last executing test programs: 1m22.100527901s ago: executing program 4 (id=98): pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c56, &(0x7f0000001480)=ANY=[@ANYBLOB='uni_xlate=1,iocharseZ=euc-jp,uni_xlate=0,codepage=865,shortname=win95,shortname=lower,debug,check=normal,umask=00000000000000000000003,utf8=0,shortname=mixed,rodir,utf8=0,\x00'], 0x81, 0x29b, &(0x7f00000011c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100005ed2000000140000c7d44a001100010000000000000000800100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000340)={0x1, 0x0, 0x2, 0x80000001}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000240)={0x1, 0x0, 0x200000002, 0xfffffffffffffff8}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') pread64(r7, &(0x7f0000000140)=""/26, 0x1a, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@quota}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") socket$inet(0x2, 0x2, 0x1) r8 = fsopen(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x37, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000140)='\x00@\xf1f\x9e#l \xa8\xfe\xbb\x18F\b\r\xc0(\xcff|2\x81\xba\xfeA\xa4!\xcb\xaa[\xbbn\t\x0e\xfd)\x974T\xfc\xba\x82P\x11\xd9\x97\xa1\xe7\x9b\x9e\xacq\x99\xe4\xe5EH\x84xn\x88\x88^6d\x90\xd3R\xb7\xbc\xd7\x94\x82\xd2\x14\x18T\xce}:\xc6t\xff\xed!_-\xcd\xa5\t\xc2\xeb\xc8\x1cA\xb4tW\r\x9c\xec\t$\xa5\xf4\"g>\xb8\xf3\xab\x12\x8a\xc4\xa1 \xf5\xe2\x18\xd4m\xe3\x92\x89E\x7f #,\x8dzk\x13\xd0\x17\xc0\xbdC\xfd\xd6\xf2v\xd6B\xab\x01\xc0(w2\xdaf3\xff\x8ei\xfehj\x9f\xac\x9f\xf5\x1c{\x8f\x1ei\xc9\x03\t5\xd238\xbe\x85\xe6XD\x04\x8fq\xca\xbaO\x16\x92\x18\xcd\xf5;i\xb0\xb4mtT\xcc\xaf\xb6?T\xc9\xb1\xb1>\xd2\xa0W\xcfN\xdb\xedK\xa9\x1b1r\x00\x00\x00\x004\xa0\xcb)\x0ej|l\xd0\xb4\b]\xe2\xc1\xe2\x18\x06O\x1f\x1e\x1d\xb5+\f\x7fs.A\xd7\"9&\xb1\xf6\xba\xd5\xbf6\xaf\xfb\xad\xdb5\xbd>\xb8\x17\xc2\x95^\xbe\x9c<\xfc\v\xfe\x8b\xd62v\x97\x8aW\xef0\v\xd3\x9b\x80\xdfk\xde\x9c\xfd_^\x0e\xefN\x14o', &(0x7f0000000080)="ce", 0xff00) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) 1m21.600766697s ago: executing program 4 (id=101): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000080000007f00004834000000", @ANYRES32=0x1, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x392, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x2}}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x69f, &(0x7f0000000f00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x200082) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') sendfile(r4, r4, 0x0, 0x80000000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 1m21.400155799s ago: executing program 4 (id=105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x50, r1, 0x511, 0x703d29, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40850}, 0x0) (fail_nth: 9) 1m21.086917483s ago: executing program 4 (id=108): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x90, &(0x7f0000000040)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r3, 0x402, 0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) rmdir(&(0x7f0000000100)='./control\x00') lsetxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000440)='system_u:object_r:var_spool_t:s0\x00', 0x21, 0x2) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) syz_clone(0x1040000, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_int(r7, &(0x7f0000000340)=0x1, 0x12) 1m20.834290116s ago: executing program 4 (id=113): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x2b, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r1, 0x2219, 0x7723, 0x16, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYBLOB='\x00\x00'], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000680)=0x80000000, 0x4) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb", 0x3d, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x845}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9, 0xffe0}, {0x10, 0x2}, {0xffe0}}}, 0x24}}, 0x0) 1m19.61059144s ago: executing program 4 (id=116): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000040007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000300003e85000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m19.59714176s ago: executing program 32 (id=116): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000040007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000300003e85000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m14.358663071s ago: executing program 0 (id=153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0xffff}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 1m14.288164002s ago: executing program 0 (id=154): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000040)={[{@resgid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="00001c0000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1m13.898352476s ago: executing program 0 (id=157): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m13.679712829s ago: executing program 0 (id=161): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x21c5d4, &(0x7f0000000b40)=ANY=[], 0x1, 0x120c, &(0x7f0000003680)="$eJzs3M+LG2UYB/Bntz+2bt0faq22IL7oRS9Ddw9e9LLIFqQBpe0KrSBM3VkNGZOQCQsRsXry6t8hghdvgnjTy178DwRve/FYQRzZpLaNpthVcUr7+VzywPt+w/MmJPAO887+K5+939mpsp18GPNzczHfj0g3UqSYjz98HC++/N33z1y6cvXCRqu1eTGl8xuX115KKS0/+81bH37x3LfDk29+tfz1Quytvr3/8/pPe6f3zuz/dvm9dpXaVer2hilP13q9YX6tLNJ2u+pkKb1RFnlVpHa3KgZT4ztlr98fpby7vbTYHxRVlfLuKHWKURr20nAwSvm7ebubsixLS4vB4R29VW19fqOu64i6PhbHo67r+pFYjJPxaCzFcqzEajwWj8cTcSqePHYz8uOXo4MEAAAAAAAAAAAAAAAAAAAA8N+55/P/cTqeiqfjzHhW010DAAAAAAAAAAAAAAAAAADAg+XSlasXNlqtzYspnYgoP93d2t2avE7GN3aiHWUUcS5W4tcYn/6fmNTnX2ttnktjq/FJef1m/vru1pHp/Nr4cQIz82uTfJrOL8Tinfn1WIlTs/PrM/Mn4oXn78hnsRI/vBO9KGM7DrK38x+tpfTq660/5c+O5wEAAMCDIEu3zNy/Z9ndxif5Q1wfmNpfH2TPHm106URENfqgk5dlMXh4i/mIuA/a+PvieLNt/FLXdfMfQkPF3X8pCxHxj995LiLujwX+pWj6n4n/w+0vvelOAAAAAAAAAAAAOIx/davgkXuLN71GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5nB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8FQAA//9qIs+X") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200048c3}, 0x20000094) socket$rxrpc(0x21, 0x2, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r4, r4, 0x0, 0x7a680000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x80000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r5, &(0x7f0000000100)=ANY=[], 0x23) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r9}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x47, 0xf7, 0xfffff00c}, {0x6, 0x6, 0x0, 0x57c}]}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) wait4(r8, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40080, 0x0, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0xf8, r7}, 0x14) 1m11.895356s ago: executing program 0 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0xc8, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x7, 0x5, 0xa3623}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1c000000, 0x9, 0xffffffffffffffff, 0x5, 0x401}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc8}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB='\x00'/28], 0x48) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x385, &(0x7f0000000940)="$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") setuid(0xee01) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0xff, 0x1, 0x3}, 0x7632673b052592e3) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* mw'], 0xa) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000100)=0xff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000fcffffff8500000075000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007040000f0ffffffb70200000800000018230000086fd6929fb3d345649f1d6ecee5485d25604c7a214fad43c6d41d8632534114e4298eb316e7067d7fdb452ca3ddbe7e9c6396b7857a5864563283970f2f3cd9deb2037084c0afe1fa8214833f52", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0xc8, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x7, 0x5, 0xa3623}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1c000000, 0x9, 0xffffffffffffffff, 0x5, 0x401}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc8}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB='\x00'/28], 0x48) (async) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x385, &(0x7f0000000940)="$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") (async) setuid(0xee01) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000000)) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0xff, 0x1, 0x3}, 0x7632673b052592e3) (async) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* mw'], 0xa) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000100)=0xff, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000fcffffff8500000075000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007040000f0ffffffb70200000800000018230000086fd6929fb3d345649f1d6ecee5485d25604c7a214fad43c6d41d8632534114e4298eb316e7067d7fdb452ca3ddbe7e9c6396b7857a5864563283970f2f3cd9deb2037084c0afe1fa8214833f52", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 1m10.583333955s ago: executing program 0 (id=174): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xfd}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 1m10.485334466s ago: executing program 33 (id=174): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xfd}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 43.295909344s ago: executing program 5 (id=390): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x1000092, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000740)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4d08, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae5}, {0x6, 0x2, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) 42.456942874s ago: executing program 1 (id=395): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x1d) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180)}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) kexec_load(0xfffffffffffffffc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf8, r7}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be", 0x1}, {0x0}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit={0x95, 0x0, 0xffd0}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 39.40634184s ago: executing program 5 (id=397): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000007c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@dax}, {@init_itable}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) gettid() socket(0x2, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb000000000000008000080000000000080000000000000c04000000003000000000b2648617c7d2c40000008000000000000000"], &(0x7f0000000340)=""/155, 0x3f, 0x9b, 0x0, 0x4, 0x10000, @value=r2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0), 0x5}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'wg1\x00', 0x3}) 38.750543928s ago: executing program 1 (id=402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7, 0x80, 0x3, 0x353, {{0x5, 0x4, 0x3, 0x3c, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) process_vm_writev(0xffffffffffffffff, &(0x7f0000001c00)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/36, 0x24}, {&(0x7f0000001980)=""/100, 0x64}, {&(0x7f0000001a00)=""/64, 0x40}, {&(0x7f0000001a40)=""/22, 0x16}, {&(0x7f0000001a80)=""/202, 0xca}, {&(0x7f0000001b80)=""/74, 0x4a}], 0x7, &(0x7f0000002180)=[{&(0x7f0000001c80)=""/36, 0x24}, {&(0x7f0000001cc0)=""/141, 0x8d}, {&(0x7f0000001d80)=""/195, 0xc3}, {&(0x7f0000001e80)=""/83, 0x53}, {&(0x7f0000001f00)=""/198, 0xc6}, {&(0x7f0000002000)=""/57, 0x39}, {&(0x7f0000002040)=""/18, 0x12}, {&(0x7f0000002080)=""/226, 0xe2}], 0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000002a40)=""/4089, &(0x7f0000000080)=0xff9) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x20008004) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x13, r3, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 38.437548521s ago: executing program 1 (id=408): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = syz_usb_connect$midi(0x0, 0x86, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYRES8=r1], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x80000001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) listen(0xffffffffffffffff, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x801) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r3, &(0x7f00000004c0)=""/249, 0xf9, 0x20120, 0x0, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x5, &(0x7f0000000380)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) ftruncate(r5, 0x51a9497) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000240)={0x0, 0x5, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x0, 0x0, 0xa092a5fe06e0bc84}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x134) copy_file_range(r9, 0x0, r9, &(0x7f0000000500)=0xffff, 0x9, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x28, 0x0, &(0x7f0000000240)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 35.725716783s ago: executing program 1 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 35.190896559s ago: executing program 5 (id=422): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff0000001cb7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 32.207738574s ago: executing program 1 (id=426): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r2, 0x1, 0x7, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000100001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10, r0}, 0x94) 32.207541944s ago: executing program 5 (id=427): umount2(&(0x7f0000000080)='./file1\x00', 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x10010, &(0x7f0000000200)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x1c0000}}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x582, &(0x7f0000000900)="$eJzs3V1rHFUYAOB3Nh/91KZQinohhV5Yqd00iR8VBOulaLGg93VJtqFk0y3ZTWliwfbC3uiFFEHEgvgDvPey+AP0VwhaKFKCXogQmc1smjSz2STddLfd54FJztmZyZl3z7wnZ2Z32QD61rH0RyHixYj4Ook4tGbdYGQrj61st/Tg+mS6JLG8/PFfSSTZY83tk+z3gazyQkT88kXEycLGdmsLizOlSqU8l9VH67NXRmsLi6cuzZamy9Ply+MTE2femBh/+603Oxbrq+f/+e6ju++f+fL40rc/3Tt8O4mzcTBbtzaOx3BjbeVY6b+sNBRnH9lwrAON9ZJkXS2nw+lJA1meD0U6BhyKgSzrgWff5xGxDPSpZHv5P2zAgGdFcx7QvLbv0HXwU+P+eysXQI3Yh9fGP7hybyT2Nq6N9i8l666M0uvdkQ60n7bx8593bqdLbH4fYl+bOsC23LgZEacHBzeO/0k2/u3c6S3cCHy0jX77/wPddDed/7yWN/8rrM5/Imf+cyAnd3eiff4X7nWgmZbS+d87ufPf1aFrZCCrPdeY8w0lFy9Vyqcj4vmIOBHLSbs2ziy1vqm+dv6XLmn7zblgdhz3Bves32eqVC9FxPAOQ17n/s2Ilwbz4k9W+z/J6f/0+Ti/xTaOlu+83Gpd+/h31/KPEa/k9v/Dbk02f31ytHE+jDbPio3+vnX0t1btdzv+tP/3bx7/SLL29dra9tv4Ye+/5Vbrdnr+DyefNMrNJLhWqtfnxiKGkw83Pj7+cN9mvbl9Gv+J45uPf3nnf3rx9WlOPHkTnltHbuVtusX4d1ca/9S2+n/7hd8/+Oz7Vu1vrf9fb5ROZI9k41++7FzZ6gE+7vMHAAAAAAAAvaQQEQcjKRRXy4VCsbjy/o4jsb9QqdbqJy9W5y9PReOzsiMxVGi+0n1ozfshxrL3wzbr44/UJyLicER8M7CvUS9OVitT3Q4eAAAAAAAAAAAAAAAAAAAAesSBFp//T/0x0O2jA3Zd44sN9nT7KIBuaPuV/534piegJ7XNf+CZJf+hf8l/6F/yH/qX/If+9OtX8h/6mfyH/iX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKPOnzuXLstLD65PpvWpqwvzM9Wrp6bKtZni7PxkcbI6d6U4Xa1OV8rFyepsu79XqVavjI3H/LXRerlWH60tLF6Yrc5frl+4NFuaLl8oDz2RqAAAAAAAAAAAAAAAAAAAAODpUltYnClVKuW5J1EY6kajj194N3riMHYzwBU72n2wV6JQaFG4mXXv9vbq0oAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn+DwAA//9H+Cm5") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xb6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 32.129318005s ago: executing program 1 (id=429): socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8993, &(0x7f0000001580)='\xa8hE\xe5]\x18r:\x86\xf0\xdd\"\t\x97\x8e\xba\b\"\xb7\x15\xc9\xf8\x11O\'\xe5W\x82\xd9\xd6m\xb0\x8cV\xed\xc0.A\xe2\x19\x18\xe5\xc1$>\x1e\x9c\xdaH\r\xc3\xdc\x95S\'\xaa\xeau4I7b\x9d\xa3\xd9H\x9f\xe99\x1f\xb1\xd0\xb8\"j\xdd\xfb\x15+\xb04;\xf0\x02\xac\x11\xc5\xbf7\xe4\xa22z\x92\xf5\xc9lez\x82*\xc8\xf5y\x99\xbc\r5\xa9\x85\xa4\xf8\x86\x95\xc2\x86\x82\xd90\xbe\xd9\x82\x95*\xa2\xbc\xcb\xbdM\x14\xf2\xd9\x1d\x1d|\xa1)m~\t\xac[\x17q[\xce\xe6\xf4\xdb,\xdc\xb2\x8dG\xed[') 32.074879595s ago: executing program 34 (id=429): socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8993, &(0x7f0000001580)='\xa8hE\xe5]\x18r:\x86\xf0\xdd\"\t\x97\x8e\xba\b\"\xb7\x15\xc9\xf8\x11O\'\xe5W\x82\xd9\xd6m\xb0\x8cV\xed\xc0.A\xe2\x19\x18\xe5\xc1$>\x1e\x9c\xdaH\r\xc3\xdc\x95S\'\xaa\xeau4I7b\x9d\xa3\xd9H\x9f\xe99\x1f\xb1\xd0\xb8\"j\xdd\xfb\x15+\xb04;\xf0\x02\xac\x11\xc5\xbf7\xe4\xa22z\x92\xf5\xc9lez\x82*\xc8\xf5y\x99\xbc\r5\xa9\x85\xa4\xf8\x86\x95\xc2\x86\x82\xd90\xbe\xd9\x82\x95*\xa2\xbc\xcb\xbdM\x14\xf2\xd9\x1d\x1d|\xa1)m~\t\xac[\x17q[\xce\xe6\xf4\xdb,\xdc\xb2\x8dG\xed[') 31.854780118s ago: executing program 5 (id=433): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 29.442763407s ago: executing program 5 (id=447): ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x2, 0x0, 0x1257}) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp6=r4}, 0x20) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_bp={0x0, 0x1}, 0x103144, 0x10000, 0x0, 0x6, 0x5, 0x80080, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000002c0)=0x25a1, 0x4) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844) write(r7, &(0x7f00000001c0)='+', 0x1) 29.435844856s ago: executing program 35 (id=447): ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x2, 0x0, 0x1257}) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp6=r4}, 0x20) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_bp={0x0, 0x1}, 0x103144, 0x10000, 0x0, 0x6, 0x5, 0x80080, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000002c0)=0x25a1, 0x4) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844) write(r7, &(0x7f00000001c0)='+', 0x1) 3.739295047s ago: executing program 3 (id=591): syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540000000000800048004000280140005800f0001"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x80) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x9, 0x6e2f, 0x8, 0x1, 0x4, 0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, r3, 0xffffffffffffffff, r2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000030803000000c1ed000000080400048000000000"], 0x18}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000900)='Z', 0x1}, {&(0x7f0000000c40)="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", 0x262}, {&(0x7f0000000440)="94673fd987736fad6c78a8b7114650b03db4d1b219d1608d73df7a486dae319f573a7014b5e3537db7b883f5d69e19b55db7352f823627d9589949beded0bb7b3179f0f74d6317f8414ed5a627691da1eb7e8abb29cd75d5861776a64abceb66be4f128ad273537f1530cb3d4dd0e34590b25e0a7cc0f05624c6566386dc91640e565a1bafb27916fc8a2b625997396dca18d5220c73133ab00b1b2a3d6e84935dd4a5e577f2f3760138d41d509f027a5b628fab328127f55315def9a4c5e046c2e9076e2ed91bf525af0c6b9fa2849ddf3e993146f22a99e56f6022a9ab60ae46b19efeb0051157d5aaa114788b6ebea394"}], 0x2, 0x0, 0x0, 0x8011}, 0x0) 2.671273509s ago: executing program 3 (id=597): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x6d, 0x8, 0x40, 0x9, 0x0, 0x5, 0x2011, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0xa0, 0x4, 0x6, 0x5, 0x7fffffffffffffff, 0x2, 0xff92, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x8e, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x109, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8000000000000001, 0x8}, 0x15402, 0x3, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x4ffff, 0x0, 0x5}, r1, 0x7, r2, 0xa) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) close(r3) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setuid(0xee00) r4 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x98}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) splice(r0, 0x0, r5, 0x0, 0xf3a, 0x6) 2.511596941s ago: executing program 3 (id=599): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x80000001}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4004816) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.251610164s ago: executing program 6 (id=602): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000040)={[{@resgid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00200000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.811052199s ago: executing program 6 (id=606): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x40b, 0x70bd2b, 0x500, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_ES={0x5}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x40b, 0x70bd2b, 0x500, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_ES={0x5}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlink(0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000075266f83000000000000000004000000fdffffffc3000000000100009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) mmap$perf(&(0x7f0000c8f000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r2, 0x8) 1.740115251s ago: executing program 3 (id=607): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020"], 0x0, 0x4}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc010000190001000000000300000000ac14141f0000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00ffffffffffffff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000044010500fc020000000000000000000000000000000000003200000000000000ffffff030100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000033"], 0x1fc}}, 0x0) 1.547931203s ago: executing program 2 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.401837534s ago: executing program 6 (id=609): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x6d, 0x8, 0x40, 0x9, 0x0, 0x5, 0x2011, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0xa0, 0x4, 0x6, 0x5, 0x7fffffffffffffff, 0x2, 0xff92, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x8e, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x109, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8000000000000001, 0x8}, 0x15402, 0x3, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x4ffff, 0x0, 0x5}, r1, 0x7, r2, 0xa) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) close(r3) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setuid(0xee00) r4 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x98}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) splice(r0, 0x0, r5, 0x0, 0xf3a, 0x6) 1.400821634s ago: executing program 7 (id=610): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10004, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "000000ffff000000010100"}) r1 = syz_open_pts(r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) dup3(r1, r0, 0x80000) (async) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) close(r6) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) epoll_create1(0x0) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036a"], 0xfe33) recvfrom$inet6(r8, &(0x7f0000000080)=""/88, 0x58, 0x30022, 0x0, 0x0) (async, rerun: 32) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) close(r10) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000106140000001100010000000000000000000100000aae6c5ef843b016ea3c2e5d3baf118cfdc6e2c73dc90073daf7f64f"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) 1.330929945s ago: executing program 2 (id=611): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac4200083f0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x81, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x20004040) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x305}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40081}, 0x44080) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117b00000000008510000002000000850000008800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.291408985s ago: executing program 8 (id=612): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x4008c0, &(0x7f0000000040)={@_ha_fsid={[0x4, 0xa08]}, {0x2, 0x4e97, 0xb, 0x3}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x410, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008814) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)=0x0) prlimit64(r3, 0x7, &(0x7f00000003c0)={0x5, 0x9}, 0x0) ioctl$BLKRASET(r0, 0x1262, &(0x7f0000000400)=0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r5, 0x8, 0x70bd2c, 0xfa8, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x23}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x91}, 0x20008810) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000d, 0x11, r0, 0xcc318000) getrlimit(0xa, &(0x7f0000000600)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) prlimit64(r3, 0x14aa44599c406d91, &(0x7f0000000640)={0x2}, &(0x7f0000000680)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x8, 0xe9b, 0x2, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7840, 0x4, 0x6}}) getpeername$packet(r4, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000800)=0x14) sendmsg$nl_route(r4, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=@mpls_delroute={0xe4, 0x19, 0x0, 0x70bd28, 0x25dfdbfc, {0x1c, 0x20, 0x0, 0x9, 0xfc, 0x0, 0xfd, 0xa, 0x600}, [@RTA_MULTIPATH={0xc, 0x9, {0x186, 0x0, 0x4}}, @RTA_DST={0x8, 0x1, {0x101, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0xd, 0x7, r6}}, @RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0xd3c, 0x0, 0x1}, {0x2}, {0x8, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x4000}, {0x8001}, {0x6}, {0x5, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xffffa, 0x0, 0x1}, {0x20004}, {0x2, 0x0, 0x1}, {0xfabaa}, {0x3}, {0x7f}, {0x1610b}, {0xcb, 0x0, 0x1}, {0x28e1, 0x0, 0x1}, {0x57800}, {0x112}, {0x9, 0x0, 0x1}, {0x6}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x2}, {0x6674}, {0xd170}, {0x400, 0x0, 0x1}, {0x4}, {0x1}, {0x101, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x11, "1035009a14d9fa2495898c44e6ae"}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) write$binfmt_aout(r4, &(0x7f00000009c0)={{0x108, 0x7, 0x1, 0xe6, 0xba, 0x5, 0x176, 0x8}, "078610787e7dbee5a5381714953055abbfdc69c5e6b683cb1ff97048d5c60d240a69c65c74c337863ae444aa96d8fe4f2bc738a1702a5096bf220e143b03cf032aaa7b", ['\x00']}, 0x163) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}}, 0x40000) getsockname$qrtr(r0, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc) connect$inet(r4, &(0x7f0000000d00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$unix(r0, &(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e) r9 = accept4$phonet_pipe(r0, &(0x7f0000000dc0), &(0x7f0000000e00)=0x10, 0x80800) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000e80)={0x6, &(0x7f0000000e40)=[{0x5, 0x16, 0xf9, 0x1}, {0x46, 0x0, 0xff, 0x2}, {0xff01, 0x0, 0x6, 0x24}, {0x624c, 0x9, 0x8, 0x4}, {0xf, 0xd, 0x2, 0x21ad}, {0x5, 0x1, 0x6, 0x3}]}, 0x10) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000ec0)={0x26b}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001240)={r0, 0x20, &(0x7f0000001200)={&(0x7f0000001080)=""/90, 0x5a, 0x0, &(0x7f0000001100)=""/237, 0xed}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xb, 0xa, &(0x7f0000000f00)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @generic={0x71, 0x8, 0x8, 0x2c, 0x3ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000f80)='GPL\x00', 0x4, 0x50, &(0x7f0000000fc0)=""/80, 0x40f00, 0x58, '\x00', r6, @fallback=0x2, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001040)={0x1, 0x9, 0x1, 0x9}, 0x10, r10, r4, 0x6, 0x0, &(0x7f0000001280)=[{0x5, 0x3, 0x1, 0xa}, {0x1, 0x1, 0xc, 0x8}, {0xfffffff9, 0x4, 0xc, 0xb}, {0x0, 0x2, 0x0, 0xb}, {0x3, 0x3, 0xc}, {0x3, 0x4, 0x10, 0x7}], 0x10, 0x7fff}, 0x94) pwritev(r1, &(0x7f0000001540)=[{&(0x7f00000013c0)="a0ea9840acea10493d7a66eea0781277526b8f22d8236cd8b6442b8f4e54150924262369deb656aa6bc65cab0e453ad6e2bdaf3711c938a4325971cf31e8c661e9c15004000c7fc62daf51e49d935cf5cf8884b67bee4fa9bfc59f36e248c54b9dbaa6db2a6ffb6fa6a37b5d8b9faedad397c0b38681e2323caccf50c1a557ca2a2d25d4801c154ec6ab1f2a77b274128f2ae16ab050f2e43ee6e9773fc63883b0e2484285a1cdda2f0b49a6b869107fa34f6550dde53876a9e8b33d", 0xbc}, {&(0x7f0000001480)="e0f8ec40dca812c251047671092cac1fad5f0cfa9b8e0ef203d6b19cabd8970a0f555620d88db72b6c4752898a0615fafd99d23c3c85bff223f8f804bb1275813cb724b838a90d46b6dc8e7c98cf365075b2d98149ebf677b5e8569f012681f74d7c8ee696f7658d4cf07569b99734b71b94e83fdf78f020a62b7f6bbf7923dbd56e16217ab7569df7ab9062f01bf3ad30ab920e0f31409cb4420975e99c6de0468e2833dbdb3b43de7a1391c3ea4ef36fd7", 0xb2}], 0x2, 0x7f, 0x10) 1.272851306s ago: executing program 3 (id=613): perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_setup(0x239f, &(0x7f00000001c0)) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xff00, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080), 0x10) 1.234760356s ago: executing program 2 (id=614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x32, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x44001) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 1.201100047s ago: executing program 8 (id=615): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000020b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.200835977s ago: executing program 2 (id=616): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24088000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.197695586s ago: executing program 6 (id=617): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0xaf, @private2, 0x7}, {0xa, 0x4e20, 0x80000000, @empty, 0x10a884f7}, 0x1, {[0x0, 0xd0, 0xffffffff, 0x3e, 0x5, 0x2, 0x9, 0x1]}}, 0x5c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000004300)=0x7fff, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000004b000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b6000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3, r2}, 0xc) r4 = open$dir(&(0x7f0000000700)='./file0\x00', 0x58d000, 0x2) openat(r4, &(0x7f00000042c0)='./file0\x00', 0x280, 0xc0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xa8, @empty, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000040c0)=[{{&(0x7f0000000080)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/166, 0xa6}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f00000002c0)=""/136, 0x88}], 0x4, &(0x7f00000003c0)=""/131, 0x83}, 0x3}, {{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/6, 0x6}], 0x1, &(0x7f0000000580)=""/220, 0xdc}, 0x3}, {{&(0x7f0000000680)=@ethernet, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/65, 0x41}, 0x7a3}, {{&(0x7f00000007c0)=@can, 0x80, &(0x7f0000001900)=[{&(0x7f0000000840)=""/164, 0xa4}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x2, &(0x7f0000001940)=""/96, 0x60}, 0x6}, {{&(0x7f00000019c0)=@rc, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001a40)=""/8, 0x8}, {&(0x7f0000001a80)=""/226, 0xe2}, {&(0x7f0000001b80)=""/98, 0x62}, {&(0x7f0000001c00)=""/176, 0xb0}, {&(0x7f0000001cc0)=""/125, 0x7d}], 0x5, &(0x7f0000001dc0)=""/32, 0x20}, 0x4}, {{&(0x7f0000001e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/161, 0xa1}], 0x2}}, {{&(0x7f0000002f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003000)=""/7, 0x7}, {&(0x7f0000003040)=""/4096, 0x1000}], 0x2, &(0x7f0000004080)=""/8, 0x8}, 0x4}], 0x7, 0x10101, &(0x7f0000004280)) 1.122904727s ago: executing program 8 (id=618): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000022000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.122733598s ago: executing program 7 (id=619): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00000000b5080000000000007baaf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf85000000000000b5020000000000002800000000000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.122329738s ago: executing program 6 (id=620): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000680)=0x522, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000004000000010000000000000e0100000002000000002e0e"], 0x0, 0x2c, 0x0, 0x8, 0xfffffffa}, 0x28) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)) (async) syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa03029078000000006000081000001100fc01000000000000000000000000000000000000000000000000000000000000bb00000000000000052f000000000000fb36eeca6fad50b375a22a584d16ca55248c37351429beab061cdea570264bb4e2de17ffab3ede44142365f3e982f1ec50082b6eed2fec13d2032891cd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x301180, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth0_to_team\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x50, 0xfffffffd, 0xee, 0x3, 0x5, 0x0, 0x9, 0x2, 0x3}}) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) (async) r4 = socket(0x10, 0x3, 0x4) (async) close(0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000e06010100000000000a000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000044) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) splice(r3, 0x0, r5, &(0x7f0000000140)=0x8005, 0x4, 0x0) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)={[{@errors_remount}, {@jqfmt_vfsv1}]}, 0xfa, 0x4cc, &(0x7f00000016c0)="$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") 1.105318458s ago: executing program 2 (id=621): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="937b010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2309dbd2ca8f6a2d2534a06fe75e91ef077ed2050016e57bf18d93b057538be516c47929e517bda6449bd8dcecde09af7ed0c0507852ef859caf2e0bc8e40334d099b735c75979651b2311039fcea35690421026a83bca0cd123d7753fe7965da9ca0e68b0e7888b35c513cac270c0419a47d10046195b4ec34325ad7e423785d2a3fed64e9fbe4ddcf59094f736c55e8d425640ce237258049cf5"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.077339248s ago: executing program 7 (id=622): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="3eaa00000000000071106300000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48, 0x20064}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1848}]}}}]}, 0x3c}}, 0x20004000) 1.026760489s ago: executing program 6 (id=623): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', '\x00', "00000200", "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = shmget(0x0, 0x3000, 0x4, &(0x7f000074a000/0x3000)=nil) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f00000000c0)=""/62) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54ac1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0x1a}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x200000000000011, 0x2, 0x10) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="d1e4ff0000000180c20000000800450000000800e00000ef0b0000000000000000004e210001000c907861040000"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 912.18963ms ago: executing program 8 (id=624): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020"], 0x0, 0x4}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc010000190001000000000300000000ac14141f0000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0080ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000044010500fc020000000000000000000000000000000000003200000000000000ffffff030100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000033"], 0x1fc}}, 0x0) 872.44646ms ago: executing program 8 (id=625): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c12, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@map_acorn}, {@map_normal}, {@session={'session', 0x3d, 0x30}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@session={'session', 0x3d, 0x1e}}, {@overriderock}, {@unhide}, {@cruft}]}, 0x5, 0xa41, &(0x7f0000000700)="$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") r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x20, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) pselect6(0x9a, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) (async) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 546.621204ms ago: executing program 8 (id=626): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x1a303971}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x1a303971}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000088) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000088) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x648b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x12903, 0x32, 0x43a1bd56, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x648b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x12903, 0x32, 0x43a1bd56, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000140000001100"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 546.236294ms ago: executing program 7 (id=627): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7516, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x8, 0x250, &(0x7f0000000b80)="$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") (async, rerun: 32) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) prlimit64(r1, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) socket(0x10, 0x3, 0x4) (async, rerun: 32) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r4, 0xfffffffc) (async, rerun: 64) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x4) (async, rerun: 32) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) (rerun: 32) ioctl$FIGETBSZ(r6, 0x2, &(0x7f00000000c0)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES16=r9], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) socket$netlink(0x10, 0x3, 0x0) 241.097328ms ago: executing program 7 (id=628): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d08000000000000850000000600001cb70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 166.702339ms ago: executing program 2 (id=629): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r1 = eventfd2(0x3, 0x800) read$eventfd(r1, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x75d1b61a6a6ec35e}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030038000b12d25a80648c2594f90424fc605865000002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) 6.65689ms ago: executing program 7 (id=630): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xd716, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r1], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usbip_server_init(0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f00000001c0)={0x0, 0x2, 0x8}) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f00000006c0)=ANY=[@ANYRES32=r6, @ANYBLOB="000000009ce6b6b6744ab0496f7e7c0b371f5defcba3cc18f7ca162949c6a7407c810a1890da1d0f81", @ANYRESDEC=r7, @ANYBLOB=':max']) syz_usbip_server_init(0x1) (async) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) (async) r8 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) (async) write(r8, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=631): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111202ce1000000c6000000000000009500000009000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000900)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffffffffffff}}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") socket$nl_netfilter(0x10, 0x3, 0xc) rename(0x0, &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket(0x1e, 0x805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@getchain={0x24, 0x66, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0x9}, {0x6, 0x2}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40050) sendmmsg$inet6(r1, &(0x7f0000003c80)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x2, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x1004) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="010000001b0002002c0012808384d8200544835e72a62f0ef1a42d550a9457d9e45c761f7370616e000000180002800500160002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0xf1) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) sendto$packet(r6, &(0x7f0000000140)="86a91f9e929626369ec12bc7b6dd9e82490602077fc6e4d08fc5d9f734226be52f0ef8d4aacd4fb02827b8619b50b6624c4011b4bd5628a0693f91175477ca720b7ed365c01297f822e49c7494298921607dee0f3b8ea2f3e32fb3105668a5e12a086c5cd45a8a31326123ab1533e2ed3714218318155488aaacde9bf29b1b5ca8fd901c59def33ac9a2c4fd0c7401e0bdca16eb62", 0x95, 0x10000000, &(0x7f0000000200)={0x11, 0x6, 0x0, 0x1, 0x7, 0x6, @random="cbaf7bbdf78f"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111202ce1000000c6000000000000009500000009000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000900)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffffffffffff}}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) rename(0x0, &(0x7f0000000180)='./file1\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) socket(0x1e, 0x805, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@getchain={0x24, 0x66, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0x9}, {0x6, 0x2}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40050) (async) sendmmsg$inet6(r1, &(0x7f0000003c80)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x2, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x1004) (async) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="010000001b0002002c0012808384d8200544835e72a62f0ef1a42d550a9457d9e45c761f7370616e000000180002800500160002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0xf1) (async) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) (async) sendto$packet(r6, &(0x7f0000000140)="86a91f9e929626369ec12bc7b6dd9e82490602077fc6e4d08fc5d9f734226be52f0ef8d4aacd4fb02827b8619b50b6624c4011b4bd5628a0693f91175477ca720b7ed365c01297f822e49c7494298921607dee0f3b8ea2f3e32fb3105668a5e12a086c5cd45a8a31326123ab1533e2ed3714218318155488aaacde9bf29b1b5ca8fd901c59def33ac9a2c4fd0c7401e0bdca16eb62", 0x95, 0x10000000, &(0x7f0000000200)={0x11, 0x6, 0x0, 0x1, 0x7, 0x6, @random="cbaf7bbdf78f"}, 0x14) (async) kernel console output (not intermixed with test programs): ogle Compute Engine, BIOS Google 04/18/2026 [ 61.416679][ T4312] Call Trace: [ 61.416685][ T4312] [ 61.416771][ T4312] __dump_stack+0x1d/0x30 [ 61.416817][ T4312] dump_stack_lvl+0x95/0xd0 [ 61.416839][ T4312] dump_stack+0x15/0x1b [ 61.416865][ T4312] should_fail_ex+0x263/0x280 [ 61.416973][ T4312] should_fail+0xb/0x20 [ 61.417019][ T4312] should_fail_usercopy+0x1a/0x20 [ 61.417100][ T4312] _copy_from_iter+0xcf/0xea0 [ 61.417153][ T4312] ? __alloc_skb+0x4f6/0x690 [ 61.417195][ T4312] ? __alloc_skb+0x200/0x690 [ 61.417298][ T4312] netlink_sendmsg+0x4ae/0x6f0 [ 61.417356][ T4312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.417393][ T4312] ____sys_sendmsg+0x563/0x5b0 [ 61.417431][ T4312] ___sys_sendmsg+0x195/0x1e0 [ 61.417484][ T4312] __x64_sys_sendmsg+0xd4/0x160 [ 61.417518][ T4312] x64_sys_call+0x194c/0x3020 [ 61.417615][ T4312] do_syscall_64+0x12c/0x3b0 [ 61.417650][ T4312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.417697][ T4312] RIP: 0033:0x7fd3a984cdd9 [ 61.417722][ T4312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.417746][ T4312] RSP: 002b:00007fd3a829f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.417776][ T4312] RAX: ffffffffffffffda RBX: 00007fd3a9ac5fa0 RCX: 00007fd3a984cdd9 [ 61.417912][ T4312] RDX: 0000000000004000 RSI: 0000200000000640 RDI: 0000000000000004 [ 61.417926][ T4312] RBP: 00007fd3a829f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.417938][ T4312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.417950][ T4312] R13: 00007fd3a9ac6038 R14: 00007fd3a9ac5fa0 R15: 00007ffcb742a748 [ 61.417972][ T4312] [ 61.760831][ T4316] loop3: detected capacity change from 0 to 512 [ 61.824277][ T4316] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.879144][ T4316] EXT4-fs (loop3): failed to initialize system zone (-117) [ 61.898067][ T4316] EXT4-fs (loop3): mount failed [ 61.949094][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 61.949116][ T28] audit: type=1400 audit(1778015041.247:422): avc: denied { write } for pid=4319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.982656][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.016758][ T4342] netlink: 24 bytes leftover after parsing attributes in process `syz.5.194'. [ 62.025821][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.028175][ T28] audit: type=1400 audit(1778015041.307:423): avc: denied { write } for pid=4340 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.054938][ T4254] bridge_slave_0: entered allmulticast mode [ 62.073372][ T4254] bridge_slave_0: entered promiscuous mode [ 62.080727][ T4342] loop5: detected capacity change from 0 to 1764 [ 62.093350][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.113407][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.128516][ T4254] bridge_slave_1: entered allmulticast mode [ 62.145306][ T4254] bridge_slave_1: entered promiscuous mode [ 62.206160][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 62.260039][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.295439][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.360139][ T4254] team0: Port device team_slave_0 added [ 62.377496][ T4254] team0: Port device team_slave_1 added [ 62.425247][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.433492][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.461231][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.472866][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.480386][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.509546][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.580601][ T4254] hsr_slave_0: entered promiscuous mode [ 62.587073][ T4254] hsr_slave_1: entered promiscuous mode [ 62.597122][ T4254] debugfs: 'hsr0' already exists in 'hsr' [ 62.610250][ T4254] Cannot create hsr debugfs directory [ 62.620879][ T28] audit: type=1400 audit(1778015041.917:424): avc: denied { write } for pid=4351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.682858][ T4371] FAULT_INJECTION: forcing a failure. [ 62.682858][ T4371] name failslab, interval 1, probability 0, space 0, times 0 [ 62.710902][ T28] audit: type=1400 audit(1778015041.997:425): avc: denied { write } for pid=4372 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.737692][ T4371] CPU: 0 UID: 0 PID: 4371 Comm: syz.2.200 Not tainted syzkaller #0 PREEMPT(full) [ 62.737724][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 62.737739][ T4371] Call Trace: [ 62.737747][ T4371] [ 62.737756][ T4371] __dump_stack+0x1d/0x30 [ 62.737902][ T4371] dump_stack_lvl+0x95/0xd0 [ 62.737953][ T4371] dump_stack+0x15/0x1b [ 62.737973][ T4371] should_fail_ex+0x263/0x280 [ 62.738002][ T4371] should_failslab+0x8c/0xb0 [ 62.738054][ T4371] kmem_cache_alloc_noprof+0x66/0x3f0 [ 62.738182][ T4371] ? skb_clone+0x151/0x1f0 [ 62.738231][ T4371] skb_clone+0x151/0x1f0 [ 62.738324][ T4371] __netlink_deliver_tap+0x2c9/0x500 [ 62.738365][ T4371] netlink_unicast+0x653/0x680 [ 62.738461][ T4371] netlink_sendmsg+0x5c8/0x6f0 [ 62.738557][ T4371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.738594][ T4371] ____sys_sendmsg+0x563/0x5b0 [ 62.738621][ T4371] ___sys_sendmsg+0x195/0x1e0 [ 62.738723][ T4371] __x64_sys_sendmsg+0xd4/0x160 [ 62.738758][ T4371] x64_sys_call+0x194c/0x3020 [ 62.738782][ T4371] do_syscall_64+0x12c/0x3b0 [ 62.738808][ T4371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.738833][ T4371] RIP: 0033:0x7fd3a984cdd9 [ 62.738895][ T4371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.738919][ T4371] RSP: 002b:00007fd3a829f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.738942][ T4371] RAX: ffffffffffffffda RBX: 00007fd3a9ac5fa0 RCX: 00007fd3a984cdd9 [ 62.738956][ T4371] RDX: 0000000000004000 RSI: 0000200000000640 RDI: 0000000000000004 [ 62.738969][ T4371] RBP: 00007fd3a829f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.739007][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.739031][ T4371] R13: 00007fd3a9ac6038 R14: 00007fd3a9ac5fa0 R15: 00007ffcb742a748 [ 62.739057][ T4371] [ 62.939149][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 62.993645][ T28] audit: type=1400 audit(1778015042.287:426): avc: denied { read write } for pid=4378 comm="syz.3.202" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.060659][ T4384] futex_wake_op: syz.5.205 tries to shift op by -65; fix this program [ 63.079329][ T4384] netlink: 48 bytes leftover after parsing attributes in process `syz.5.205'. [ 63.096582][ T4381] loop2: detected capacity change from 0 to 512 [ 63.109134][ T4385] loop3: detected capacity change from 0 to 1024 [ 63.120193][ T28] audit: type=1400 audit(1778015042.287:427): avc: denied { open } for pid=4378 comm="syz.3.202" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.123916][ T4381] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.171313][ T4384] netlink: 48 bytes leftover after parsing attributes in process `syz.5.205'. [ 63.192012][ T4254] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 63.202032][ T4385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.217787][ T4254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.232035][ T4381] EXT4-fs (loop2): failed to initialize system zone (-117) [ 63.241514][ T4254] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 63.249099][ T28] audit: type=1400 audit(1778015042.287:428): avc: denied { ioctl } for pid=4378 comm="syz.3.202" path="/dev/uhid" dev="devtmpfs" ino=252 ioctlcmd=0x583f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.274170][ T4381] EXT4-fs (loop2): mount failed [ 63.288226][ T4254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.296418][ T4254] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 63.338052][ T4254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.352325][ T4398] netlink: 'syz.5.206': attribute type 21 has an invalid length. [ 63.362282][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.382568][ T28] audit: type=1400 audit(1778015042.677:429): avc: denied { write } for pid=4389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.395677][ T4254] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 63.431393][ T28] audit: type=1400 audit(1778015042.727:430): avc: denied { write } for pid=4404 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.466616][ T4254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.508816][ T4398] netlink: 'syz.5.206': attribute type 1 has an invalid length. [ 63.517438][ T4398] netlink: 132 bytes leftover after parsing attributes in process `syz.5.206'. [ 63.541864][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 63.629032][ T4423] netlink: 'syz.3.210': attribute type 21 has an invalid length. [ 63.639429][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.659170][ T4423] netlink: 'syz.3.210': attribute type 1 has an invalid length. [ 63.678058][ T4423] netlink: 132 bytes leftover after parsing attributes in process `syz.3.210'. [ 63.703127][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.723896][ T28] audit: type=1400 audit(1778015043.017:431): avc: denied { setopt } for pid=4427 comm="syz.5.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.747436][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.754526][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.787385][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.794590][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.817241][ T4435] loop3: detected capacity change from 0 to 512 [ 63.828471][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.213'. [ 63.841931][ T4433] vlan2: entered allmulticast mode [ 63.854064][ T4433] bond0: entered allmulticast mode [ 63.867103][ T4433] bond_slave_0: entered allmulticast mode [ 63.873101][ T4433] bond_slave_1: entered allmulticast mode [ 63.880179][ T4435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.900025][ T4435] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.918338][ T4254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.955141][ T4444] FAULT_INJECTION: forcing a failure. [ 63.955141][ T4444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.988037][ T4444] CPU: 1 UID: 0 PID: 4444 Comm: syz.5.215 Not tainted syzkaller #0 PREEMPT(full) [ 63.988111][ T4444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 63.988139][ T4444] Call Trace: [ 63.988145][ T4444] [ 63.988155][ T4444] __dump_stack+0x1d/0x30 [ 63.988221][ T4444] dump_stack_lvl+0x95/0xd0 [ 63.988250][ T4444] dump_stack+0x15/0x1b [ 63.988274][ T4444] should_fail_ex+0x263/0x280 [ 63.988312][ T4444] should_fail+0xb/0x20 [ 63.988365][ T4444] should_fail_usercopy+0x1a/0x20 [ 63.988477][ T4444] _copy_to_user+0x20/0xa0 [ 63.988585][ T4444] simple_read_from_buffer+0xb5/0x130 [ 63.988627][ T4444] proc_fail_nth_read+0x10e/0x150 [ 63.988656][ T4444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.988767][ T4444] vfs_read+0x1ab/0x7f0 [ 63.988802][ T4444] ? __rcu_read_unlock+0x4e/0x70 [ 63.988871][ T4444] ? __fget_files+0x184/0x1c0 [ 63.988893][ T4444] ? mutex_lock+0x57/0x90 [ 63.989019][ T4444] ksys_read+0xdc/0x1a0 [ 63.989104][ T4444] __x64_sys_read+0x40/0x50 [ 63.989132][ T4444] x64_sys_call+0x2886/0x3020 [ 63.989201][ T4444] do_syscall_64+0x12c/0x3b0 [ 63.989236][ T4444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.989289][ T4444] RIP: 0033:0x7fef2bd2d60e [ 63.989305][ T4444] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.989324][ T4444] RSP: 002b:00007fef2a7c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.989486][ T4444] RAX: ffffffffffffffda RBX: 00007fef2a7c76c0 RCX: 00007fef2bd2d60e [ 63.989500][ T4444] RDX: 000000000000000f RSI: 00007fef2a7c70a0 RDI: 0000000000000005 [ 63.989554][ T4444] RBP: 00007fef2a7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.989571][ T4444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.989604][ T4444] R13: 00007fef2bfe6038 R14: 00007fef2bfe5fa0 R15: 00007ffe022dc528 [ 63.989626][ T4444] [ 64.196735][ T4448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.216'. [ 64.222889][ T4457] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 64.256442][ T4447] loop3: detected capacity change from 0 to 1764 [ 64.327345][ T4469] loop1: detected capacity change from 0 to 512 [ 64.371716][ T4469] FAT-fs (loop1): bogus sectors per cluster 0 [ 64.385894][ T4469] FAT-fs (loop1): Can't find a valid FAT filesystem [ 64.394065][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.436826][ T4475] netlink: 22 bytes leftover after parsing attributes in process `syz.5.222'. [ 64.447236][ T4475] ªªªªªª: renamed from veth0_vlan (while UP) [ 64.487113][ T4478] loop1: detected capacity change from 0 to 128 [ 64.564583][ T4478] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.707694][ T4493] syz_tun: entered allmulticast mode [ 64.734357][ T4254] veth0_vlan: entered promiscuous mode [ 64.753818][ T4254] veth1_vlan: entered promiscuous mode [ 64.780895][ T4254] veth0_macvtap: entered promiscuous mode [ 64.804721][ T4254] veth1_macvtap: entered promiscuous mode [ 64.827592][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.844821][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.852827][ T4499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.224'. [ 64.953624][ T315] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.007043][ T315] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.024903][ T315] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.043171][ T315] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.227484][ T4520] netlink: 'syz.6.175': attribute type 1 has an invalid length. [ 65.289640][ T4532] loop5: detected capacity change from 0 to 128 [ 65.297267][ T4520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.310935][ T4532] vfat: Unknown parameter 'HG' [ 65.386362][ T4532] loop5: detected capacity change from 0 to 512 [ 65.424221][ T4532] EXT4-fs (loop5): bad s_min_extra_isize: 65535 [ 65.619152][ T4537] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.855505][ T4551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.240'. [ 65.968432][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.239'. [ 66.288045][ T4560] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.243: iget: bad i_size value: 38620345925642 [ 66.323623][ T4560] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.323903][ T4560] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.243: couldn't read orphan inode 15 (err -117) [ 66.333130][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 66.333151][ C0] EXT4-fs (loop5): initial error at time 1778015045: ext4_orphan_get:1397: inode 15 [ 66.333186][ C0] EXT4-fs (loop5): last error at time 1778015045: ext4_orphan_get:1397: inode 15 [ 66.393439][ T4560] loop5: lost filesystem error report for type 5 error -117 [ 66.402498][ T4560] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.243: bg 0: block 5: invalid block bitmap [ 66.458755][ T4560] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.492958][ T4560] EXT4-fs (loop5): This should not happen!! Data will be lost [ 66.492958][ T4560] [ 66.515354][ T4560] EXT4-fs (loop5): Total free blocks count 0 [ 66.529759][ T4560] EXT4-fs (loop5): Free/Dirty block details [ 66.543568][ T4560] EXT4-fs (loop5): free_blocks=0 [ 66.554768][ T4560] EXT4-fs (loop5): dirty_blocks=2 [ 66.560941][ T4566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4566 comm=syz.1.244 [ 66.567311][ T4560] EXT4-fs (loop5): Block reservation details [ 66.592980][ T4560] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 67.120667][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 67.146971][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.146971][ T12] [ 67.171507][ T3914] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 67.331202][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 67.331221][ T28] audit: type=1400 audit(1778015046.627:443): avc: denied { mount } for pid=4582 comm="syz.1.249" name="/" dev="hugetlbfs" ino=7889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 67.418464][ T4593] set_capacity_and_notify: 3 callbacks suppressed [ 67.418482][ T4593] loop6: detected capacity change from 0 to 128 [ 67.502435][ T4593] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.559156][ T4587] ------------[ cut here ]------------ [ 67.564753][ T4587] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.3.248/4587 [ 67.574417][ T4587] Modules linked in: [ 67.578396][ T4587] CPU: 0 UID: 0 PID: 4587 Comm: syz.3.248 Not tainted syzkaller #0 PREEMPT(full) [ 67.587605][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 67.597826][ T4587] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 67.603491][ T4587] Code: 8b 05 f1 49 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d4 a8 5e 04 cc e8 5e 12 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 50 12 1e 00 90 0f 0b 90 e9 af fa ff ff [ 67.623135][ T4587] RSP: 0018:ffffc90000e7bdd8 EFLAGS: 00010093 [ 67.629335][ T4587] RAX: ffffffff813b1652 RBX: ffff8881028ae600 RCX: ffff8881028ae600 [ 67.637331][ T4587] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 67.645386][ T4587] RBP: 0000000000000080 R08: ffff8881028af0f8 R09: 0000000000000000 [ 67.653485][ T4587] R10: ffffc90000e7bdf0 R11: 0001c90000e7bdf0 R12: ffff8881028ae600 [ 67.661531][ T4587] R13: ffff8881028aee28 R14: ffff888101dc8490 R15: 0000000000000080 [ 67.669584][ T4587] FS: 0000000000000000(0000) GS:ffff8882ae8fe000(0000) knlGS:0000000000000000 [ 67.678617][ T4587] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.685237][ T4587] CR2: 00007faadef4c000 CR3: 000000010ac10000 CR4: 00000000003506f0 [ 67.693259][ T4587] Call Trace: [ 67.696573][ T4587] [ 67.699602][ T4587] do_exit+0xc13/0x1530 [ 67.703787][ T4587] ? switch_fpu_return+0xe7/0x1b0 [ 67.708882][ T4587] __x64_sys_exit+0x1f/0x20 [ 67.713404][ T4587] x64_sys_call+0x301d/0x3020 [ 67.718097][ T4587] do_syscall_64+0x12c/0x3b0 [ 67.722741][ T4587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.728665][ T4587] RIP: 0033:0x7f723244cdd9 [ 67.733088][ T4587] Code: Unable to access opcode bytes at 0x7f723244cdaf. [ 67.740116][ T4587] RSP: 002b:00007f7230ea6fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 67.748581][ T4587] RAX: ffffffffffffffda RBX: 00007f72326c5fa0 RCX: 00007f723244cdd9 [ 67.756692][ T4587] RDX: 00007f7230ea79c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.764675][ T4587] RBP: 00007f72324e2d69 R08: 0000000000000000 R09: 0000000000000000 [ 67.772723][ T4587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.780831][ T4587] R13: 00007f72326c6038 R14: 00007f72326c5fa0 R15: 00007ffe82b84d98 [ 67.788844][ T4587] [ 67.791902][ T4587] ---[ end trace 0000000000000000 ]--- [ 67.827174][ T28] audit: type=1400 audit(1778015303.118:444): avc: denied { write } for pid=4592 comm="syz.6.250" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.855655][ T4604] loop5: detected capacity change from 0 to 1024 [ 67.868217][ T4604] EXT4-fs: Ignoring removed orlov option [ 67.887071][ T28] audit: type=1400 audit(1778015303.178:445): avc: denied { setattr } for pid=4603 comm="syz.5.253" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.983599][ T4614] loop6: detected capacity change from 0 to 512 [ 68.019868][ T4614] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.033110][ T4617] loop5: detected capacity change from 0 to 512 [ 68.052796][ T28] audit: type=1400 audit(1778015303.348:446): avc: denied { write } for pid=4612 comm="syz.6.255" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.110334][ T28] audit: type=1400 audit(1778015303.408:447): avc: denied { write } for pid=4607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.139501][ T4617] loop5: detected capacity change from 0 to 128 [ 68.182495][ T28] audit: type=1400 audit(1778015303.478:448): avc: denied { watch watch_reads } for pid=4627 comm="syz.3.257" path="/53" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.225761][ T28] audit: type=1400 audit(1778015303.518:449): avc: denied { write } for pid=4630 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.332681][ T28] audit: type=1400 audit(1778015303.628:450): avc: denied { read append } for pid=4641 comm="syz.1.259" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.338916][ T4642] 9p: Bad value for 'rfdno' [ 68.376181][ T4640] netlink: 20 bytes leftover after parsing attributes in process `syz.5.256'. [ 68.403444][ T4640] netlink: 28 bytes leftover after parsing attributes in process `syz.5.256'. [ 68.412489][ T28] audit: type=1400 audit(1778015303.628:451): avc: denied { open } for pid=4641 comm="syz.1.259" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.562175][ T28] audit: type=1400 audit(1778015303.858:452): avc: denied { write } for pid=4639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.809635][ T4658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4658 comm=syz.5.261 [ 68.838854][ T4675] tmpfs: Bad value for 'mpol' [ 68.859443][ T4679] Unsupported ieee802154 address type: 0 [ 68.967720][ T4689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'. [ 68.998652][ T4689] loop2: detected capacity change from 0 to 1764 [ 69.018951][ T4656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 69.047839][ T4694] netlink: 'syz.6.269': attribute type 21 has an invalid length. [ 69.055886][ T4694] netlink: 'syz.6.269': attribute type 1 has an invalid length. [ 69.063618][ T4694] netlink: 132 bytes leftover after parsing attributes in process `syz.6.269'. [ 69.213297][ T4702] loop6: detected capacity change from 0 to 512 [ 69.221266][ T4702] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 69.243799][ T4702] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.271: invalid indirect mapped block 9 (level 0) [ 69.269965][ T4702] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.270242][ T4702] EXT4-fs (loop6): 1 truncate cleaned up [ 69.279479][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 69.279501][ C0] EXT4-fs (loop6): initial error at time 1778015304: ext4_free_branches:1023: inode 11 [ 69.279538][ C0] EXT4-fs (loop6): last error at time 1778015304: ext4_free_branches:1023: inode 11 [ 69.360606][ T4702] EXT4-fs mount: 13 callbacks suppressed [ 69.360625][ T4702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.421854][ T4254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.438421][ T4711] loop1: detected capacity change from 0 to 2048 [ 69.878240][ T4760] loop2: detected capacity change from 0 to 1024 [ 69.882264][ T4762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42521 sclass=netlink_route_socket pid=4762 comm=syz.3.284 [ 69.898636][ T4763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4763 comm=syz.1.281 [ 69.912998][ T4760] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.950053][ T4760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.967627][ T4760] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.058935][ T4760] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.283: lblock 3 mapped to illegal pblock 3 (length 3) [ 70.114404][ T4760] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 70.167509][ T4760] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.167509][ T4760] [ 70.212173][ T30] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 70.244085][ T4769] loop6: detected capacity change from 0 to 512 [ 70.251620][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 70.284033][ T30] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.284033][ T30] [ 70.299825][ T4769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.307916][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 70.323770][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.358313][ T4769] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 70.372696][ T4769] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 33261: comm syz.6.285: invalid block [ 70.385213][ T4769] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.386774][ T4769] EXT4-fs (loop6): Remounting filesystem read-only [ 70.386962][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 70.412363][ C1] EXT4-fs (loop6): initial error at time 1778015305: ext4_get_branch:178: inode 11: block 33261 [ 70.425132][ C1] EXT4-fs (loop6): last error at time 1778015305: ext4_get_branch:178: inode 11: block 33261 [ 70.439894][ T4769] EXT4-fs (loop6): 1 truncate cleaned up [ 70.446261][ T4769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.579003][ T4254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.378818][ T4762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 71.411664][ T4762] tc_dump_action: action bad kind [ 72.633985][ T28] kauditd_printk_skb: 114 callbacks suppressed [ 72.634002][ T28] audit: type=1400 audit(1778015307.928:567): avc: denied { write } for pid=4804 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.666903][ T4806] set_capacity_and_notify: 2 callbacks suppressed [ 72.673592][ T4806] loop2: detected capacity change from 0 to 512 [ 72.682027][ T4806] EXT4-fs: Ignoring removed bh option [ 72.703724][ T28] audit: type=1400 audit(1778015307.998:568): avc: denied { listen } for pid=4807 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.772004][ T4806] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #3: comm syz.2.296: corrupted inode contents [ 72.803340][ T4812] program syz.6.298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.811610][ T4795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.293'. [ 72.812589][ T28] audit: type=1400 audit(1778015308.088:569): avc: denied { write } for pid=4811 comm="syz.6.298" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.834465][ T4806] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.848049][ T4795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.293'. [ 72.874204][ T4806] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #3: comm syz.2.296: mark_inode_dirty error [ 72.878757][ T28] audit: type=1400 audit(1778015308.158:570): avc: denied { write } for pid=4811 comm="syz.6.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 72.885428][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 72.910858][ C1] EXT4-fs (loop2): initial error at time 1778015308: ext4_do_update_inode:5690: inode 3 [ 72.920652][ C1] EXT4-fs (loop2): last error at time 1778015308: ext4_do_update_inode:5690: inode 3 [ 72.988261][ T4806] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.988968][ T4806] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #3: comm syz.2.296: corrupted inode contents [ 73.027371][ T4820] can: request_module (can-proto-0) failed. [ 73.037651][ T4806] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.038400][ T4806] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.296: mark_inode_dirty error [ 73.039488][ T28] audit: type=1400 audit(1778015308.338:571): avc: denied { name_connect } for pid=4815 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 73.067034][ T4806] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.111973][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.128271][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.138019][ T4806] Quota error (device loop2): write_blk: dquota write failed [ 73.162649][ T4806] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 73.188253][ T28] audit: type=1326 audit(1778015308.488:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.6.302" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcb45cdd9 code=0x7ffc0000 [ 73.192648][ T4806] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.296: Failed to acquire dquot type 0 [ 73.244808][ T28] audit: type=1326 audit(1778015308.488:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.6.302" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1bcb45cdd9 code=0x7ffc0000 [ 73.267142][ T4806] loop2: lost filesystem error report for type 5 error -117 [ 73.293279][ T28] audit: type=1326 audit(1778015308.488:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.6.302" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcb45cdd9 code=0x7ffc0000 [ 73.328376][ T4806] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.296: corrupted inode contents [ 73.348643][ T4806] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.353341][ T4806] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.296: mark_inode_dirty error [ 73.396974][ T4806] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.404824][ T4806] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.296: corrupted inode contents [ 73.440261][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.459453][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.475577][ T4806] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.475731][ T4806] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.296: mark_inode_dirty error [ 73.557472][ T4806] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.557752][ T4806] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.296: corrupted inode contents [ 73.591365][ T69] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.601769][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 73.611143][ T69] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.620111][ T4806] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.620384][ T4806] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 73.638145][ T4806] loop2: lost filesystem error report for type 5 error -117 [ 73.641579][ T4806] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.296: corrupted inode contents [ 73.661058][ T4806] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.662135][ T4806] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.296: mark_inode_dirty error [ 73.687130][ T4806] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 73.724448][ T4806] loop2: lost filesystem error report for type 5 error -117 [ 73.725003][ T4806] EXT4-fs (loop2): 1 truncate cleaned up [ 73.760253][ T4806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.782832][ T69] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.793430][ T4806] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.800446][ T69] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.880467][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.893478][ T4863] loop6: detected capacity change from 0 to 128 [ 74.042670][ T4875] loop2: detected capacity change from 0 to 128 [ 74.105062][ T4875] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.121953][ T4875] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.939978][ T4889] loop6: detected capacity change from 0 to 256 [ 74.988695][ T4889] vfat: Bad value for 'utf8' [ 75.062841][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.143233][ T4900] netlink: 'syz.6.313': attribute type 8 has an invalid length. [ 75.174003][ T4900] netlink: 40 bytes leftover after parsing attributes in process `syz.6.313'. [ 75.298471][ T4899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4899 comm=syz.1.312 [ 75.366424][ T4924] loop2: detected capacity change from 0 to 512 [ 75.373884][ T4924] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.385415][ T4924] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.398620][ T4924] EXT4-fs (loop2): 1 truncate cleaned up [ 75.404807][ T4924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.562540][ T4931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.319'. [ 75.582711][ T4931] netlink: 'syz.1.319': attribute type 21 has an invalid length. [ 75.623340][ T4931] netlink: 132 bytes leftover after parsing attributes in process `syz.1.319'. [ 76.003744][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.105059][ T4991] usb usb7: usbfs: process 4991 (syz.1.326) did not claim interface 0 before use [ 76.125037][ T4991] SELinux: syz.1.326 (4991) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 76.238522][ T5005] loop5: detected capacity change from 0 to 512 [ 76.268876][ T5005] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.287812][ T5005] EXT4-fs (loop5): failed to initialize system zone (-117) [ 76.300885][ T5005] EXT4-fs (loop5): mount failed [ 76.437942][ T5027] geneve2: entered allmulticast mode [ 76.501943][ T5030] loop5: detected capacity change from 0 to 128 [ 76.548322][ T5031] loop3: detected capacity change from 0 to 4096 [ 76.625013][ T5031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.673490][ T5033] netlink: 24 bytes leftover after parsing attributes in process `syz.6.330'. [ 76.952849][ T5039] loop2: detected capacity change from 0 to 256 [ 76.964307][ T5030] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.007322][ T5030] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.291463][ T3914] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.620917][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.680150][ T5067] loop2: detected capacity change from 0 to 512 [ 78.177862][ T5067] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 78.255967][ T5067] EXT4-fs (loop2): 1 truncate cleaned up [ 78.291688][ T5067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.456209][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.487351][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 78.487368][ T28] audit: type=1400 audit(1778015313.768:651): avc: denied { wake_alarm } for pid=5078 comm="syz.3.340" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.548064][ T5081] loop2: detected capacity change from 0 to 256 [ 78.577429][ T5081] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ00000000000000000000003êñ£~W¥@¨öØœœÀ|îqšO`Úx•!Íp¸OQõ h"Â( œ›¦ÒÞ Sˆ¥›JÄ7ó™øþãÆ«p [ 78.577429][ T5081] okU¢MÌc}ÔO/uõšØ« [ 78.577429][ T5081] 0…gøÎi—pJfUkhá' [ 78.669539][ T5084] netlink: 40 bytes leftover after parsing attributes in process `syz.3.341'. [ 78.699260][ T5084] devpts: Bad value for 'gid' [ 78.708726][ T5084] devpts: Bad value for 'gid' [ 78.775236][ T5086] loop2: detected capacity change from 0 to 512 [ 78.810888][ T5086] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.840138][ T5086] EXT4-fs (loop2): failed to initialize system zone (-117) [ 78.855410][ T5086] EXT4-fs (loop2): mount failed [ 79.548377][ T5093] loop2: detected capacity change from 0 to 4096 [ 79.588365][ T5093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.603787][ T28] audit: type=1400 audit(1778015314.898:652): avc: denied { write } for pid=5090 comm="syz.2.344" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.866226][ T28] audit: type=1400 audit(1778015315.068:653): avc: denied { append } for pid=5095 comm="syz.5.345" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.068474][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.164780][ T5114] loop2: detected capacity change from 0 to 512 [ 80.221934][ T5114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.257704][ T5118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5118 comm=syz.6.351 [ 80.275747][ T5120] loop3: detected capacity change from 0 to 128 [ 80.291501][ T5114] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.309740][ T5120] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.346131][ T28] audit: type=1400 audit(1778015315.638:654): avc: denied { write } for pid=5113 comm="syz.2.350" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.370137][ T5120] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.389566][ T28] audit: type=1400 audit(1778015315.688:655): avc: denied { write } for pid=5119 comm="syz.3.352" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.735956][ T28] audit: type=1400 audit(1778015316.028:656): avc: denied { map } for pid=5119 comm="syz.3.352" path="/74/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.776303][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.792897][ T28] audit: type=1400 audit(1778015316.028:657): avc: denied { execute } for pid=5119 comm="syz.3.352" path="/74/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.700468][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.785424][ T28] audit: type=1400 audit(1778015317.078:658): avc: denied { unmount } for pid=3914 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.106717][ T5152] loop6: detected capacity change from 0 to 1024 [ 82.120937][ T5152] EXT4-fs: inline encryption not supported [ 82.131244][ T5159] hub 8-0:1.0: USB hub found [ 82.135926][ T5159] hub 8-0:1.0: 8 ports detected [ 82.711238][ T5162] loop3: detected capacity change from 0 to 256 [ 82.747631][ T5162] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.803034][ T5152] EXT4-fs: Ignoring removed bh option [ 82.809319][ T5152] EXT4-fs: Ignoring removed nobh option [ 82.820949][ T5164] loop2: detected capacity change from 0 to 256 [ 82.831240][ T5164] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.845230][ T5164] Invalid ELF header magic: != ELF [ 82.960165][ T5164] netlink: 132 bytes leftover after parsing attributes in process `syz.2.363'. [ 83.018396][ T28] audit: type=1400 audit(1778015318.138:659): avc: denied { module_load } for pid=5163 comm="syz.2.363" path="/70/bus/bus" dev="loop2" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 84.055863][ T28] audit: type=1400 audit(1778015318.218:660): avc: denied { create } for pid=5156 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 84.087363][ T28] audit: type=1400 audit(1778015318.278:661): avc: denied { sys_admin } for pid=5156 comm="syz.3.362" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 84.136316][ T28] audit: type=1400 audit(1778015319.428:662): avc: denied { execute } for pid=5171 comm="syz.2.364" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 84.166872][ T5177] loop1: detected capacity change from 0 to 128 [ 84.182343][ T5175] netlink: 24 bytes leftover after parsing attributes in process `syz.5.365'. [ 84.201033][ T5152] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 84.220274][ T5152] System zones: 0-1, 3-12 [ 84.230775][ T28] audit: type=1400 audit(1778015319.458:663): avc: denied { ioctl } for pid=5171 comm="syz.2.364" path="socket:[9962]" dev="sockfs" ino=9962 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.257469][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.365'. [ 84.278557][ T5177] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.290979][ T5152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.316063][ T5177] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.337524][ T28] audit: type=1400 audit(1778015319.458:664): avc: denied { mount } for pid=5170 comm="syz.5.365" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 84.414514][ T28] audit: type=1400 audit(1778015319.458:665): avc: denied { setopt } for pid=5171 comm="syz.2.364" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.478522][ T28] audit: type=1400 audit(1778015319.458:666): avc: denied { read append } for pid=5171 comm="syz.2.364" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.554239][ T28] audit: type=1400 audit(1778015319.458:667): avc: denied { open } for pid=5171 comm="syz.2.364" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.633439][ T28] audit: type=1400 audit(1778015319.628:668): avc: denied { create } for pid=5183 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.688917][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.699794][ T28] audit: type=1400 audit(1778015319.628:669): avc: denied { bind } for pid=5183 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.700967][ T5161] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 84.719990][ T5195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5195 comm=syz.5.369 [ 84.743011][ T5161] FAT-fs (loop3): Filesystem has been set read-only [ 84.750978][ T5161] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 84.760298][ T5161] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 84.769586][ T5161] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 84.820155][ T4254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.862235][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 84.949811][ T5209] loop6: detected capacity change from 0 to 128 [ 84.986265][ T5209] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.000636][ T5212] loop3: detected capacity change from 0 to 512 [ 85.008801][ T5209] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.048552][ T5212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.136786][ T5212] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.495383][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.512279][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 85.526558][ T5221] loop2: detected capacity change from 0 to 1024 [ 85.539832][ T5221] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.546462][ T5221] ext4: Unknown parameter 'nodior(' [ 85.874477][ T4254] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.910208][ T5250] loop2: detected capacity change from 0 to 7 [ 86.109509][ T5262] netlink: 'syz.3.387': attribute type 10 has an invalid length. [ 86.134199][ T5262] netlink: 2 bytes leftover after parsing attributes in process `syz.3.387'. [ 86.144359][ T5262] veth1_virt_wifi: entered promiscuous mode [ 86.151796][ T5273] loop5: detected capacity change from 0 to 128 [ 86.152821][ T5262] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 86.166570][ T5262] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 86.177489][ T5273] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.181635][ T5262] veth1_virt_wifi: entered allmulticast mode [ 86.189972][ T5273] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.215315][ T5262] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 86.222743][ T5262] bridge0: port 3(veth1_virt_wifi) entered forwarding state [ 86.296720][ T5278] loop6: detected capacity change from 0 to 128 [ 86.334320][ T5278] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.346625][ T5278] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.618623][ T5286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5286 comm=syz.3.392 [ 86.705262][ T5289] loop2: detected capacity change from 0 to 128 [ 86.738377][ T5289] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.774695][ T5289] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.958895][ T4254] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.858682][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 89.858780][ T28] audit: type=1400 audit(1778015324.638:683): avc: denied { write } for pid=5301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.058683][ T3914] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.073909][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.100961][ T28] audit: type=1400 audit(1778015325.398:684): avc: denied { write } for pid=5316 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.211582][ T28] audit: type=1400 audit(1778015325.508:685): avc: denied { write } for pid=5319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.267072][ T28] audit: type=1400 audit(1778015325.548:686): avc: denied { write } for pid=5330 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.339640][ T5335] loop6: detected capacity change from 0 to 128 [ 90.388912][ T5341] loop5: detected capacity change from 0 to 1024 [ 90.415344][ T5335] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.428050][ T5343] loop3: detected capacity change from 0 to 2048 [ 90.451827][ T5341] EXT4-fs: test_dummy_encryption option not supported [ 90.472628][ T5335] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.509906][ T5348] loop2: detected capacity change from 0 to 512 [ 90.545869][ T5348] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 90.677440][ T28] audit: type=1400 audit(1778015325.978:687): avc: denied { write } for pid=5334 comm="syz.6.399" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.705403][ T5343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.748470][ T28] audit: type=1400 audit(1778015326.038:688): avc: denied { write } for pid=5334 comm="syz.6.399" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.780554][ T5335] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.6.399: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 90.786866][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 90.812535][ T5361] netlink: 7 bytes leftover after parsing attributes in process `syz.2.404'. [ 90.813356][ T5343] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 90.839802][ T28] audit: type=1400 audit(1778015326.038:689): avc: denied { create } for pid=5334 comm="syz.6.399" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 90.930194][ T4254] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.952405][ T5368] netlink: 'syz.6.407': attribute type 21 has an invalid length. [ 90.981159][ T28] audit: type=1400 audit(1778015326.048:690): avc: denied { remount } for pid=5342 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.982958][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.012767][ T28] audit: type=1400 audit(1778015326.078:691): avc: denied { write } for pid=5334 comm="syz.6.399" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.039534][ T5372] loop1: detected capacity change from 0 to 128 [ 91.065211][ T5373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5373 comm=syz.2.406 [ 91.079077][ T5372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.081460][ T28] audit: type=1400 audit(1778015326.078:692): avc: denied { create } for pid=5334 comm="syz.6.399" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.103700][ T5372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.368404][ T5378] loop3: detected capacity change from 0 to 128 [ 91.467272][ T5378] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.500300][ T5378] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.676449][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.926279][ T5395] loop2: detected capacity change from 0 to 512 [ 92.938255][ T5395] ext4: Unknown parameter 'smackfstransmute' [ 93.512690][ T5407] loop6: detected capacity change from 0 to 512 [ 93.525313][ T4069] kworker/u8:9: attempt to access beyond end of device [ 93.525313][ T4069] loop1: rw=1, sector=145, nr_sectors = 89 limit=128 [ 93.567990][ T5407] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 93.591995][ T5407] System zones: 0-2, 18-18, 34-34 [ 93.599011][ T5403] loop2: detected capacity change from 0 to 1024 [ 93.606765][ T5407] EXT4-fs (loop6): 1 orphan inode deleted [ 93.615930][ T5403] EXT4-fs: Ignoring removed bh option [ 93.622169][ T4068] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 93.634394][ T5407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.660866][ T4068] loop6: lost filesystem error report for type 5 error -117 [ 93.661091][ T4068] EXT4-fs (loop6): Remounting filesystem read-only [ 93.678647][ T5407] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.693220][ T5403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.132829][ T4254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.192347][ T4832] kernel read not supported for file /vcs (pid: 4832 comm: kworker/0:11) [ 94.242939][ T5418] Driver unsupported XDP return value 0 on prog (id 88) dev N/A, expect packet loss! [ 94.353880][ T5430] loop6: detected capacity change from 0 to 128 [ 94.384669][ T5430] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.407955][ T5430] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.179484][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.213402][ T4254] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.256089][ T5436] loop5: detected capacity change from 0 to 1024 [ 97.277813][ T5436] EXT4-fs: Ignoring removed bh option [ 97.300820][ T5436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.355219][ T5442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.430'. [ 97.463370][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 97.463388][ T28] audit: type=1400 audit(1778015332.758:705): avc: denied { write } for pid=5435 comm="syz.5.427" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.528317][ T5442] loop3: detected capacity change from 0 to 1764 [ 97.561230][ T5449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5449 comm=syz.2.425 [ 97.584515][ T3914] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 40: comm syz-executor: path /51/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=9227776, rec_len=1024, size=1024 fake=0 [ 98.400491][ T3914] EXT4-fs error (device loop5): ext4_empty_dir:3125: inode #11: block 40: comm syz-executor: bad entry in directory: inode out of bounds - offset=8192, inode=9227776, rec_len=1024, size=1024 fake=0 [ 98.420066][ T28] audit: type=1400 audit(1778015333.698:706): avc: denied { write } for pid=3914 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.472469][ T3914] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 40: comm syz-executor: path /51/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=9227776, rec_len=1024, size=1024 fake=0 [ 98.495318][ T28] audit: type=1400 audit(1778015333.698:707): avc: denied { rmdir } for pid=3914 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.540641][ T3914] EXT4-fs error (device loop5): ext4_empty_dir:3125: inode #11: block 40: comm syz-executor: bad entry in directory: inode out of bounds - offset=8192, inode=9227776, rec_len=1024, size=1024 fake=0 [ 98.569024][ T28] audit: type=1400 audit(1778015333.838:708): avc: denied { write } for pid=3914 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.602973][ T3914] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 40: comm syz-executor: path /51/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=9227776, rec_len=1024, size=1024 fake=0 [ 98.708540][ T28] audit: type=1400 audit(1778015334.008:709): avc: denied { write } for pid=3914 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.731600][ T3914] EXT4-fs error (device loop5): ext4_empty_dir:3125: inode #11: block 40: comm syz-executor: bad entry in directory: inode out of bounds - offset=8192, inode=9227776, rec_len=1024, size=1024 fake=0 [ 98.774601][ T3914] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 40: comm syz-executor: path /51/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=9227776, rec_len=1024, size=1024 fake=0 [ 98.823659][ T3914] EXT4-fs error (device loop5): ext4_empty_dir:3125: inode #11: block 40: comm syz-executor: bad entry in directory: inode out of bounds - offset=8192, inode=9227776, rec_len=1024, size=1024 fake=0 [ 98.844655][ T28] audit: type=1400 audit(1778015334.118:710): avc: denied { write } for pid=3914 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.886923][ T3914] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 40: comm syz-executor: path /51/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=9227776, rec_len=1024, size=1024 fake=0 [ 98.975592][ T5466] loop2: detected capacity change from 0 to 512 [ 99.020604][ T28] audit: type=1400 audit(1778015334.318:711): avc: denied { write } for pid=3914 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.044764][ T3914] EXT4-fs error (device loop5): ext4_empty_dir:3125: inode #11: block 40: comm syz-executor: bad entry in directory: inode out of bounds - offset=8192, inode=9227776, rec_len=1024, size=1024 fake=0 [ 99.085695][ T5466] EXT4-fs (loop2): 1 truncate cleaned up [ 99.102752][ T5466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.125106][ T28] audit: type=1400 audit(1778015334.418:712): avc: denied { write } for pid=3914 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.202283][ T5466] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.435: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 99.225484][ T28] audit: type=1400 audit(1778015334.418:713): avc: denied { write } for pid=3914 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.272931][ T3914] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.292732][ T5475] dummy0: entered promiscuous mode [ 99.312244][ T5475] dummy0: left promiscuous mode [ 99.455723][ T55] bridge_slave_1: left allmulticast mode [ 99.467315][ T55] bridge_slave_1: left promiscuous mode [ 99.484411][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.501838][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.513848][ T55] bridge_slave_0: left allmulticast mode [ 99.525745][ T55] bridge_slave_0: left promiscuous mode [ 99.536865][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.674223][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.690398][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.699812][ T55] bond0 (unregistering): Released all slaves [ 99.708831][ T55] bond1 (unregistering): Released all slaves [ 99.719163][ T55] bond2 (unregistering): Released all slaves [ 99.735049][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 99.764508][ T55] IPVS: stopping master sync thread 4457 ... [ 99.784879][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.792117][ T5451] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.799548][ T5451] bridge_slave_0: entered allmulticast mode [ 99.806118][ T5451] bridge_slave_0: entered promiscuous mode [ 99.821880][ T55] hsr_slave_0: left promiscuous mode [ 99.828926][ T55] hsr_slave_1: left promiscuous mode [ 99.842722][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.850431][ T5511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.443'. [ 99.862802][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.891667][ T5448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.914023][ T5511] loop2: detected capacity change from 0 to 1764 [ 99.995251][ T5521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5521 comm=syz.6.445 [ 100.118280][ T55] team0 (unregistering): Port device team_slave_1 removed [ 100.131338][ T55] team0 (unregistering): Port device team_slave_0 removed [ 100.186107][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.194303][ T5451] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.202697][ T5451] bridge_slave_1: entered allmulticast mode [ 100.210316][ T5451] bridge_slave_1: entered promiscuous mode [ 101.217826][ T5534] loop2: detected capacity change from 0 to 512 [ 101.293893][ T5534] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.333094][ T5542] loop6: detected capacity change from 0 to 128 [ 101.349144][ T5534] EXT4-fs (loop2): mount failed [ 101.370547][ T5542] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.390496][ T5451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.402232][ T5451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.426471][ T5542] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.474304][ T5451] team0: Port device team_slave_0 added [ 101.489813][ T5451] team0: Port device team_slave_1 added [ 101.500464][ T5550] loop2: detected capacity change from 0 to 128 [ 101.643812][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.652206][ T5550] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.309333][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.340066][ T5550] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.436511][ T5451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.459949][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.473336][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.504148][ T5451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.592539][ T5451] hsr_slave_0: entered promiscuous mode [ 102.598706][ T5451] hsr_slave_1: entered promiscuous mode [ 102.604589][ T5451] debugfs: 'hsr0' already exists in 'hsr' [ 102.610347][ T5451] Cannot create hsr debugfs directory [ 102.616332][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 102.934669][ T55] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.954418][ T4254] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.004112][ T5451] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 103.013182][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 103.013198][ T28] audit: type=1400 audit(1778015338.318:817): avc: denied { write } for pid=5577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.062203][ T5451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.101725][ T55] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.121888][ T28] audit: type=1400 audit(1778015338.418:818): avc: denied { write } for pid=5604 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.173350][ T5451] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 103.210145][ T5451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.230252][ T5451] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 103.252858][ T5451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.267192][ T28] audit: type=1400 audit(1778015338.568:819): avc: denied { bind } for pid=5600 comm="syz.6.457" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.271892][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 103.303912][ T55] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.322119][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.340859][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.457'. [ 103.371178][ T5615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5615 comm=syz.3.460 [ 103.434076][ T5451] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 103.445734][ T5451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.476717][ T55] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.644177][ T5635] program syz.6.465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.653074][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.662273][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.670929][ T5524] bridge_slave_0: entered allmulticast mode [ 103.679857][ T5524] bridge_slave_0: entered promiscuous mode [ 103.723601][ T5638] xt_limit: Overflow, try lower: 65536/2147483648 [ 103.758969][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.766541][ T5639] tmpfs: Unknown parameter 'context6¿LòÃgñæ9¤†ª“1`w÷AšÙuújÍái#áôa•' [ 103.776890][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.789870][ T5524] bridge_slave_1: entered allmulticast mode [ 103.796613][ T5639] netlink: 180 bytes leftover after parsing attributes in process `syz.2.466'. [ 103.808971][ T5524] bridge_slave_1: entered promiscuous mode [ 103.815107][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 103.954560][ T5524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.051544][ T5644] netlink: 48 bytes leftover after parsing attributes in process `syz.2.467'. [ 104.070956][ T5451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.122131][ T5524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.133550][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 104.222604][ T5644] bond1: option xmit_hash_policy: invalid value (64) [ 104.251137][ T5644] bond1 (unregistering): Released all slaves [ 104.419897][ T5524] team0: Port device team_slave_0 added [ 104.466664][ T5524] team0: Port device team_slave_1 added [ 104.492779][ T5451] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.524693][ T28] audit: type=1400 audit(1778015339.818:820): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.552843][ T55] bridge_slave_1: left allmulticast mode [ 104.568524][ T55] bridge_slave_1: left promiscuous mode [ 104.584512][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.601738][ T55] bridge_slave_0: left allmulticast mode [ 104.618841][ T28] audit: type=1400 audit(1778015339.908:821): avc: denied { write } for pid=5662 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.642645][ T55] bridge_slave_0: left promiscuous mode [ 104.669865][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.802677][ T5672] loop2: detected capacity change from 0 to 512 [ 104.839014][ T5672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.853067][ T5672] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.871140][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.888278][ T28] audit: type=1400 audit(1778015340.188:822): avc: denied { write } for pid=5671 comm="syz.2.472" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.912643][ T55] bond_slave_0: left allmulticast mode [ 104.931414][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.953926][ T55] bond_slave_1: left allmulticast mode [ 104.964750][ T55] bond0 (unregistering): Released all slaves [ 104.994805][ T5404] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.001919][ T5404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.024191][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 105.036798][ T5670] tipc: Started in network mode [ 105.043446][ T5670] tipc: Node identity , cluster identity 4711 [ 105.070024][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.089132][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.176395][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.189872][ T5524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.239545][ T55] hsr_slave_0: left promiscuous mode [ 105.274947][ T55] hsr_slave_1: left promiscuous mode [ 105.294401][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.322966][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.340431][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.358218][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.371583][ T55] veth1_macvtap: left promiscuous mode [ 105.381160][ T55] veth0_macvtap: left promiscuous mode [ 105.396842][ T55] veth1_vlan: left promiscuous mode [ 105.405011][ T55] ªªªªªª: left promiscuous mode [ 105.523574][ T5687] loop7: detected capacity change from 0 to 16384 [ 105.610485][ T55] team0 (unregistering): Port device team_slave_1 removed [ 105.666975][ T5695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 105.680138][ T5695] loop3: detected capacity change from 0 to 512 [ 105.701445][ T5695] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.767885][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.475'. [ 105.791606][ T5695] EXT4-fs (loop3): 1 truncate cleaned up [ 105.797790][ T5695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.821379][ T55] team0 (unregistering): Port device team_slave_0 removed [ 105.839895][ T28] audit: type=1400 audit(1778015341.108:823): avc: denied { write } for pid=5688 comm="syz.3.478" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.263998][ T5404] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.271208][ T5404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.285228][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.293847][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.321134][ T5524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.369780][ T5524] hsr_slave_0: entered promiscuous mode [ 106.375885][ T5524] hsr_slave_1: entered promiscuous mode [ 106.426202][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.460921][ T5704] netlink: 24 bytes leftover after parsing attributes in process `syz.6.479'. [ 106.490275][ T5704] loop6: detected capacity change from 0 to 1764 [ 106.506307][ T28] audit: type=1326 audit(1778015341.798:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.3.480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723244cdd9 code=0x7ffc0000 [ 106.535036][ T28] audit: type=1326 audit(1778015341.828:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.3.480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723244cdd9 code=0x7ffc0000 [ 106.560783][ T28] audit: type=1326 audit(1778015341.828:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.3.480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723244cdd9 code=0x7ffc0000 [ 106.816799][ T5726] netlink: 'syz.3.481': attribute type 10 has an invalid length. [ 106.870955][ T5729] IPVS: set_ctl: invalid protocol: 131 172.20.20.27:21 [ 106.932203][ T5726] ipvlan0: entered allmulticast mode [ 106.939166][ T5726] veth0_vlan: entered allmulticast mode [ 106.949529][ T5726] team0: Device ipvlan0 failed to register rx_handler [ 106.965073][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 107.304084][ T5524] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 107.334578][ T5524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.364541][ T5524] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 107.399424][ T5524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.414549][ T5451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.427403][ T5524] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 107.468814][ T5524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.486254][ T5524] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 107.502713][ T5524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.601265][ T5738] loop6: detected capacity change from 0 to 764 [ 107.628459][ T5769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5769 comm=syz.2.483 [ 107.655284][ T5738] rock: directory entry would overflow storage [ 107.666823][ T5738] rock: sig=0x4654, size=5, remaining=4 [ 107.679434][ T5738] syz.6.482 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 107.738433][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 107.754572][ T5774] loop6: detected capacity change from 0 to 128 [ 107.776502][ T5774] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.789724][ T5774] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.838467][ T5524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.855298][ T5524] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.872997][ T5524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.883683][ T5524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.982490][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.989609][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.000748][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.007882][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.570837][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 109.570849][ T28] audit: type=1400 audit(1778015344.868:858): avc: denied { write } for pid=5784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.605198][ T5451] veth0_vlan: entered promiscuous mode [ 109.622305][ T5451] veth1_vlan: entered promiscuous mode [ 109.654418][ T5451] veth0_macvtap: entered promiscuous mode [ 109.682595][ T28] audit: type=1400 audit(1778015344.968:859): avc: denied { write } for pid=5815 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.709077][ T5451] veth1_macvtap: entered promiscuous mode [ 109.735383][ T5524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.751095][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.776641][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 109.790899][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.834006][ T315] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.961268][ T315] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.970558][ T28] audit: type=1400 audit(1778015345.238:860): avc: denied { mounton } for pid=5451 comm="syz-executor" path="/root/syzkaller.pNFEgM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 110.005703][ T315] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.030265][ T4254] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.049098][ T315] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.146103][ T5832] FAULT_INJECTION: forcing a failure. [ 110.146103][ T5832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.212220][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz.3.489 Tainted: G W syzkaller #0 PREEMPT(full) [ 110.212261][ T5832] Tainted: [W]=WARN [ 110.212268][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.212281][ T5832] Call Trace: [ 110.212288][ T5832] [ 110.212349][ T5832] __dump_stack+0x1d/0x30 [ 110.212380][ T5832] dump_stack_lvl+0x95/0xd0 [ 110.212405][ T5832] dump_stack+0x15/0x1b [ 110.212424][ T5832] should_fail_ex+0x263/0x280 [ 110.212482][ T5832] should_fail+0xb/0x20 [ 110.212516][ T5832] should_fail_usercopy+0x1a/0x20 [ 110.212553][ T5832] _copy_from_iter+0xcf/0xea0 [ 110.212583][ T5832] ? __alloc_skb+0x4f6/0x690 [ 110.212692][ T5832] ? __alloc_skb+0x200/0x690 [ 110.212787][ T5832] netlink_sendmsg+0x4ae/0x6f0 [ 110.212827][ T5832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.212891][ T5832] ____sys_sendmsg+0x563/0x5b0 [ 110.212917][ T5832] ___sys_sendmsg+0x195/0x1e0 [ 110.213028][ T5832] __x64_sys_sendmsg+0xd4/0x160 [ 110.213064][ T5832] x64_sys_call+0x194c/0x3020 [ 110.213135][ T5832] do_syscall_64+0x12c/0x3b0 [ 110.213163][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.213189][ T5832] RIP: 0033:0x7f723244cdd9 [ 110.213222][ T5832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.213250][ T5832] RSP: 002b:00007f7230ea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.213276][ T5832] RAX: ffffffffffffffda RBX: 00007f72326c5fa0 RCX: 00007f723244cdd9 [ 110.213295][ T5832] RDX: 0000000004010084 RSI: 0000200000000940 RDI: 0000000000000004 [ 110.213313][ T5832] RBP: 00007f7230ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.213358][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.213373][ T5832] R13: 00007f72326c6038 R14: 00007f72326c5fa0 R15: 00007ffe82b84d98 [ 110.213392][ T5832] [ 110.502006][ T28] audit: type=1400 audit(1778015345.798:861): avc: denied { write } for pid=5826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.552022][ T5524] veth0_vlan: entered promiscuous mode [ 110.569487][ T5524] veth1_vlan: entered promiscuous mode [ 110.589953][ T28] audit: type=1400 audit(1778015345.878:862): avc: denied { write } for pid=5847 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.619478][ T5524] veth0_macvtap: entered promiscuous mode [ 110.800348][ T5524] veth1_macvtap: entered promiscuous mode [ 110.820659][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 110.897630][ T5856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.491'. [ 110.937131][ T5857] loop7: detected capacity change from 0 to 2048 [ 110.967560][ T5857] loop7: p1 p4 [ 110.976343][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.983920][ T5857] loop7: p4 size 589824 extends beyond EOD, truncated [ 111.072176][ T28] audit: type=1326 audit(1778015346.368:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.488" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcb45cdd9 code=0x7ffc0000 [ 111.187427][ T5856] loop2: detected capacity change from 0 to 1764 [ 111.247644][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.632117][ T28] audit: type=1326 audit(1778015346.368:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.488" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcb45cdd9 code=0x7ffc0000 [ 111.699135][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.747472][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.818676][ T28] audit: type=1326 audit(1778015346.368:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.488" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcb45cdd9 code=0x7ffc0000 [ 111.850467][ T28] audit: type=1326 audit(1778015346.368:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.488" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcb45cdd9 code=0x7ffc0000 [ 111.888684][ T28] audit: type=1326 audit(1778015346.368:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.488" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1bcb45cb42 code=0x7ffc0000 [ 111.973415][ T5872] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 112.165753][ T5876] loop3: detected capacity change from 0 to 256 [ 112.448250][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.482954][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.506808][ T5880] loop3: detected capacity change from 0 to 512 [ 112.569788][ T5880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.616016][ T5880] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.704459][ T5880] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.494: path /114/file1: bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 112.733230][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.8.448'. [ 112.763534][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.448'. [ 112.819750][ T5880] EXT4-fs (loop3): Remounting filesystem read-only [ 112.872655][ T5899] loop2: detected capacity change from 0 to 7 [ 112.940088][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.953395][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.970113][ T5903] netlink: 'syz.7.497': attribute type 21 has an invalid length. [ 112.996783][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.009690][ T5903] netlink: 'syz.7.497': attribute type 4 has an invalid length. [ 113.078598][ T5914] netlink: 20 bytes leftover after parsing attributes in process `syz.8.501'. [ 113.150938][ T5918] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 113.157528][ T5918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.178576][ T5918] vhci_hcd vhci_hcd.0: Device attached [ 113.211558][ T5919] usbip_core: unknown command [ 113.225106][ T5919] vhci_hcd: unknown pdu 0 [ 113.239989][ T5919] usbip_core: unknown command [ 113.252005][ T5918] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 113.283324][ T349] vhci_hcd vhci_hcd.7: stop threads [ 113.296360][ T349] vhci_hcd vhci_hcd.7: release socket [ 113.302431][ T349] vhci_hcd vhci_hcd.7: disconnect device [ 113.358627][ T4839] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 113.439088][ T5912] FAULT_INJECTION: forcing a failure. [ 113.439088][ T5912] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 113.459893][ T5912] CPU: 0 UID: 0 PID: 5912 Comm: syz.3.499 Tainted: G W syzkaller #0 PREEMPT(full) [ 113.459935][ T5912] Tainted: [W]=WARN [ 113.459945][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.459962][ T5912] Call Trace: [ 113.459970][ T5912] [ 113.459979][ T5912] __dump_stack+0x1d/0x30 [ 113.460080][ T5912] dump_stack_lvl+0x95/0xd0 [ 113.460175][ T5912] dump_stack+0x15/0x1b [ 113.460201][ T5912] should_fail_ex+0x263/0x280 [ 113.460255][ T5912] should_fail_alloc_page+0xf2/0x100 [ 113.460352][ T5912] __alloc_frozen_pages_noprof+0x108/0x350 [ 113.460379][ T5912] alloc_pages_mpol+0xb3/0x260 [ 113.460402][ T5912] ? anon_pipe_write+0x61/0xb20 [ 113.460441][ T5912] alloc_pages_noprof+0x8f/0x140 [ 113.460472][ T5912] anon_pipe_write+0x69c/0xb20 [ 113.460601][ T5912] ? anon_pipe_write+0x61/0xb20 [ 113.460651][ T5912] ? __pfx_anon_pipe_write+0x10/0x10 [ 113.460736][ T5912] vfs_write+0x5a6/0x9f0 [ 113.460779][ T5912] ksys_write+0xdc/0x1a0 [ 113.460818][ T5912] __x64_sys_write+0x40/0x50 [ 113.460857][ T5912] x64_sys_call+0x27e1/0x3020 [ 113.460896][ T5912] do_syscall_64+0x12c/0x3b0 [ 113.460926][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.460974][ T5912] RIP: 0033:0x7f723240d60e [ 113.460996][ T5912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.461055][ T5912] RSP: 002b:00007f7230ea6ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.461082][ T5912] RAX: ffffffffffffffda RBX: 00007f7230ea76c0 RCX: 00007f723240d60e [ 113.461100][ T5912] RDX: 0000000000000029 RSI: 00007f7230ea6e90 RDI: 0000000000000002 [ 113.461134][ T5912] RBP: 00007f7230ea6e90 R08: 0000000000000000 R09: 0000000000000000 [ 113.461151][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 113.461169][ T5912] R13: 00007f723269d7a0 R14: 00007f72326944a0 R15: 0000000000000001 [ 113.461258][ T5912] [ 113.671839][ T5945] loop2: detected capacity change from 0 to 7 [ 113.814183][ T5952] loop2: detected capacity change from 0 to 512 [ 113.835841][ T5954] syzkaller0: entered promiscuous mode [ 113.848919][ T5954] syzkaller0: entered allmulticast mode [ 113.870340][ T5952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.909053][ T5952] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.953127][ T5963] loop3: detected capacity change from 0 to 512 [ 114.040988][ T5963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 114.061526][ T5963] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.101078][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.8.515'. [ 114.169220][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 114.279369][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.332366][ T5986] loop2: detected capacity change from 0 to 7 [ 114.447111][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.520'. [ 114.645552][ T6009] loop2: detected capacity change from 0 to 2048 [ 114.681251][ T6009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.719657][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 114.719672][ T28] audit: type=1400 audit(1778015350.018:920): avc: denied { write } for pid=6008 comm="syz.2.527" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.793077][ T6009] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.527: bg 0: block 234: padding at end of block bitmap is not set [ 114.917437][ T28] audit: type=1400 audit(1778015350.218:921): avc: denied { write } for pid=6008 comm="syz.2.527" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.926411][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.8.522'. [ 114.953995][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 114.992682][ T28] audit: type=1400 audit(1778015350.218:922): avc: denied { write } for pid=6008 comm="syz.2.527" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.035921][ T6020] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.049641][ T6020] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.061851][ T28] audit: type=1400 audit(1778015350.358:923): avc: denied { write } for pid=6019 comm="syz.7.528" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.140266][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.264181][ T5451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.344760][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.7.531'. [ 115.683427][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 116.059557][ T6039] set_capacity_and_notify: 4 callbacks suppressed [ 116.059577][ T6039] loop8: detected capacity change from 0 to 512 [ 116.085849][ T6041] loop2: detected capacity change from 0 to 512 [ 116.100774][ T6039] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.110094][ T6041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.122693][ T6041] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 116.132316][ T6041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 116.141469][ T6041] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 116.151256][ T6041] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 116.162154][ T6039] EXT4-fs (loop8): failed to initialize system zone (-117) [ 116.170920][ T6039] EXT4-fs (loop8): mount failed [ 116.176298][ T6041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 116.261934][ T28] audit: type=1400 audit(1778015351.558:924): avc: denied { map } for pid=6040 comm="syz.2.534" path="socket:[13527]" dev="sockfs" ino=13527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.285816][ T28] audit: type=1400 audit(1778015351.558:925): avc: denied { read accept } for pid=6040 comm="syz.2.534" path="socket:[13527]" dev="sockfs" ino=13527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.356827][ T3304] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz-executor: dx entry: limit 65535 != root limit 120 [ 116.382792][ T3304] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 116.425902][ T3304] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /116/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 116.892736][ T6060] __nla_validate_parse: 1 callbacks suppressed [ 116.892752][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.537'. [ 116.944389][ T6057] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 116.958788][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.070897][ T6057] bond1 (unregistering): Released all slaves [ 117.183814][ T6065] loop2: detected capacity change from 0 to 7 [ 117.265921][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.542'. [ 117.362961][ T6075] loop3: detected capacity change from 0 to 128 [ 117.435093][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.7.545'. [ 117.464508][ T6080] netlink: 64 bytes leftover after parsing attributes in process `syz.3.544'. [ 117.567169][ T6051] loop8: detected capacity change from 0 to 512 [ 117.627195][ T6051] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 117.649322][ T6084] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 117.656354][ T28] audit: type=1400 audit(1778015352.948:926): avc: denied { nlmsg_read } for pid=6081 comm="syz.7.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.728852][ T6086] loop7: detected capacity change from 0 to 512 [ 117.759615][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 117.838872][ T6084] ip6tnl0: Caught tx_queue_len zero misconfig [ 117.875095][ T28] audit: type=1400 audit(1778015353.168:927): avc: denied { read } for pid=6081 comm="syz.7.546" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.902964][ T6089] loop3: detected capacity change from 0 to 512 [ 117.940077][ T28] audit: type=1400 audit(1778015353.168:928): avc: denied { open } for pid=6081 comm="syz.7.546" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.989021][ T6089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.006302][ T28] audit: type=1400 audit(1778015353.198:929): avc: denied { append } for pid=6081 comm="syz.7.546" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 118.031103][ T6089] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.104584][ T6096] bridge0: port 2(bridge_slave_1) entered listening state [ 118.125563][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.396206][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.537170][ T6111] loop8: detected capacity change from 0 to 4096 [ 118.562848][ T6111] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.732536][ T6113] loop2: detected capacity change from 0 to 512 [ 118.743491][ T6113] ext4: Unknown parameter 'fsuuid' [ 120.718195][ T6137] netlink: 36 bytes leftover after parsing attributes in process `syz.7.554'. [ 120.729147][ T5524] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.773613][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.554'. [ 120.785963][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 120.785978][ T28] audit: type=1400 audit(1778015356.088:933): avc: denied { write } for pid=6128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.845979][ T28] audit: type=1400 audit(1778015356.138:934): avc: denied { write } for pid=6147 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.936144][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.7.560'. [ 120.947193][ T28] audit: type=1400 audit(1778015356.208:935): avc: denied { listen } for pid=6152 comm="syz.8.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.970375][ T6155] syzkaller1: entered promiscuous mode [ 120.995222][ T6157] loop7: detected capacity change from 0 to 1764 [ 121.000209][ T6155] syzkaller1: entered allmulticast mode [ 121.236764][ T6165] netlink: 24 bytes leftover after parsing attributes in process `syz.8.563'. [ 121.719092][ T6178] loop3: detected capacity change from 0 to 4096 [ 121.841950][ T6178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.860794][ T28] audit: type=1400 audit(1778015357.158:936): avc: denied { write } for pid=6175 comm="syz.3.566" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.212760][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.563'. [ 122.364556][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.449444][ T6184] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001 [ 122.479999][ T28] audit: type=1400 audit(1778015357.778:937): avc: denied { getopt } for pid=6183 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.526927][ T28] audit: type=1326 audit(1778015357.808:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.7.567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a56fecdd9 code=0x0 [ 122.616626][ T6186] loop7: detected capacity change from 0 to 512 [ 122.632011][ T6186] EXT4-fs: Mount option(s) incompatible with ext3 [ 122.725638][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.732760][ T6195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.864039][ T6210] SELinux: policydb version 1869939315 does not match my version range 15-35 [ 122.874579][ T28] audit: type=1400 audit(1778015358.158:939): avc: denied { load_policy } for pid=6205 comm="syz.6.575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.909404][ T6210] SELinux: failed to load policy [ 122.966580][ T6217] loop8: detected capacity change from 0 to 2048 [ 123.009018][ T6217] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.031407][ T6217] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.089733][ T6217] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.139308][ T28] audit: type=1400 audit(1778015358.438:940): avc: denied { write } for pid=6215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.227044][ T5524] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.257885][ T28] audit: type=1400 audit(1778015358.538:941): avc: denied { write } for pid=6235 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.321221][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.8.580'. [ 123.340907][ T28] audit: type=1400 audit(1778015358.598:942): avc: denied { execute } for pid=6221 comm="syz.6.579" path="/78/blkio.bfq.io_merged" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.523485][ T6251] loop7: detected capacity change from 0 to 128 [ 123.543219][ T6251] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 123.788645][ T6263] syz.3.581: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 123.804471][ T6263] CPU: 1 UID: 0 PID: 6263 Comm: syz.3.581 Tainted: G W syzkaller #0 PREEMPT(full) [ 123.804525][ T6263] Tainted: [W]=WARN [ 123.804537][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 123.804551][ T6263] Call Trace: [ 123.804557][ T6263] [ 123.804564][ T6263] __dump_stack+0x1d/0x30 [ 123.804593][ T6263] dump_stack_lvl+0x95/0xd0 [ 123.804618][ T6263] dump_stack+0x15/0x1b [ 123.804663][ T6263] warn_alloc+0x145/0x1c0 [ 123.804683][ T6263] ? __schedule+0x936/0xd20 [ 123.804715][ T6263] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 123.804794][ T6263] ? preempt_schedule_irq+0x2d/0x50 [ 123.804881][ T6263] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 123.804902][ T6263] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 123.804927][ T6263] ? irqentry_exit+0x7d/0x5b0 [ 123.804995][ T6263] ? __schedule+0x936/0xd20 [ 123.805027][ T6263] ? finish_task_switch+0x128/0x320 [ 123.805057][ T6263] vmalloc_user_noprof+0x7d/0xb0 [ 123.805132][ T6263] ? xskq_create+0x80/0xe0 [ 123.805160][ T6263] xskq_create+0x80/0xe0 [ 123.805226][ T6263] xsk_init_queue+0x70/0xb0 [ 123.805252][ T6263] xsk_setsockopt+0x3f5/0x640 [ 123.805281][ T6263] ? __sys_setsockopt+0x157/0x200 [ 123.805313][ T6263] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.805345][ T6263] __sys_setsockopt+0x184/0x200 [ 123.805366][ T6263] __x64_sys_setsockopt+0x64/0x80 [ 123.805417][ T6263] x64_sys_call+0x2327/0x3020 [ 123.805491][ T6263] do_syscall_64+0x12c/0x3b0 [ 123.805525][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.805550][ T6263] RIP: 0033:0x7f723244cdd9 [ 123.805573][ T6263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.805595][ T6263] RSP: 002b:00007f7230e65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 123.805613][ T6263] RAX: ffffffffffffffda RBX: 00007f72326c6180 RCX: 00007f723244cdd9 [ 123.805639][ T6263] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 123.805671][ T6263] RBP: 00007f72324e2d69 R08: 0000000000000004 R09: 0000000000000000 [ 123.805687][ T6263] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.805703][ T6263] R13: 00007f72326c6218 R14: 00007f72326c6180 R15: 00007ffe82b84d98 [ 123.805726][ T6263] [ 123.805759][ T6263] Mem-Info: [ 124.059889][ T6263] active_anon:42428 inactive_anon:0 isolated_anon:0 [ 124.059889][ T6263] active_file:12152 inactive_file:13092 isolated_file:0 [ 124.059889][ T6263] unevictable:0 dirty:101 writeback:0 [ 124.059889][ T6263] slab_reclaimable:3492 slab_unreclaimable:17564 [ 124.059889][ T6263] mapped:40208 shmem:32898 pagetables:1727 [ 124.059889][ T6263] sec_pagetables:0 bounce:0 [ 124.059889][ T6263] kernel_misc_reclaimable:0 [ 124.059889][ T6263] free:1837746 free_pcp:10967 free_cma:0 [ 124.106489][ T6263] Node 0 active_anon:169712kB inactive_anon:0kB active_file:48608kB inactive_file:52368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160832kB dirty:404kB writeback:0kB shmem:131592kB kernel_stack:4336kB pagetables:6908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 124.138152][ T6263] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.169163][ T6263] lowmem_reserve[]: 0 2878 7857 7857 [ 124.174582][ T6263] Node 0 DMA32 free:2944548kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948072kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 124.206954][ T6263] lowmem_reserve[]: 0 0 4978 4978 [ 124.212107][ T6263] Node 0 Normal free:4391076kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:169712kB inactive_anon:0kB active_file:48608kB inactive_file:52368kB unevictable:0kB writepending:404kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:40344kB local_pcp:26624kB free_cma:0kB [ 124.246462][ T6263] lowmem_reserve[]: 0 0 0 0 [ 124.252486][ T6263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.266533][ T6263] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944548kB [ 124.285551][ T6263] Node 0 Normal: 235*4kB (UE) 359*8kB (U) 2*16kB (E) 5*32kB (UME) 25*64kB (UM) 21*128kB (UE) 6*256kB (U) 15*512kB (UE) 11*1024kB (UM) 4*2048kB (UME) 1063*4096kB (UM) = 4391012kB [ 124.304947][ T6263] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 124.315317][ T6263] 58137 total pagecache pages [ 124.320129][ T6263] 0 pages in swap cache [ 124.324325][ T6263] Free swap = 124996kB [ 124.328542][ T6263] Total swap = 124996kB [ 124.332747][ T6263] 2097051 pages RAM [ 124.336614][ T6263] 0 pages HighMem/MovableOnly [ 124.342569][ T6263] 81634 pages reserved [ 124.569921][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.8.580'. [ 124.908474][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.586'. [ 125.055917][ T6292] loop7: detected capacity change from 0 to 512 [ 125.133630][ T6292] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 125.172376][ T6292] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 125.182483][ T6292] EXT4-fs (loop7): 1 truncate cleaned up [ 125.188511][ T6292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.317256][ T6304] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 125.370952][ T6308] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=6308 comm=syz.7.587 [ 125.646833][ T5451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.823045][ T6328] loop7: detected capacity change from 0 to 128 [ 125.843586][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 125.843601][ T28] audit: type=1400 audit(1778015361.138:954): avc: denied { write } for pid=6315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.968265][ T28] audit: type=1400 audit(1778015361.038:953): avc: denied { open } for pid=6324 comm="syz.7.590" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 126.061934][ T28] audit: type=1326 audit(1778015361.218:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.7.590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56fecdd9 code=0x7ffc0000 [ 126.107459][ T6303] loop6: detected capacity change from 0 to 512 [ 126.163863][ T28] audit: type=1326 audit(1778015361.218:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.7.590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f0a56fecdd9 code=0x7ffc0000 [ 126.254069][ T28] audit: type=1400 audit(1778015361.218:957): avc: denied { write } for pid=6331 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.334825][ T28] audit: type=1326 audit(1778015361.268:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.7.590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56fecdd9 code=0x7ffc0000 [ 126.369114][ T6322] netlink: 84 bytes leftover after parsing attributes in process `syz.3.591'. [ 126.413941][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 126.416209][ T28] audit: type=1326 audit(1778015361.268:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.7.590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a56fecdd9 code=0x7ffc0000 [ 126.500322][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.592'. [ 126.511064][ T28] audit: type=1326 audit(1778015361.268:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.7.590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a56fecdd9 code=0x7ffc0000 [ 126.511181][ T28] audit: type=1326 audit(1778015361.308:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.7.590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0a56fad60e code=0x7ffc0000 [ 126.511241][ T28] audit: type=1326 audit(1778015361.408:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.7.590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0a56fad60e code=0x7ffc0000 [ 126.861901][ T6382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6382 comm=syz.6.598 [ 126.973745][ T6391] netlink: 32 bytes leftover after parsing attributes in process `syz.6.598'. [ 127.008891][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.8.600'. [ 127.018843][ T6386] loop3: detected capacity change from 0 to 2048 [ 127.033447][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.8.600'. [ 127.045231][ T6387] bond1: Removing last ns target with arp_interval on [ 127.055171][ T6395] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 127.077464][ T6346] syz_tun: entered promiscuous mode [ 127.081286][ T6386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.142603][ T6402] loop6: detected capacity change from 0 to 512 [ 127.181519][ T6402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.195771][ T6402] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.260986][ T6400] loop7: detected capacity change from 0 to 4096 [ 127.277374][ T6400] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 127.472788][ T6428] loop7: detected capacity change from 0 to 512 [ 127.503895][ T6428] EXT4-fs: Ignoring removed nobh option [ 127.536186][ T6428] EXT4-fs (loop7): orphan cleanup on readonly fs [ 127.558491][ T6428] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.605: EA inode hash validation failed [ 127.586530][ T6428] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 127.601125][ T6428] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.605: corrupted inode contents [ 127.614219][ T6428] fserror_report: 1 callbacks suppressed [ 127.614279][ T6428] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.621494][ T6428] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #15: comm syz.7.605: mark_inode_dirty error [ 127.630683][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 127.630697][ C1] EXT4-fs (loop7): initial error at time 1778015363: ext4_do_update_inode:5690: inode 15 [ 127.630728][ C1] EXT4-fs (loop7): last error at time 1778015363: ext4_do_update_inode:5690: inode 15 [ 127.652710][ T4254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.665468][ T6428] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.677782][ T55] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 127.712945][ T6428] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.605: corrupted inode contents [ 127.729937][ T55] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 127.739971][ T6428] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.744392][ T6428] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3001: inode #15: comm syz.7.605: mark_inode_dirty error [ 127.759323][ T55] EXT4-fs (loop3): This should not happen!! Data will be lost [ 127.759323][ T55] [ 127.793134][ T55] EXT4-fs (loop3): Total free blocks count 0 [ 127.811470][ T55] EXT4-fs (loop3): Free/Dirty block details [ 127.812605][ T6428] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.828435][ T55] EXT4-fs (loop3): free_blocks=4096 [ 127.834182][ T6428] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3004: inode #15: comm syz.7.605: mark inode dirty (error -117) [ 127.847070][ T55] EXT4-fs (loop3): dirty_blocks=512 [ 127.878286][ T6434] mmap: syz.6.606 (6434) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.878424][ T55] EXT4-fs (loop3): Block reservation details [ 127.896529][ T6428] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.896743][ T6428] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 127.917961][ T55] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 127.921600][ T6428] EXT4-fs (loop7): 1 orphan inode deleted [ 127.933098][ T6428] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 127.937639][ T55] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 127.984279][ T3299] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 128.011283][ T5451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.213763][ T6461] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 128.246447][ T6467] loop2: detected capacity change from 0 to 7 [ 128.368158][ T6482] bond2: option arp_validate: invalid value (6216) [ 128.375985][ T6482] bond2 (unregistering): Released all slaves [ 128.530205][ T6486] batadv_slave_1: entered promiscuous mode [ 128.583937][ T6491] loop8: detected capacity change from 0 to 1764 [ 128.596997][ T6486] macsec1: entered promiscuous mode [ 128.644485][ T6486] macsec1: entered allmulticast mode [ 128.699173][ T6486] batadv_slave_1: entered allmulticast mode [ 128.789071][ T6486] batadv_slave_1: left allmulticast mode [ 128.834486][ T6486] batadv_slave_1: left promiscuous mode [ 128.968516][ T6498] loop7: detected capacity change from 0 to 128 [ 129.027804][ T6502] loop8: detected capacity change from 0 to 512 [ 129.098827][ T6502] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 129.282918][ T6502] EXT4-fs (loop8): 1 truncate cleaned up [ 129.310419][ T6502] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.322737][ T6507] __nla_validate_parse: 2 callbacks suppressed [ 129.322785][ T6507] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.629'. [ 129.390894][ T6502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.398161][ T6502] IPv6: NLM_F_CREATE should be set when creating new route [ 129.456116][ T6516] loop3: detected capacity change from 0 to 1024 [ 129.462910][ T6513] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 129.469460][ T6513] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.488129][ T6516] ext4: Bad value for 'min_batch_time' [ 129.536458][ T6513] vhci_hcd vhci_hcd.0: Device attached [ 129.545891][ T6516] netlink: 40 bytes leftover after parsing attributes in process `syz.3.631'. [ 129.585020][ T6520] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(10) [ 129.591687][ T6520] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 129.604333][ T6526] ================================================================== [ 129.612462][ T6526] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 129.619264][ T6526] [ 129.621623][ T6526] write to 0xffff88810409c100 of 8 bytes by task 6515 on cpu 0: [ 129.629276][ T6526] mas_wmb_replace+0x234/0x1760 [ 129.634170][ T6526] mas_wr_store_entry+0x54ff/0x5ad0 [ 129.634463][ T6517] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(7) [ 129.639391][ T6526] mas_store_prealloc+0x43e/0x690 [ 129.645939][ T6517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.650962][ T6526] vma_complete+0x3c7/0x850 [ 129.662928][ T6526] __split_vma+0x5db/0x640 [ 129.667387][ T6526] vma_modify+0xbee/0xca0 [ 129.671753][ T6526] vma_modify_flags+0x182/0x210 [ 129.676639][ T6526] mprotect_fixup+0x3a2/0x680 [ 129.681345][ T6526] do_mprotect_pkey+0x6ae/0x960 [ 129.686240][ T6526] __x64_sys_mprotect+0x48/0x60 [ 129.691127][ T6526] x64_sys_call+0x2768/0x3020 [ 129.695838][ T6526] do_syscall_64+0x12c/0x3b0 [ 129.700487][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.706410][ T6526] [ 129.708756][ T6526] read to 0xffff88810409c100 of 8 bytes by task 6526 on cpu 1: [ 129.716320][ T6526] mas_walk+0x176/0x370 [ 129.720510][ T6526] lock_vma_under_rcu+0xc9/0x210 [ 129.725491][ T6526] do_user_addr_fault+0x232/0x1050 [ 129.730636][ T6526] exc_page_fault+0x62/0xa0 [ 129.735186][ T6526] asm_exc_page_fault+0x26/0x30 [ 129.740070][ T6526] [ 129.741606][ T6520] vhci_hcd vhci_hcd.0: Device attached [ 129.742404][ T6526] value changed: 0xffff88811c246c41 -> 0xffff88810409c100 [ 129.754973][ T6526] [ 129.757322][ T6526] Reported by Kernel Concurrency Sanitizer on: [ 129.759758][ T6517] vhci_hcd vhci_hcd.0: Device attached [ 129.763501][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.3.631 Tainted: G W syzkaller #0 PREEMPT(full) [ 129.779776][ T6526] Tainted: [W]=WARN [ 129.783604][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.793687][ T6526] ================================================================== [ 129.836922][ T4831] usb 15-1: new low-speed USB device number 3 using vhci_hcd [ 129.949947][ T5524] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.978732][ T6522] vhci_hcd: connection closed [ 129.979037][ T349] vhci_hcd vhci_hcd.7: stop threads [ 129.989502][ T6521] vhci_hcd: connection closed [ 129.990949][ T6518] vhci_hcd: connection reset by peer [ 130.014847][ T349] vhci_hcd vhci_hcd.7: release socket [ 130.033746][ T349] vhci_hcd vhci_hcd.7: disconnect device [ 130.049929][ T349] vhci_hcd vhci_hcd.7: stop threads [ 130.060765][ T349] vhci_hcd vhci_hcd.7: release socket [ 130.071932][ T349] vhci_hcd vhci_hcd.7: disconnect device [ 130.084545][ T349] vhci_hcd vhci_hcd.7: stop threads [ 130.095133][ T349] vhci_hcd vhci_hcd.7: release socket [ 130.106242][ T349] vhci_hcd vhci_hcd.7: disconnect device [ 134.877044][ T4831] usb 15-1: enqueue for inactive port 0 [ 134.882687][ T4831] usb 15-1: enqueue for inactive port 0 [ 134.958366][ T4831] vhci_hcd vhci_hcd.7: vhci_device speed not set