000 [ 327.801007][ T8812] loop2: lost filesystem error report for type 5 error -117 [ 327.841610][ T8812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.873790][ T28] audit: type=1326 audit(1782165346.832:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.2.1471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919a3fce59 code=0x7ffc0000 [ 328.086878][ T8821] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1471: Unrecognised inode hash code 255 [ 328.135156][ T8821] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1471: Corrupt directory, running e2fsck is recommended [ 328.245840][ T8807] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1471: Unrecognised inode hash code 255 [ 328.272175][ T8807] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1471: Corrupt directory, running e2fsck is recommended [ 328.300470][ T8807] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 4: comm syz.2.1471: path /272/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 328.352366][ T8807] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.1471: path /272/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 328.413676][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 328.413709][ T28] audit: type=1326 audit(1782165348.042:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.2.1471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919a3fce59 code=0x7ffc0000 [ 328.472000][ T28] audit: type=1326 audit(1782165348.072:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.2.1471" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919a3fce59 code=0x7ffc0000 [ 328.474782][ T8823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8823 comm=syz.0.1475 [ 329.383704][ T8828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8828 comm=syz.0.1479 [ 329.774582][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.832267][ T8834] netlink: 'syz.2.1476': attribute type 1 has an invalid length. [ 329.857209][ T8834] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1476'. [ 329.893632][ T8839] loop3: detected capacity change from 0 to 1764 [ 330.196691][ T8852] bridge0: port 3(gretap0) entered blocking state [ 330.203209][ T8852] bridge0: port 3(gretap0) entered forwarding state [ 330.211782][ T8852] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.222055][ T8852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.265068][ T8852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.277319][ T8852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.299001][ T8852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.309501][ T8852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.345095][ T8852] veth1_vlan: left promiscuous mode [ 330.353084][ T8852] veth0_vlan: left promiscuous mode [ 330.360349][ T8852] veth0_vlan: entered promiscuous mode [ 330.380880][ T8852] veth1_vlan: entered promiscuous mode [ 330.400452][ T8852] veth1_macvtap: left promiscuous mode [ 330.408040][ T8852] veth0_macvtap: left promiscuous mode [ 330.415808][ T8852] veth0_macvtap: entered promiscuous mode [ 330.422831][ T8852] veth1_macvtap: entered promiscuous mode [ 331.037227][ T3533] bridge0: entered promiscuous mode [ 331.064038][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.071212][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.088126][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.095271][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.602727][ T3633] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 331.671649][ T8863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8863 comm=syz.3.1488 [ 331.858683][ T8871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8871 comm=syz.6.1490 [ 332.981163][ T8880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8880 comm=syz.2.1494 [ 333.290362][ T8874] loop6: detected capacity change from 0 to 128 [ 333.325508][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1495'. [ 333.374038][ T8882] netlink: 'syz.5.1495': attribute type 1 has an invalid length. [ 333.388324][ T8874] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.407330][ T8882] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1495'. [ 333.426243][ T8874] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.453158][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1495'. [ 333.496883][ T28] audit: type=1400 audit(1782165353.122:1014): avc: denied { write } for pid=8873 comm="syz.6.1492" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.571299][ T28] audit: type=1400 audit(1782165353.202:1015): avc: denied { write } for pid=8873 comm="syz.6.1492" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.613803][ T28] audit: type=1400 audit(1782165353.202:1016): avc: denied { write } for pid=8873 comm="syz.6.1492" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.663767][ T28] audit: type=1400 audit(1782165353.232:1017): avc: denied { write } for pid=8873 comm="syz.6.1492" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.705555][ T8893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1499'. [ 333.764825][ T6642] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.872398][ T8898] loop3: detected capacity change from 0 to 128 [ 333.943252][ T8901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8901 comm=syz.5.1503 [ 334.130280][ T8898] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.166774][ T8898] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.279828][ T28] audit: type=1400 audit(1782165353.902:1018): avc: denied { write } for pid=8897 comm="syz.3.1501" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.345613][ T28] audit: type=1400 audit(1782165353.932:1019): avc: denied { write } for pid=8897 comm="syz.3.1501" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.411915][ T28] audit: type=1400 audit(1782165353.942:1020): avc: denied { write } for pid=8897 comm="syz.3.1501" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.442062][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.471929][ T28] audit: type=1400 audit(1782165353.942:1021): avc: denied { write } for pid=8897 comm="syz.3.1501" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.858857][ T28] audit: type=1326 audit(1782165354.482:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.3.1507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6377ce59 code=0x7ffc0000 [ 335.031308][ T8916] loop0: detected capacity change from 0 to 1024 [ 335.040801][ T28] audit: type=1326 audit(1782165354.482:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.3.1507" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6377ce59 code=0x7ffc0000 [ 335.078803][ T8916] EXT4-fs: Ignoring removed bh option [ 335.115959][ T8916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.165825][ T8913] netlink: 'syz.3.1507': attribute type 3 has an invalid length. [ 335.180507][ T8916] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=8916 comm=syz.0.1508 [ 335.207214][ T8920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8920 comm=syz.2.1509 [ 335.321057][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.679208][ T8942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1512'. [ 335.722383][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 335.736062][ T8941] loop0: detected capacity change from 0 to 128 [ 335.832988][ T8941] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.895205][ T8941] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.288285][ T3294] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.972432][ T8986] loop6: detected capacity change from 0 to 128 [ 339.093850][ T8986] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 339.123154][ T8986] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.224462][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 339.224479][ T28] audit: type=1400 audit(1782165358.842:1124): avc: denied { write } for pid=8985 comm="syz.6.1529" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.285514][ T28] audit: type=1400 audit(1782165358.912:1125): avc: denied { write } for pid=8985 comm="syz.6.1529" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.327192][ T8995] loop2: detected capacity change from 0 to 512 [ 339.333154][ T28] audit: type=1400 audit(1782165358.912:1126): avc: denied { write } for pid=8985 comm="syz.6.1529" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.369395][ T8995] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 339.378941][ T28] audit: type=1400 audit(1782165358.912:1127): avc: denied { write } for pid=8985 comm="syz.6.1529" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.387529][ T8990] loop3: detected capacity change from 0 to 512 [ 339.430442][ T8995] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1531: bad orphan inode 131083 [ 339.444442][ T6642] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.451661][ T8990] EXT4-fs: Ignoring removed mblk_io_submit option [ 339.461259][ T8995] loop2: lost filesystem error report for type 5 error -117 [ 339.466554][ T8995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.490216][ T8990] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 339.529879][ T8990] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 339.548426][ T28] audit: type=1400 audit(1782165359.172:1128): avc: denied { write } for pid=8992 comm="syz.2.1531" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.623672][ T28] audit: type=1400 audit(1782165359.252:1129): avc: denied { ioctl } for pid=8992 comm="syz.2.1531" path="/280/bus/cpuset.effective_mems" dev="loop2" ino=18 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 339.638011][ T8993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8993 comm=syz.2.1531 [ 339.661848][ T8990] EXT4-fs (loop3): orphan cleanup on readonly fs [ 339.661991][ T8993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8993 comm=syz.2.1531 [ 339.704659][ T8990] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1530: Invalid block bitmap block 0 in block_group 0 [ 339.707729][ T9002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=9002 comm=syz.0.1533 [ 339.734089][ T8990] loop3: lost filesystem error report for type 5 error -117 [ 339.738688][ T8990] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1530: Invalid block bitmap block 0 in block_group 0 [ 339.750580][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 339.767629][ C1] EXT4-fs (loop3): last error at time 1782165359: ext4_read_block_bitmap_nowait:483 [ 339.782631][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.895073][ T8990] loop3: lost filesystem error report for type 5 error -117 [ 339.897474][ T8990] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1530: Invalid block bitmap block 0 in block_group 0 [ 340.036396][ T8990] loop3: lost filesystem error report for type 5 error -117 [ 340.042772][ T8990] Quota error (device loop3): write_blk: dquota write failed [ 340.152762][ T8990] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 340.213124][ T8990] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1530: Failed to acquire dquot type 1 [ 340.228665][ T8990] loop3: lost filesystem error report for type 5 error -28 [ 340.233745][ T8990] EXT4-fs (loop3): 1 orphan inode deleted [ 340.241982][ T3633] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 340.242013][ T3633] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 340.268311][ T3633] loop3: lost filesystem error report for type 5 error -117 [ 340.293448][ T8990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.316941][ T9010] loop5: detected capacity change from 0 to 128 [ 340.674491][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.400633][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.468788][ T9035] loop3: detected capacity change from 0 to 128 [ 341.522070][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 341.591402][ T9041] netlink: 'syz.2.1545': attribute type 1 has an invalid length. [ 341.599166][ T9041] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1545'. [ 341.621109][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 341.683494][ T9035] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.707502][ T9043] loop5: detected capacity change from 0 to 128 [ 341.724211][ T9035] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.732354][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'. [ 341.768549][ T28] audit: type=1400 audit(1782165361.372:1130): avc: denied { write } for pid=9034 comm="syz.3.1543" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.806918][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1541'. [ 341.817831][ T9043] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.835959][ T9051] loop0: detected capacity change from 0 to 128 [ 341.899056][ T9043] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.971611][ T9051] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.047213][ T9051] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.103982][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.176077][ T9056] loop2: detected capacity change from 0 to 512 [ 342.188496][ T9056] EXT4-fs: Ignoring removed mblk_io_submit option [ 342.244126][ T9056] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 342.294595][ T9056] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 342.365774][ T9056] EXT4-fs (loop2): orphan cleanup on readonly fs [ 342.458767][ T9056] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1550: Invalid block bitmap block 0 in block_group 0 [ 342.525830][ T3669] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.558094][ T3294] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.573691][ T9056] loop2: lost filesystem error report for type 5 error -117 [ 342.580116][ T9056] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1550: Invalid block bitmap block 0 in block_group 0 [ 342.587900][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 342.588030][ C0] EXT4-fs (loop2): last error at time 1782165362: ext4_read_block_bitmap_nowait:483 [ 342.719537][ T9056] loop2: lost filesystem error report for type 5 error -117 [ 342.727254][ T9056] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1550: Invalid block bitmap block 0 in block_group 0 [ 342.731016][ T9065] loop5: detected capacity change from 0 to 1024 [ 342.747227][ T9056] loop2: lost filesystem error report for type 5 error -117 [ 342.767028][ T9065] EXT4-fs: Ignoring removed bh option [ 342.782962][ T9056] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1550: Failed to acquire dquot type 1 [ 342.799748][ T9056] loop2: lost filesystem error report for type 5 error -28 [ 342.802755][ T9065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.805439][ T9056] EXT4-fs (loop2): 1 orphan inode deleted [ 342.818351][ T9065] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=9065 comm=syz.5.1552 [ 342.842086][ T310] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 342.891377][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.905819][ T9056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 342.955553][ T9067] loop0: detected capacity change from 0 to 512 [ 343.011332][ T9067] EXT4-fs: Ignoring removed mblk_io_submit option [ 343.030799][ T9067] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 343.047250][ T9067] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 343.057625][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.068123][ T9067] EXT4-fs (loop0): orphan cleanup on readonly fs [ 343.230416][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1557'. [ 343.256320][ T9079] netlink: 'syz.6.1557': attribute type 1 has an invalid length. [ 343.301769][ T9079] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1557'. [ 343.347781][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1557'. [ 343.555049][ T9067] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1553: Invalid block bitmap block 0 in block_group 0 [ 343.610582][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 343.617079][ C1] EXT4-fs (loop0): last error at time 1782165363: ext4_read_block_bitmap_nowait:483 [ 343.699971][ T9067] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1553: Invalid block bitmap block 0 in block_group 0 [ 343.741942][ T9067] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1553: Invalid block bitmap block 0 in block_group 0 [ 343.916942][ T9067] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1553: Failed to acquire dquot type 1 [ 343.960640][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 344.007868][ T9067] EXT4-fs (loop0): 1 orphan inode deleted [ 344.033453][ T310] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 344.196882][ T9067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.267882][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.342440][ T9093] set_capacity_and_notify: 1 callbacks suppressed [ 344.344061][ T9093] loop6: detected capacity change from 0 to 128 [ 344.375021][ T9095] loop5: detected capacity change from 0 to 128 [ 344.391193][ T9099] loop0: detected capacity change from 0 to 1024 [ 344.419119][ T9099] EXT4-fs: Ignoring removed bh option [ 344.427348][ T9093] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.452173][ T9092] loop3: detected capacity change from 0 to 128 [ 344.469438][ T9093] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.540676][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 344.540693][ T28] audit: type=1400 audit(1782165364.142:1146): avc: denied { write } for pid=9091 comm="syz.6.1560" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.587788][ T9099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.595698][ T9108] loop5: detected capacity change from 0 to 256 [ 344.606663][ T28] audit: type=1400 audit(1782165364.162:1147): avc: denied { write } for pid=9091 comm="syz.6.1560" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.613827][ T9099] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=9099 comm=syz.0.1564 [ 344.653719][ T28] audit: type=1400 audit(1782165364.162:1148): avc: denied { write } for pid=9091 comm="syz.6.1560" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.678247][ T28] audit: type=1400 audit(1782165364.232:1149): avc: denied { write } for pid=9091 comm="syz.6.1560" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.835910][ T28] audit: type=1400 audit(1782165364.232:1150): avc: denied { write } for pid=9098 comm="syz.0.1564" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.859190][ T9112] xt_policy: neither incoming nor outgoing policy selected [ 344.875666][ T9092] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.926348][ T9115] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1566'. [ 344.973779][ T9092] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.061533][ T28] audit: type=1400 audit(1782165364.682:1151): avc: denied { write } for pid=9090 comm="syz.3.1561" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.096962][ T6642] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.105791][ T28] audit: type=1400 audit(1782165364.722:1152): avc: denied { write } for pid=9090 comm="syz.3.1561" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.131966][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.141007][ T28] audit: type=1400 audit(1782165364.752:1153): avc: denied { write } for pid=9090 comm="syz.3.1561" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.165666][ T28] audit: type=1400 audit(1782165364.772:1154): avc: denied { write } for pid=9090 comm="syz.3.1561" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.199275][ T9119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1568'. [ 345.229916][ T9119] netlink: 'syz.0.1568': attribute type 1 has an invalid length. [ 345.511671][ T9129] FAULT_INJECTION: forcing a failure. [ 345.511671][ T9129] name failslab, interval 1, probability 0, space 0, times 0 [ 345.622909][ T9129] CPU: 1 UID: 0 PID: 9129 Comm: syz.2.1571 Not tainted syzkaller #0 PREEMPT(lazy) [ 345.622950][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.622964][ T9129] Call Trace: [ 345.622978][ T9129] [ 345.622985][ T9129] __dump_stack+0x1d/0x30 [ 345.623008][ T9129] dump_stack_lvl+0x95/0xd0 [ 345.623104][ T9129] dump_stack+0x15/0x1b [ 345.623120][ T9129] should_fail_ex+0x25e/0x270 [ 345.623149][ T9129] should_failslab+0x8c/0xb0 [ 345.623172][ T9129] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 345.623249][ T9129] ? skb_clone+0x151/0x1f0 [ 345.623270][ T9129] ? skb_clone+0x151/0x1f0 [ 345.623289][ T9129] skb_clone+0x151/0x1f0 [ 345.623308][ T9129] __netlink_deliver_tap+0x2be/0x510 [ 345.623360][ T9129] netlink_unicast+0x654/0x680 [ 345.623386][ T9129] netlink_sendmsg+0x5be/0x6f0 [ 345.623418][ T9129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.623448][ T9129] ____sys_sendmsg+0x532/0x580 [ 345.623579][ T9129] ___sys_sendmsg+0x195/0x1e0 [ 345.623610][ T9129] __x64_sys_sendmsg+0xd4/0x160 [ 345.623631][ T9129] x64_sys_call+0x194c/0x3020 [ 345.623651][ T9129] do_syscall_64+0x136/0x3c0 [ 345.623692][ T9129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.623778][ T9129] RIP: 0033:0x7f919a3fce59 [ 345.623794][ T9129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.623823][ T9129] RSP: 002b:00007f9198e57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.623844][ T9129] RAX: ffffffffffffffda RBX: 00007f919a675fa0 RCX: 00007f919a3fce59 [ 345.623919][ T9129] RDX: 0000000000040080 RSI: 0000200000000040 RDI: 0000000000000003 [ 345.623934][ T9129] RBP: 00007f9198e57090 R08: 0000000000000000 R09: 0000000000000000 [ 345.623949][ T9129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.623961][ T9129] R13: 00007f919a676038 R14: 00007f919a675fa0 R15: 00007ffca21f6618 [ 345.623984][ T9129] [ 345.829431][ T9131] loop5: detected capacity change from 0 to 128 [ 345.849075][ T9131] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.863177][ T9131] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.882992][ T28] audit: type=1400 audit(1782165365.512:1155): avc: denied { write } for pid=9130 comm="syz.5.1572" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.906277][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.034638][ T3669] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.043860][ T9141] loop2: detected capacity change from 0 to 128 [ 346.051825][ T9146] mmap: syz.0.1578 (9146): VmData 24883200 exceed data ulimit 1048576. Update limits or use boot option ignore_rlimit_data. [ 346.121694][ T9134] loop3: detected capacity change from 0 to 512 [ 346.128495][ T9134] EXT4-fs: Ignoring removed mblk_io_submit option [ 346.162208][ T9153] netlink: 'syz.0.1580': attribute type 1 has an invalid length. [ 346.222190][ T9134] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 346.268371][ T9156] loop6: detected capacity change from 0 to 128 [ 346.281921][ T9134] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 346.306914][ T9134] EXT4-fs (loop3): orphan cleanup on readonly fs [ 346.336058][ T9134] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1573: Invalid block bitmap block 0 in block_group 0 [ 346.360272][ T9156] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.374782][ T9134] fserror_report: 6 callbacks suppressed [ 346.374902][ T9134] loop3: lost filesystem error report for type 5 error -117 [ 346.426519][ T9134] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1573: Invalid block bitmap block 0 in block_group 0 [ 346.434167][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 346.434196][ C0] EXT4-fs (loop3): last error at time 1782165366: ext4_read_block_bitmap_nowait:483 [ 346.503568][ T9156] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.726162][ T9134] loop3: lost filesystem error report for type 5 error -117 [ 346.737150][ T9134] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1573: Invalid block bitmap block 0 in block_group 0 [ 346.777325][ T9134] loop3: lost filesystem error report for type 5 error -117 [ 346.788912][ T9134] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1573: Invalid block bitmap block 0 in block_group 0 [ 346.837427][ T9134] loop3: lost filesystem error report for type 5 error -117 [ 346.839072][ T9134] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1573: Failed to acquire dquot type 1 [ 346.859882][ T9134] loop3: lost filesystem error report for type 5 error -28 [ 346.867812][ T9134] EXT4-fs (loop3): 1 orphan inode deleted [ 346.892854][ T5235] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 1 [ 346.909694][ T5235] loop3: lost filesystem error report for type 5 error -117 [ 346.925611][ T9134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.976939][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.200113][ T6642] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.318031][ T3633] Bluetooth: hci0: Frame reassembly failed (-84) [ 347.453803][ T9194] tmpfs: Bad value for 'nr_inodes' [ 347.514309][ T9199] __nla_validate_parse: 5 callbacks suppressed [ 347.514328][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1592'. [ 347.541520][ T9199] netlink: 'syz.6.1592': attribute type 14 has an invalid length. [ 347.565029][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1592'. [ 347.577509][ T9202] netlink: 'syz.6.1592': attribute type 14 has an invalid length. [ 347.625156][ T9204] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=9204 comm=syz.6.1592 [ 347.958914][ T9206] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1594'. [ 347.984143][ T9206] netlink: 'syz.5.1594': attribute type 1 has an invalid length. [ 347.994630][ T9206] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1594'. [ 348.007148][ T9206] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1594'. [ 348.248196][ T9177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.257757][ T9177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.588290][ T310] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.597016][ T310] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.619495][ T310] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.754206][ T310] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.770305][ T310] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.779134][ T310] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.787745][ T310] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.796397][ T310] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.806802][ T310] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.255501][ T9230] loop6: detected capacity change from 0 to 512 [ 349.312104][ T9230] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 349.322538][ T3616] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 349.422189][ T9230] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.1601: bad orphan inode 131083 [ 349.567785][ T9230] loop6: lost filesystem error report for type 5 error -117 [ 349.569725][ T9230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.571683][ T310] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.596590][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 349.596606][ T28] audit: type=1400 audit(1782165369.212:1166): avc: denied { accept } for pid=9228 comm="syz.6.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 349.618794][ T310] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.663603][ T310] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.682114][ T28] audit: type=1400 audit(1782165369.252:1167): avc: denied { write } for pid=9228 comm="syz.6.1601" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.687383][ T9237] sit0: entered promiscuous mode [ 349.717335][ T9235] loop0: detected capacity change from 0 to 512 [ 349.720640][ T9237] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 349.744613][ T9235] vfat: Unknown parameter './file0' [ 349.762450][ T9237] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1603'. [ 349.779469][ T28] audit: type=1400 audit(1782165369.402:1168): avc: denied { write } for pid=9228 comm="syz.6.1601" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.828501][ T28] audit: type=1400 audit(1782165369.402:1169): avc: denied { write } for pid=9228 comm="syz.6.1601" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.016878][ T6642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.093682][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1609'. [ 350.138432][ T9253] netlink: 'syz.2.1609': attribute type 1 has an invalid length. [ 350.150723][ T9253] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1609'. [ 350.193884][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1609'. [ 350.264344][ T9264] FAULT_INJECTION: forcing a failure. [ 350.264344][ T9264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.292432][ T9264] CPU: 0 UID: 0 PID: 9264 Comm: syz.2.1613 Not tainted syzkaller #0 PREEMPT(lazy) [ 350.292464][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.292476][ T9264] Call Trace: [ 350.292483][ T9264] [ 350.292491][ T9264] __dump_stack+0x1d/0x30 [ 350.292549][ T9264] dump_stack_lvl+0x95/0xd0 [ 350.292567][ T9264] dump_stack+0x15/0x1b [ 350.292583][ T9264] should_fail_ex+0x25e/0x270 [ 350.292627][ T9264] should_fail+0xb/0x20 [ 350.292731][ T9264] should_fail_usercopy+0x1a/0x20 [ 350.292771][ T9264] _copy_to_user+0x20/0xa0 [ 350.292803][ T9264] simple_read_from_buffer+0xb5/0x130 [ 350.292825][ T9264] proc_fail_nth_read+0x10e/0x150 [ 350.292919][ T9264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.292942][ T9264] vfs_read+0x18e/0x7c0 [ 350.293011][ T9264] ? __rcu_read_unlock+0x4e/0x70 [ 350.293037][ T9264] ? __fget_files+0x184/0x1c0 [ 350.293063][ T9264] ? mutex_lock+0x57/0x90 [ 350.293143][ T9264] ksys_read+0xdc/0x1a0 [ 350.293162][ T9264] __x64_sys_read+0x40/0x50 [ 350.293182][ T9264] x64_sys_call+0x2886/0x3020 [ 350.293208][ T9264] do_syscall_64+0x136/0x3c0 [ 350.293232][ T9264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.293303][ T9264] RIP: 0033:0x7f919a3bd68e [ 350.293318][ T9264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 350.293336][ T9264] RSP: 002b:00007f9198e56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.293355][ T9264] RAX: ffffffffffffffda RBX: 00007f9198e576c0 RCX: 00007f919a3bd68e [ 350.293370][ T9264] RDX: 000000000000000f RSI: 00007f9198e570a0 RDI: 0000000000000008 [ 350.293382][ T9264] RBP: 00007f9198e57090 R08: 0000000000000000 R09: 0000000000000000 [ 350.293458][ T9264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.293469][ T9264] R13: 00007f919a676038 R14: 00007f919a675fa0 R15: 00007ffca21f6618 [ 350.293487][ T9264] [ 350.988511][ T9269] loop5: detected capacity change from 0 to 4096 [ 351.061064][ T9269] EXT4-fs (loop5): bad geometry: block count 261888 exceeds size of device (512 blocks) [ 351.377607][ T9282] syzkaller0: entered promiscuous mode [ 351.386099][ T9287] loop0: detected capacity change from 0 to 512 [ 351.388259][ T9282] syzkaller0: entered allmulticast mode [ 351.484855][ T9287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.529900][ T9287] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.558651][ T9295] program syz.6.1623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.577861][ T28] audit: type=1400 audit(1782165371.202:1170): avc: denied { write } for pid=9281 comm="syz.0.1618" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.651989][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1624'. [ 351.669812][ T28] audit: type=1400 audit(1782165371.232:1171): avc: denied { write } for pid=9281 comm="syz.0.1618" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.694379][ T9298] netlink: 'syz.6.1624': attribute type 1 has an invalid length. [ 351.731464][ T28] audit: type=1400 audit(1782165371.232:1172): avc: denied { append } for pid=9281 comm="syz.0.1618" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 351.877450][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.976827][ T9303] loop2: detected capacity change from 0 to 128 [ 352.036838][ T9308] loop0: detected capacity change from 0 to 128 [ 352.191409][ T9308] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.213054][ T9308] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.298823][ T28] audit: type=1400 audit(1782165371.892:1173): avc: denied { write } for pid=9307 comm="syz.0.1628" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.320919][ T28] audit: type=1400 audit(1782165371.902:1174): avc: denied { write } for pid=9307 comm="syz.0.1628" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.342662][ T28] audit: type=1400 audit(1782165371.902:1175): avc: denied { write } for pid=9307 comm="syz.0.1628" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.829484][ T9322] loop3: detected capacity change from 0 to 512 [ 352.840785][ T9322] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 352.986461][ T3294] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.237713][ T9327] __nla_validate_parse: 2 callbacks suppressed [ 353.237758][ T9327] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1635'. [ 353.255845][ T9327] netlink: 'syz.6.1635': attribute type 1 has an invalid length. [ 353.264592][ T9327] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1635'. [ 353.281855][ T9327] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1635'. [ 353.298847][ T9322] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1633: bg 0: block 288: padding at end of block bitmap is not set [ 353.314894][ T9322] loop3: lost filesystem error report for type 5 error -117 [ 353.320571][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 353.334440][ C1] EXT4-fs (loop3): initial error at time 1782165372: ext4_validate_block_bitmap:441 [ 353.343858][ C1] EXT4-fs (loop3): last error at time 1782165372: ext4_validate_block_bitmap:441 [ 353.356291][ T9322] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 353.365281][ T9322] loop3: lost filesystem error report for type 5 error -117 [ 353.454669][ T9322] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1633: attempt to clear invalid blocks 1024 len 1 [ 353.567259][ T9322] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 353.567917][ T9322] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1633: invalid indirect mapped block 1819239214 (level 0) [ 353.633584][ T9322] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 353.644704][ T9322] EXT4-fs (loop3): 1 truncate cleaned up [ 353.659882][ T9322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.785566][ T9342] loop2: detected capacity change from 0 to 128 [ 353.858702][ T9331] loop6: detected capacity change from 0 to 8192 [ 353.866603][ T9331] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.908163][ T9346] loop2: detected capacity change from 0 to 512 [ 353.924443][ T9346] EXT4-fs: Ignoring removed bh option [ 353.949805][ T9346] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 353.995819][ T9346] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1642: corrupted in-inode xattr: e_value size too large [ 354.010453][ T9346] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 354.012070][ T9346] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1642: couldn't read orphan inode 15 (err -117) [ 354.021321][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 354.021341][ C1] EXT4-fs (loop2): initial error at time 1782165373: ext4_iget_extra_inode:5180: inode 15 [ 354.021370][ C1] EXT4-fs (loop2): last error at time 1782165373: ext4_iget_extra_inode:5180: inode 15 [ 354.060286][ T9346] loop2: lost filesystem error report for type 5 error -117 [ 354.061058][ T9346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.083360][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.101893][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.122837][ T9358] loop3: detected capacity change from 0 to 1024 [ 354.182174][ T9358] EXT4-fs: Ignoring removed bh option [ 354.246790][ T9358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.253276][ T9361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1645'. [ 354.271972][ T9358] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=9358 comm=syz.3.1646 [ 354.886305][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.907109][ T9376] loop6: detected capacity change from 0 to 128 [ 354.986202][ T9380] random: crng reseeded on system resumption [ 355.322855][ T9382] loop0: detected capacity change from 0 to 128 [ 355.329770][ T9382] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 355.574931][ T9388] loop2: detected capacity change from 0 to 512 [ 355.582387][ T9388] EXT4-fs: Ignoring removed bh option [ 355.611852][ T9388] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 355.621047][ T9382] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 355.694635][ T9388] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1657: corrupted in-inode xattr: e_value size too large [ 355.765355][ T9388] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 355.765559][ T9388] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1657: couldn't read orphan inode 15 (err -117) [ 355.765585][ T9388] loop2: lost filesystem error report for type 5 error -117 [ 355.775015][ T9388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.838655][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.267911][ T9411] loop6: detected capacity change from 0 to 1024 [ 356.339569][ T9411] EXT4-fs: Ignoring removed bh option [ 356.498952][ T9411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.543565][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 356.543581][ T28] audit: type=1400 audit(1782165376.172:1178): avc: denied { write } for pid=9410 comm="syz.6.1663" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 356.572651][ T9411] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=9411 comm=syz.6.1663 [ 356.672523][ T6642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.730729][ T9421] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1664'. [ 356.912310][ T9428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=9428 comm=syz.0.1668 [ 357.891991][ T28] audit: type=1400 audit(1782165377.472:1179): avc: denied { bind } for pid=9433 comm="syz.6.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 358.000317][ T28] audit: type=1400 audit(1782165377.472:1180): avc: denied { connect } for pid=9433 comm="syz.6.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 358.207583][ T28] audit: type=1400 audit(1782165377.472:1181): avc: denied { write } for pid=9433 comm="syz.6.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 358.230881][ T9438] random: crng reseeded on system resumption [ 358.401750][ T9440] loop6: detected capacity change from 0 to 512 [ 358.434870][ T9440] EXT4-fs: Ignoring removed bh option [ 358.466733][ T9440] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 358.529692][ T9440] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.1671: corrupted in-inode xattr: e_value size too large [ 358.572105][ T9440] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 358.572342][ T9440] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1671: couldn't read orphan inode 15 (err -117) [ 358.581760][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 358.581780][ C0] EXT4-fs (loop6): initial error at time 1782165378: ext4_iget_extra_inode:5180: inode 15 [ 358.581807][ C0] EXT4-fs (loop6): last error at time 1782165378: ext4_iget_extra_inode:5180: inode 15 [ 358.736042][ T9440] loop6: lost filesystem error report for type 5 error -117 [ 358.773977][ T9440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.878796][ T9444] loop5: detected capacity change from 0 to 128 [ 358.895555][ T6642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.967721][ T9444] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.006297][ T9444] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.103968][ T9453] loop6: detected capacity change from 0 to 128 [ 359.123961][ T28] audit: type=1400 audit(1782165378.752:1182): avc: denied { write } for pid=9443 comm="syz.5.1672" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.159227][ T9453] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.183049][ T28] audit: type=1400 audit(1782165378.802:1183): avc: denied { write } for pid=9443 comm="syz.5.1672" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.202666][ T9453] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.220345][ T28] audit: type=1400 audit(1782165378.812:1184): avc: denied { write } for pid=9443 comm="syz.5.1672" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.243074][ T28] audit: type=1400 audit(1782165378.862:1185): avc: denied { write } for pid=9443 comm="syz.5.1672" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.304834][ T28] audit: type=1400 audit(1782165378.932:1186): avc: denied { write } for pid=9451 comm="syz.6.1673" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.355627][ T9465] loop2: detected capacity change from 0 to 1024 [ 359.384039][ T28] audit: type=1400 audit(1782165379.002:1187): avc: denied { write } for pid=9451 comm="syz.6.1673" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.389267][ T9465] EXT4-fs: Ignoring removed orlov option [ 359.450845][ T3669] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.512352][ T9470] FAULT_INJECTION: forcing a failure. [ 359.512352][ T9470] name failslab, interval 1, probability 0, space 0, times 0 [ 359.539625][ T9470] CPU: 0 UID: 0 PID: 9470 Comm: syz.5.1680 Not tainted syzkaller #0 PREEMPT(lazy) [ 359.539733][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.539744][ T9470] Call Trace: [ 359.539750][ T9470] [ 359.539758][ T9470] __dump_stack+0x1d/0x30 [ 359.539784][ T9470] dump_stack_lvl+0x95/0xd0 [ 359.539959][ T9470] dump_stack+0x15/0x1b [ 359.539989][ T9470] should_fail_ex+0x25e/0x270 [ 359.540021][ T9470] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 359.540045][ T9470] should_failslab+0x8c/0xb0 [ 359.540137][ T9470] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 359.540160][ T9470] ? shmem_alloc_inode+0x34/0x50 [ 359.540224][ T9470] ? shmem_alloc_inode+0x34/0x50 [ 359.540253][ T9470] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 359.540281][ T9470] shmem_alloc_inode+0x34/0x50 [ 359.540342][ T9470] alloc_inode+0x40/0x170 [ 359.540361][ T9470] new_inode+0x1d/0xe0 [ 359.540381][ T9470] shmem_get_inode+0x24e/0x7a0 [ 359.540409][ T9470] __shmem_file_setup+0x14f/0x260 [ 359.540435][ T9470] shmem_file_setup+0x3b/0x50 [ 359.540522][ T9470] memfd_alloc_file+0x4e/0x300 [ 359.540549][ T9470] __se_sys_memfd_create+0x2e1/0x3b0 [ 359.540576][ T9470] __x64_sys_memfd_create+0x31/0x40 [ 359.540683][ T9470] x64_sys_call+0x1f22/0x3020 [ 359.540708][ T9470] do_syscall_64+0x136/0x3c0 [ 359.540763][ T9470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.540786][ T9470] RIP: 0033:0x7f07bbd6ce59 [ 359.540816][ T9470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.540836][ T9470] RSP: 002b:00007f07ba7c6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 359.540915][ T9470] RAX: ffffffffffffffda RBX: 0000000000000461 RCX: 00007f07bbd6ce59 [ 359.540931][ T9470] RDX: 00007f07ba7c6ee0 RSI: 0000000000000000 RDI: 00007f07bbe0304f [ 359.540947][ T9470] RBP: 0000200000001840 R08: 00000000ffffffff R09: 0000000000000000 [ 359.540960][ T9470] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 359.541013][ T9470] R13: 00007f07ba7c6ee0 R14: 00007f07ba7c6ea0 R15: 00002000000000c0 [ 359.541035][ T9470] [ 359.752140][ T9465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.923151][ T6642] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.980403][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.002560][ T9470] loop5: detected capacity change from 0 to 512 [ 360.088329][ T9481] loop6: detected capacity change from 0 to 1024 [ 360.113763][ T9470] EXT4-fs: Mount option(s) incompatible with ext3 [ 360.238466][ T9486] loop5: detected capacity change from 0 to 1024 [ 360.238752][ T9486] ext4: Bad value for 'journal_dev' [ 360.302573][ T9483] loop2: detected capacity change from 0 to 128 [ 360.391320][ T9483] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.422140][ T9483] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.436716][ T9494] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 360.543348][ T9497] loop6: detected capacity change from 0 to 512 [ 360.584516][ T9497] EXT4-fs warning (device loop6): ext4_xattr_inode_get:546: inode #11: comm syz.6.1689: ea_inode file size=4294967295 entry size=4 [ 360.601034][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 360.612695][ T9497] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.1689: corrupted inode contents [ 360.636287][ T9497] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 360.637915][ T9497] EXT4-fs (loop6): Remounting filesystem read-only [ 360.647173][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 360.647192][ C0] EXT4-fs (loop6): initial error at time 1782165380: ext4_do_update_inode:5742: inode 15 [ 360.647230][ C0] EXT4-fs (loop6): last error at time 1782165380: ext4_do_update_inode:5742: inode 15 [ 360.652411][ T9507] loop0: detected capacity change from 0 to 512 [ 360.686449][ T9497] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -30) [ 360.698080][ T9497] EXT4-fs (loop6): 1 orphan inode deleted [ 360.717097][ T9497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.732834][ T9507] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 360.811966][ T9507] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1693: bad orphan inode 131083 [ 360.850681][ T9507] loop0: lost filesystem error report for type 5 error -117 [ 360.909265][ T9510] loop2: detected capacity change from 0 to 8192 [ 361.049207][ T3383] IPVS: starting estimator thread 0... [ 361.104764][ T9510] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 361.141538][ T9516] IPVS: using max 2352 ests per chain, 117600 per kthread [ 361.156035][ T9510] bond1 (unregistering): Released all slaves [ 361.298397][ T9514] ================================================================== [ 361.306522][ T9514] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 361.313829][ T9514] [ 361.316151][ T9514] write to 0xffffc90003b37e20 of 8 bytes by task 9513 on cpu 0: [ 361.323779][ T9514] shmem_fallocate+0x6ea/0x8f0 [ 361.328557][ T9514] vfs_fallocate+0x3ac/0x400 [ 361.333151][ T9514] __x64_sys_fallocate+0x7a/0xd0 [ 361.338091][ T9514] x64_sys_call+0x298e/0x3020 [ 361.342773][ T9514] do_syscall_64+0x136/0x3c0 [ 361.347363][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.353260][ T9514] [ 361.355573][ T9514] read to 0xffffc90003b37e20 of 8 bytes by task 9514 on cpu 1: [ 361.363113][ T9514] shmem_writeout+0x2b6/0x8f0 [ 361.367798][ T9514] shrink_folio_list+0x1ebb/0x2780 [ 361.372923][ T9514] evict_folios+0x20e2/0x2d80 [ 361.377613][ T9514] try_to_shrink_lruvec+0x7c5/0xb10 [ 361.382834][ T9514] shrink_lruvec+0x25e/0x1b60 [ 361.387519][ T9514] shrink_node+0x69d/0x20f0 [ 361.392040][ T9514] do_try_to_free_pages+0x408/0xc90 [ 361.397246][ T9514] try_to_free_mem_cgroup_pages+0x201/0x420 [ 361.403149][ T9514] try_charge_memcg+0x375/0xa00 [ 361.408022][ T9514] __memcg_kmem_charge_page+0x199/0x3a0 [ 361.413575][ T9514] __alloc_frozen_pages_noprof+0x18a/0x350 [ 361.419390][ T9514] alloc_pages_mpol+0xa9/0x1d0 [ 361.424166][ T9514] alloc_pages_noprof+0x8f/0x140 [ 361.429116][ T9514] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 361.435014][ T9514] __kvmalloc_node_noprof+0x3a0/0x590 [ 361.440393][ T9514] futex_hash_allocate+0x192/0x920 [ 361.445511][ T9514] futex_hash_prctl+0xd8/0xf0 [ 361.450191][ T9514] __se_sys_prctl+0x4f4/0x13b0 [ 361.454962][ T9514] __x64_sys_prctl+0x67/0x80 [ 361.459561][ T9514] x64_sys_call+0x2533/0x3020 [ 361.464256][ T9514] do_syscall_64+0x136/0x3c0 [ 361.468856][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.474755][ T9514] [ 361.477071][ T9514] value changed: 0x0000000000001ad7 -> 0x0000000000001ad8 [ 361.484167][ T9514] [ 361.486486][ T9514] Reported by Kernel Concurrency Sanitizer on: [ 361.492641][ T9514] CPU: 1 UID: 0 PID: 9514 Comm: syz.5.1695 Not tainted syzkaller #0 PREEMPT(lazy) [ 361.501927][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.511982][ T9514] ==================================================================