last executing test programs: 6m3.884039284s ago: executing program 2 (id=11): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$packet(0x2d, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x11c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x13}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x9}, {0xa, 0xa}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x8}, 0x28) fchown(0xffffffffffffffff, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) 5m58.968390255s ago: executing program 2 (id=32): pipe2(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0xb9, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x4, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x8, 0x3, 0xca0, 0xfffa}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x7, 0x202, 0x2, 0x1000}, 0x10) sendto$inet6(r1, &(0x7f0000000280)='0', 0x1, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbeb, @loopback, 0x800000c0}, 0x1c) (fail_nth: 2) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x1c, 0x6, 0x8, 0x5b, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7810, 0x80, 0xc, 0x10001}}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000803}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x2000c000}, 0x20000040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20000000) 5m58.365001638s ago: executing program 2 (id=43): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000000c0), 0x9}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80, 0x0, 0xfffffffffffffffe}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'sh\x00', 0x0, 0xa7e, 0x70}, 0x2c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@nouid32}]}, 0xff, 0x47b, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x141442, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0xff, 0x3, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x7, 0x1}, 0x105902, 0x10003, 0x23f5, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x100000, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x110, r1, 0x0) sendto$inet6(r3, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x800, 0x0, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e22}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x37, "0000010000000000335b021f55001d00a2b1e824d1e5afb5042f258cda6066c96a540145a93784a47879d8f7f1f77181484eb224052147"}}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 5m58.102560956s ago: executing program 2 (id=45): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0xa00008, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r0 = gettid() syz_clone(0x80, &(0x7f0000000100)="ae690248cca4845ecc96b9d304caf974695e4b44601c071f815238c80eea15", 0x1f, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="edb242aae52cb8de9350b471fada2cba19f088b5b16b4a042e6e4c2607b4268f68d6204d6097a9e0b218b4b02e39f717012b6f6d1f6f2f5990e7194bfecc14adbd3fe4ce4ab78d3a98ed1998eb7160fa633e791aff9138ef20937320125f7f687b89b2167a1e10f747351a8d0adf6b3120067e7d1ab35894079cfd5f74e1c0964de6fa82de14c2dc812061ca595992bb1610eea675ec1e04606c451970eb6c2ff3ec767739eb85ac425c69fa4e6c9f459034ba002e014d") timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r3, 0x1) listen(r3, 0x28) poll(&(0x7f0000000040)=[{r3, 0x20a}], 0x1, 0x404) shutdown(r3, 0x0) vmsplice(r3, &(0x7f0000000500), 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x176) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x9}, 0x2475f6a37e2d0c88, 0x10004, 0x6, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {0x1, 0x3}, [], {0x4, 0x4}}, 0x24, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) 5m57.256125524s ago: executing program 2 (id=55): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00800, &(0x7f0000000100)={[{@nobarrier}]}, 0x11, 0xbac, &(0x7f0000000c00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffcb, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) 5m56.719942152s ago: executing program 32 (id=60): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1e64, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5m55.725992791s ago: executing program 33 (id=63): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x2d, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0xfffffffa, 0x7, 0x84000000}}, 0x44) 5m51.837386131s ago: executing program 2 (id=73): unshare(0x40400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{&(0x7f0000000000)=@ax25={{0x3, @rose}, [@default, @netrom, @bcast, @default, @null, @default, @netrom, @netrom]}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001340)=""/169, 0xa9}, {&(0x7f0000001400)=""/131, 0x83}, {&(0x7f00000014c0)=""/109, 0x6d}], 0x4, &(0x7f0000001580)=""/61, 0x3d}, 0x8}], 0x1, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}, {&(0x7f00000002c0)=""/155, 0x9b}], 0x2}, 0x7fff}], 0x1, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 5m51.798137654s ago: executing program 34 (id=73): unshare(0x40400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{&(0x7f0000000000)=@ax25={{0x3, @rose}, [@default, @netrom, @bcast, @default, @null, @default, @netrom, @netrom]}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001340)=""/169, 0xa9}, {&(0x7f0000001400)=""/131, 0x83}, {&(0x7f00000014c0)=""/109, 0x6d}], 0x4, &(0x7f0000001580)=""/61, 0x3d}, 0x8}], 0x1, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}, {&(0x7f00000002c0)=""/155, 0x9b}], 0x2}, 0x7fff}], 0x1, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 4m5.928780307s ago: executing program 5 (id=747): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) unshare(0xa020480) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000240)=0x47ee917f) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000600000000000400050000000000100007000000000020"], 0x24, 0x1) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000001880)=""/4096, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 4m5.686587344s ago: executing program 5 (id=748): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, 0x1c) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x15, 0x9, 0x4c, 0x0, 0x3, 0x480, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0xf, 0x8}, 0x10001, 0x6, 0x33, 0x9, 0x3, 0x6, 0x60ae, 0x0, 0x3, 0x0, 0xe4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x448}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000f40)="d8000000140081044e81f782db26cb7a231d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ead0d690c8032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e45eb27f6f075c0100000000000000cb090000001fb791643a5f835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ae3cd4032e8edb12d1d2eb0c0ed0bff00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000180)={'vlan1\x00', 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xb27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) 4m5.623491039s ago: executing program 5 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r0}, 0xc) 4m5.517152746s ago: executing program 5 (id=751): unshare(0x28000600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00g\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xde11}, 0x94) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000f2b000/0x4000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x10040) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000004680)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)="5d71c2958cb672db365b0c07e1034916aa2e74358eab4306ad1fc02120ca6518173796ebdba40d", 0x27}, {&(0x7f00000005c0)="11cbae2f93f0391b2fd71cfe34a892cc4691294cfa51134d168ae0e6bf8ddb17b606f0e60806a33e8ff0b794f311c9736987fc6ca3b051339824df617be648eba50b2aee84871e9b8ff056f9923b13af782bd9f4e0068fb0b6ff6650f0790695293580acb061fc38d3756051779e1989497086d271e51065b5decaa49cd51b3bb9dd76a5994fb22cb90c993eb3c90d4d9718c01b80f421e2499866d4eb610b8c4fe1e3cc57d48af76b7e9ec52b6b8058", 0xb0}], 0x2, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}], 0x40, 0x20000000}}, {{&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004100)=[{&(0x7f0000000d80)="1a41f691fd39752d311b2493e93d508951d967535ea07064a156b03a2ffe16958ab2a5648c7c83cbbf02030293e21dd6b2171acfd5732235f6030dfb125ded6f9d17f04e85ab80e7a7b3396d1c235ee0f49647592efbdce82d5470a633c1838c48447678cc924c9a418b4c1e7cc4637af60e0e6b474b01429747fedabd04786812e621fcc443d01df4ab4124ba8b78cb50417ca1ed4e1e26c5fd72f85a6dbcd2dc413545d753caddaa7f9bff12353f5118f38bb2b3d9ebc95641e59d07987ac8e17f0ad4f3e9ab528f782a0bd80644a088c45c465ab37ae471e96d07f2e5d0177aac63ff34698e9220da35935ac976465882d5009d", 0xf5}, {&(0x7f0000000e80)="e87ce66fb78c767dffe532d05cd4f942dfadc0924bd854e5d39f44f011cfb60737ff7823b3b332752efb99f13b32752a93b3f42d71ce63de4651e2f12cb9ba163524121981fe01fbd1dfb790b8f31d513c42a8d5e82c0c53efebb9fdc2bb33367315d471c89a88dd81ea3f7a2f1e682910ebfca3a30357db02ba52346fdc5635a344c86d187142a00534882ccd953f910b9299b390c5abf01295bde1758de86f7af9bc638019ad71", 0xa8}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="2c13d8259fd2782e4881364a", 0xc}, {&(0x7f0000003d00)="13ea512641012356158a1f76cabc56d0c672c86add258f221971284bb0a3f001db34f73c14fca2a252363e5b678562a965e22482072d6738ce25588c2e3a5df3c4389b9e09b94f2cdc90f2046ffbc3d5928953c0194a44b0188653aec11c56cf3cecb6b4045bc0a5fda508db49a7dcf21dacdae23b4db3294d74d57b08392261c22a418063c2bb25cfb231d08caeabf4f0dac643313c070481ad8c603bb5a87a666dff89d5f61ef46add3e6bded2bea26f99b3b81b85fdc9239d0c20c09079e8e04dd61521d67057bdb48e", 0xcb}, {&(0x7f0000003e00)="de9a4e599527c8d276293044223a40c0ab6f37cdcb63ef1d20c412393e1bb054941db103158ce6748dadeeb3e551797b51008dc8bd735efdaf8179b5ca40316a64a622d923a4044c9cf617ef25f90aaf9590009dfba8a14353b31432280838ac7a898283aa779d9ba55d6f99e0256282dd5aff0535b4dcdcd39ae3952b52b17264b73be852064c9dcfae81fb58c44912a7dd30f337fbedd64480e8b2f2b4a2698755b937fd30e5912ea892cca2107e1af70208e7781ecd104d82b1409a8ada25c15f160e1bfa36d5e092c7b0512232f80b1f", 0xd2}, {&(0x7f0000003f00)="976c957c3d70519dc8feb8c693b7397692ab461c28d18d40e1752ef5f593d6047afe56f3cf688aff8b29e780c7f95a96f552aa1f935e6ad070035d8f1bc234b233aa227450a423c9b22c515be7657d266f05ff107658894cc118bfced2b370e3ac1865583a8cbe0efcc04174", 0x6c}, {&(0x7f0000003f80)="db0aa7d3e09f5e6e18e5d809aa306e7fbde03fc3930d548d02d1645192d46b53dd229a7717417dde018954fea3575f603105c33e8e585986e728a20b4be986", 0x3f}, {&(0x7f0000003fc0)="53ae5502e264cc75638b3d78a28c0f93076ff4e438a07222809fe26d50f85e14217cf85df211fda358926a6389b174122d883481ded0270a95e1c45ce42c6a7f4b35491ca709ccc9c537198597b2ac25b38601bc22bab4c11df6", 0x5a}, {&(0x7f0000004040)="3d3185e1b14594c4c3ff5fe45587037f6eed7bed6bec19cdda698a88512012a16db93fc8b28040443e0608c44b4842f13bdaf9b80ed0ef468f3a5d1eaf517ff58878e370b127f5fd31840568d4ccc1556507fb6523f47b5497f42b93d7613e6b6628fe31162f7bd899dfce8d392955629f54fce1182b9e53ed4a93b7b6a3f98a04a785b3b6ecc45276c743910fc0c9a237b7cd3fbb3c297bbbf9b2dee91b555b74ed177950ec7d0c", 0xa8}], 0xa, &(0x7f00000043c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r3, r7]}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r1]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r6, r2, r6, r4, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, r7, r2, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r6]}}, @rights={{0x34, 0x1, 0x1, [r4, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, r4, 0xffffffffffffffff, r4]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x130, 0x20000040}}, {{&(0x7f0000004500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004640)=[{&(0x7f0000004580)="b2a45fdb40af71f9277a29966e2cfd862c01b7a4b5aa10e636b604256cfb279eaf2e3300d5e6dfac60ec119d394123a0fae604582928dd6bbc8cf371868708b6b977ba9c23dd00dd5abb1e0212efecd2a9881ca8f0e36c4617f8b5935bc75364eccf7efcc280e493f605ab875520385833d93110f6f34890e589a53773577dd5350b9eedbc9cc586c89deaca7e5b7121956a7277f245751f8bf59d7317ddd0db6e1a24809861bcda4d30fa7c", 0xac}], 0x1, 0x0, 0x0, 0x80}}], 0x3, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) 4m5.129686953s ago: executing program 5 (id=756): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000003580)=@raw={'raw\x00', 0x41, 0x3, 0x9e0, 0x8a8, 0x19, 0x0, 0x8a8, 0x0, 0x980, 0x1f0, 0x1f0, 0x980, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0xffffffff, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x850, 0x870, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x3ff}, {0x3, 0x3}, {0x3, 0x1}, {0x995, 0x2}, {0x5, 0x1}, {0x8896}, {0x6, 0x3}, {0x8, 0x1}, {0x101, 0x2}, {0x6}, {0x5, 0x1}], [{0xff, 0x5}, {0x2, 0x881d}, {0x0, 0xb}, {0x3, 0x7f}, {0x7ff, 0x8}, {0x6, 0x6}, {0x9, 0x7}, {0x9, 0x4}, {0x5, 0x2}, {0x1d1e, 0x9}, {0x0, 0x7}], 0x5, 0x1}, {[{0x1}, {0x7fffffff, 0x2}, {0x4, 0x3}, {}, {0x383, 0x1}, {0xebea, 0x2}, {0x3}, {0x800, 0x2}, {0x7, 0x2}, {0x3, 0x3}, {0xfffffff7}], [{0x5, 0x9}, {0x1, 0x9}, {0x7, 0x4}, {0x3, 0x5}, {0x3, 0x8}, {0x6, 0x1000}, {0x9, 0x6f528900}, {0x6, 0x3}, {0x10, 0x3}, {0xfffffff8, 0x3}, {0x400, 0x80}], 0x1, 0x5}, {[{0x7, 0x2}, {0x9}, {0x5}, {0xffffffff, 0x1}, {0xd, 0x3}, {0x313, 0x1}, {0xfed}, {0x5, 0x3}, {0x80, 0x2}, {0x7fff, 0x2}, {0x1, 0x3}], [{0x3, 0x6a}, {0x400, 0xfff}, {0x100, 0x5d68}, {0x8dc, 0x5}, {0x800, 0x1}, {0x6, 0x3ff}, {0xa2, 0x200}, {0x9, 0x2}, {0x3, 0x6}, {0x2, 0x4}, {0x60, 0x78395991}], 0x0, 0x2}, {[{0x7, 0x3}, {0xffff, 0x2}, {0x4, 0x2}, {0x2, 0x2}, {0xffffff81, 0x2}, {0xfff}, {0x1, 0x2}, {0xddc4, 0x3}, {0x7fffffff}, {0x6, 0x1}, {0x6, 0x2}], [{0xd6f, 0x9}, {0x2, 0x5}, {0x100, 0xd12}, {0x0, 0x2}, {0x800, 0x1}, {0xfffffffe, 0x3}, {0xffffff9d, 0x10001}, {0x3ff, 0x9}, {0x6, 0xf2}, {0x8, 0x8}, {0xfff}], 0xb, 0xb}, {[{0x7, 0x3}, {0x1, 0x3}, {0xc756, 0x1}, {0x2, 0x1294a4f2d4f6b7e4}, {0x0, 0x1}, {0xb}, {0x537, 0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x6}, {0x4, 0x2}], [{0xffffffff, 0x9}, {0x4, 0x2}, {0x8, 0x9}, {0x1, 0x10001}, {0x2, 0x6}, {0x9}, {0x3}, {0x9, 0x1}, {0x6}, {0x5, 0x9}, {0x6, 0x1}], 0x5, 0x7}, {[{0x8, 0x7}, {0x400}, {0x5, 0x3}, {0x6}, {0x8, 0x3}, {0x7, 0x3}, {0x3ff}, {0x4, 0x1}, {0x9, 0x3}, {0x86c, 0x1}, {0x1, 0x1}], [{0xa, 0x17}, {0x9, 0x3}, {0xbc72, 0x5}, {0xe, 0x6}, {0x3ff, 0x401}, {0x10001, 0x10}, {0x0, 0x5}, {0x4, 0x6}, {0x7, 0x40}, {0x2}, {0x7, 0x8001}], 0xb, 0xa}, {[{0x8, 0x7}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x3}, {0x651, 0x3}, {0x3}, {0xbac, 0x1}, {0xffffffff, 0x3}], [{0xfffffff9, 0xdb}, {0x9b, 0x5}, {0x600000, 0x2}, {0x267, 0x3}, {0x6, 0xffffff0c}, {0x9, 0x6}, {0x3, 0x9}, {0x9, 0x8}, {0x8, 0x40}, {0x4, 0x6}, {0x4, 0x7}], 0x2, 0x1}, {[{0x2, 0x3}, {0x2, 0x2}, {0x6, 0x3}, {0x7f, 0x3}, {0x2, 0x2}, {0x1, 0x3}, {0x7, 0x3}, {0x3ff}, {0x763, 0x1}, {0xe1e5, 0x1}, {0xba, 0x3}], [{0xc, 0x8}, {0x0, 0x6}, {0x7fffffff, 0x8}, {0x8001, 0x7}, {0x39bd, 0x3}, {0xfffffffe, 0x5}, {0x7d53, 0x5}, {0x6, 0x3}, {0x1, 0x695e}, {0x4, 0x3}, {0xd1}], 0xa, 0x9}, {[{}, {0xac2}, {0x8001, 0x3}, {0x3, 0x2}, {0xe, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x7b}, {0x9, 0x1}, {0x1, 0x1}, {0x245, 0x3}], [{0x9, 0x7f}, {0x0, 0x6}, {0x2, 0x68}, {0x30000000, 0x2}, {0x1c0, 0xe5}, {0x9, 0x1}, {0x3, 0xfffffff7}, {0x0, 0x400}, {0x86f, 0x3b}, {0x80, 0x5}, {0x7, 0x40}], 0x4, 0x1}, {[{0x7ff}, {0x2, 0x3}, {0x9, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0xe9, 0x3}, {0x0, 0x3}, {0x3}], [{0x40, 0x1}, {0x3, 0x9}, {0x5ee500, 0x9}, {0x100, 0x8001}, {0x3}, {0xffff, 0x3}, {0x5, 0x3}, {0x68b, 0x3ff}, {0x8, 0x7fff}, {0x6, 0x8001}, {0xffffff7f, 0x9}], 0x2, 0x5}, {[{0x80000001, 0x1}, {0x3, 0x1}, {0x10, 0x1}, {0x3, 0x1}, {0x8, 0x3}, {0x1, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0xfffffffd, 0x2}, {0x4, 0x1}, {0xd8e, 0x3}], [{0x40000000, 0x7}, {0x5, 0x5e48670}, {0x7, 0x7f}, {0x6, 0x8}, {0xfffffff8, 0x3}, {0x0, 0x8}, {0x7e7a, 0xd09}, {0x7727, 0x8}, {0x3, 0xa}, {0x1, 0x8}, {0x6, 0x5}], 0x9}], 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0xff84}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x21, 0xffffffff, 0x3, '\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x8000) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) stat(0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x0, 0x0, 0x400000000, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x0) 4m4.858227172s ago: executing program 5 (id=761): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xe, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0x1, 0x6, 0x5, 0x10, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x1e, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r6, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000390009fffe0f0f000000000003"], 0x78}}, 0x0) syz_emit_ethernet(0xa3, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x6d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "00e9ff06ffff"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) 4m4.828690024s ago: executing program 35 (id=761): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xe, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0x1, 0x6, 0x5, 0x10, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x1e, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r6, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000390009fffe0f0f000000000003"], 0x78}}, 0x0) syz_emit_ethernet(0xa3, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x6d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "00e9ff06ffff"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) 3m4.392840422s ago: executing program 7 (id=1041): r0 = syz_open_dev$vcsu(&(0x7f0000000480), 0x8afe, 0x80) read$hidraw(r0, &(0x7f0000000680)=""/8, 0x8) 3m4.220539213s ago: executing program 7 (id=1042): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc095, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sync() sync() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x91b47000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x76, 0x101301) 3m3.276461309s ago: executing program 7 (id=1053): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 3m2.893713406s ago: executing program 7 (id=1060): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000007c0)={[{@nombcache}, {@lazytime}, {@block_validity}, {@block_validity}, {@nojournal_checksum}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x45c, &(0x7f0000000b80)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000003c0)='./file0\x00') socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2, 0x0, 0xfffffffffffffdfc}, 0x4008800) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000280)="afc356bf9b09d4372dada82178d12dd14c1ac862", 0xfffffcfa}], 0x1, 0x2) 3m1.757491215s ago: executing program 7 (id=1065): r0 = socket$phonet(0x23, 0x2, 0x1) close_range(0xffffffffffffffff, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m1.501940503s ago: executing program 6 (id=1070): prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000, &(0x7f0000006680)) rt_sigsuspend(0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) (async) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x2c004010) (async) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff, 0x1, 0xff, 0x8, 0x0, 0x81d}, 0x20) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)={0x2c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010101}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10050}, 0x4) close(r2) (async) socket$inet(0x2, 0x3, 0x100) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r4, 0x3) (async) epoll_pwait2(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x8001]}, 0x8) (async) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x1010808, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 3m0.925839753s ago: executing program 7 (id=1074): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = getpgid(0xffffffffffffffff) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r4 = socket$inet_sctp(0x2, 0x4, 0x84) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x88a2}, @void, @eth={@remote, @random="ebbdee61a855", @void, {@canfd={0xd, {{0x0, 0x0, 0x1}, 0x38, 0x2, 0x0, 0x0, "40bc6ef5a3764afe5c3c5891a9c3db4a2efb146d175ec8d5409d722f58ffc005485fa26097da4d303978518f28609d4a11dc3f68f5012df35e6fd4ba20aaf125"}}}}}, 0x5a) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000040)={0x9, 0x7, 0x7f}) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r7, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x48}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x4, {0x8000, 0x3, 0x6, 0x3}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20010080) 3m0.925252862s ago: executing program 36 (id=1074): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = getpgid(0xffffffffffffffff) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r4 = socket$inet_sctp(0x2, 0x4, 0x84) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x88a2}, @void, @eth={@remote, @random="ebbdee61a855", @void, {@canfd={0xd, {{0x0, 0x0, 0x1}, 0x38, 0x2, 0x0, 0x0, "40bc6ef5a3764afe5c3c5891a9c3db4a2efb146d175ec8d5409d722f58ffc005485fa26097da4d303978518f28609d4a11dc3f68f5012df35e6fd4ba20aaf125"}}}}}, 0x5a) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000040)={0x9, 0x7, 0x7f}) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r7, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x48}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x4, {0x8000, 0x3, 0x6, 0x3}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20010080) 3m0.66788974s ago: executing program 6 (id=1078): read$hidraw(0xffffffffffffffff, &(0x7f0000000680)=""/8, 0x8) 3m0.589744376s ago: executing program 6 (id=1079): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80009, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x8001ff, 0x0, 0x5, 0x8, 0x23, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x4e22, @broadcast}, @ib={0x1b, 0x0, 0x0, {"0000040000000000000000cbd3060001"}, 0x2, 0x2, 0x4}}}, 0x118) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x4, 0x2b46, 0x53, 0x1, 0x2, 0x9, 0x9}, &(0x7f0000000280)=0x9c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000100180000000000", @ANYRESHEX, @ANYBLOB="18"], 0x50) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000004) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newchain={0x24, 0x1e, 0x1, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x4, 0x1}, {0xd, 0x1}}}, 0x24}}, 0x44004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0) sendmmsg$inet6(r10, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8090) 3m0.493767692s ago: executing program 6 (id=1080): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x6bf1c2d5adba8c32}) creat(&(0x7f0000000140)='./file0\x00', 0x54) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xfffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=P']) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)={0x20, r2, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 3m0.422956137s ago: executing program 6 (id=1081): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) (async) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) (async) 3m0.330038474s ago: executing program 6 (id=1082): perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x220, 0x548d2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x800000000, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) 2m44.700307749s ago: executing program 37 (id=1082): perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x220, 0x548d2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x800000000, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) 1m19.880879141s ago: executing program 3 (id=1911): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) open(0x0, 0x0, 0x112) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0xb81}, 0x14}}, 0x4004010) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) 1m12.669002792s ago: executing program 3 (id=1962): r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000200)=""/100) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000300)={'system_u:object_r:tun_tap_device_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x9}, 0x52) semop(r0, &(0x7f0000001000)=[{}, {0x2, 0xfffa, 0x800}], 0x2) semop(r0, &(0x7f0000000380)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESDEC=r0, @ANYRES64, @ANYBLOB="00c3d8bf248540538326534a5ce88f4f5fc51fee2ac83c47421487692fa1821b110cb71d74e7c6306037d54f3d9088a6ad8c6e7fd60cd0321286c18c914b847e8f7aea7f9846a94f8a398002d5211d59358d91061803c1ca2bbace7f1c863237f11c32b9596f96b8216d74fe605288c0b1475bcfb35a8ba28e43e1badfa359c344c8f3d3ea08574b4fd6a1d1abee9202b6f5a042bc6cafd0004fa18d207f5180bf47129396089ba9695d38cc66c380b19f09f2ce8f2b661ad0bd28", @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES16=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xc2240, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x6, 0x3ff, 0x72, @loopback, @mcast2, 0x8, 0x40, 0x8000, 0x7}}) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000100100000c00000000000000000000001800000000000000100100000c"], 0x110}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000126bd7000fe98bed9ada8efa9790001004e230000082d5372f8cc121b75ed1331d5ef000600e0000002080006007f000001080006000a010101050003000c00000008000800ac1414bb06090a004e240000050003003a0000000a0002000000000000000000000000000108000b009d4a3e12298fda0199c6fa5986", @ANYRES32=r5, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.461744316s ago: executing program 3 (id=1968): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f00000000c0)) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r3, 0x20, &(0x7f0000000800)={&(0x7f00000006c0)=""/168, 0xa8, 0x0, &(0x7f0000000780)=""/87, 0x57}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ddff0080000000000100000085000000530000001801000020784d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000005000000850000009b00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)=0x801) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x5) close(r6) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8040) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r8], 0x4c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m10.959074871s ago: executing program 3 (id=1971): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0xd, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x8) keyctl$revoke(0x3, r0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x0, 0x100) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f00000001c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@resuid}]}, 0x1, 0x625, &(0x7f0000000800)="$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") r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x0, 0x1, 0x3ed5, 0x5}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/113) rt_tgsigqueueinfo(r2, r2, 0x2c, &(0x7f0000000080)={0x19, 0x6c, 0x8}) r6 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) bind$tipc(r3, &(0x7f0000000400)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000084) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000440)=0x0) syz_open_procfs(r9, &(0x7f0000000480)='net/unix\x00') syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) readv(r1, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) socket$packet(0x11, 0x0, 0x300) 1m7.957869579s ago: executing program 3 (id=1995): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x1050014, &(0x7f0000000800)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c7569643d337aa8060e604f", @ANYRESHEX=0x0, @ANYBLOB=',dots,fmask=00000000000000000000002,sys_immutable,nodots,nfs,dots,nodots,nodots,fmask=00000000000000000177777,check=relaxed,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000002c0)=0x9, 0x4) syz_read_part_table(0x5d9, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4000005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x81800) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x283}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0xe2e65498fc03141c}]}}}]}, 0x44}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x39, 0x0, &(0x7f0000000140)="259a53f271a76d2608fff74588a80a3888ca2f1514d3774754997c2667eb71d6c46856a0b5421bb0526f3a9f19b822578fb527dd0a29816966", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [], [0x0, 0xffffffff, 0x0, 0xff000000], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socket$packet(0x11, 0x3, 0x300) 1m7.071382902s ago: executing program 3 (id=1997): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") mount(0x0, 0x0, 0x0, 0x1214040, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x9}, 0x0, 0x0, 0xc312, 0x0, 0x20002, 0x200, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000180)={0x7, 'pim6reg1\x00', {0x1}, 0x7000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000140)="f79b76b1a967f9031fa4bbcbe2e63dd34000000000000000", 0x18}, {&(0x7f00000029c0)="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", 0xd32}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0xfff8]) 1m7.017774086s ago: executing program 38 (id=1997): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") mount(0x0, 0x0, 0x0, 0x1214040, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x9}, 0x0, 0x0, 0xc312, 0x0, 0x20002, 0x200, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000180)={0x7, 'pim6reg1\x00', {0x1}, 0x7000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000140)="f79b76b1a967f9031fa4bbcbe2e63dd34000000000000000", 0x18}, {&(0x7f00000029c0)="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", 0xd32}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0xfff8]) 6.187539897s ago: executing program 1 (id=2463): perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a505000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000ffffffe04e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x264, 0x0, 0xfffffffffffffde1, 0xd, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x57, 0x8, 0x0, 0x0}}, 0x10) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x64) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x7, 0x5, 0x101, 0xff, 0x3}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 6.14203002s ago: executing program 1 (id=2473): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000800)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0x4e23, @remote}}}, 0x108) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x8404, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private0, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8006, 0x8}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) 6.073757856s ago: executing program 8 (id=2464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x40004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@stripe={'stripe', 0x3d, 0x4}}, {@mb_optimize_scan}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000001080)="$eJzs3MtvG8UfAPDvrp3219cvoSqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrClqEyhFVQuKIOCLxF3CCCwJOSFzhjipVqJcWTkZr7zaOayex48QN/nykdWd2x5r5dnfsmZ2sAxhYo9lLErEzIn6PiOF6dmmB0fo/t29emv775qXpJKrVt/5KauVu3bw0XRQt3rejyJQj0k+T2N+i3vkLF89MVSqz5/P8+MLZ98fnL1x87vTZqVOzp2bPTR4/fvTIxAvHJp/vSZxZXLf2fTR3YO9r71x7Y/rEtXd//jYp4m+KY2Vf7l5FodHlDj5Zra6+uk1gV0M6KfexIXSkVO+mMVTr/8NRisWTNxyvftLXxgHrqlqtVh9of/hyFfgPS6LfLQD6o/iiz+a/xbZBQ497wo2X6hOgLO7b+VY/Uo40LzPUNL/tpdGIOHH5n6+yLTq+DwEA0Lnvs/HPs63Gf2k03hf6f76GMhIR90XE7og4FhF7IuL+iFrZByPioQ7rb14kuXv8k17vKrBVysZ/L+ZrW0vHf8XoL0ZKeW5XLf6h5OTpyuzh/P/kUAxtzfITy9Txwyu/fd7uWOP4L9uy+ouxYN6O6+WtS98zM7UwtZaYG924ErGv3Cr+5M5KQBIReyNiX5d1nH76mwPtjq0c/zJ6sM5U/Triqfr5vxxN8ReS5dcnx/8XldnD48VVcbdffr36Zrv61xR/D9y4Eun24vqPaBX/SNK4XjvfeR1X//is7Zym2+t/S/L2kn0fTi0snJ+I2JK8Xm/04v7S+cmmcpOL5bPr/9DB1v2/WOTN4t8fEdlF/HBEPBIRj+ZtfyzSeDwiDi4T/08vP/Fe9/Gvryz+mZaff+3O/2JiSzTvaZ0onfnxuyWVjnQSf3b+j9ZSh/I9q/n8W027uruaAQAAYPNJI2JnJOnYnXSajo3V/4Z/T2xPK3PzC8+cnPvg3Ez9GYGRGEqLO13DDfdDJ/JpfZGfbMofye8bf1HaVsuPTc9VZvodPAy4HW36f+bPUr9bB6y77tbR0p63A9h4nteEwaX/w+DS/2Fwtej/2/rRDmDjtfr+/7gP7QA2XrnhNf9NMGBAmP/D4NL/YXDp/zCQ5rfFyg/JS6wpcbHN7yds7kSk90QzJNYp0e9PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN74NwAA//9f2OR1") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_dest={0x17, 0x114, 0x2, {0x10000, 0x3ff}}], 0x18, 0x2004c0d5}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) socket$netlink(0x10, 0x3, 0x400000000000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf89, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0x8300, 0x10001, 0xfffffffd, 0x3, 0xabce, 0x85, 0x101, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket(0x2a, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x8, r5) setsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000000)="a551d1d3c47034fb9fb90feff357e635b01fffa69a027d9fe91703c73653a55fd44cc1178570", 0x26) unshare(0x60000600) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) 6.073483716s ago: executing program 1 (id=2465): syz_emit_ethernet(0xfc, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaa390180c2000000080046e400ee00680000052190787f00000100000000940400008622ed0000030011da8813e97c6a2ed436b2419eb0803b070bc3f835aa78245c24d60183118a22cac80feb14dda9f8e0675d1c860b000000003505b38d0632f3f3694a81ffe133ac58f7e922f9960a72b86baea44bd13df4f71be6c24ab9b678586df988aaadd522405587cbb35e9577c86c940481297a28e87a038e1a733eacd68d724090031ae9b3788b6a316f2d3267d6df0725f46c999a16f15f7cb56119a655256d047811c0322db8e59126fbd80e0de271497111fa8032160480b2194ffc29cc1fe3282300"/251], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@bsdgroups}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000001e00)="$eJzs3MtvVNUfAPDvnT5oefzKD/EBglbRSHy0tDxk4UajiQuNJrrAuKptIUihhtZECFF0gTEuDIl745LEv8CVboy6MnGre0NiDBvQ1ZhzH9AOM9CWaac4n09y4Zx77nDO9557Zs49d4YAutZw+iOL2BwRv0XEUJFdfMBw8de1K+cm/75ybjKLev2Nv7L8uKtXzk2W/8T1120qdtTrZX5Dk3ovvB0xMTMzfbrMj86ffG907szZZ46fnDg2fWz61Pjhwwf27+4/NH6wLXGmuK7u/HB2146X37r46uSRi+/89E1q7+ayvIqjnYaLs9vU4+2urMO2LEhnvR1sCMuS+i11V18+/oeiJwavlw3FS590tHHAqqrX6/Vmn8/JpbIc+K/KjHHoUtVnfbr/rba1m3103p/PFzdAKe5r5VaU9EatPKav4f62nQYi4sj5f75KW6zSOgQAwELfpfnP083mf7W4b8Fx/yufoWyNiP9HxLaIuCcitkfEvRH5sfdHxAPLrL/xCcnN85/a5RUFtkRp/vdc+Wxr8fyvmv3F1p4ytyWPvy87enxmel95TvZG34aUH1v0ksW+f/HXLxr3fV4usw8vmP+lLdVfzQXLdlzubVigm5qYn2hL8Cn+jyN29jaLP4vqMU4WETsiYucK6zj+5KVdrcpuH/8ttOE5U/3riCeK/j8fDfFXspbPJ8eePTR+cHQgZqb3jVZXxc1+/uXC663qv6P42yD1/8am138Rf7pHzAYi5s6cPZE/r51bfh0Xfv90MmtRtn2F139/9mae7i/3fTAxP396LKI/eyVlBxftH7/x2ipfHZ/i37un+fjfVtye5WfiwYhIF/HuiHgoIh4u++6RiHg0IvbcIv4fX3js3VZlrfu/1ap8e6X4p27R/+ktL6Vu9P/yEz0nfvi2Vf31JfX/gTy1t9wz1X/797+lNvBOzh0AAADcLWr5d+Cz2sj1dK02MlJ8h397bKzNzM7NP3V09v1TU8V35bdGX61a6RpasB46Vq4NV/nxhvz+ct34y57BPD8yOTsz1engocttysd8T55eOP6TP3o62zZgDfi9FnQv4x+6l/EP3cv4h+5l/EOX6m+++6O1bgfQEcv//B9YlXYAa8/8H7qX8Q/dy/iHrtTyt/G1O/rJ/92a6F0fzWiaGFwfzagSUVsXzWhf4rXPiiGxXtpTJXqX/J9ZrDCxoWlRp9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2uPfAAAA//9sF+YW") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x305100, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x42, 0x0, 0x8}, 0x28) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000000)=0x405, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80280, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x286400, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0x40000034}}, {@nobh}, {@prjquota}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dax_always}]}, 0x3, 0x439, &(0x7f0000002380)="$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") 5.72596059s ago: executing program 1 (id=2467): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) open(0x0, 0x0, 0x112) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0xb81}, 0x14}}, 0x4004010) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) 4.876753821s ago: executing program 8 (id=2469): syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x100, 0x0, 0x0, {[@window={0x3, 0x3, 0x2f}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0, 0x300}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r2, 0x0, 0x0, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close(r3) 4.319865541s ago: executing program 9 (id=2472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x80) 4.002287593s ago: executing program 8 (id=2477): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$packet(0x2d, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0xe4, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) 3.461843252s ago: executing program 9 (id=2479): r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x60, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x5}, 0x8080, 0x4, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c231, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x10204, 0x2, 0xfb3d, 0x7, 0x9, 0x6, 0x2, 0x0, 0x4, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800e00010069703665727370616e00000034000280060002003000000014000600fc02000000000000000000000000000014000700fc01000000000000000000000000000008000a00", @ANYRES8], 0x70}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x484, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x20, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x3f9, &(0x7f0000000900)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r8, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xf000000}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}, 0x1, 0x620b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x6a855000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 3.049602952s ago: executing program 4 (id=2482): perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x264, 0x0, 0xfffffffffffffde1, 0xd, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x57, 0x8, 0x0, 0x0}}, 0x10) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x64) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x7, 0x5, 0x101, 0xff, 0x3}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.963517668s ago: executing program 4 (id=2483): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) syz_open_procfs(0x0, 0x0) 2.459348514s ago: executing program 9 (id=2484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, 0x0, &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/245, 0xf5}], 0x1}, 0x2}], 0x1, 0x2061, 0x0) 2.394030159s ago: executing program 9 (id=2486): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd53, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x15, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc81", 0x0, 0x6, 0x0, 0x31, 0x0, &(0x7f0000000500)="030abaa0f644194b129612cdbcf46a40b75d871a154cd745cd9fa85a49605e25c4f15fe475bf77cc6fa0404bff28569412", 0x0}, 0x50) 2.297739406s ago: executing program 9 (id=2488): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40840) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x2, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000002605b1445bd61d0c0f5f4b2ff4e9bc4dcccb9520e2fae4ef22aab155cbe472648aaa4832a15ce7bbb7d1946a264ab0b23b73c04635a6a7742f82cf9e425d2b9563b6503e60a06ec1eebca0d2c6583a3044f4ea54852a82050970da7344601a2a706b1e8c786aa4921b59208d4fe5f3f74549", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251a00000018000180140002006e657464657673"], 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x2, 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='-&)(-.,\x00', 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @sco, @qipcrtr={0x2a, 0xffffffff, 0x7ffe}, @qipcrtr, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='team_slave_0\x00', 0x8, 0x2, 0x8001}) 2.23920873s ago: executing program 1 (id=2491): syz_emit_ethernet(0xfc, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaa390180c2000000080046e400ee00680000052190787f00000100000000940400008622ed0000030011da8813e97c6a2ed436b2419eb0803b070bc3f835aa78245c24d60183118a22cac80feb14dda9f8e0675d1c860b000000003505b38d0632f3f3694a81ffe133ac58f7e922f9960a72b86baea44bd13df4f71be6c24ab9b678586df988aaadd522405587cbb35e9577c86c940481297a28e87a038e1a733eacd68d724090031ae9b3788b6a316f2d3267d6df0725f46c999a16f15f7cb56119a655256d047811c0322db8e59126fbd80e0de271497111fa8032160480b2194ffc29cc1fe3282300"/251], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@bsdgroups}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000001e00)="$eJzs3MtvVNUfAPDvnT5oefzKD/EBglbRSHy0tDxk4UajiQuNJrrAuKptIUihhtZECFF0gTEuDIl745LEv8CVboy6MnGre0NiDBvQ1ZhzH9AOM9CWaac4n09y4Zx77nDO9557Zs49d4YAutZw+iOL2BwRv0XEUJFdfMBw8de1K+cm/75ybjKLev2Nv7L8uKtXzk2W/8T1120qdtTrZX5Dk3ovvB0xMTMzfbrMj86ffG907szZZ46fnDg2fWz61Pjhwwf27+4/NH6wLXGmuK7u/HB2146X37r46uSRi+/89E1q7+ayvIqjnYaLs9vU4+2urMO2LEhnvR1sCMuS+i11V18+/oeiJwavlw3FS590tHHAqqrX6/Vmn8/JpbIc+K/KjHHoUtVnfbr/rba1m3103p/PFzdAKe5r5VaU9EatPKav4f62nQYi4sj5f75KW6zSOgQAwELfpfnP083mf7W4b8Fx/yufoWyNiP9HxLaIuCcitkfEvRH5sfdHxAPLrL/xCcnN85/a5RUFtkRp/vdc+Wxr8fyvmv3F1p4ytyWPvy87enxmel95TvZG34aUH1v0ksW+f/HXLxr3fV4usw8vmP+lLdVfzQXLdlzubVigm5qYn2hL8Cn+jyN29jaLP4vqMU4WETsiYucK6zj+5KVdrcpuH/8ttOE5U/3riCeK/j8fDfFXspbPJ8eePTR+cHQgZqb3jVZXxc1+/uXC663qv6P42yD1/8am138Rf7pHzAYi5s6cPZE/r51bfh0Xfv90MmtRtn2F139/9mae7i/3fTAxP396LKI/eyVlBxftH7/x2ipfHZ/i37un+fjfVtye5WfiwYhIF/HuiHgoIh4u++6RiHg0IvbcIv4fX3js3VZlrfu/1ap8e6X4p27R/+ktL6Vu9P/yEz0nfvi2Vf31JfX/gTy1t9wz1X/797+lNvBOzh0AAADcLWr5d+Cz2sj1dK02MlJ8h397bKzNzM7NP3V09v1TU8V35bdGX61a6RpasB46Vq4NV/nxhvz+ct34y57BPD8yOTsz1engocttysd8T55eOP6TP3o62zZgDfi9FnQv4x+6l/EP3cv4h+5l/EOX6m+++6O1bgfQEcv//B9YlXYAa8/8H7qX8Q/dy/iHrtTyt/G1O/rJ/92a6F0fzWiaGFwfzagSUVsXzWhf4rXPiiGxXtpTJXqX/J9ZrDCxoWlRp9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2uPfAAAA//9sF+YW") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x42, 0x0, 0x8}, 0x28) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x405, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80280, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x286400, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0x40000034}}, {@nobh}, {@prjquota}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dax_always}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") 2.174067415s ago: executing program 8 (id=2493): perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000ffffffe04e00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x264, 0x0, 0xfffffffffffffde1, 0xd, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x57, 0x8, 0x0, 0x0}}, 0x10) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x64) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x7, 0x5, 0x101, 0xff, 0x3}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.121526868s ago: executing program 8 (id=2494): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlinkprop={0x4c, 0x6c, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'nicvf0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004005}, 0x40000) 2.120172058s ago: executing program 4 (id=2495): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x7f, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000019440)=ANY=[@ANYBLOB="05c38c886b60aaaaaaaaa8bb86ddd8f4e8ed021003a82b60974b6012000800103afffe880000e351041c6bae234eaf665f1c000000000000000000d047dc7b000001ff02000000000000000000000000000186009078d718375c16b2ea8d8d85e7c10400"], 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)}], 0x1}, 0x4000010) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000000440)=""/102390, &(0x7f0000000040)=0x18ff6) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) socket$nl_route(0x10, 0x3, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) fcntl$setlease(r7, 0x400, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0x8000}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@remote}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f0000000400)=0xe8) 2.061819933s ago: executing program 8 (id=2496): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$packet(0x2d, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0xe4, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x13}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x9}, {0xa, 0xa}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x8}, 0x28) fchown(0xffffffffffffffff, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) 2.061551213s ago: executing program 0 (id=2497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), 0x0}, 0x20) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/245, 0xf5}], 0x1}, 0x2}], 0x1, 0x2061, 0x0) 1.857966907s ago: executing program 0 (id=2498): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000580)={0x1, 0x1, 0x1, 0x4012, 0x2, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18027a0000000000000000003b00000095e0000000090000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x31, r2, 0x8, &(0x7f00000004c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x4, 0x3ff}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.852073718s ago: executing program 0 (id=2499): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001480)=""/4102, 0x1006}], 0x1}, 0xacc}], 0x1, 0xc7dca51c736f71e5, 0x0) creat(0x0, 0x0) dup3(r1, r0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8913, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd53, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x15, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc81", 0x0, 0x6, 0x0, 0x31, 0x0, &(0x7f0000000500)="030abaa0f644194b129612cdbcf46a40b75d871a154cd745cd9fa85a49605e25c4f15fe475bf77cc6fa0404bff28569412", 0x0}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = epoll_create1(0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r9 = epoll_create(0x10) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r10, 0x8a7, 0x77ae, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)={0x10000004}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000000)={0x20000009}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.548644729s ago: executing program 0 (id=2500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x80) 1.421935159s ago: executing program 1 (id=2501): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) open(0x0, 0x0, 0x112) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0xb81}, 0x14}}, 0x4004010) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) 1.421349689s ago: executing program 4 (id=2502): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/685], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000002140)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "896eda", 0x44, 0x2f, 0x0, @remote, @empty, {[], {{}, {}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0x80, 0x3, 0x0, 0x1, 0x5, 0x2}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x3, 0x1, 0x1, 0x1, 0x7, 0xcb}, 0x2, {0xdab, 0x8, 0x3, 0x16, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 1.356967423s ago: executing program 0 (id=2503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf71c}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000010d6b365a5cc2c4d3b025841000000100000000300000001000000000000"], 0x0, 0x2b, 0x0, 0x5}, 0x28) syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x1, 0x1045, &(0x7f0000001140)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x80aaf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000600)={{0xc, @local, 0x4e20, 0x2, 'lblcr\x00', 0x3e, 0x80000, 0xb}, {@broadcast, 0x4e20, 0x10000, 0x6, 0x7, 0x6}}, 0x44) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="01010000", @ANYRES16=0x0, @ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[], 0x70c}, 0x1, 0x0, 0x0, 0x44}, 0x8880) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r7) r8 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r7) keyctl$chown(0x4, r8, 0xee01, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYRESOCT=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, r3, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0066000e0600000034e803e18b7123eb50af618f5bc1d31d54d4ceb28d6424ff8678e53a9d9aa294c1635d651470", @ANYRES16=r9, @ANYBLOB="010000000000000000000c000000180003801400038010000180050002000000000004000300200001801400020076657468305f746f5f626f6e6400000008000300030000"], 0x4c}}, 0x0) 1.340458264s ago: executing program 4 (id=2504): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0, 0x300}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r2, 0x0, 0x0, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close(r3) 112.325522ms ago: executing program 9 (id=2506): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80980, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r2, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) 823.45µs ago: executing program 4 (id=2507): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) syz_open_procfs(0x0, 0x0) 0s ago: executing program 0 (id=2508): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlinkprop={0x4c, 0x6c, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'nicvf0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004005}, 0x40000) kernel console output (not intermixed with test programs): 332.253092][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.496967][ T3495] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 332.535486][ T3495] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 332.685605][T11103] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1978'. [ 332.721774][ T28] audit: type=1400 audit(2000000108.200:24049): avc: denied { read } for pid=11104 comm="syz.0.1979" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 332.777972][T11111] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1980'. [ 332.817725][ T28] audit: type=1400 audit(2000000108.200:24050): avc: denied { open } for pid=11104 comm="syz.0.1979" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 332.821925][T11087] loop3: detected capacity change from 0 to 1024 [ 332.880881][T11117] loop1: detected capacity change from 0 to 512 [ 332.896406][ T28] audit: type=1400 audit(2000000108.350:24051): avc: denied { bind } for pid=11116 comm="syz.1.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 332.915123][T11118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.977485][T11087] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 333.006236][T11121] netlink: 'syz.8.1984': attribute type 1 has an invalid length. [ 333.008258][T11087] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 333.040527][T11117] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 333.040527][T11117] program syz.1.1983 not setting count and/or reply_len properly [ 333.056036][T11087] EXT4-fs error (device loop3): ext4_get_journal_inode:5888: inode #32: comm syz.3.1971: iget: special inode unallocated [ 333.058301][ T28] audit: type=1400 audit(2000000108.510:24052): avc: denied { write } for pid=11116 comm="syz.1.1983" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 333.132917][T11087] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 333.134789][T11087] EXT4-fs (loop3): Remounting filesystem read-only [ 333.144941][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 333.145041][ C1] EXT4-fs (loop3): initial error at time 2000000108: ext4_get_journal_inode:5888: inode 32 [ 333.145311][ C1] EXT4-fs (loop3): last error at time 2000000108: ext4_get_journal_inode:5888: inode 32 [ 333.160856][T11125] loop0: detected capacity change from 0 to 128 [ 333.283882][T11121] loop8: detected capacity change from 0 to 128 [ 333.291391][T11087] EXT4-fs (loop3): no journal found [ 333.297479][T11087] EXT4-fs (loop3): can't get journal size [ 333.347624][T11121] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.401239][T11121] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.412081][T11087] EXT4-fs (loop3): filesystem is read-only [ 333.651421][T11126] bio_check_eod: 17 callbacks suppressed [ 333.651440][T11126] syz.1.1983: attempt to access beyond end of device [ 333.651440][T11126] loop1: rw=34817, sector=352, nr_sectors = 966 limit=512 [ 333.697885][T11087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 333.732863][T11121] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #2: comm syz.8.1984: No space for directory leaf checksum. Please run e2fsck -D. [ 333.881308][T11121] EXT4-fs error (device loop8): htree_dirblock_to_tree:1051: inode #2: comm syz.8.1984: Directory block failed checksum [ 333.894983][ T3945] kworker/u8:9: attempt to access beyond end of device [ 333.894983][ T3945] loop1: rw=1, sector=1320, nr_sectors = 4176 limit=512 [ 333.999040][ T3945] kworker/u8:9: attempt to access beyond end of device [ 333.999040][ T3945] loop1: rw=1, sector=5496, nr_sectors = 2520 limit=512 [ 334.025652][ T3945] kworker/u8:9: attempt to access beyond end of device [ 334.025652][ T3945] loop1: rw=1, sector=8016, nr_sectors = 2048 limit=512 [ 334.072632][ T3945] kworker/u8:9: attempt to access beyond end of device [ 334.072632][ T3945] loop1: rw=1, sector=10064, nr_sectors = 3872 limit=512 [ 334.153779][ T3945] kworker/u8:9: attempt to access beyond end of device [ 334.153779][ T3945] loop1: rw=1, sector=13936, nr_sectors = 2048 limit=512 [ 334.197306][ T3945] kworker/u8:9: attempt to access beyond end of device [ 334.197306][ T3945] loop1: rw=1, sector=15984, nr_sectors = 480 limit=512 [ 334.223585][ T6537] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.279039][ T3422] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 334.287172][ T3422] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 334.334830][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1991'. [ 334.443854][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1992'. [ 334.528291][T11157] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1994'. [ 335.339926][ T9984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.409045][T11166] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 335.463011][T11166] loop8: detected capacity change from 0 to 512 [ 335.493762][ T9984] syz_tun (unregistering): left promiscuous mode [ 335.517511][T11166] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.624160][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.756983][ T28] audit: type=1400 audit(2000000111.230:24053): avc: denied { mounton } for pid=11170 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 335.875079][ T316] bridge_slave_1: left allmulticast mode [ 335.899509][ T28] audit: type=1400 audit(2000000111.290:24054): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 335.928657][ T316] bridge_slave_1: left promiscuous mode [ 335.948775][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.987248][ T316] bridge_slave_0: left allmulticast mode [ 336.017092][ T316] bridge_slave_0: left promiscuous mode [ 336.022872][ T28] audit: type=1400 audit(2000000111.320:24055): avc: denied { search } for pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.048749][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.097614][ T316] ip6gretap0 (unregistering): left promiscuous mode [ 336.127231][ T28] audit: type=1400 audit(2000000111.320:24056): avc: denied { search } for pid=3038 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.204897][ T28] audit: type=1400 audit(2000000111.320:24057): avc: denied { search } for pid=3038 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.259146][T11184] netlink: 'syz.1.2000': attribute type 1 has an invalid length. [ 336.278170][ T28] audit: type=1400 audit(2000000111.320:24058): avc: denied { read } for pid=3038 comm="dhcpcd" name="n47" dev="tmpfs" ino=14506 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 336.366189][ T316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.388935][ T316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.411413][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2003'. [ 336.421004][ T316] bond0 (unregistering): Released all slaves [ 336.429931][ T316] bond1 (unregistering): Released all slaves [ 336.503964][ T316] hsr_slave_0: left promiscuous mode [ 336.514809][ T316] hsr_slave_1: left promiscuous mode [ 336.529298][ T316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.550990][ T316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.561223][ T316] batman_adv: batadv0: Interface deactivated: dummy0 [ 336.567964][ T316] batman_adv: batadv0: Removing interface: dummy0 [ 336.630478][ T316] team0 (unregistering): Port device team_slave_1 removed [ 336.655116][ T316] team0 (unregistering): Port device team_slave_0 removed [ 336.665033][ T3495] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 336.677510][ T3495] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.782970][T11184] loop1: detected capacity change from 0 to 128 [ 336.825896][T11184] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 336.841411][T11170] lo speed is unknown, defaulting to 1000 [ 336.889329][T11184] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.966359][T11184] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.2000: No space for directory leaf checksum. Please run e2fsck -D. [ 337.005644][T11184] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.2000: Directory block failed checksum [ 337.026150][T11170] chnl_net:caif_netlink_parms(): no params data found [ 337.126602][T11170] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.133993][T11170] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.142131][T11170] bridge_slave_0: entered allmulticast mode [ 337.149504][T11170] bridge_slave_0: entered promiscuous mode [ 337.165905][T11170] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.188893][T11170] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.208682][T11170] bridge_slave_1: entered allmulticast mode [ 337.223076][T11170] bridge_slave_1: entered promiscuous mode [ 337.268958][T11170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.292332][T11170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.332085][T11261] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 337.355902][T11170] team0: Port device team_slave_0 added [ 337.375668][T11261] loop8: detected capacity change from 0 to 512 [ 337.389979][T11170] team0: Port device team_slave_1 added [ 337.399606][T11261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.445809][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.449613][T11170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.468228][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.478967][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.505506][T11170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.539443][T11270] loop8: detected capacity change from 0 to 512 [ 337.567923][T11170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.575408][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.603688][T11170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.640394][T11270] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.2010: inode has both inline data and extents flags [ 337.708711][T11270] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 337.709045][T11270] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2010: couldn't read orphan inode 15 (err -117) [ 337.718601][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 337.718634][ C1] EXT4-fs (loop8): initial error at time 2000000113: ext4_orphan_get:1397: inode 15 [ 337.718660][ C1] EXT4-fs (loop8): last error at time 2000000113: ext4_orphan_get:1397: inode 15 [ 337.755293][T11170] hsr_slave_0: entered promiscuous mode [ 337.802178][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2014'. [ 337.845801][T11270] loop8: lost filesystem error report for type 5 error -117 [ 337.847925][T11170] hsr_slave_1: entered promiscuous mode [ 337.865625][T11170] debugfs: 'hsr0' already exists in 'hsr' [ 337.871936][T11170] Cannot create hsr debugfs directory [ 337.883598][T11270] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.504123][T11170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.520952][T11170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 338.541798][T11170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.569059][T11170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 338.693783][T11170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.714480][T11170] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.722589][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.730444][ T23] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 338.774608][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.781819][ T7072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.791781][ T23] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 338.835933][ T3945] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.843243][ T3945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.955917][T11170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.057931][T11351] netlink: 'syz.0.2019': attribute type 1 has an invalid length. [ 339.242775][T11170] veth0_vlan: entered promiscuous mode [ 339.260380][T11170] veth1_vlan: entered promiscuous mode [ 339.292822][T11170] veth0_macvtap: entered promiscuous mode [ 339.312392][T11170] veth1_macvtap: entered promiscuous mode [ 339.336480][T11170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.358466][T11170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.377241][T11351] loop0: detected capacity change from 0 to 128 [ 339.388525][ T316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.402463][T11351] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 339.417509][ T316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.453703][T11351] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.467001][ T1679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.476896][ T1679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.491545][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 339.491574][ T28] audit: type=1400 audit(2000000114.970:24069): avc: denied { mounton } for pid=11170 comm="syz-executor" path="/root/syzkaller.yUd9eg/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 339.491602][ T28] audit: type=1400 audit(2000000114.970:24070): avc: denied { mount } for pid=11170 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 339.494560][ T28] audit: type=1400 audit(2000000114.970:24071): avc: denied { mount } for pid=11170 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 339.494592][ T28] audit: type=1400 audit(2000000114.970:24072): avc: denied { mounton } for pid=11170 comm="syz-executor" path="/root/syzkaller.yUd9eg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 339.494682][ T28] audit: type=1400 audit(2000000114.970:24073): avc: denied { mounton } for pid=11170 comm="syz-executor" path="/root/syzkaller.yUd9eg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=38726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 339.509361][ T28] audit: type=1400 audit(2000000114.990:24074): avc: denied { mounton } for pid=11170 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 339.509738][ T28] audit: type=1400 audit(2000000114.990:24075): avc: denied { mount } for pid=11170 comm="syz-executor" name="/" dev="gadgetfs" ino=4705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 339.541332][T11351] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.2019: No space for directory leaf checksum. Please run e2fsck -D. [ 339.541362][T11351] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.2019: Directory block failed checksum [ 339.707208][T11373] loop9: detected capacity change from 0 to 512 [ 339.735469][T11373] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.760008][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.824560][T11383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1999'. [ 339.824785][T11383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1999'. [ 340.312413][ T8249] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.440163][T11405] loop1: detected capacity change from 0 to 512 [ 340.585195][ T28] audit: type=1400 audit(2000000116.060:24076): avc: denied { read } for pid=11413 comm="syz.8.2029" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 340.640020][T11405] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2025: inode has both inline data and extents flags [ 340.825806][ T3408] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 340.909357][ T3408] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 340.939707][T11405] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 340.950541][T11405] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2025: couldn't read orphan inode 15 (err -117) [ 340.959889][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 340.959924][ C0] EXT4-fs (loop1): initial error at time 2000000116: ext4_orphan_get:1397: inode 15 [ 340.959951][ C0] EXT4-fs (loop1): last error at time 2000000116: ext4_orphan_get:1397: inode 15 [ 341.243113][T11435] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 341.334383][T11439] netlink: 'syz.0.2033': attribute type 1 has an invalid length. [ 341.380306][T11437] loop4: detected capacity change from 0 to 512 [ 341.519763][T11437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.639627][ T28] audit: type=1400 audit(2000000116.060:24077): avc: denied { open } for pid=11413 comm="syz.8.2029" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 341.756417][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.858222][T11456] fido_id[11456]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 341.887645][T11405] loop1: lost filesystem error report for type 5 error -117 [ 341.937363][T11405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.321014][T11474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 342.328468][T11474] IPv6: NLM_F_CREATE should be set when creating new route [ 342.366682][T11439] loop0: detected capacity change from 0 to 128 [ 342.386740][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.419809][T11439] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.468841][T11439] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.530717][T11439] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.2033: No space for directory leaf checksum. Please run e2fsck -D. [ 342.614678][T11504] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 342.630496][T11439] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.2033: Directory block failed checksum [ 342.691339][T11508] loop4: detected capacity change from 0 to 512 [ 342.758852][T11508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.890853][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.985432][ T8249] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.095769][T11533] loop0: detected capacity change from 0 to 136 [ 343.120044][T11533] rock: directory entry would overflow storage [ 343.126549][T11533] rock: sig=0x4f50, size=4, remaining=3 [ 343.146775][T11533] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 343.165989][T11540] loop1: detected capacity change from 0 to 512 [ 343.839956][T11554] loop8: detected capacity change from 0 to 2048 [ 344.089811][T11558] loop9: detected capacity change from 0 to 512 [ 344.234284][T11558] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.360321][T11540] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2055: inode has both inline data and extents flags [ 344.394920][T11564] netlink: 'syz.0.2061': attribute type 1 has an invalid length. [ 344.405130][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.426603][T11554] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.509696][T11540] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.509987][T11540] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2055: couldn't read orphan inode 15 (err -117) [ 344.519265][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 344.519289][ C0] EXT4-fs (loop1): initial error at time 2000000119: ext4_orphan_get:1397: inode 15 [ 344.519324][ C0] EXT4-fs (loop1): last error at time 2000000119: ext4_orphan_get:1397: inode 15 [ 344.608492][ T28] audit: type=1400 audit(2000000120.070:24078): avc: denied { read } for pid=11553 comm="syz.8.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.676396][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.805132][T11540] loop1: lost filesystem error report for type 5 error -117 [ 344.805759][T11540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.044597][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.215733][T11601] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2068'. [ 345.244176][T11564] loop0: detected capacity change from 0 to 128 [ 345.263782][T11564] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.313618][T11564] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.384272][T11564] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.2061: No space for directory leaf checksum. Please run e2fsck -D. [ 345.400147][T11564] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.2061: Directory block failed checksum [ 345.445016][T11618] SELinux: policydb magic number 0x34 does not match expected magic number 0xf97cff8c [ 345.498885][T11624] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 345.499725][T11623] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2074'. [ 345.528605][T11618] SELinux: failed to load policy [ 345.547361][T11624] loop4: detected capacity change from 0 to 512 [ 345.585733][T11624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.646237][T11635] loop8: detected capacity change from 0 to 512 [ 345.681206][T11635] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 345.713997][T11635] EXT4-fs (loop8): orphan cleanup on readonly fs [ 345.733113][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.746575][ T8249] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.766092][T11635] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 345.789493][T11635] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 345.796467][T11635] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.2075: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 345.816304][T11635] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 345.816505][T11635] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2075: couldn't read orphan inode 13 (err -117) [ 345.825987][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 345.826015][ C1] EXT4-fs (loop8): last error at time 2000000121: ext4_ext_check_inode:521: inode 13 [ 345.855659][T11635] loop8: lost filesystem error report for type 5 error -117 [ 345.856313][T11635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.999201][T11635] EXT4-fs error (device loop8): ext4_lookup:1785: comm syz.8.2075: inode #15: comm syz.8.2075: iget: illegal inode # [ 348.820203][ T28] audit: type=1326 audit(2000000124.300:24079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.4.2081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb41479c819 code=0x0 [ 348.880114][T11680] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2084'. [ 349.099047][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.231803][T11699] loop9: detected capacity change from 0 to 512 [ 349.282180][T11699] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.383092][T11712] netlink: 'syz.4.2087': attribute type 1 has an invalid length. [ 349.391907][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2086'. [ 349.400931][ T28] audit: type=1400 audit(2000000124.850:24080): avc: denied { ioctl } for pid=11700 comm="syz.8.2086" path="socket:[40967]" dev="sockfs" ino=40967 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.492915][ T28] audit: type=1326 audit(2000000124.880:24081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780b49c819 code=0x7ffc0000 [ 349.519681][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.544102][T11721] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2086'. [ 349.631349][ T28] audit: type=1326 audit(2000000124.880:24082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780b49c819 code=0x7ffc0000 [ 349.672884][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.690863][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.758183][ T28] audit: type=1326 audit(2000000124.880:24083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780b49c819 code=0x7ffc0000 [ 349.874373][ T28] audit: type=1326 audit(2000000124.880:24084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f780b49c819 code=0x7ffc0000 [ 349.972808][T11749] loop9: detected capacity change from 0 to 512 [ 349.978667][ T28] audit: type=1326 audit(2000000124.880:24085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780b49c819 code=0x7ffc0000 [ 350.019218][T11749] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 350.060520][T11749] EXT4-fs (loop9): orphan cleanup on readonly fs [ 350.068873][ T28] audit: type=1326 audit(2000000124.880:24086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780b49c819 code=0x7ffc0000 [ 350.088851][T11712] loop4: detected capacity change from 0 to 128 [ 350.094460][T11749] EXT4-fs warning (device loop9): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 350.116733][T11749] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 350.123550][ T28] audit: type=1326 audit(2000000124.880:24087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780b49c819 code=0x7ffc0000 [ 350.128701][T11749] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #13: comm syz.9.2097: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 350.150289][ T28] audit: type=1326 audit(2000000124.880:24088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f780b49c819 code=0x7ffc0000 [ 350.190943][ T28] audit: type=1326 audit(2000000124.880:24089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780b49c819 code=0x7ffc0000 [ 350.215640][ T28] audit: type=1326 audit(2000000124.880:24090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f780b49c819 code=0x7ffc0000 [ 350.215715][ T28] audit: type=1326 audit(2000000124.880:24091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f780b49c819 code=0x7ffc0000 [ 350.216516][T11749] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 350.259435][T11712] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.288575][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 350.295462][ C0] EXT4-fs (loop9): last error at time 2000000125: ext4_ext_check_inode:521: inode 13 [ 350.307032][T11749] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2097: couldn't read orphan inode 13 (err -117) [ 350.308768][T11712] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.319430][T11749] loop9: lost filesystem error report for type 5 error -117 [ 350.330341][T11749] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.405326][T11712] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.2087: No space for directory leaf checksum. Please run e2fsck -D. [ 350.435829][T11749] EXT4-fs error (device loop9): ext4_lookup:1785: comm syz.9.2097: inode #15: comm syz.9.2097: iget: illegal inode # [ 350.449372][T11712] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.2087: Directory block failed checksum [ 350.450279][T11757] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.473648][T11757] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.498900][T11758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11758 comm=syz.8.2099 [ 350.530443][T11757] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.548597][T11757] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.613328][T11759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.697603][T11757] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.713735][T11759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.729359][T11757] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.816547][T11170] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.053659][T11757] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.073088][T11757] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.186727][T11765] loop1: detected capacity change from 0 to 512 [ 351.294462][T11765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.357790][ T316] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.399695][ T316] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.494882][ T316] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.556527][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.576398][ T316] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.714863][ T316] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.746275][ T316] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.803923][ T3945] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.812371][ T3945] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.011442][T11789] loop1: detected capacity change from 0 to 128 [ 352.081755][T11790] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2109'. [ 352.485115][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.604356][T11799] netlink: 'syz.9.2112': attribute type 1 has an invalid length. [ 352.734512][T11810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.741984][T11810] IPv6: NLM_F_CREATE should be set when creating new route [ 352.850383][T11818] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 352.875926][T11818] loop8: detected capacity change from 0 to 512 [ 352.916572][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2116'. [ 352.916703][T11818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.977203][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.010299][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2116'. [ 353.097305][T11799] loop9: detected capacity change from 0 to 128 [ 353.142113][T11799] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.170105][T11799] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.221530][T11849] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.276403][T11799] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.2112: No space for directory leaf checksum. Please run e2fsck -D. [ 353.293514][T11849] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.308431][T11859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11859 comm=syz.8.2122 [ 353.340411][T11859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.355903][T11799] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.2112: Directory block failed checksum [ 353.370351][T11862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2124'. [ 353.383297][T11859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.413807][T11849] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.439828][T11849] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.528184][T11849] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.558805][T11849] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.604869][T11875] tipc: Started in network mode [ 353.619098][T11875] tipc: Node identity ac14140f, cluster identity 4711 [ 353.627130][ T7853] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.646794][T11875] tipc: Enabled bearer , priority 10 [ 353.664213][T11849] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.703556][T11849] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.718901][T11883] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 353.763832][T11883] loop4: detected capacity change from 0 to 512 [ 353.789100][T11883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.810382][T11880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.817927][T11880] IPv6: NLM_F_CREATE should be set when creating new route [ 353.837818][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.042587][T11914] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2135'. [ 354.232218][T11924] netlink: 'syz.1.2137': attribute type 1 has an invalid length. [ 354.714923][T11932] loop9: detected capacity change from 0 to 512 [ 354.770569][T11932] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.910769][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.974681][T11924] loop1: detected capacity change from 0 to 128 [ 354.983277][T11924] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.004636][T11924] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.2137: No space for directory leaf checksum. Please run e2fsck -D. [ 355.020432][T11924] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.2137: Directory block failed checksum [ 355.160373][ T3394] tipc: Node number set to 2886997007 [ 355.681329][T11969] tipc: Started in network mode [ 355.705945][T11969] tipc: Node identity ac14140f, cluster identity 4711 [ 355.738546][T11969] FAULT_INJECTION: forcing a failure. [ 355.738546][T11969] name failslab, interval 1, probability 0, space 0, times 0 [ 355.787924][T11976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2148'. [ 355.810391][T11969] CPU: 1 UID: 0 PID: 11969 Comm: syz.0.2146 Not tainted syzkaller #0 PREEMPT(full) [ 355.810432][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 355.810444][T11969] Call Trace: [ 355.810452][T11969] [ 355.810462][T11969] __dump_stack+0x1d/0x30 [ 355.810546][T11969] dump_stack_lvl+0x95/0xd0 [ 355.810573][T11969] dump_stack+0x15/0x1b [ 355.810641][T11969] should_fail_ex+0x263/0x280 [ 355.810674][T11969] should_failslab+0x8c/0xb0 [ 355.810697][T11969] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 355.810752][T11969] ? __alloc_skb+0x2d6/0x690 [ 355.810787][T11969] __alloc_skb+0x2d6/0x690 [ 355.810839][T11969] ? should_failslab+0x8c/0xb0 [ 355.810892][T11969] tipc_buf_acquire+0x2c/0xb0 [ 355.810926][T11969] tipc_disc_create+0xa7/0x2f0 [ 355.810952][T11969] __tipc_nl_bearer_enable+0xa92/0xde0 [ 355.811023][T11969] ? mutex_lock+0x57/0x90 [ 355.811041][T11969] tipc_nl_bearer_enable+0x22/0x40 [ 355.811071][T11969] genl_family_rcv_msg_doit+0x187/0x1f0 [ 355.811191][T11969] genl_rcv_msg+0x432/0x470 [ 355.811214][T11969] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 355.811247][T11969] netlink_rcv_skb+0x123/0x220 [ 355.811319][T11969] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.811352][T11969] genl_rcv+0x28/0x40 [ 355.811376][T11969] netlink_unicast+0x5c0/0x690 [ 355.811478][T11969] netlink_sendmsg+0x5c8/0x6f0 [ 355.811498][T11969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.811517][T11969] ____sys_sendmsg+0x563/0x5b0 [ 355.811604][T11969] ___sys_sendmsg+0x195/0x1e0 [ 355.811631][T11969] __x64_sys_sendmsg+0xd4/0x160 [ 355.811658][T11969] x64_sys_call+0x194c/0x3020 [ 355.811690][T11969] do_syscall_64+0x12c/0x370 [ 355.811721][T11969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.811809][T11969] RIP: 0033:0x7fc4c12cc819 [ 355.811825][T11969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.811847][T11969] RSP: 002b:00007fc4bfd27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.811873][T11969] RAX: ffffffffffffffda RBX: 00007fc4c1545fa0 RCX: 00007fc4c12cc819 [ 355.811890][T11969] RDX: 0000000040000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 355.811907][T11969] RBP: 00007fc4bfd27090 R08: 0000000000000000 R09: 0000000000000000 [ 355.811923][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.812004][T11969] R13: 00007fc4c1546038 R14: 00007fc4c1545fa0 R15: 00007ffde0767768 [ 355.812026][T11969] [ 356.077316][T11969] tipc: Disabling bearer [ 356.082890][T11969] tipc: Enabling of bearer rejected, failed to create discoverer [ 356.110467][T11980] veth0_to_team: entered promiscuous mode [ 356.169256][T11983] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.209767][T11986] loop9: detected capacity change from 0 to 512 [ 356.222422][T11990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.223552][T11983] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.239908][T11990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.251614][T11980] SELinux: ebitmap: truncated map [ 356.257683][T11980] SELinux: failed to load policy [ 356.267033][ T50] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.276562][ T50] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.286355][T11986] EXT4-fs mount: 2 callbacks suppressed [ 356.286371][T11986] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.306479][T11983] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.326489][ T50] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.335649][ T50] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.345516][ T50] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.363714][ T50] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.376065][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.451270][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 356.451286][ T28] audit: type=1400 audit(2000032905.990:24102): avc: denied { connect } for pid=11996 comm="syz.8.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 356.465178][ T1679] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.481893][ T28] audit: type=1400 audit(2000032906.022:24103): avc: denied { read } for pid=11996 comm="syz.8.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 356.488511][ T1679] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.525913][T11999] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 356.534668][T11999] vhci_hcd vhci_hcd.4: default hub control req: 4018 v0005 i0001 l0 [ 356.543628][T11983] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.608946][ T1679] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.648449][ T1679] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.695057][ T1679] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.721834][ T1679] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.895144][T12024] tipc: Started in network mode [ 357.910198][T12024] tipc: Node identity b678bee10031, cluster identity 4711 [ 357.926873][T12024] tipc: Enabled bearer , priority 0 [ 357.943114][T12025] syzkaller0: entered promiscuous mode [ 357.955191][T12025] syzkaller0: entered allmulticast mode [ 357.972827][T12027] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 358.014274][T12024] tipc: Resetting bearer [ 358.020143][T12024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.055536][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2162'. [ 358.086065][T12023] tipc: Resetting bearer [ 358.100021][T12023] tipc: Disabling bearer [ 358.192448][T12033] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.210371][T12033] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.240536][T12034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12034 comm=syz.8.2165 [ 358.268764][T12034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.289576][T12033] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.300473][T12034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.317374][T12033] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.376214][T12033] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.386613][T12033] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.433000][T12033] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.443534][T12033] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.727139][T12027] loop0: detected capacity change from 0 to 512 [ 358.752039][T12027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.795449][T12037] SELinux: ebitmap: truncated map [ 358.801162][T12037] SELinux: failed to load policy [ 358.807595][ T8249] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.832259][ T28] audit: type=1400 audit(2000065682.487:24104): avc: denied { ioctl } for pid=12040 comm="syz.0.2167" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40756 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 358.902567][T12044] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2168'. [ 358.953399][T12046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.960894][T12046] IPv6: NLM_F_CREATE should be set when creating new route [ 359.052413][T12050] loop1: detected capacity change from 0 to 256 [ 359.068472][T12050] FAT-fs (loop1): Directory bread(block 64) failed [ 359.075219][T12050] FAT-fs (loop1): Directory bread(block 65) failed [ 359.081978][T12050] FAT-fs (loop1): Directory bread(block 66) failed [ 359.088707][T12050] FAT-fs (loop1): Directory bread(block 67) failed [ 359.095435][T12050] FAT-fs (loop1): Directory bread(block 68) failed [ 359.102226][T12050] FAT-fs (loop1): Directory bread(block 69) failed [ 359.108933][T12050] FAT-fs (loop1): Directory bread(block 70) failed [ 359.115468][T12050] FAT-fs (loop1): Directory bread(block 71) failed [ 359.122254][T12050] FAT-fs (loop1): Directory bread(block 72) failed [ 359.128836][T12050] FAT-fs (loop1): Directory bread(block 73) failed [ 359.197879][T12054] loop9: detected capacity change from 0 to 512 [ 359.206715][T12054] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ' [ 359.261676][T12050] syz.1.2171: attempt to access beyond end of device [ 359.261676][T12050] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 359.349836][ T28] audit: type=1400 audit(2000065683.033:24105): avc: denied { setopt } for pid=12057 comm="syz.9.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 359.387695][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 359.403375][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2173'. [ 359.417871][ T28] audit: type=1400 audit(2000065683.054:24106): avc: denied { ioctl } for pid=12060 comm="syz.1.2174" path="socket:[41596]" dev="sockfs" ino=41596 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 359.525228][T12070] loop9: detected capacity change from 0 to 512 [ 359.651331][T12070] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.728833][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.686349][ T28] audit: type=1400 audit(2000065684.429:24107): avc: denied { listen } for pid=12078 comm="syz.9.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 360.898115][ T28] audit: type=1400 audit(2000065684.429:24108): avc: denied { connect } for pid=12078 comm="syz.9.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 361.345003][T12081] SELinux: ebitmap: truncated map [ 361.350579][T12081] SELinux: failed to load policy [ 361.457778][T12091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.480887][T12093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.489708][T12093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.640658][T12090] loop1: detected capacity change from 0 to 128 [ 361.648916][T12090] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.699635][T12103] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2187'. [ 361.809760][T12107] loop9: detected capacity change from 0 to 512 [ 361.822250][T12107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.854594][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.613630][T12111] Set syz1 is full, maxelem 65536 reached [ 362.867155][T12123] hsr0: entered promiscuous mode [ 363.035511][T12125] FAULT_INJECTION: forcing a failure. [ 363.035511][T12125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.070112][T12125] CPU: 0 UID: 0 PID: 12125 Comm: syz.1.2194 Not tainted syzkaller #0 PREEMPT(full) [ 363.070141][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 363.070186][T12125] Call Trace: [ 363.070195][T12125] [ 363.070206][T12125] __dump_stack+0x1d/0x30 [ 363.070245][T12125] dump_stack_lvl+0x95/0xd0 [ 363.070319][T12125] dump_stack+0x15/0x1b [ 363.070344][T12125] should_fail_ex+0x263/0x280 [ 363.070373][T12125] should_fail+0xb/0x20 [ 363.070395][T12125] should_fail_usercopy+0x1a/0x20 [ 363.070423][T12125] _copy_from_user+0x1c/0xb0 [ 363.070516][T12125] ___sys_sendmsg+0xc1/0x1e0 [ 363.070551][T12125] __x64_sys_sendmsg+0xd4/0x160 [ 363.070578][T12125] x64_sys_call+0x194c/0x3020 [ 363.070605][T12125] do_syscall_64+0x12c/0x370 [ 363.070653][T12125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.070695][T12125] RIP: 0033:0x7f780b49c819 [ 363.070711][T12125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.070730][T12125] RSP: 002b:00007f7809eef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.070756][T12125] RAX: ffffffffffffffda RBX: 00007f780b715fa0 RCX: 00007f780b49c819 [ 363.070774][T12125] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 363.070791][T12125] RBP: 00007f7809eef090 R08: 0000000000000000 R09: 0000000000000000 [ 363.070833][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.070849][T12125] R13: 00007f780b716038 R14: 00007f780b715fa0 R15: 00007ffd25c7e0b8 [ 363.070868][T12125] [ 363.158378][T12128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.417086][T12134] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2198'. [ 363.477263][T12136] loop0: detected capacity change from 0 to 1024 [ 363.850920][ T28] audit: type=1400 audit(2000065687.757:24109): avc: denied { override_creds } for pid=12145 comm="syz.0.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 363.908324][ T28] audit: type=1400 audit(2000065687.820:24110): avc: denied { write } for pid=12145 comm="syz.0.2203" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 363.949934][ T28] audit: type=1400 audit(2000065687.862:24111): avc: denied { cmd } for pid=12153 comm="syz.1.2205" path="socket:[42014]" dev="sockfs" ino=42014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 363.950304][T12154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2205'. [ 364.000851][ T28] audit: type=1400 audit(2000065687.894:24112): avc: denied { write } for pid=12145 comm="syz.0.2203" path="socket:[42020]" dev="sockfs" ino=42020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.072735][T12160] loop1: detected capacity change from 0 to 1024 [ 364.178018][ T28] audit: type=1400 audit(2000065688.093:24113): avc: denied { listen } for pid=12164 comm="syz.1.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 364.198382][T12165] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2208'. [ 364.211287][ T28] audit: type=1400 audit(2000065688.125:24114): avc: denied { create } for pid=12164 comm="syz.1.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 364.234250][T12165] loop1: detected capacity change from 0 to 512 [ 364.241031][T12165] EXT4-fs: Ignoring removed bh option [ 364.279233][T12165] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2208: iget: bad i_size value: 38620345925642 [ 364.292444][T12165] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 364.292657][T12165] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2208: couldn't read orphan inode 15 (err -117) [ 364.302182][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 364.302198][ C0] EXT4-fs (loop1): initial error at time 2000065688: ext4_orphan_get:1397: inode 15 [ 364.302230][ C0] EXT4-fs (loop1): last error at time 2000065688: ext4_orphan_get:1397: inode 15 [ 364.340447][T12165] loop1: lost filesystem error report for type 5 error -117 [ 364.341080][T12165] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.364375][T12165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2208'. [ 364.385097][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 364.438991][T12169] xt_hashlimit: size too large, truncated to 1048576 [ 364.629251][ T50] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.654632][ T50] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.679630][ T50] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.688494][ T50] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.705109][ T50] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.713939][ T50] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.751915][ T50] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.766370][T12177] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2212'. [ 364.776700][T12179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.776716][ T50] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.736211][T12199] lo speed is unknown, defaulting to 1000 [ 365.779161][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 365.955057][T12205] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2219'. [ 365.967476][T12205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12205 comm=syz.9.2219 [ 365.980491][T12205] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2219'. [ 366.422585][T12209] loop9: detected capacity change from 0 to 512 [ 366.458605][T12207] SELinux: ebitmap: truncated map [ 366.466797][T12209] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 366.470683][T12207] SELinux: failed to load policy [ 366.482465][T12209] EXT4-fs (loop9): orphan cleanup on readonly fs [ 366.494946][T12209] EXT4-fs warning (device loop9): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 366.496633][T12214] loop4: detected capacity change from 0 to 512 [ 366.510442][T12209] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 366.519423][T12215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12215 comm=syz.1.2222 [ 366.523606][T12209] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #13: comm syz.9.2221: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 366.539929][T12215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.554947][T12209] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 366.564043][T12214] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 366.565616][T12215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.573340][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 366.595784][ C0] EXT4-fs (loop9): last error at time 2000065690: ext4_ext_check_inode:521: inode 13 [ 366.600062][T12209] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2221: couldn't read orphan inode 13 (err -117) [ 366.609158][T12214] EXT4-fs (loop4): orphan cleanup on readonly fs [ 366.617636][T12209] loop9: lost filesystem error report for type 5 error -117 [ 366.624602][T12209] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.628616][T12214] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 366.650890][T12209] EXT4-fs error (device loop9): ext4_lookup:1785: comm syz.9.2221: inode #15: comm syz.9.2221: iget: illegal inode # [ 366.659829][T12214] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 366.681955][T12214] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.2223: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 366.700897][T12214] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 366.705678][T12214] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2223: couldn't read orphan inode 13 (err -117) [ 366.714958][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 366.714980][ C1] EXT4-fs (loop4): last error at time 2000065690: ext4_ext_check_inode:521: inode 13 [ 366.743581][T12214] loop4: lost filesystem error report for type 5 error -117 [ 366.765641][T12214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.843100][T12214] EXT4-fs error (device loop4): ext4_lookup:1785: comm syz.4.2223: inode #15: comm syz.4.2223: iget: illegal inode # [ 366.880865][T12223] netlink: 'syz.0.2226': attribute type 1 has an invalid length. [ 367.044586][T12223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.851211][T12223] loop0: detected capacity change from 0 to 256 [ 370.465159][T12246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.484530][T12246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.674881][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.687525][ T28] audit: type=1400 audit(2000065694.929:24115): avc: denied { map } for pid=12247 comm="syz.8.2233" path="socket:[41957]" dev="sockfs" ino=41957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.755565][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.780808][ T28] audit: type=1400 audit(2000065695.034:24116): avc: denied { create } for pid=12252 comm="syz.0.2235" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 370.810660][T12253] loop0: detected capacity change from 0 to 512 [ 370.836066][T12253] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 370.836066][ T28] audit: type=1400 audit(2000065695.086:24117): avc: denied { mounton } for pid=12252 comm="syz.0.2235" path="/201/file0" dev="tmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 370.913199][T12253] EXT4-fs (loop0): 1 truncate cleaned up [ 370.925073][T12253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.942739][T12253] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.977410][T12260] SELinux: ebitmap: truncated map [ 370.994038][T12260] SELinux: failed to load policy [ 371.037908][T12278] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2244'. [ 371.054149][T12280] loop1: detected capacity change from 0 to 512 [ 371.116674][T12280] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 371.125160][ T28] audit: type=1400 audit(2000065695.380:24118): avc: denied { unlink } for pid=8249 comm="syz-executor" name="file0" dev="tmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 371.132507][T12280] EXT4-fs (loop1): orphan cleanup on readonly fs [ 371.160799][T12280] EXT4-fs warning (device loop1): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 371.175963][T12280] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 371.234144][T12280] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.2245: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 371.253142][T12280] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 371.253290][T12280] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2245: couldn't read orphan inode 13 (err -117) [ 371.262722][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 371.262742][ C0] EXT4-fs (loop1): last error at time 2000065695: ext4_ext_check_inode:521: inode 13 [ 371.297637][T12280] loop1: lost filesystem error report for type 5 error -117 [ 371.298296][T12280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 371.329899][T12280] EXT4-fs error (device loop1): ext4_lookup:1785: comm syz.1.2245: inode #15: comm syz.1.2245: iget: illegal inode # [ 371.898255][T12307] loop9: detected capacity change from 0 to 512 [ 372.201401][T12312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.288052][T12312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.673201][T12314] SELinux: ebitmap: truncated map [ 372.678511][T12314] SELinux: failed to load policy [ 372.973060][T12321] loop9: detected capacity change from 0 to 1024 [ 373.208332][ T28] audit: type=1400 audit(2000065697.574:24119): avc: denied { read } for pid=12330 comm="syz.9.2263" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 373.264533][ T28] audit: type=1400 audit(2000065697.574:24120): avc: denied { open } for pid=12330 comm="syz.9.2263" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 373.317876][ T28] audit: type=1400 audit(2000065697.574:24121): avc: denied { ioctl } for pid=12330 comm="syz.9.2263" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 373.414022][T12340] loop0: detected capacity change from 0 to 512 [ 373.452195][T12339] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.471278][T12340] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2266: inode has both inline data and extents flags [ 373.483402][T12345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.487705][T12340] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 373.498073][T12344] loop9: detected capacity change from 0 to 1024 [ 373.508245][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 373.515218][T12345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.520510][ C1] EXT4-fs (loop0): initial error at time 2000065697: ext4_orphan_get:1397: inode 15 [ 373.537980][ C1] EXT4-fs (loop0): last error at time 2000065697: ext4_orphan_get:1397: inode 15 [ 373.552722][T12340] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2266: couldn't read orphan inode 15 (err -117) [ 373.565061][T12340] loop0: lost filesystem error report for type 5 error -117 [ 373.566702][T12340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.593234][T12339] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.605139][ T8249] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.619053][T12344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.636107][ T28] audit: type=1400 audit(2000065698.026:24122): avc: denied { read write } for pid=12343 comm="syz.9.2268" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 373.683491][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.711662][T12339] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.734687][ T28] audit: type=1400 audit(2000065698.026:24123): avc: denied { open } for pid=12343 comm="syz.9.2268" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 373.820585][T12339] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.947159][T12349] lo speed is unknown, defaulting to 1000 [ 373.960016][ T28] audit: type=1400 audit(2000065698.372:24124): avc: denied { getopt } for pid=12358 comm="syz.8.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 374.016525][ T7072] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.083443][ T7072] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.216205][ T7072] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.335621][ T7072] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.406010][T12367] xt_l2tp: v2 doesn't support IP mode [ 374.512568][T12370] IPVS: length: 184 != 24 [ 374.531963][T12370] loop0: detected capacity change from 0 to 764 [ 374.700766][T12372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.708121][T12372] IPv6: NLM_F_CREATE should be set when creating new route [ 374.729295][T12380] loop9: detected capacity change from 0 to 512 [ 374.758968][T12380] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2279: inode has both inline data and extents flags [ 374.775106][T12380] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 374.775265][T12380] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2279: couldn't read orphan inode 15 (err -117) [ 374.784651][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 374.784673][ C0] EXT4-fs (loop9): initial error at time 2000065699: ext4_orphan_get:1397: inode 15 [ 374.784734][ C0] EXT4-fs (loop9): last error at time 2000065699: ext4_orphan_get:1397: inode 15 [ 374.831441][T12380] loop9: lost filesystem error report for type 5 error -117 [ 374.836780][T12380] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.882328][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 374.911202][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2281'. [ 374.930095][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.958740][T12389] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2282'. [ 374.982515][T12391] netlink: 884 bytes leftover after parsing attributes in process `syz.0.2283'. [ 375.035988][T12391] netlink: 'syz.0.2283': attribute type 10 has an invalid length. [ 375.065557][T12391] netlink: 'syz.0.2283': attribute type 10 has an invalid length. [ 375.088663][T12398] loop8: detected capacity change from 0 to 1024 [ 375.110736][T12398] EXT4-fs: Ignoring removed mblk_io_submit option [ 375.140151][T12402] loop0: detected capacity change from 0 to 512 [ 375.176093][T12402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 375.187430][T12398] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.219190][T12402] EXT4-fs (loop0): 1 truncate cleaned up [ 375.225479][T12402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.243096][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.319958][ T8249] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.379133][T12411] loop8: detected capacity change from 0 to 512 [ 375.406774][T12411] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.2292: inode has both inline data and extents flags [ 375.434793][T12411] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 375.435047][T12411] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2292: couldn't read orphan inode 15 (err -117) [ 375.444455][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 375.444475][ C1] EXT4-fs (loop8): initial error at time 2000065699: ext4_orphan_get:1397: inode 15 [ 375.444513][ C1] EXT4-fs (loop8): last error at time 2000065699: ext4_orphan_get:1397: inode 15 [ 375.483146][T12411] loop8: lost filesystem error report for type 5 error -117 [ 375.483740][T12411] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.542289][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.555928][T12415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.924080][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.096085][T12426] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2297'. [ 376.221308][T12430] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.269621][T12431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.281875][T12430] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.292649][T12431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.338795][T12430] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.395854][T12430] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.458508][ T3945] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.473839][ T3945] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.485777][ T3945] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.494936][ T3945] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.580272][T12437] FAULT_INJECTION: forcing a failure. [ 376.580272][T12437] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 376.609182][T12433] loop9: detected capacity change from 0 to 512 [ 376.651017][T12433] EXT4-fs: old and new quota format mixing [ 376.658396][T12437] CPU: 1 UID: 0 PID: 12437 Comm: syz.8.2295 Not tainted syzkaller #0 PREEMPT(full) [ 376.658441][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 376.658453][T12437] Call Trace: [ 376.658460][T12437] [ 376.658468][T12437] __dump_stack+0x1d/0x30 [ 376.658500][T12437] dump_stack_lvl+0x95/0xd0 [ 376.658548][T12437] dump_stack+0x15/0x1b [ 376.658715][T12437] should_fail_ex+0x263/0x280 [ 376.658749][T12437] should_fail_alloc_page+0xf2/0x100 [ 376.658772][T12437] __alloc_frozen_pages_noprof+0x108/0x360 [ 376.658818][T12437] alloc_pages_mpol+0xb3/0x260 [ 376.658844][T12437] ? css_rstat_updated+0xbb/0x280 [ 376.658864][T12437] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 376.658967][T12437] handle_mm_fault+0x1129/0x3020 [ 376.659078][T12437] ? vma_start_read+0x1c7/0x2c0 [ 376.659110][T12437] do_user_addr_fault+0x62f/0x1050 [ 376.659138][T12437] ? ksys_mmap_pgoff+0xc1/0x310 [ 376.659253][T12437] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 376.659280][T12437] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 376.659303][T12437] ? trace_page_fault_user+0x1f/0xe0 [ 376.659339][T12437] exc_page_fault+0x62/0xa0 [ 376.659416][T12437] asm_exc_page_fault+0x26/0x30 [ 376.659441][T12437] RIP: 0033:0x7fe53a843b98 [ 376.659461][T12437] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 376.659479][T12437] RSP: 002b:00007fe5393de470 EFLAGS: 00010206 [ 376.659496][T12437] RAX: 000000000000a000 RBX: 00007fe5393de530 RCX: 0000000000000101 [ 376.659511][T12437] RDX: 00000000000000c5 RSI: 00000000000003c6 RDI: 00007fe5393de5d0 [ 376.659554][T12437] RBP: 0000000000000102 R08: 00007fe530fbf000 R09: 0000000000000005 [ 376.659568][T12437] R10: 00002000000001c2 R11: 0000000000000518 R12: 0000000000000301 [ 376.659580][T12437] R13: 00007fe53aa42600 R14: 0000000000000013 R15: 00007fe5393de5d0 [ 376.659597][T12437] [ 376.659608][T12437] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 376.873101][T12442] loop1: detected capacity change from 0 to 2048 [ 376.888433][T12437] loop8: detected capacity change from 0 to 512 [ 376.948490][T12442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.985828][T12437] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 377.013233][T12437] System zones: 0-2, 18-18, 34-34 [ 377.115794][T12437] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 377.145137][T12437] EXT4-fs (loop8): Remounting filesystem read-only [ 377.146583][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 377.158436][ C0] EXT4-fs (loop8): initial error at time 2000065701: ext4_mb_generate_buddy:1317 [ 377.167851][ C0] EXT4-fs (loop8): last error at time 2000065701: ext4_mb_generate_buddy:1317 [ 377.305400][T12437] EXT4-fs (loop8): 1 truncate cleaned up [ 377.312231][T12437] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.571220][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 377.579555][ T7072] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 377.594309][ T28] audit: type=1400 audit(2000065702.131:24136): avc: denied { firmware_load } for pid=12440 comm="syz.1.2301" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 377.627987][T12437] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.649278][ T7072] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 377.990064][ T7072] Quota error (device loop8): write_blk: dquota write failed [ 377.997665][ T7072] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 378.008486][ T7072] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 378.631817][T12437] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.692051][ T7072] Quota error (device loop8): write_blk: dquota write failed [ 379.565283][T12482] SELinux: ebitmap: truncated map [ 379.576207][T12482] SELinux: failed to load policy [ 379.652797][ T7072] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 379.662943][ T7072] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 379.673152][ T7072] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 379.682180][ T7072] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 379.694732][ T7072] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 379.804921][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.884631][T12494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2310'. [ 380.612804][ T28] audit: type=1400 audit(2000065705.344:24137): avc: denied { write } for pid=12501 comm="syz.4.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 380.636143][T12506] loop0: detected capacity change from 0 to 1024 [ 380.643213][T12506] EXT4-fs: Ignoring removed bh option [ 380.660465][T12506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.688813][T12506] EXT4-fs error (device loop0): ext4_lookup:1777: inode #2: comm syz.0.2319: bad inode number: 12 [ 380.747180][T12506] EXT4-fs (loop0): Remounting filesystem read-only [ 380.823060][ T8249] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.956893][T12532] loop8: detected capacity change from 0 to 512 [ 380.994900][T12532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 381.027777][T12532] EXT4-fs (loop8): orphan cleanup on readonly fs [ 381.053315][T12532] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 381.100324][T12539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2330'. [ 381.109772][T12532] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 381.124576][T12532] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.2328: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 381.185002][T12532] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 381.185153][T12532] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2328: couldn't read orphan inode 13 (err -117) [ 381.194463][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 381.194487][ C0] EXT4-fs (loop8): last error at time 2000065705: ext4_ext_check_inode:521: inode 13 [ 381.276565][T12532] loop8: lost filesystem error report for type 5 error -117 [ 381.277160][T12532] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 381.343007][T12532] EXT4-fs error (device loop8): ext4_lookup:1785: comm syz.8.2328: inode #15: comm syz.8.2328: iget: illegal inode # [ 383.218028][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 383.218095][ T28] audit: type=1400 audit(2000065708.084:24193): avc: denied { unmount } for pid=6537 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 383.247703][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.316967][ T28] audit: type=1400 audit(2000065708.147:24194): avc: denied { create } for pid=12556 comm="syz.8.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 383.377588][T12555] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.384992][T12555] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.005367][ T28] audit: type=1400 audit(2000065708.914:24195): avc: denied { create } for pid=12558 comm="syz.0.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 384.080603][ T28] audit: type=1400 audit(2000065708.914:24196): avc: denied { setopt } for pid=12558 comm="syz.0.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 384.137786][ T28] audit: type=1400 audit(2000065708.945:24197): avc: denied { write } for pid=12558 comm="syz.0.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 384.171309][T12555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.210490][ T28] audit: type=1400 audit(2000065709.124:24198): avc: denied { read write } for pid=12562 comm="syz.8.2337" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 384.295585][ T28] audit: type=1400 audit(2000065709.124:24199): avc: denied { open } for pid=12562 comm="syz.8.2337" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 384.334777][T12555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.383142][ T28] audit: type=1400 audit(2000065709.166:24200): avc: denied { read } for pid=12562 comm="syz.8.2337" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 384.452924][ T28] audit: type=1400 audit(2000065709.166:24201): avc: denied { open } for pid=12562 comm="syz.8.2337" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 384.537826][ T28] audit: type=1400 audit(2000065709.166:24202): avc: denied { map } for pid=12562 comm="syz.8.2337" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 385.085895][T12596] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2345'. [ 385.225859][ T3945] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.248906][ T3945] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.271145][ T3945] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.299971][ T3945] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.329162][T12604] SELinux: policydb magic number 0x34 does not match expected magic number 0xf97cff8c [ 385.356955][T12604] SELinux: failed to load policy [ 385.427150][T12613] loop9: detected capacity change from 0 to 512 [ 385.465390][T12613] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2352: inode has both inline data and extents flags [ 385.535154][T12613] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 385.535344][T12613] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2352: couldn't read orphan inode 15 (err -117) [ 385.544631][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 385.544655][ C1] EXT4-fs (loop9): initial error at time 2000065710: ext4_orphan_get:1397: inode 15 [ 385.544689][ C1] EXT4-fs (loop9): last error at time 2000065710: ext4_orphan_get:1397: inode 15 [ 385.629842][T12623] loop8: detected capacity change from 0 to 512 [ 385.695585][T12623] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 385.713941][T12623] EXT4-fs (loop8): orphan cleanup on readonly fs [ 385.738209][T12613] loop9: lost filesystem error report for type 5 error -117 [ 385.738904][T12613] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.761960][T12623] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 385.795487][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.869401][T12632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2359'. [ 385.871166][T12623] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 385.941914][T12623] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.2354: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 385.994823][T12623] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 385.995147][T12623] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2354: couldn't read orphan inode 13 (err -117) [ 386.004715][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 386.004738][ C1] EXT4-fs (loop8): last error at time 2000065711: ext4_ext_check_inode:521: inode 13 [ 386.118977][T12623] loop8: lost filesystem error report for type 5 error -117 [ 386.131933][T12623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.199320][T12623] EXT4-fs error (device loop8): ext4_lookup:1785: comm syz.8.2354: inode #15: comm syz.8.2354: iget: illegal inode # [ 387.462654][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2365'. [ 387.557599][T12659] SELinux: policydb magic number 0x34 does not match expected magic number 0xf97cff8c [ 387.567507][T12659] SELinux: failed to load policy [ 387.698280][T12662] loop9: detected capacity change from 0 to 512 [ 387.767797][T12662] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2368: inode has both inline data and extents flags [ 387.807888][T12666] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2370'. [ 387.849317][T12662] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 387.849672][T12662] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2368: couldn't read orphan inode 15 (err -117) [ 387.859055][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 387.859074][ C0] EXT4-fs (loop9): initial error at time 2000065712: ext4_orphan_get:1397: inode 15 [ 387.859100][ C0] EXT4-fs (loop9): last error at time 2000065712: ext4_orphan_get:1397: inode 15 [ 387.952992][T12662] loop9: lost filesystem error report for type 5 error -117 [ 387.954043][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.954337][T12662] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.026934][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.160938][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 388.160957][ T28] audit: type=1400 audit(2000065713.282:24221): avc: denied { setopt } for pid=12674 comm="syz.0.2367" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 388.242960][ T28] audit: type=1400 audit(2000065713.324:24222): avc: denied { allowed } for pid=12679 comm="syz.9.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 388.303122][ T28] audit: type=1400 audit(2000065713.334:24223): avc: denied { create } for pid=12679 comm="syz.9.2374" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.326361][ T28] audit: type=1400 audit(2000065713.355:24224): avc: denied { read write } for pid=7853 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.354506][ T28] audit: type=1400 audit(2000065713.355:24225): avc: denied { open } for pid=7853 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.390312][ T28] audit: type=1400 audit(2000065713.355:24226): avc: denied { ioctl } for pid=7853 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.416804][ T28] audit: type=1400 audit(2000065713.387:24227): avc: denied { create } for pid=12681 comm="syz.9.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.437758][ T28] audit: type=1400 audit(2000065713.387:24228): avc: denied { create } for pid=12681 comm="syz.9.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 388.458568][ T28] audit: type=1400 audit(2000065713.397:24229): avc: denied { shutdown } for pid=12681 comm="syz.9.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.479069][ T28] audit: type=1400 audit(2000065713.397:24230): avc: denied { getopt } for pid=12681 comm="syz.9.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.881795][T12691] FAULT_INJECTION: forcing a failure. [ 388.881795][T12691] name failslab, interval 1, probability 0, space 0, times 0 [ 388.914449][T12691] CPU: 1 UID: 0 PID: 12691 Comm: syz.1.2378 Not tainted syzkaller #0 PREEMPT(full) [ 388.914479][T12691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 388.914493][T12691] Call Trace: [ 388.914501][T12691] [ 388.914510][T12691] __dump_stack+0x1d/0x30 [ 388.914541][T12691] dump_stack_lvl+0x95/0xd0 [ 388.914679][T12691] dump_stack+0x15/0x1b [ 388.914702][T12691] should_fail_ex+0x263/0x280 [ 388.914734][T12691] should_failslab+0x8c/0xb0 [ 388.914758][T12691] __kvmalloc_node_noprof+0x155/0x650 [ 388.914784][T12691] ? page_pool_create_percpu+0x223/0x640 [ 388.914864][T12691] page_pool_create_percpu+0x223/0x640 [ 388.914890][T12691] page_pool_create+0x1a/0x30 [ 388.914914][T12691] bpf_test_run_xdp_live+0x1a8/0x1360 [ 388.914949][T12691] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 388.915008][T12691] ? __pfx_autoremove_wake_function+0x10/0x10 [ 388.915105][T12691] ? mutex_unlock+0x4e/0x90 [ 388.915127][T12691] ? 0xffffffffa020b240 [ 388.915142][T12691] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 388.915173][T12691] ? 0xffffffffa020b240 [ 388.915194][T12691] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 388.915247][T12691] bpf_prog_test_run_xdp+0x57b/0xa10 [ 388.915322][T12691] ? __rcu_read_unlock+0x4e/0x70 [ 388.915402][T12691] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 388.915474][T12691] bpf_prog_test_run+0x204/0x340 [ 388.915497][T12691] __sys_bpf+0x52e/0x7e0 [ 388.915544][T12691] __x64_sys_bpf+0x41/0x50 [ 388.915598][T12691] x64_sys_call+0x10cb/0x3020 [ 388.915623][T12691] do_syscall_64+0x12c/0x370 [ 388.915653][T12691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.915687][T12691] RIP: 0033:0x7f780b49c819 [ 388.915765][T12691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.915782][T12691] RSP: 002b:00007f7809eef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.915803][T12691] RAX: ffffffffffffffda RBX: 00007f780b715fa0 RCX: 00007f780b49c819 [ 388.915864][T12691] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 388.915880][T12691] RBP: 00007f7809eef090 R08: 0000000000000000 R09: 0000000000000000 [ 388.915895][T12691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.915910][T12691] R13: 00007f780b716038 R14: 00007f780b715fa0 R15: 00007ffd25c7e0b8 [ 388.915986][T12691] [ 388.923536][T12691] page_pool_create_percpu() gave up with errno -12 [ 389.239564][T12702] loop9: detected capacity change from 0 to 512 [ 389.242416][T12701] loop8: detected capacity change from 0 to 512 [ 389.264023][T12702] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 389.290710][T12702] EXT4-fs (loop9): orphan cleanup on readonly fs [ 389.334887][T12701] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.2382: inode has both inline data and extents flags [ 389.350301][T12702] EXT4-fs warning (device loop9): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 389.371095][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 389.380960][T12701] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 389.391103][T12702] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 389.404528][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 389.414286][ C1] EXT4-fs (loop8): initial error at time 2000065714: ext4_orphan_get:1397: inode 15 [ 389.423715][ C1] EXT4-fs (loop8): last error at time 2000065714: ext4_orphan_get:1397: inode 15 [ 389.433605][T12702] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #13: comm syz.9.2381: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 389.433856][T12701] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2382: couldn't read orphan inode 15 (err -117) [ 389.473897][T12701] loop8: lost filesystem error report for type 5 error -117 [ 389.486067][T12701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.488493][T12702] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 389.508440][T12715] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.518712][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 389.534482][ C1] EXT4-fs (loop9): last error at time 2000065714: ext4_ext_check_inode:521: inode 13 [ 389.545037][T12702] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2381: couldn't read orphan inode 13 (err -117) [ 389.560557][T12719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.571210][T12718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12718 comm=syz.0.2386 [ 389.573854][T12702] loop9: lost filesystem error report for type 5 error -117 [ 389.587906][T12719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.589284][T12702] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 389.617352][T12718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.618372][T12715] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.634185][T12718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.644357][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.664210][T12702] EXT4-fs error (device loop9): ext4_lookup:1785: comm syz.9.2381: inode #15: comm syz.9.2381: iget: illegal inode # [ 389.679574][T12724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12724 comm=syz.4.2388 [ 389.695346][T12724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.710423][T12715] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.729807][T12724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.829961][T12715] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.008107][ T7072] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.085234][ T7072] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.120799][ T7072] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.138314][ T7072] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.944927][T12748] loop8: detected capacity change from 0 to 512 [ 390.982738][T12748] EXT4-fs: inline encryption not supported [ 391.026645][T12748] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.092898][T12748] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 391.120010][T12753] loop4: detected capacity change from 0 to 512 [ 391.139381][T12753] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2399: inode has both inline data and extents flags [ 391.165464][T12748] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2397: bg 0: block 248: padding at end of block bitmap is not set [ 391.199790][T12753] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 391.200114][T12753] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2399: couldn't read orphan inode 15 (err -117) [ 391.209899][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 391.209920][ C0] EXT4-fs (loop4): initial error at time 2000065716: ext4_orphan_get:1397: inode 15 [ 391.209951][ C0] EXT4-fs (loop4): last error at time 2000065716: ext4_orphan_get:1397: inode 15 [ 391.213955][T12748] loop8: lost filesystem error report for type 5 error -117 [ 391.247344][T12753] loop4: lost filesystem error report for type 5 error -117 [ 391.249135][T12748] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.2397: Failed to acquire dquot type 1 [ 391.255107][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 391.255143][ C1] EXT4-fs (loop8): last error at time 2000065716: ext4_validate_block_bitmap:441 [ 391.283348][T12753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.289831][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.311171][T12748] loop8: lost filesystem error report for type 5 error -28 [ 391.323335][T12748] EXT4-fs (loop8): 1 truncate cleaned up [ 391.337104][T12748] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 391.384692][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.403970][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2397'. [ 391.404999][T12764] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2402'. [ 391.457716][T12766] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2401'. [ 391.530953][T12774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12774 comm=syz.1.2403 [ 391.569977][T12774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.587128][T12774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.596722][T12775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.620408][T12775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.730046][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 391.740039][ T3945] EXT4-fs error (device loop8): ext4_release_dquot:7062: comm kworker/u8:9: Failed to release dquot type 1 [ 391.753098][ T3945] loop8: lost filesystem error report for type 5 error -117 [ 391.874218][T12781] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2407'. [ 392.260676][T12791] loop9: detected capacity change from 0 to 512 [ 392.294156][T12791] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 392.320780][T12791] EXT4-fs (loop9): orphan cleanup on readonly fs [ 392.341528][T12795] loop4: detected capacity change from 0 to 512 [ 392.350916][T12791] EXT4-fs warning (device loop9): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 392.389126][T12795] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2411: inode has both inline data and extents flags [ 392.402736][T12791] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 392.410081][T12791] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #13: comm syz.9.2410: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 392.430407][T12795] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 392.430604][T12795] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2411: couldn't read orphan inode 15 (err -117) [ 392.440425][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 392.440447][ C0] EXT4-fs (loop4): initial error at time 2000065717: ext4_orphan_get:1397: inode 15 [ 392.440493][ C0] EXT4-fs (loop4): last error at time 2000065717: ext4_orphan_get:1397: inode 15 [ 392.480626][T12791] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 392.480824][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 392.496897][ C0] EXT4-fs (loop9): last error at time 2000065717: ext4_ext_check_inode:521: inode 13 [ 392.508586][T12791] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2410: couldn't read orphan inode 13 (err -117) [ 392.520888][T12795] loop4: lost filesystem error report for type 5 error -117 [ 392.521605][T12795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.562994][T12791] loop9: lost filesystem error report for type 5 error -117 [ 392.563626][T12791] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 392.597260][T12791] EXT4-fs error (device loop9): ext4_lookup:1785: comm syz.9.2410: inode #15: comm syz.9.2410: iget: illegal inode # [ 392.627044][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.351724][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 393.351814][ T28] audit: type=1400 audit(2000065718.731:24298): avc: denied { kexec_image_load } for pid=12805 comm="syz.1.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 393.551718][T12817] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2418'. [ 393.663244][ T28] audit: type=1400 audit(2000065719.056:24299): avc: denied { create } for pid=12824 comm="syz.0.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 393.736642][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 393.768754][ T28] audit: type=1400 audit(2000065719.098:24300): avc: denied { ioctl } for pid=12824 comm="syz.0.2422" path="socket:[45511]" dev="sockfs" ino=45511 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 393.797381][T12829] SELinux: policydb magic number 0x34 does not match expected magic number 0xf97cff8c [ 393.841004][T12829] SELinux: failed to load policy [ 393.869105][T12833] loop4: detected capacity change from 0 to 512 [ 393.883211][ T28] audit: type=1400 audit(2000065719.203:24301): avc: denied { load_policy } for pid=12824 comm="syz.0.2422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 393.912768][T12833] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2425: inode has both inline data and extents flags [ 393.940090][T12833] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 393.940304][T12833] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2425: couldn't read orphan inode 15 (err -117) [ 393.949612][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 393.949656][ C0] EXT4-fs (loop4): initial error at time 2000065719: ext4_orphan_get:1397: inode 15 [ 393.949689][ C0] EXT4-fs (loop4): last error at time 2000065719: ext4_orphan_get:1397: inode 15 [ 393.989711][T12833] loop4: lost filesystem error report for type 5 error -117 [ 393.990266][T12833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.329228][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.341584][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.359380][ T28] audit: type=1400 audit(2000065719.791:24302): avc: denied { create } for pid=12839 comm="syz.4.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.364022][T12840] loop4: detected capacity change from 0 to 128 [ 394.386855][ T28] audit: type=1400 audit(2000065719.791:24303): avc: denied { setopt } for pid=12839 comm="syz.4.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.408323][T12840] vfat: Unknown parameter '·' [ 394.422410][ T28] audit: type=1400 audit(2000065719.791:24304): avc: denied { bind } for pid=12839 comm="syz.4.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 394.473785][ T28] audit: type=1400 audit(2000065719.896:24305): avc: denied { name_bind } for pid=12843 comm="syz.4.2429" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 394.501997][ T28] audit: type=1400 audit(2000065719.896:24306): avc: denied { node_bind } for pid=12843 comm="syz.4.2429" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 394.547220][T12856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2433'. [ 394.964625][T12869] loop4: detected capacity change from 0 to 512 [ 395.053196][T12869] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2437: inode has both inline data and extents flags [ 395.099131][T12869] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 395.099808][T12869] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2437: couldn't read orphan inode 15 (err -117) [ 395.109344][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 395.109366][ C1] EXT4-fs (loop4): initial error at time 2000065720: ext4_orphan_get:1397: inode 15 [ 395.109412][ C1] EXT4-fs (loop4): last error at time 2000065720: ext4_orphan_get:1397: inode 15 [ 395.264643][T12869] loop4: lost filesystem error report for type 5 error -117 [ 395.268945][T12869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.376779][T12877] SELinux: policydb magic number 0x34 does not match expected magic number 0xf97cff8c [ 395.388952][T12877] SELinux: failed to load policy [ 395.413816][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.683732][ T28] audit: type=1400 audit(2000065721.167:24307): avc: denied { read } for pid=12880 comm="syz.4.2442" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 395.980087][T12904] loop9: detected capacity change from 0 to 512 [ 396.044571][T12904] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2452: inode has both inline data and extents flags [ 396.061183][T12904] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 396.061423][T12904] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2452: couldn't read orphan inode 15 (err -117) [ 396.070656][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 396.070676][ C1] EXT4-fs (loop9): initial error at time 2000065721: ext4_orphan_get:1397: inode 15 [ 396.070716][ C1] EXT4-fs (loop9): last error at time 2000065721: ext4_orphan_get:1397: inode 15 [ 396.111433][T12904] loop9: lost filesystem error report for type 5 error -117 [ 396.112144][T12904] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.147908][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.323577][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2456'. [ 396.339339][T12915] tipc: Failed to remove unknown binding: 66,1,1/0:4258777053/4258777055 [ 396.340898][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2456'. [ 396.357284][T12915] tipc: Failed to remove unknown binding: 66,1,1/0:4258777053/4258777055 [ 396.472639][T12924] -1: renamed from syzkaller0 [ 396.609963][T12949] loop8: detected capacity change from 0 to 512 [ 396.617588][T12949] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 396.627934][T12947] loop1: detected capacity change from 0 to 512 [ 396.644654][T12949] EXT4-fs (loop8): 1 truncate cleaned up [ 396.651407][T12947] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2465: inode has both inline data and extents flags [ 396.658131][T12949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.691709][T12947] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 396.691980][T12947] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2465: couldn't read orphan inode 15 (err -117) [ 396.701196][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 396.701239][ C0] EXT4-fs (loop1): initial error at time 2000065722: ext4_orphan_get:1397: inode 15 [ 396.701287][ C0] EXT4-fs (loop1): last error at time 2000065722: ext4_orphan_get:1397: inode 15 [ 396.760628][T12959] loop4: detected capacity change from 0 to 512 [ 396.767223][T12947] loop1: lost filesystem error report for type 5 error -117 [ 396.768053][T12947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.791737][T12959] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 396.801691][T12959] EXT4-fs (loop4): orphan cleanup on readonly fs [ 396.821788][T12959] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 396.859248][T12959] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 396.879322][T12959] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.2466: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 396.901096][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.912520][T12959] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 396.952787][T12959] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2466: couldn't read orphan inode 13 (err -117) [ 396.962342][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 396.962363][ C0] EXT4-fs (loop4): last error at time 2000065722: ext4_ext_check_inode:521: inode 13 [ 397.033599][T12959] loop4: lost filesystem error report for type 5 error -117 [ 397.034473][T12959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.073515][T12959] EXT4-fs error (device loop4): ext4_lookup:1785: comm syz.4.2466: inode #15: comm syz.4.2466: iget: illegal inode # [ 397.102056][T12949] lo speed is unknown, defaulting to 1000 [ 398.223067][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.323476][T12983] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 398.396934][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 398.396953][ T28] audit: type=1400 audit(2000065724.033:24335): avc: denied { create } for pid=12988 comm="syz.0.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 398.468903][T12983] loop8: detected capacity change from 0 to 512 [ 398.532720][ T28] audit: type=1400 audit(2000065724.075:24336): avc: denied { write } for pid=12988 comm="syz.0.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 398.564335][T12983] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.633469][ T28] audit: type=1400 audit(2000065724.075:24337): avc: denied { nlmsg_write } for pid=12988 comm="syz.0.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 398.674717][ T6537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.700707][ T28] audit: type=1400 audit(2000065724.075:24338): avc: denied { setopt } for pid=12988 comm="syz.0.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 398.748135][ T28] audit: type=1400 audit(2000065724.253:24339): avc: denied { ioctl } for pid=12982 comm="syz.8.2469" path="/305/file0/file1" dev="loop8" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 399.114360][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.142261][T12999] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.171892][T12999] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.191136][T13002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13002 comm=syz.8.2477 [ 399.213267][T13004] loop4: detected capacity change from 0 to 512 [ 399.223761][T13002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.234739][T12999] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.239029][T13004] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2478: inode has both inline data and extents flags [ 399.257313][T12999] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.271345][T13002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.281760][T13004] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 399.282000][T13004] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2478: couldn't read orphan inode 15 (err -117) [ 399.291503][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 399.291526][ C0] EXT4-fs (loop4): initial error at time 2000065724: ext4_orphan_get:1397: inode 15 [ 399.291577][ C0] EXT4-fs (loop4): last error at time 2000065724: ext4_orphan_get:1397: inode 15 [ 399.292086][T13001] loop9: detected capacity change from 0 to 512 [ 399.304316][T13004] loop4: lost filesystem error report for type 5 error -117 [ 399.338215][T13004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.366906][T13001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 399.394430][T12999] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.417866][T13001] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2479: iget: bad i_size value: 38620345925642 [ 399.432179][T12999] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.444548][T13001] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 399.452673][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 399.468745][ C1] EXT4-fs (loop9): initial error at time 2000065725: ext4_orphan_get:1397: inode 15 [ 399.478389][ C1] EXT4-fs (loop9): last error at time 2000065725: ext4_orphan_get:1397: inode 15 [ 399.488895][T13001] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2479: couldn't read orphan inode 15 (err -117) [ 399.502577][T13001] loop9: lost filesystem error report for type 5 error -117 [ 399.503250][T13001] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.527689][ T28] audit: type=1400 audit(2000065725.209:24340): avc: denied { read append open } for pid=13000 comm="syz.9.2479" path="/275/bus/cpuset.effective_mems" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 399.558169][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.606893][T13007] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2479: bg 0: block 5: invalid block bitmap [ 399.621098][ T28] audit: type=1400 audit(2000065725.293:24341): avc: denied { map } for pid=13000 comm="syz.9.2479" path="/275/bus/cpuset.effective_mems" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 399.647655][T12999] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.658951][T13007] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 536 with error 28 [ 399.669932][T12999] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.681546][ T28] audit: type=1400 audit(2000065725.293:24342): avc: denied { write } for pid=13000 comm="syz.9.2479" path="/275/bus/cpuset.effective_mems" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 399.708724][T13007] EXT4-fs (loop9): This should not happen!! Data will be lost [ 399.708724][T13007] [ 399.728459][T13007] EXT4-fs (loop9): Total free blocks count 0 [ 399.735269][T13007] EXT4-fs (loop9): Free/Dirty block details [ 399.741926][T13007] EXT4-fs (loop9): free_blocks=0 [ 399.747151][T13007] EXT4-fs (loop9): dirty_blocks=540 [ 399.759943][ T50] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.767071][T13007] EXT4-fs (loop9): Block reservation details [ 399.768446][ T50] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.774418][T13007] EXT4-fs (loop9): i_reserved_data_blocks=540 [ 399.793614][T13020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.816599][ T118] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.822178][T13020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.829201][ T118] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.872753][ T118] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.886783][ T118] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.924653][ T118] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.936532][ T118] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.024942][T13007] lo speed is unknown, defaulting to 1000 [ 400.233760][T13023] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.344294][T13033] loop9: detected capacity change from 0 to 512 [ 400.367815][T13033] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 400.376220][T13033] EXT4-fs (loop9): orphan cleanup on readonly fs [ 400.383641][T13033] EXT4-fs warning (device loop9): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 400.401649][T13033] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 400.418734][T13033] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #13: comm syz.9.2488: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 400.441781][T13033] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 400.443358][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 400.459140][ C1] EXT4-fs (loop9): last error at time 2000065726: ext4_ext_check_inode:521: inode 13 [ 400.478898][T13033] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2488: couldn't read orphan inode 13 (err -117) [ 400.504019][T13033] loop9: lost filesystem error report for type 5 error -117 [ 400.504494][T13033] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 400.513066][T13039] loop1: detected capacity change from 0 to 512 [ 400.527091][T13033] EXT4-fs error (device loop9): ext4_lookup:1785: comm syz.9.2488: inode #15: comm syz.9.2488: iget: illegal inode # [ 400.574232][ T28] audit: type=1400 audit(2000065726.301:24343): avc: denied { getopt } for pid=13046 comm="syz.4.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 400.615346][ T28] audit: type=1400 audit(2000065726.301:24344): avc: denied { create } for pid=13046 comm="syz.4.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 400.621810][T13039] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2491: inode has both inline data and extents flags [ 400.664107][T13039] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 400.671887][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 400.687696][ C1] EXT4-fs (loop1): initial error at time 2000065726: ext4_orphan_get:1397: inode 15 [ 400.697427][ C1] EXT4-fs (loop1): last error at time 2000065726: ext4_orphan_get:1397: inode 15 [ 400.716073][T13053] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.726348][T13053] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.746799][T13039] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2491: couldn't read orphan inode 15 (err -117) [ 400.777267][T13058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13058 comm=syz.8.2496 [ 400.778051][T13039] loop1: lost filesystem error report for type 5 error -117 [ 400.792390][T13053] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.796336][T13039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.800488][T13053] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.862572][T13058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.877251][T13058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.988402][T13053] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.053846][T13053] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.229248][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.273679][T13053] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.302737][T13053] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.317534][T13071] loop0: detected capacity change from 0 to 1756 [ 401.532622][T13073] loop4: detected capacity change from 0 to 512 [ 402.364177][T13073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.567801][ T7853] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.671148][T11170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.712813][ T3304] ================================================================== [ 402.721131][ T3304] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 402.728180][ T3304] [ 402.730602][ T3304] write to 0xffff888103f9af74 of 4 bytes by task 4286 on cpu 0: [ 402.739104][ T3304] shmem_mknod+0x143/0x170 [ 402.743629][ T3304] shmem_create+0x34/0x50 [ 402.747981][ T3304] path_openat+0xd75/0x2050 [ 402.752666][ T3304] do_file_open+0x16c/0x290 [ 402.757449][ T3304] do_sys_openat2+0x94/0x130 [ 402.762050][ T3304] __x64_sys_openat+0xf2/0x120 [ 402.766864][ T3304] x64_sys_call+0x1e39/0x3020 [ 402.771657][ T3304] do_syscall_64+0x12c/0x370 [ 402.776266][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.782200][ T3304] [ 402.784536][ T3304] read to 0xffff888103f9af74 of 4 bytes by task 3304 on cpu 1: [ 402.792178][ T3304] fill_mg_cmtime+0x5b/0x270 [ 402.796875][ T3304] generic_fillattr+0x24a/0x340 [ 402.801831][ T3304] shmem_getattr+0x181/0x200 [ 402.806439][ T3304] vfs_getattr_nosec+0x146/0x1e0 [ 402.811404][ T3304] vfs_getattr+0x48/0x60 [ 402.815752][ T3304] vfs_statx_path+0x28/0x140 [ 402.820465][ T3304] vfs_statx+0xc4/0x170 [ 402.824734][ T3304] vfs_fstatat+0x118/0x170 [ 402.829167][ T3304] __se_sys_newfstatat+0x55/0x3e0 [ 402.834306][ T3304] __x64_sys_newfstatat+0x55/0x70 [ 402.839458][ T3304] x64_sys_call+0x2c64/0x3020 [ 402.844147][ T3304] do_syscall_64+0x12c/0x370 [ 402.848763][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.854692][ T3304] [ 402.857116][ T3304] value changed: 0x21c1d260 -> 0x21c997b4 [ 402.863031][ T3304] [ 402.865375][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 402.871535][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 402.880485][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 402.891009][ T3304] ================================================================== [ 402.961158][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.971490][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.744510][ T7074] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.753067][ T7074] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.765608][ T7074] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.774051][ T7074] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.785446][ T7074] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.793758][ T7074] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.805141][ T7074] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.813486][ T7074] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0