last executing test programs: 1m30.580797167s ago: executing program 0 (id=153): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480100001000332e0000000000000000ac1414000000ffff0000000000000000fc02000000000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0001000000000000000000000000000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000010000a0000000000000000000000000048000300"], 0x148}}, 0x0) 1m30.390533503s ago: executing program 0 (id=156): openat$vcsa(0xffffffffffffff9c, 0x0, 0x14100, 0x0) epoll_create1(0x0) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYRESHEX, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000000)=0x3, 0x4) 1m30.315454325s ago: executing program 0 (id=157): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 1m30.240939217s ago: executing program 0 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000060000000f00000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020800f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x800000, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455cb, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000188000604"], 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.85635596s ago: executing program 0 (id=167): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x0, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0xffffffffffffffff, 0x24000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m28.86982315s ago: executing program 0 (id=172): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 1m28.719756974s ago: executing program 32 (id=172): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 1m14.588436505s ago: executing program 3 (id=278): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="c3532c"], 0x7) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x82, 0x0, 0x80662, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0xffff, 0x0, 0x3f}, r3, 0x0, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000180)) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x21, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'nq\x00', 0x28, 0xc, 0x6b}, {@multicast2, 0x4e26, 0x1, 0x1, 0x1}}, 0x44) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x2d, &(0x7f0000000e40)=""/136, &(0x7f0000000f00)=0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0) setfsgid(0x0) setregid(0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1ff, 0x0, 0x3, 0x800000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x2, 0x8, 0x80, 0xd, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_bp={0x0, 0x8}, 0x10001, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x10004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x100882, 0x7ff, 0x3, 0x0, 0x648, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x100820, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) 1m13.695633033s ago: executing program 3 (id=282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0xfffffffc) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xffffffffffffff09}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x8000000, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000, 0x2}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {0x0, 0x0, 0x0, 0xc1f5}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x3a006510, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f617", {"2e7c8cbccc480860f94cd609888bc51a", "38a461132eddc6aef8a88f02e0ed7e13"}}}}}}}}}, 0xd6) 1m13.406994801s ago: executing program 3 (id=285): symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c889}, 0x24000804) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8, 0xb, 0xd8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m12.718106592s ago: executing program 3 (id=291): socket(0x400000000010, 0x3, 0x0) set_mempolicy(0x6, &(0x7f0000000040)=0x1, 0xc) syz_open_dev$vcsn(0x0, 0x20000000000, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200b58909000200737982310000000008000440000000000900010073797a3069000000080003400000000a1400000011000104000000000000000000000a"], 0x64}}, 0x0) 1m12.652514414s ago: executing program 3 (id=294): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x37, 0x2d, 0x36, 0xa]}}}}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x6c4280) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x40, 0x10, 0x2, 0x81, 0x0, 0x6, 0x0}) 1m12.615252455s ago: executing program 3 (id=295): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') pread64(r0, &(0x7f0000019080)=""/102356, 0x18fd4, 0x200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0xfffffffd}, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x40, r2, 0x1, 0xfffffffd, 0xfffffffd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20843, 0x63) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x40040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x4], 0x0, 0x0, 0x100000}}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010bd70000000006d5583705e0b0e43f0000000000000000000", @ANYRES32=0x0, @ANYBLOB="6cf2040000000000140003006e657464657673696d300000000000000c0016800800018004000c8008000a00", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x48880) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r11, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x240c6050}, 0x8040) getsockopt$IP6T_SO_GET_REVISION_TARGET(r9, 0x29, 0x45, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0x12, 0x0, &(0x7f0000000240)="ff410800b083dcc1010b3efc88643acd3aaf", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) timer_create(0x3, &(0x7f0000000800)={0x0, 0x34, 0x1, @thr={&(0x7f0000000080)="d5c9e3c37981884e789af8dda23979b06bce853003f375d103d9301f1fe1159685", &(0x7f0000000740)="aeaf34aed092dc92cca66c2f945ad812346291463c782b4670d05857e228fbdeb47c0f6b64a8362c82c7d475b8f5348ea29ce67a089357103b959e961595958857515756498f90141f34a762934c88854c95c63461a2f72628f89f3a97be7ea48066346ece25904c7b7accfde06e5b77787629eaf66b1c96a7566b9c43535d1c0682c639f8ae9bae3ec6df0e0ed71626700b0199844ee0aba4b558337fe7e68fde2fc470662a675e17501bab"}}, &(0x7f0000000840)=0x0) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) timer_settime(r12, 0x0, &(0x7f00000008c0)={{0x77359400}, {r13, r14+60000000}}, &(0x7f0000000900)) 1m4.520928262s ago: executing program 1 (id=355): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x7, 0x1, 0x0, 0x600000}, &(0x7f0000000100)=0x98) getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000280)={{r2}, "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"}) r4 = epoll_create(0x932e) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001280)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000012c0)='/proc/diskstats\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r3) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x20, r7, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8da}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fchmod(r6, 0x2c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001440)={'wg0\x00', 0x0}) bind$packet(r5, &(0x7f0000001480)={0x11, 0x9, r8, 0x1, 0x7, 0x6, @local}, 0x14) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000014c0)) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000001500)=0x3, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001540)={0x1b, 0x0, 0x0, 0x10000, 0x0, r3, 0x8, '\x00', r8, r3, 0x1, 0x3, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001640)={'ip6tnl0\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r8, 0x4, 0x42, 0x2, 0x7, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x8000, 0x8, 0x7, 0x101}}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r5, r10, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x401}}, 0x20) close(r2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000016c0)={'bond0\x00'}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r6) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x44, r12, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) ioctl$XFS_IOC_FSINUMBERS(r11, 0xc0205867, &(0x7f0000001a80)={&(0x7f0000001880)=0x5, 0x3, &(0x7f00000018c0)=[{}, {}], &(0x7f0000001a40)}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001ac0), 0x6258671138cead0a, 0x0) 1m4.466662503s ago: executing program 1 (id=357): socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x810) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_io_uring_setup(0x57b2, &(0x7f00000002c0)={0x0, 0x98d2, 0x800, 0x3, 0x321}, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@nojournal_checksum}, {@lazytime}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb236100"], 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x9369, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x1, 0x2}}}, 0x118) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRES32=r5], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72134}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$unix(0x1, 0x5, 0x0) r8 = dup2(r7, r2) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000620000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 1m2.395672687s ago: executing program 1 (id=368): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40305839, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x8}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c100009000a0000080000000022b6c095d6ed8f5feb4f87dfc77644e75c3cc4da94924c358d7898ba13a39b0d0d75cba54eb4f87a6b90ad979ece0907a502095f115527681a106091d2304ec9fba78b2b8633f49259af0e95093201043ed6f8423aaebdf2421fe84b10f71722c5b0bcf2e13e6236a1d69416237c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x40, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x3}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x40000000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x9, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x2, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x18, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x800005, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0x1002, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x87ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10003, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x5, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x2, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x5, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x2, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x3, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x1000007, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000900000084"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r9}, 0x38) 1m0.889027523s ago: executing program 1 (id=379): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x9, 0xffffffff, 0x40}) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000340)=@proc={0x10, 0x0, 0x1, 0x800000}, 0x6f) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0xea800, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000001000000000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="00000000010000000300"/28], 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000200)={0xfffffffffffffcfd, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xc, 0x0, 0x69bd) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbb9, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x7ff}]}}}]}, 0x3c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 1m0.758460377s ago: executing program 1 (id=380): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@block_validity}, {@auto_da_alloc}, {@sysvgroups}, {@i_version}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@inlinecrypt}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffe2e, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdirat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x1ff) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x6f5adec9d50568ad}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0xc, 0xff}}, @qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x5c}}, 0x80) fallocate(r0, 0x0, 0x37e9, 0x2f92) 1m0.687736179s ago: executing program 1 (id=382): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x5, 0xb, 0xfe, 0x0, 0x3, 0x3, 0x5, 0x71, 0x38, 0x36a, 0x6, 0x5, 0x20, 0x1, 0xc, 0x3, 0x9}, [{0x3, 0x7fffffff, 0xd, 0x4, 0x8, 0x9, 0x8000, 0x1000}]}, 0x58) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) memfd_create(0x0, 0x9) socket$packet(0x11, 0x3, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) 57.035691621s ago: executing program 33 (id=295): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') pread64(r0, &(0x7f0000019080)=""/102356, 0x18fd4, 0x200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0xfffffffd}, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x40, r2, 0x1, 0xfffffffd, 0xfffffffd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20843, 0x63) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x40040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x4], 0x0, 0x0, 0x100000}}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010bd70000000006d5583705e0b0e43f0000000000000000000", @ANYRES32=0x0, @ANYBLOB="6cf2040000000000140003006e657464657673696d300000000000000c0016800800018004000c8008000a00", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x48880) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r11, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x240c6050}, 0x8040) getsockopt$IP6T_SO_GET_REVISION_TARGET(r9, 0x29, 0x45, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0x12, 0x0, &(0x7f0000000240)="ff410800b083dcc1010b3efc88643acd3aaf", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) timer_create(0x3, &(0x7f0000000800)={0x0, 0x34, 0x1, @thr={&(0x7f0000000080)="d5c9e3c37981884e789af8dda23979b06bce853003f375d103d9301f1fe1159685", &(0x7f0000000740)="aeaf34aed092dc92cca66c2f945ad812346291463c782b4670d05857e228fbdeb47c0f6b64a8362c82c7d475b8f5348ea29ce67a089357103b959e961595958857515756498f90141f34a762934c88854c95c63461a2f72628f89f3a97be7ea48066346ece25904c7b7accfde06e5b77787629eaf66b1c96a7566b9c43535d1c0682c639f8ae9bae3ec6df0e0ed71626700b0199844ee0aba4b558337fe7e68fde2fc470662a675e17501bab"}}, &(0x7f0000000840)=0x0) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) timer_settime(r12, 0x0, &(0x7f00000008c0)={{0x77359400}, {r13, r14+60000000}}, &(0x7f0000000900)) 45.616109789s ago: executing program 34 (id=382): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x5, 0xb, 0xfe, 0x0, 0x3, 0x3, 0x5, 0x71, 0x38, 0x36a, 0x6, 0x5, 0x20, 0x1, 0xc, 0x3, 0x9}, [{0x3, 0x7fffffff, 0xd, 0x4, 0x8, 0x9, 0x8000, 0x1000}]}, 0x58) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) memfd_create(0x0, 0x9) socket$packet(0x11, 0x3, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) 3.917417031s ago: executing program 4 (id=897): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)="d17ceb3265f4df1418", 0x9}], 0x1}}], 0x2, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x59, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x8}], 0x2, 0x0, 0x0) 3.221118342s ago: executing program 5 (id=904): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f00000009c0)={[{@nocompress}, {@cruft}, {@check_strict}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$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") 2.97528237s ago: executing program 4 (id=905): r0 = openat$null(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, r1, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='auxv\x00') preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x2, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) sendmsg$inet(r5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x400122a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRESHEX=r4], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r8, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}], 0x4}, 0x1}], 0x1, 0x20, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x21, 0x2, @tid=r1}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000140)={0x8bfb, 0x4, [{0xe}, {0x5, 0x1}, {0xb, 0x1}, {0xa, 0x1}]}) unshare(0x26000400) 2.97471483s ago: executing program 6 (id=907): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x28811}, 0x0) 2.96074226s ago: executing program 7 (id=908): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2, 0x3}}, './file1\x00'}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000001bc0), 0x2) uname(0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r4, 0x2) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "aa6158"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x20000080) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)={0x38, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x40) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) r9 = msgget$private(0x0, 0x600) msgrcv(r9, &(0x7f0000000600)={0x0, ""/251}, 0x103, 0x3, 0x1000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe0000000069100c000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 2.905496232s ago: executing program 6 (id=909): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r1) (async) fchdir(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000002a80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="f86079b6", 0x4}], 0x1}}], 0x2, 0x2400c042) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000000c0)='sync\x00', 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000000c0)='sync\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x22008014) 2.722828838s ago: executing program 6 (id=911): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="dbaa00040001000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xa}, 0x94) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) futex_waitv(&(0x7f0000001340)=[{0x4, &(0x7f0000000180)=0x2, 0x2}, {0x7ff, &(0x7f00000001c0)=0x3, 0x2}, {0x9, &(0x7f0000001180)=0x8, 0x82}, {0x4, &(0x7f0000000240)=0x8000, 0x2}, {0x6, &(0x7f0000000200)=0x5, 0x2}, {0x8, &(0x7f0000000300)=0x80000001, 0x2}, {0x5, &(0x7f0000000340)=0x100000000, 0x82}, {0xfff, &(0x7f0000000380)=0x1, 0x82}, {0x1, &(0x7f00000003c0)=0xf, 0x2}, {0x6, &(0x7f0000000400)=0x7ff, 0x82}, {0x7fff, &(0x7f0000000440)=0x1, 0x2}, {0xfffffffffffffffd, &(0x7f00000004c0)=0x5, 0x82}, {0x97, &(0x7f0000000500)=0x2, 0x82}, {0x7, &(0x7f0000000540)=0x4d5, 0x82}, {0x5, &(0x7f0000000580)=0x6, 0x2}, {0x7, &(0x7f00000005c0)=0x6152, 0x82}, {0x7, &(0x7f0000000600)=0x6, 0x2}, {0x10001, &(0x7f0000000640)=0x4, 0x2}, {0x9, &(0x7f0000000680)=0xff, 0x80}, {0x0, &(0x7f00000006c0)=0x3, 0x61ed53eda340f796}, {0x12fa, &(0x7f0000000700)=0x7fad, 0x2}, {0x9, &(0x7f0000000740)=0x93ed, 0x2}, {0x79, &(0x7f0000000780)=0x8, 0x2}, {0x4, &(0x7f00000007c0)=0x8, 0x82}, {0x1, &(0x7f0000000800)=0x101, 0x82}, {0x5, &(0x7f0000000840)=0x5, 0x2}, {0xbf9, &(0x7f0000000880)=0xffffffffffff0001, 0x82}, {0xb, &(0x7f00000008c0)=0x1, 0x2}, {0x1, &(0x7f0000000900)=0x9, 0x82}, {0x7, &(0x7f0000000940)=0x7, 0x2}, {0xffffffffffffffff, &(0x7f0000000980), 0x2}, {0x6, &(0x7f00000009c0)=0x4, 0x2}, {0x101, &(0x7f0000000a00)=0x3000000000000000, 0x82}, {0x5, &(0x7f0000000a40)=0x3, 0x2}, {0x9, &(0x7f0000000a80)=0x400, 0x82}, {0x2, &(0x7f0000000ac0)=0x5}, {0x4, &(0x7f0000000b00)=0x1, 0x82}, {0x5, &(0x7f0000000b40)=0x1, 0x2}, {0x8, &(0x7f0000000b80)=0x3, 0x82}, {0x3, &(0x7f0000000bc0)=0x82}, {0xffffffffffffffff, &(0x7f0000000c00)=0x9, 0x2}, {0x3, &(0x7f0000000c40)=0x1ff, 0x2}, {0xcbc, &(0x7f0000000c80)=0x800, 0x2}, {0x2, &(0x7f0000000cc0)=0x2, 0x82}, {0x800000000000000, &(0x7f0000000d00), 0x82}, {0x1, &(0x7f0000000d40)=0x2cc7, 0x82}, {0x4, &(0x7f0000000d80)=0x84, 0x2}, {0x2bd, &(0x7f0000000dc0), 0x2}, {0x1ff, &(0x7f0000000e00)=0x5, 0x82}, {0x2, &(0x7f0000000e40)=0x3, 0x82}, {0x3, &(0x7f0000000e80)=0xfc07, 0x82}, {0x1, &(0x7f0000000ec0)=0x86f, 0x82}, {0x5, &(0x7f0000000f00)=0xfffffffffffffc01}, {0xb0c9, &(0x7f0000000f40)=0x1, 0x82}, {0x9, &(0x7f0000000f80)=0xfffffffffffffb84, 0x2}, {0x5, &(0x7f0000000fc0)=0x400, 0x82}, {0x9, &(0x7f0000001000)=0x7c77, 0x82}, {0xff, &(0x7f0000001040)=0x7f, 0x82}, {0x2, &(0x7f0000001080)=0x8, 0x82}, {0x7ff, &(0x7f00000010c0)=0x7, 0x2}, {0x7, &(0x7f0000001100)=0x2, 0x82}, {0x8, &(0x7f0000001140)=0x7fffffffffffffff, 0x2}], 0x3e, 0x0, &(0x7f0000001940)={0x77359400}, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) gettid() (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="dbaa00040001000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xa}, 0x94) (async) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) futex_waitv(&(0x7f0000001340)=[{0x4, &(0x7f0000000180)=0x2, 0x2}, {0x7ff, &(0x7f00000001c0)=0x3, 0x2}, {0x9, &(0x7f0000001180)=0x8, 0x82}, {0x4, &(0x7f0000000240)=0x8000, 0x2}, {0x6, &(0x7f0000000200)=0x5, 0x2}, {0x8, &(0x7f0000000300)=0x80000001, 0x2}, {0x5, &(0x7f0000000340)=0x100000000, 0x82}, {0xfff, &(0x7f0000000380)=0x1, 0x82}, {0x1, &(0x7f00000003c0)=0xf, 0x2}, {0x6, &(0x7f0000000400)=0x7ff, 0x82}, {0x7fff, &(0x7f0000000440)=0x1, 0x2}, {0xfffffffffffffffd, &(0x7f00000004c0)=0x5, 0x82}, {0x97, &(0x7f0000000500)=0x2, 0x82}, {0x7, &(0x7f0000000540)=0x4d5, 0x82}, {0x5, &(0x7f0000000580)=0x6, 0x2}, {0x7, &(0x7f00000005c0)=0x6152, 0x82}, {0x7, &(0x7f0000000600)=0x6, 0x2}, {0x10001, &(0x7f0000000640)=0x4, 0x2}, {0x9, &(0x7f0000000680)=0xff, 0x80}, {0x0, &(0x7f00000006c0)=0x3, 0x61ed53eda340f796}, {0x12fa, &(0x7f0000000700)=0x7fad, 0x2}, {0x9, &(0x7f0000000740)=0x93ed, 0x2}, {0x79, &(0x7f0000000780)=0x8, 0x2}, {0x4, &(0x7f00000007c0)=0x8, 0x82}, {0x1, &(0x7f0000000800)=0x101, 0x82}, {0x5, &(0x7f0000000840)=0x5, 0x2}, {0xbf9, &(0x7f0000000880)=0xffffffffffff0001, 0x82}, {0xb, &(0x7f00000008c0)=0x1, 0x2}, {0x1, &(0x7f0000000900)=0x9, 0x82}, {0x7, &(0x7f0000000940)=0x7, 0x2}, {0xffffffffffffffff, &(0x7f0000000980), 0x2}, {0x6, &(0x7f00000009c0)=0x4, 0x2}, {0x101, &(0x7f0000000a00)=0x3000000000000000, 0x82}, {0x5, &(0x7f0000000a40)=0x3, 0x2}, {0x9, &(0x7f0000000a80)=0x400, 0x82}, {0x2, &(0x7f0000000ac0)=0x5}, {0x4, &(0x7f0000000b00)=0x1, 0x82}, {0x5, &(0x7f0000000b40)=0x1, 0x2}, {0x8, &(0x7f0000000b80)=0x3, 0x82}, {0x3, &(0x7f0000000bc0)=0x82}, {0xffffffffffffffff, &(0x7f0000000c00)=0x9, 0x2}, {0x3, &(0x7f0000000c40)=0x1ff, 0x2}, {0xcbc, &(0x7f0000000c80)=0x800, 0x2}, {0x2, &(0x7f0000000cc0)=0x2, 0x82}, {0x800000000000000, &(0x7f0000000d00), 0x82}, {0x1, &(0x7f0000000d40)=0x2cc7, 0x82}, {0x4, &(0x7f0000000d80)=0x84, 0x2}, {0x2bd, &(0x7f0000000dc0), 0x2}, {0x1ff, &(0x7f0000000e00)=0x5, 0x82}, {0x2, &(0x7f0000000e40)=0x3, 0x82}, {0x3, &(0x7f0000000e80)=0xfc07, 0x82}, {0x1, &(0x7f0000000ec0)=0x86f, 0x82}, {0x5, &(0x7f0000000f00)=0xfffffffffffffc01}, {0xb0c9, &(0x7f0000000f40)=0x1, 0x82}, {0x9, &(0x7f0000000f80)=0xfffffffffffffb84, 0x2}, {0x5, &(0x7f0000000fc0)=0x400, 0x82}, {0x9, &(0x7f0000001000)=0x7c77, 0x82}, {0xff, &(0x7f0000001040)=0x7f, 0x82}, {0x2, &(0x7f0000001080)=0x8, 0x82}, {0x7ff, &(0x7f00000010c0)=0x7, 0x2}, {0x7, &(0x7f0000001100)=0x2, 0x82}, {0x8, &(0x7f0000001140)=0x7fffffffffffffff, 0x2}], 0x3e, 0x0, &(0x7f0000001940)={0x77359400}, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async) 2.492323794s ago: executing program 6 (id=912): r0 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xfffffffffffffffc, 0x0, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tkill(r0, 0x7) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x822000, &(0x7f0000000840)={[{@nocompress}, {@cruft}, {@block={'block', 0x3d, 0x400}}, {@mode={'mode', 0x3d, 0x7}}, {@block={'block', 0x3d, 0x600}}, {@nojoliet}, {@utf8}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'map=acorn'}}, {@seclabel}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'cruft'}}, {@euid_eq={'euid', 0x3d, r1}}]}, 0x1, 0x567, &(0x7f0000000200)="$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") 2.143133705s ago: executing program 5 (id=916): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0xc0fe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c4) 2.076291007s ago: executing program 4 (id=917): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$9p_rdma(0x0, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x82000, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) ioctl$BLKTRACESTART(r3, 0x1265, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300), 0xa982b, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r4, 0xa10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040800}, 0x40000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d6172"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) 2.075934597s ago: executing program 5 (id=918): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$rds(0xffffffffffffffff, 0x0, 0x815) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) setregid(0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(r4, 0x406, r4) sendto$inet(r4, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.038083768s ago: executing program 6 (id=919): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) fsetxattr$system_posix_acl(r6, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3, @ANYBLOB="040000000000000010000300000000000100010000000000"], 0x2c, 0x0) getxattr(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r7, 0x5424, 0x0) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x8, 0x0, 0x3, 0x0, 0x0, 0x200, 0x20208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x22, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRES64=0x0, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="e559b85f42754de96862b1fa52be78cfbf26c48ffe4f"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x44000011) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000080)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") 2.011724699s ago: executing program 7 (id=920): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x4, 0x6, 0x14c, 0x1}, 0x48) r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xa, 0x40, 0x3, 0x41}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, &(0x7f0000000000), 0x0}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000002380)={@l2tp6={0xa, 0x0, 0x9, @loopback, 0x7fc6, 0x4}, {&(0x7f0000001340)=""/4096, 0x1000}, &(0x7f0000002340), 0x1}, 0xa0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000000), 0x1, 0x4e9, &(0x7f00000000c0)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r6) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x14, r7, 0x3, 0x70bd2b, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000030400000000fcdbdf2500007400", @ANYRES32=r3, @ANYBLOB="800c080007500500340012800b00010062726964676500002400028005001900020000000c00230001000000000000000c0022"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.252436262s ago: executing program 2 (id=921): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @private}, &(0x7f0000000080)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xa, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 1.211598943s ago: executing program 2 (id=922): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x80, &(0x7f0000000080), 0x1, 0x4cf, &(0x7f0000000500)="$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") lstat(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)) 1.164171475s ago: executing program 5 (id=923): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x502, &(0x7f0000000600)="$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") r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004cfe9, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x40010) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x846, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x5a, 0x3, 0xa, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.064445608s ago: executing program 4 (id=924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480100001000332e0000000000000000ac14140000000080ffffff0000000000fc02000000000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0001000000000000000000000000000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000010000a0000000000000000000000000048000300"], 0x148}}, 0x0) 1.064243058s ago: executing program 7 (id=925): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000440)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@debug}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@nodots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f0000000100)=""/151, 0x1a, 0x97, 0x1}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0xf1) 1.057181438s ago: executing program 2 (id=926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) set_mempolicy(0x6, 0x0, 0xc) syz_open_dev$vcsn(0x0, 0x20000000000, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200b58909000200737982310000000008000440000000000900010073797a30690000000800034000"], 0x64}}, 0x0) (fail_nth: 6) 1.056720878s ago: executing program 4 (id=927): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x38, 0x0, 0x0, &(0x7f0000000480), &(0x7f0000001140)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}, 0x1c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) socket(0x2a, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x440a4, &(0x7f0000000180)={0x11, 0xd, r3, 0x1, 0x3, 0x6, @local}, 0x14) 1.015299339s ago: executing program 7 (id=928): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9d6d67e6fdb030c542540401c5a5754c0d590bc3c351207cee54bf87172182a8a304bd87c114bf3e87082c", @ANYRES32=0x0, @ANYRES8=r0], 0x70}}, 0x0) 756.101047ms ago: executing program 2 (id=929): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0xc0fe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c4) 700.775309ms ago: executing program 7 (id=930): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x301201, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x40}, 0x0, 0x2, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80fe) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 641.74385ms ago: executing program 7 (id=931): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)="d17ceb3265f4df1418", 0x9}], 0x1}}], 0x2, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x59, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x8}], 0x2, 0x0, 0x0) 581.675163ms ago: executing program 2 (id=932): set_mempolicy(0x3, 0x0, 0x4) (async) set_mempolicy(0x3, 0x0, 0x4) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7ecbc13c, 0xc87b}, 0x0, 0x0, 0x784, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7ecbc13c, 0xc87b}, 0x0, 0x0, 0x784, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@generic={0x7, 0x2}]}}, {{0x0, 0x100, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x20004055) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) (async) close(0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) 517.588565ms ago: executing program 4 (id=933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x30, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x400c800) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x8) set_mempolicy(0x6, 0x0, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x200}, 0x1c) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x20000000000, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=r7], 0x64}, 0x1, 0x0, 0x0, 0x4044080}, 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) 514.006335ms ago: executing program 5 (id=934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffaaaaaaaaaaaa86dd694fd2cd000311fffe800000000000000000000b640b26bbff020000000000000000000000000001"], 0x6b) (fail_nth: 4) 345.3865ms ago: executing program 6 (id=935): r0 = eventfd2(0x1020006, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000f0", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf25020202000900030073797a30000000000900010073797a3200000000140002006970365f767469300000000000000000", @ANYRES8=r3, @ANYRESDEC=r0], 0x40}, 0x1, 0x40030000000000, 0x0, 0x400c081}, 0x80) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="6f70ffffffff797accda2f800545602472c35a9a662f1e11cbec880ac0a64527d0a4eb52723636146b97bce83b6f74db698304fd87", @ANYRES16=r3, @ANYBLOB="0d0d2bbd7000fedbdf25030000000900010073797a30000000000900010073797a3100000000050004000200000014000200776732000000000000000000000000000500040001000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf099, 0x1}, 0x1022, 0x104, 0x820003, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfff7bfffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="5c00000014006b030231a6080c000af32c0cae934c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1000000", 0x55}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) read(r6, &(0x7f0000000000)=""/82, 0x52) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000180), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850) 274.05µs ago: executing program 2 (id=936): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x9, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x2711, @host}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="de9c3a9af1", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001a00)="c2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000005c0)="84a7", 0x2}, {0x0}], 0x2}}], 0x3, 0x4000801) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) sendfile(r8, r8, 0x0, 0xe3aa6ea) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x57) ioctl$FIBMAP(r9, 0x1, &(0x7f0000000000)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) setresuid(r6, r7, r10) lseek(r5, 0x400, 0x4) lseek(r2, 0x8001, 0x3) 0s ago: executing program 5 (id=937): futex(&(0x7f000000cffc)=0x1, 0xd, 0x4, 0x0, 0x0, 0xfffffffe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) r1 = socket$kcm(0x2a, 0x2, 0x0) (async) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) (async) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x48}}, 0x0) (async) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file4\x00', 0x80c406, &(0x7f0000001980)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaadeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f7a82a29e2d6761b50d3db9dae421f06eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e39445697eb0d6867f0ddf0b4a45ce8687fc96ed3d17c15fd8c7474bc6d45b0c9079d03c4b27f919cf7bd19aceec6c753ebb50b5e8e42db8d473c6cbcd7fcf314b8f5326eebc421c5c96531aa72b1f5896b69d05f7e91bb19114d74966aa42ac2c50ced26a32424f37eda0c35ff894c7102b44579814ab0e8081030381466142da57fca49af17c88b180fa1d6078f41c0b12cfe892c1e9e19b46f57394cfadb24ac831ee99d163409f5c155944983780f4f94fa3887e877f3ad2cd241751d05bd95981e90b94c98c99a664120085009cb5725b187e4d08e4811c38a7df50e7c57562b8f7e75fc8888a08c3ed59b02264b9fd5d6d91f7609568e4eddc1b06663ae56a8c5b3ff3eb87d4f7ac9b8be56ec52667320f54b45cb44409e67e1aa92c08d85cf0c1a8dd2a7e0c947726ecc5b247db293ace9742681452adf95f627c2b5d97f00"/1213, @ANYRES8, @ANYRES64], 0xfb, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x5, 0x3, 0x0, &(0x7f00000011c0)=0x8, 0x3000000) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000200)={[{@inlinecrypt}, {@inlinecrypt}, {}]}, 0xff, 0x54a, &(0x7f0000000340)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7a4f1rL0xa2+8/nykybz35sf3+xzPeGb3aSaAc+v5iHgjIj5M0/SliJjN20v5FK3OlK33/sN3l7MpiTR9629JJHlbtlqaXtjb5+V8s+mI+NpXIr6ZPBJwOp/v7N5eqtdrm3m12ly/U93a2b2+tr60WlutbSwszL+6+NriK4s3htLPKxHx+pf+9P3v/PTLr//ys+/88eZfrn0rS2smX97txzFMHraw0/XyhemeDTaPGexJlPWn/EFeuTjYNvdOMiEAAPrKrvE/EhGfioiXYjYmDr+cBQAAAM6g9Asz8UESkRab6tMOAAAAnCGl9hjYpFTJxwLMRKlUqXTG8H4sLpXqja3mZ241tjdWOmNl56JcurVWr93IxwrPRTnJ6vPt8n795Z76QkQ8HRHfm73YrleWG/WVUX/4AQAAAOfE5Z77/3/Odu7/D5ecTnIAAADA8MyNOgEAAADgxLn/BwAAgLFWHnUCAAAAwIn76ptvZlPaff/1yts727cbb19fqW3drqxvL1eWG5t3KquNxmr7mX3rR+2v3mjc+VxsbN+tNmtbzeqVnd2b643tjebNtZg+lQ4BAAAABzz9yfu/TyKi9fmL7SkzNeqkgFMxuVfqPtOz4Oj/w1Od+XunlBRwKiYGWOe9C8XtrhPgbJvsbehzrAPjx/h/4Kg3evQdvPObzqw05HwAAIDhu/qJ4u//j76eb7nkhzPOQQznV8/3/+nsqBIBTl37+/9BB/K4WICxUh5oBCAwzv7f7/+PlqaPlRAAADB0M+0pKVXyj/dmolSqVCKutF8LWE5urdVrNyLiqYj43Wz5Qlafb2+ZHHnPAAAAAAAAAAAAAAAAAAAAAAAAAAB0pGkSKQAAADDWIkp/Tn7VeZb/1dkXZ3o/H5hK/t1+JfBURLzzo7d+cHep2dycz9r/vtfe/GHe/vIoPsEAAAAAenXv09vzf406GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGzfsP313uTgOsfnFYcf/6xYiYK4o/GdPt+XSUI+LSP5KYfGS7JCImhhC/dS8iPl4UP8nS2gtZFH8YP4TWvaSVthXGj7n8p1AU//IQ4sN5dj87/7xRdPyX4vn2vPj4m4z4n/px9T//xd75b6LP8X9lwBjPPPh5tW/8exHPTBaf/7rxkz7xXxgoejm+8fXd3X5L0x9HXO3+/Wmf8R6NsF+qNtfvVLd2dq+vrS+t1lZrGwsL868uvrb4yuKN6q21ei3/tzDGd5/9xYeH9f9S4d+/JM+mf/9fLNjfREH+/3lw9+FHu5XWwfjXXiiI/+uf5GscjF/K43w6L2fLr3bLrU75Uc/97LfPHdb/lf3+lx/n//9av532OnCgPDvYrw4AcCK2dnZvL9Xrtc2xLWR36U9AGscpTMUTkcb4FSaiU/h21vJgWHtO0zTNjqmCRfcjYpD9JDHknpaK89kv9D0DjPrMBAAADNv+Rf+oMwEAAAAAAAAAAAAAAAAAAIDz6zQet9Ybc/8RyMkwHqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAU/w0AAP//lr3ZLg==") (async) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001e80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000) kernel console output (not intermixed with test programs): change from 0 to 1024 [ 94.498749][ T4908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.549096][ T4902] hsr_slave_1 (unregistering): left promiscuous mode [ 94.686425][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.696063][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.909151][ T4923] loop2: detected capacity change from 0 to 1024 [ 94.949647][ T4923] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 95.005565][ T4923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.796512][ T4936] loop4: detected capacity change from 0 to 128 [ 95.861049][ T4934] loop5: detected capacity change from 0 to 128 [ 95.879732][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.342010][ T4958] loop4: detected capacity change from 0 to 512 [ 96.376527][ T4958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.407168][ T4958] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.437610][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 96.437689][ T28] audit: type=1400 audit(1781486058.649:437): avc: denied { write } for pid=4957 comm="syz.4.374" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.489861][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.491155][ T28] audit: type=1400 audit(1781486058.649:438): avc: denied { unlink } for pid=4957 comm="syz.4.374" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.522569][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.670295][ T28] audit: type=1400 audit(1781486058.879:439): avc: denied { bind } for pid=4969 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.724830][ T28] audit: type=1400 audit(1781486058.879:440): avc: denied { create } for pid=4969 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 96.749121][ T28] audit: type=1400 audit(1781486058.879:441): avc: denied { write } for pid=4969 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 96.769682][ T28] audit: type=1400 audit(1781486058.919:442): avc: denied { mount } for pid=4969 comm="syz.4.377" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 96.824544][ T4970] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.929423][ T4970] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.041934][ T4970] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.181763][ T4970] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.315013][ T4973] loop5: detected capacity change from 0 to 1024 [ 97.332424][ T4973] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 97.358802][ T4973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.392934][ T4976] capability: warning: `syz.1.379' uses deprecated v2 capabilities in a way that may be insecure [ 97.416639][ T28] audit: type=1400 audit(1781486059.629:443): avc: denied { write } for pid=4971 comm="syz.5.378" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.464900][ T1718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.478370][ T4973] 9p: Bad value for 'rfdno' [ 97.483051][ T28] audit: type=1400 audit(1781486059.689:444): avc: denied { mounton } for pid=4971 comm="syz.5.378" path="/43/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.494566][ T4978] loop1: detected capacity change from 0 to 1024 [ 97.513438][ T4978] EXT4-fs: Ignoring removed i_version option [ 97.519805][ T4978] EXT4-fs: Ignoring removed orlov option [ 97.525724][ T4978] EXT4-fs: inline encryption not supported [ 97.548135][ T4978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.597876][ T28] audit: type=1400 audit(1781486059.769:445): avc: denied { write } for pid=4977 comm="syz.1.380" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.623792][ T28] audit: type=1400 audit(1781486059.799:446): avc: denied { write } for pid=3305 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.659951][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.688634][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.733557][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.963447][ T4982] loop2: detected capacity change from 0 to 128 [ 99.062102][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.231907][ T4991] loop5: detected capacity change from 0 to 1024 [ 99.240766][ T4991] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 99.240766][ T4991] [ 99.441740][ T4993] loop2: detected capacity change from 0 to 512 [ 99.493460][ T4993] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.385: bad orphan inode 13 [ 99.555139][ T4993] loop2: lost filesystem error report for type 5 error -117 [ 99.555311][ T4993] ext4_test_bit(bit=12, block=4) = 1 [ 99.567998][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 99.568013][ C1] EXT4-fs (loop2): initial error at time 1781486061: ext4_orphan_get:1423 [ 99.568059][ C1] EXT4-fs (loop2): last error at time 1781486061: ext4_orphan_get:1423 [ 99.720478][ T4993] is_bad_inode(inode)=0 [ 99.739421][ T4993] NEXT_ORPHAN(inode)=0 [ 99.754887][ T4993] max_ino=32 [ 99.770103][ T4993] i_nlink=1 [ 99.784210][ T4993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.855811][ T4997] SELinux: policydb version 0 does not match my version range 15-35 [ 99.915253][ T4997] SELinux: failed to load policy [ 99.947372][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.956654][ T5002] loop5: detected capacity change from 0 to 164 [ 100.275828][ T5010] netlink: 'syz.4.389': attribute type 21 has an invalid length. [ 101.419844][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.464877][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 101.547061][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.647204][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.770430][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.822750][ T5020] gre0 speed is unknown, defaulting to 1000 [ 101.958628][ T49] bridge_slave_1: left allmulticast mode [ 101.987939][ T49] bridge_slave_1: left promiscuous mode [ 102.020840][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.082350][ T49] bridge_slave_0: left allmulticast mode [ 102.099463][ T49] bridge_slave_0: left promiscuous mode [ 102.117387][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.244593][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 102.244611][ T28] audit: type=1400 audit(1781486064.449:455): avc: denied { write } for pid=5030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.332153][ T28] audit: type=1400 audit(1781486064.509:456): avc: denied { unlink } for pid=4103 comm="syz-executor" name="file0" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.369827][ T28] audit: type=1400 audit(1781486064.569:457): avc: denied { bind } for pid=5048 comm="syz.5.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.414559][ T28] audit: type=1400 audit(1781486064.579:458): avc: denied { write } for pid=5047 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.617591][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.650182][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.680374][ T49] bond0 (unregistering): Released all slaves [ 102.720501][ T36] smc: removing ib device syz1 [ 102.727987][ T35] gre0 speed is unknown, defaulting to 1000 [ 102.736195][ T35] syz1: Port: 1 Link DOWN [ 102.750418][ T5049] __nla_validate_parse: 1 callbacks suppressed [ 102.750432][ T5049] netlink: 40 bytes leftover after parsing attributes in process `syz.5.396'. [ 102.781089][ T3029] 8021q: adding VLAN 0 to HW filter on device eth5 [ 102.834070][ T28] audit: type=1400 audit(1781486065.039:459): avc: denied { ioctl } for pid=5056 comm="syz.5.398" path="socket:[11319]" dev="sockfs" ino=11319 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.159195][ T5081] Invalid argument reading file caps for ./file0 [ 103.296190][ T5088] tipc: Invalid UDP bearer configuration [ 103.296240][ T5088] tipc: Enabling of bearer rejected, failed to enable media [ 103.309346][ T28] audit: type=1400 audit(1781486065.519:460): avc: denied { write } for pid=5079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.389942][ T28] audit: type=1400 audit(1781486065.599:461): avc: denied { write } for pid=5096 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.435243][ T28] audit: type=1400 audit(1781486065.629:462): avc: denied { name_bind 0x1000000 } for pid=5097 comm="syz.5.406" path="socket:[11363]" dev="sockfs" ino=11363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.479018][ T28] audit: type=1400 audit(1781486065.689:463): avc: denied { connect } for pid=5097 comm="syz.5.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.505927][ T3029] 8021q: adding VLAN 0 to HW filter on device eth7 [ 103.703173][ T28] audit: type=1400 audit(1781486065.909:464): avc: denied { write } for pid=5109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.785392][ T5020] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.805894][ T5020] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.813183][ T5020] bridge_slave_0: entered allmulticast mode [ 103.820125][ T5020] bridge_slave_0: entered promiscuous mode [ 103.827177][ T5020] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.834289][ T5020] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.841929][ T5020] bridge_slave_1: entered allmulticast mode [ 103.848726][ T5020] bridge_slave_1: entered promiscuous mode [ 103.873969][ T3029] 8021q: adding VLAN 0 to HW filter on device eth6 [ 103.906203][ T49] hsr_slave_0: left promiscuous mode [ 103.918561][ T49] hsr_slave_1: left promiscuous mode [ 103.923984][ T5133] loop5: detected capacity change from 0 to 512 [ 103.930831][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.948454][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.963927][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.979690][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.999200][ T5133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.013131][ T49] veth1_macvtap: left promiscuous mode [ 104.022702][ T5133] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.034884][ T49] veth0_macvtap: left promiscuous mode [ 104.046632][ T49] veth1_vlan: left promiscuous mode [ 104.057304][ T49] veth0_vlan: left promiscuous mode [ 104.319756][ T5144] netlink: 'syz.4.410': attribute type 21 has an invalid length. [ 105.161423][ T49] team0 (unregistering): Port device team_slave_1 removed [ 105.181999][ T49] team0 (unregistering): Port device team_slave_0 removed [ 105.285821][ T5020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.296556][ T5020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.369276][ T5152] netlink: 72 bytes leftover after parsing attributes in process `syz.2.413'. [ 105.439951][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.513487][ T5020] team0: Port device team_slave_0 added [ 105.545675][ T5020] team0: Port device team_slave_1 added [ 105.617427][ T5020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.649374][ T5020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.752821][ T5020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.801545][ T5020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.831984][ T5020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.876762][ T5020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.917007][ T5020] hsr_slave_0: entered promiscuous mode [ 105.933216][ T5020] hsr_slave_1: entered promiscuous mode [ 105.950051][ T5020] debugfs: 'hsr0' already exists in 'hsr' [ 105.976698][ T5020] Cannot create hsr debugfs directory [ 105.996221][ T3029] 8021q: adding VLAN 0 to HW filter on device eth8 [ 106.033587][ T49] IPVS: stop unused estimator thread 0... [ 106.162387][ T5171] loop5: detected capacity change from 0 to 512 [ 106.239029][ T5171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.339221][ T5020] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 106.346904][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.350311][ T5020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.379118][ T5020] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 106.396969][ T5020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.411834][ T5020] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 106.429285][ T5020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.437459][ T5020] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 106.447835][ T5020] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.516313][ T5020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.543915][ T5020] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.553701][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.560843][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.574357][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.581482][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.667913][ T5202] netlink: 'syz.2.419': attribute type 8 has an invalid length. [ 106.688776][ T5201] netlink: 'syz.2.419': attribute type 8 has an invalid length. [ 106.709043][ T5202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 106.729033][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 106.740701][ T5020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.751779][ T5202] veth1_to_team: entered promiscuous mode [ 106.759045][ T5202] gretap0: entered promiscuous mode [ 106.775539][ T5202] veth1_to_team: left promiscuous mode [ 106.789330][ T5202] gretap0: left promiscuous mode [ 106.801391][ T5201] veth1_to_team: entered promiscuous mode [ 106.808595][ T5201] gretap0: entered promiscuous mode [ 106.816119][ T5201] veth1_to_team: left promiscuous mode [ 106.822661][ T5201] gretap0: left promiscuous mode [ 107.019740][ T5020] veth0_vlan: entered promiscuous mode [ 107.027941][ T5020] veth1_vlan: entered promiscuous mode [ 107.048231][ T5020] veth0_macvtap: entered promiscuous mode [ 107.056660][ T5020] veth1_macvtap: entered promiscuous mode [ 107.072802][ T5020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.085883][ T5020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.097957][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.107554][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.122812][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.132505][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.332312][ T5241] loop6: detected capacity change from 0 to 164 [ 107.396521][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 107.396560][ T28] audit: type=1400 audit(1781486069.609:486): avc: denied { map } for pid=5243 comm="syz.6.427" path="/proc/6/task/7/status" dev="proc" ino=10763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 107.497494][ T5245] netlink: 'syz.5.425': attribute type 21 has an invalid length. [ 107.891890][ T5248] loop6: detected capacity change from 0 to 128 [ 108.088289][ T5248] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.215103][ T5248] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.381497][ T28] audit: type=1400 audit(1781486069.609:487): avc: denied { execute } for pid=5243 comm="syz.6.427" path="/proc/6/task/7/status" dev="proc" ino=10763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 108.404789][ T28] audit: type=1400 audit(1781486070.559:488): avc: denied { write } for pid=5247 comm="syz.6.428" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.455917][ T5248] netlink: 'syz.6.428': attribute type 1 has an invalid length. [ 108.536600][ T5255] EXT4-fs warning (device loop6): verify_group_input:156: Last group not full [ 108.582170][ T5257] netlink: 32 bytes leftover after parsing attributes in process `syz.4.430'. [ 108.619936][ T28] audit: type=1400 audit(1781486070.829:489): avc: denied { execute } for pid=5256 comm="syz.4.430" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=11801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 108.722386][ T5020] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.157094][ T5260] net_ratelimit: 10 callbacks suppressed [ 109.157109][ T5260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.201600][ T28] audit: type=1400 audit(1781486071.409:490): avc: denied { ioctl } for pid=5259 comm="syz.4.432" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.424274][ T5271] loop2: detected capacity change from 0 to 128 [ 109.453659][ T5271] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.507013][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.542553][ T5273] loop2: detected capacity change from 0 to 256 [ 109.581829][ T5273] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.671354][ T28] audit: type=1400 audit(1781486071.879:491): avc: denied { allowed } for pid=5268 comm="syz.6.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.704844][ T28] audit: type=1400 audit(1781486071.899:492): avc: denied { create } for pid=5278 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.748791][ T28] audit: type=1400 audit(1781486071.899:493): avc: denied { setopt } for pid=5278 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.778217][ T28] audit: type=1400 audit(1781486071.899:494): avc: denied { create } for pid=5278 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.934523][ T28] audit: type=1326 audit(1781486072.139:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.6.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0394f8ce59 code=0x7ffc0000 [ 110.166092][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.441'. [ 110.219147][ T5315] program syz.5.441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.473755][ T5334] xt_CT: No such helper "snmp_trap" [ 110.497527][ T5337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.500925][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.445'. [ 110.512119][ T5337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.537970][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.446'. [ 110.598900][ T5339] loop5: detected capacity change from 0 to 512 [ 110.651119][ T5339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.674291][ T5339] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.697151][ T5339] capability: warning: `syz.5.447' uses 32-bit capabilities (legacy support in use) [ 110.804962][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.838576][ T5345] raw_sendmsg: syz.5.448 forgot to set AF_INET. Fix it! [ 110.885139][ T5345] loop5: detected capacity change from 0 to 2048 [ 110.958107][ T5345] xt_limit: Overflow, try lower: 167772/2147483648 [ 111.144704][ T5357] program syz.5.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.170850][ T5357] program syz.5.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.696277][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.458'. [ 111.719534][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.458'. [ 111.750470][ T5373] ipt_ECN: cannot use operation on non-tcp rule [ 111.921065][ T5382] loop4: detected capacity change from 0 to 512 [ 111.990829][ T5382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.016550][ T5382] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.276840][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.782284][ T5408] loop6: detected capacity change from 0 to 512 [ 112.790416][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.829548][ T5408] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 112.865401][ T5398] loop4: detected capacity change from 0 to 512 [ 113.080847][ T5398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.258955][ T36] bridge_slave_1: left allmulticast mode [ 113.284867][ T36] bridge_slave_1: left promiscuous mode [ 113.310557][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.329001][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.361610][ T36] bridge_slave_0: left allmulticast mode [ 113.375184][ T36] bridge_slave_0: left promiscuous mode [ 113.398804][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.490585][ T5439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5439 comm=syz.5.471 [ 113.523000][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.540083][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.558523][ T36] bond0 (unregistering): Released all slaves [ 113.610596][ T36] hsr_slave_0: left promiscuous mode [ 113.625381][ T36] hsr_slave_1: left promiscuous mode [ 113.631778][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.650299][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.739626][ T36] team0 (unregistering): Port device team_slave_1 removed [ 113.772701][ T36] team0 (unregistering): Port device team_slave_0 removed [ 113.813701][ T28] kauditd_printk_skb: 124 callbacks suppressed [ 113.813998][ T28] audit: type=1326 audit(1781486076.019:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.5.473" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c1cce59 code=0x7ffc0000 [ 113.850981][ T28] audit: type=1326 audit(1781486076.019:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.5.473" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c1cce59 code=0x7ffc0000 [ 113.878841][ T28] audit: type=1326 audit(1781486076.019:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.5.473" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c1cce59 code=0x7ffc0000 [ 113.933476][ T28] audit: type=1326 audit(1781486076.019:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.5.473" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c1cce59 code=0x7ffc0000 [ 113.983745][ T5467] audit: audit_backlog=65 > audit_backlog_limit=64 [ 113.993358][ T28] audit: type=1326 audit(1781486076.019:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.5.473" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fbb7c1cce59 code=0x7ffc0000 [ 114.025794][ T5467] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 114.039016][ T28] audit: type=1326 audit(1781486076.019:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.5.473" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c1cce59 code=0x7ffc0000 [ 114.064395][ T28] audit: type=1326 audit(1781486076.019:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.5.473" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c1cce59 code=0x7ffc0000 [ 114.089735][ T28] audit: type=1326 audit(1781486076.019:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.5.473" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c1cce59 code=0x7ffc0000 [ 114.145447][ T3029] 8021q: adding VLAN 0 to HW filter on device eth9 [ 114.153412][ T5405] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.160700][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.168497][ T5405] bridge_slave_0: entered allmulticast mode [ 114.182639][ T5405] bridge_slave_0: entered promiscuous mode [ 114.393809][ T5405] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.444119][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.502365][ T5405] bridge_slave_1: entered allmulticast mode [ 114.523941][ T5480] loop6: detected capacity change from 0 to 128 [ 114.535506][ T5480] EXT4-fs: test_dummy_encryption option not supported [ 114.565649][ T5405] bridge_slave_1: entered promiscuous mode [ 114.862861][ T5405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.883661][ T5405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.926284][ T5405] team0: Port device team_slave_0 added [ 114.940432][ T5405] team0: Port device team_slave_1 added [ 114.976895][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.991356][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.043887][ T5405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.067843][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.075137][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.101543][ T5405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.180339][ T5405] hsr_slave_0: entered promiscuous mode [ 115.186679][ T5405] hsr_slave_1: entered promiscuous mode [ 115.192817][ T5405] debugfs: 'hsr0' already exists in 'hsr' [ 115.199783][ T5405] Cannot create hsr debugfs directory [ 115.466031][ T5405] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 115.490785][ T5405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.517155][ T5405] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 115.544141][ T5405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.564045][ T5405] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 115.590722][ T5405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.607584][ T5405] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 115.636609][ T5405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.765754][ T5405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.790756][ T5405] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.831759][ T5505] loop4: detected capacity change from 0 to 512 [ 115.857280][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.864419][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.887709][ T5505] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.909496][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.916617][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.928856][ T5505] EXT4-fs (loop4): 1 truncate cleaned up [ 115.935139][ T5505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.098221][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.120480][ T5512] netlink: 'syz.2.482': attribute type 29 has an invalid length. [ 116.153357][ T3029] 8021q: adding VLAN 0 to HW filter on device eth10 [ 116.160699][ T5525] netlink: 'syz.2.482': attribute type 29 has an invalid length. [ 116.310166][ T5528] pimreg: entered allmulticast mode [ 116.325113][ T5534] veth1_to_bond: entered allmulticast mode [ 116.338905][ T5405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.377807][ T5528] pimreg: left allmulticast mode [ 116.424375][ T3586] IPVS: starting estimator thread 0... [ 116.454565][ T5512] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 116.533181][ T5535] veth1_to_bond: left allmulticast mode [ 116.545653][ T5541] IPVS: using max 1728 ests per chain, 86400 per kthread [ 116.594981][ T3029] 8021q: adding VLAN 0 to HW filter on device eth11 [ 116.730226][ T5563] loop4: detected capacity change from 0 to 164 [ 116.767483][ T5573] syzkaller0: entered promiscuous mode [ 116.783598][ T5573] syzkaller0: entered allmulticast mode [ 116.839087][ T5405] veth0_vlan: entered promiscuous mode [ 116.847546][ T5405] veth1_vlan: entered promiscuous mode [ 116.885427][ T5405] veth0_macvtap: entered promiscuous mode [ 116.897099][ T5592] loop5: detected capacity change from 0 to 128 [ 116.906885][ T5405] veth1_macvtap: entered promiscuous mode [ 116.936455][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.949249][ T5592] vfat: Unknown parameter 'shorname' [ 116.956863][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.981354][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.000360][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.009947][ T5592] loop5: detected capacity change from 0 to 512 [ 117.022090][ T30] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.032498][ T5592] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.042655][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.089759][ T5592] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 117.107805][ T5592] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.488: bg 0: block 248: padding at end of block bitmap is not set [ 117.133883][ T5592] loop5: lost filesystem error report for type 5 error -117 [ 117.134265][ T5592] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.488: Failed to acquire dquot type 1 [ 117.141994][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 117.142019][ C0] EXT4-fs (loop5): last error at time 1781486079: ext4_validate_block_bitmap:441 [ 117.197969][ T5592] loop5: lost filesystem error report for type 5 error -28 [ 117.202312][ T5592] EXT4-fs (loop5): 1 truncate cleaned up [ 117.223718][ T5592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 117.258615][ T5592] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 117.283342][ T3029] 8021q: adding VLAN 0 to HW filter on device eth12 [ 117.362714][ T5592] syz.5.488 (5592) used greatest stack depth: 9344 bytes left [ 117.559833][ T5664] loop7: detected capacity change from 0 to 512 [ 117.570362][ T5664] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.503: bad orphan inode 13 [ 117.585685][ T5664] loop7: lost filesystem error report for type 5 error -117 [ 117.586536][ T5664] ext4_test_bit(bit=12, block=4) = 1 [ 117.599359][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 117.599398][ C1] EXT4-fs (loop7): initial error at time 1781486079: ext4_orphan_get:1423 [ 117.599442][ C1] EXT4-fs (loop7): last error at time 1781486079: ext4_orphan_get:1423 [ 117.623221][ T5664] is_bad_inode(inode)=0 [ 117.627696][ T5664] NEXT_ORPHAN(inode)=0 [ 117.631807][ T5664] max_ino=32 [ 117.635060][ T5664] i_nlink=1 [ 117.638579][ T5664] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.672894][ T5667] syzkaller0: entered promiscuous mode [ 117.674080][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.689828][ T5667] syzkaller0: entered allmulticast mode [ 117.838051][ T5692] FAULT_INJECTION: forcing a failure. [ 117.838051][ T5692] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 117.851765][ T5692] CPU: 0 UID: 0 PID: 5692 Comm: syz.7.511 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 117.851832][ T5692] Tainted: [W]=WARN [ 117.851842][ T5692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.851871][ T5692] Call Trace: [ 117.851878][ T5692] [ 117.851887][ T5692] __dump_stack+0x1d/0x30 [ 117.851917][ T5692] dump_stack_lvl+0x95/0xd0 [ 117.851945][ T5692] dump_stack+0x15/0x1b [ 117.852033][ T5692] should_fail_ex+0x25e/0x270 [ 117.852079][ T5692] should_fail_alloc_page+0xf2/0x100 [ 117.852121][ T5692] __alloc_frozen_pages_noprof+0x108/0x350 [ 117.852156][ T5692] alloc_pages_mpol+0xa9/0x1d0 [ 117.852265][ T5692] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 117.852291][ T5692] handle_mm_fault+0x1022/0x2da0 [ 117.852325][ T5692] ? mt_find+0x8c1/0xa10 [ 117.852378][ T5692] __get_user_pages+0x129c/0x1f10 [ 117.852446][ T5692] get_user_pages_remote+0x1d5/0x6b0 [ 117.852482][ T5692] ? down_read+0x76/0xb0 [ 117.852519][ T5692] copy_string_kernel+0x1c6/0x460 [ 117.852580][ T5692] do_execveat_common+0x547/0x700 [ 117.852622][ T5692] __x64_sys_execve+0x5f/0x80 [ 117.852687][ T5692] x64_sys_call+0x2752/0x3020 [ 117.852754][ T5692] do_syscall_64+0x136/0x3c0 [ 117.852869][ T5692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.852894][ T5692] RIP: 0033:0x7fb071c8ce59 [ 117.852920][ T5692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.853013][ T5692] RSP: 002b:00007fb0706e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 117.853067][ T5692] RAX: ffffffffffffffda RBX: 00007fb071f05fa0 RCX: 00007fb071c8ce59 [ 117.853085][ T5692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 117.853100][ T5692] RBP: 00007fb0706e7090 R08: 0000000000000000 R09: 0000000000000000 [ 117.853116][ T5692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.853131][ T5692] R13: 00007fb071f06038 R14: 00007fb071f05fa0 R15: 00007ffefbf38658 [ 117.853155][ T5692] [ 118.104884][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 118.229684][ T5714] loop7: detected capacity change from 0 to 512 [ 118.270369][ T5714] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.517: bad orphan inode 13 [ 118.297334][ T5714] loop7: lost filesystem error report for type 5 error -117 [ 118.297773][ T5714] ext4_test_bit(bit=12, block=4) = 1 [ 118.305235][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 118.305255][ C0] EXT4-fs (loop7): initial error at time 1781486080: ext4_orphan_get:1423 [ 118.305277][ C0] EXT4-fs (loop7): last error at time 1781486080: ext4_orphan_get:1423 [ 118.395084][ T5714] is_bad_inode(inode)=0 [ 118.400133][ T5714] NEXT_ORPHAN(inode)=0 [ 118.409920][ T5714] max_ino=32 [ 118.417094][ T5714] i_nlink=1 [ 118.421925][ T5714] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.512450][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.553885][ T5749] loop5: detected capacity change from 0 to 512 [ 118.579380][ T5749] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 118.612191][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.524'. [ 118.710684][ T5766] FAULT_INJECTION: forcing a failure. [ 118.710684][ T5766] name failslab, interval 1, probability 0, space 0, times 0 [ 118.727196][ T5766] CPU: 1 UID: 0 PID: 5766 Comm: syz.5.526 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 118.727238][ T5766] Tainted: [W]=WARN [ 118.727248][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.727264][ T5766] Call Trace: [ 118.727273][ T5766] [ 118.727284][ T5766] __dump_stack+0x1d/0x30 [ 118.727374][ T5766] dump_stack_lvl+0x95/0xd0 [ 118.727415][ T5766] dump_stack+0x15/0x1b [ 118.727440][ T5766] should_fail_ex+0x25e/0x270 [ 118.727486][ T5766] should_failslab+0x8c/0xb0 [ 118.727545][ T5766] kmem_cache_alloc_noprof+0x66/0x3f0 [ 118.727585][ T5766] ? prepare_creds+0x38/0x550 [ 118.727612][ T5766] prepare_creds+0x38/0x550 [ 118.727717][ T5766] prepare_exec_creds+0x14/0xe0 [ 118.727748][ T5766] bprm_execve+0x6f/0x9b0 [ 118.727786][ T5766] ? copy_string_kernel+0x436/0x460 [ 118.727823][ T5766] do_execveat_common+0x69d/0x700 [ 118.727869][ T5766] __x64_sys_execve+0x5f/0x80 [ 118.727926][ T5766] x64_sys_call+0x2752/0x3020 [ 118.727958][ T5766] do_syscall_64+0x136/0x3c0 [ 118.728001][ T5766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.728032][ T5766] RIP: 0033:0x7fbb7c1cce59 [ 118.728053][ T5766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.728125][ T5766] RSP: 002b:00007fbb7ac27028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 118.728181][ T5766] RAX: ffffffffffffffda RBX: 00007fbb7c445fa0 RCX: 00007fbb7c1cce59 [ 118.728199][ T5766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 118.728215][ T5766] RBP: 00007fbb7ac27090 R08: 0000000000000000 R09: 0000000000000000 [ 118.728232][ T5766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.728247][ T5766] R13: 00007fbb7c446038 R14: 00007fbb7c445fa0 R15: 00007ffd8c9eaf58 [ 118.728305][ T5766] [ 118.974733][ T5774] program syz.5.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.001990][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.529'. [ 119.045444][ T5786] loop7: detected capacity change from 0 to 1024 [ 119.121999][ T5786] loop7: detected capacity change from 0 to 2048 [ 119.165389][ T28] kauditd_printk_skb: 348 callbacks suppressed [ 119.165456][ T28] audit: type=1400 audit(1781486081.369:964): avc: denied { setopt } for pid=5785 comm="syz.7.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.264077][ T28] audit: type=1400 audit(1781486081.469:965): avc: denied { write } for pid=5807 comm="syz.6.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.352294][ T28] audit: type=1400 audit(1781486081.559:966): avc: denied { ioctl } for pid=5807 comm="syz.6.541" path="socket:[12746]" dev="sockfs" ino=12746 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.442653][ T28] audit: type=1400 audit(1781486081.649:967): avc: denied { getopt } for pid=5816 comm="syz.2.543" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.586844][ T28] audit: type=1400 audit(1781486081.799:968): avc: denied { write } for pid=5819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.625522][ T5840] set_capacity_and_notify: 1 callbacks suppressed [ 119.625543][ T5840] loop4: detected capacity change from 0 to 512 [ 119.655153][ T5840] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.547: bad orphan inode 13 [ 119.669586][ T5840] loop4: lost filesystem error report for type 5 error -117 [ 119.669733][ T5840] ext4_test_bit(bit=12, block=4) = 1 [ 119.675952][ T28] audit: type=1400 audit(1781486081.879:969): avc: denied { write } for pid=5845 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.677127][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 119.710569][ C0] EXT4-fs (loop4): initial error at time 1781486081: ext4_orphan_get:1423 [ 119.719295][ C0] EXT4-fs (loop4): last error at time 1781486081: ext4_orphan_get:1423 [ 119.735068][ T5840] is_bad_inode(inode)=0 [ 119.744317][ T5840] NEXT_ORPHAN(inode)=0 [ 119.749710][ T5840] max_ino=32 [ 119.753141][ T5840] i_nlink=1 [ 119.763610][ T5840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.810370][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.821795][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.829068][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.882244][ T5859] loop4: detected capacity change from 0 to 512 [ 119.900751][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.919642][ T5859] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.553: inode has both inline data and extents flags [ 119.933150][ T5859] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.933917][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.943094][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 119.943134][ C0] EXT4-fs (loop4): initial error at time 1781486338: ext4_orphan_get:1397: inode 15 [ 119.943175][ C0] EXT4-fs (loop4): last error at time 1781486338: ext4_orphan_get:1397: inode 15 [ 119.946313][ T5859] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.553: couldn't read orphan inode 15 (err -117) [ 119.990024][ T5859] loop4: lost filesystem error report for type 5 error -117 [ 119.992017][ T5859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.015780][ T28] audit: type=1400 audit(1781486338.222:970): avc: denied { write } for pid=5858 comm="syz.4.553" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.047565][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.056936][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.067933][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.082262][ T28] audit: type=1400 audit(1781486338.282:971): avc: denied { write } for pid=5858 comm="syz.4.553" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.107360][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.185532][ T5860] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.293044][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.344813][ T28] audit: type=1400 audit(1781486338.532:972): avc: denied { mount } for pid=5877 comm="syz.4.558" name="/" dev="hugetlbfs" ino=12856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 120.376477][ T28] audit: type=1400 audit(1781486338.542:973): avc: denied { append } for pid=5877 comm="syz.4.558" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.474143][ T5889] loop4: detected capacity change from 0 to 512 [ 120.480756][ T5888] loop7: detected capacity change from 0 to 512 [ 120.493959][ T5860] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.494116][ T5889] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.563: bad orphan inode 13 [ 120.494147][ T5889] loop4: lost filesystem error report for type 5 error -117 [ 120.494436][ T5889] ext4_test_bit(bit=12, block=4) = 1 [ 120.494453][ T5889] is_bad_inode(inode)=0 [ 120.494460][ T5889] NEXT_ORPHAN(inode)=0 [ 120.494466][ T5889] max_ino=32 [ 120.494473][ T5889] i_nlink=1 [ 120.495691][ T5889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.569392][ T5888] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.583299][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.598065][ T5888] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.650254][ T5888] netlink: 100 bytes leftover after parsing attributes in process `syz.7.561'. [ 120.762829][ T5860] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.871561][ T5860] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.985821][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.994094][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.041388][ T2250] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.057713][ T2250] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.235784][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.242855][ T5933] loop5: detected capacity change from 0 to 164 [ 121.390916][ T5933] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 121.542116][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.569'. [ 121.625253][ T5972] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 121.647903][ T5972] rock: directory entry would overflow storage [ 121.658881][ T5972] rock: sig=0x4f50, size=4, remaining=3 [ 121.669880][ T5972] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 121.729552][ T5970] loop4: detected capacity change from 0 to 512 [ 121.758075][ T5970] EXT4-fs: inline encryption not supported [ 121.805411][ T5970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.829663][ T5970] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.921986][ T5965] netlink: 'syz.7.578': attribute type 29 has an invalid length. [ 121.946661][ T5973] netlink: 'syz.7.578': attribute type 29 has an invalid length. [ 122.010281][ T5970] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.579: Failed to acquire dquot type 1 [ 122.048442][ T5970] loop4: lost filesystem error report for type 5 error -5 [ 122.054790][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 122.065964][ T5970] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, [ 122.068422][ C1] EXT4-fs (loop4): initial error at time 1781486340: ext4_acquire_dquot:7034 [ 122.068454][ C1] EXT4-fs (loop4): last error at time 1781486340: ext4_acquire_dquot:7034 [ 122.096940][ T5970] block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 122.197762][ T5970] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.579: corrupted inode contents [ 122.229576][ T5970] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 122.232970][ T5970] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.579: mark_inode_dirty error [ 122.317098][ T5970] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 122.328850][ T5970] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.579: corrupted inode contents [ 122.425047][ T5970] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 122.439437][ T5970] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.579: mark_inode_dirty error [ 122.526830][ T5970] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 122.563277][ T5970] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.579: corrupted inode contents [ 122.689929][ T5970] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 122.699406][ T5970] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 122.758139][ T5970] loop4: lost filesystem error report for type 5 error -117 [ 122.784736][ T5970] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.579: corrupted inode contents [ 122.895088][ T5970] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 122.903186][ T5970] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.579: mark_inode_dirty error [ 122.935336][ T5970] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 122.944151][ T5970] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 122.965707][ T5970] loop4: lost filesystem error report for type 5 error -117 [ 122.971599][ T5970] EXT4-fs (loop4): 1 truncate cleaned up [ 123.082811][ T5970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.184876][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.299709][ T6051] loop7: detected capacity change from 0 to 256 [ 123.367386][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 123.418853][ T6062] loop7: detected capacity change from 0 to 164 [ 123.447034][ T6062] rock: corrupted directory entry. extent=32 out of volume (nzones=32) [ 123.494922][ T6070] loop7: detected capacity change from 0 to 512 [ 123.515667][ T6070] EXT4-fs: Ignoring removed orlov option [ 123.535956][ T6070] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 123.555598][ T6070] EXT4-fs (loop7): Remounting filesystem read-only [ 123.564781][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 123.571267][ C1] EXT4-fs (loop7): initial error at time 1781486341: ext4_mb_generate_buddy:1317 [ 123.580458][ C1] EXT4-fs (loop7): last error at time 1781486341: ext4_mb_generate_buddy:1317 [ 123.597519][ T6070] EXT4-fs (loop7): 1 truncate cleaned up [ 123.606259][ T6070] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.906858][ T6088] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 123.915602][ T6088] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 123.934960][ T6089] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 123.959508][ T6089] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 126.519682][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.598997][ T6101] loop4: detected capacity change from 0 to 256 [ 127.380454][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 127.380476][ T28] audit: type=1400 audit(1781486345.572:988): avc: denied { write } for pid=6125 comm="syz.4.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.820264][ T28] audit: type=1400 audit(1781486345.882:989): avc: denied { read } for pid=6125 comm="syz.4.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.719319][ T28] audit: type=1400 audit(1781486346.922:990): avc: denied { write } for pid=6132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.781507][ T28] audit: type=1400 audit(1781486346.952:991): avc: denied { write } for pid=6158 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.951923][ T28] audit: type=1400 audit(1781486347.152:992): avc: denied { write } for pid=6163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.011822][ T28] audit: type=1400 audit(1781486347.212:993): avc: denied { write } for pid=6189 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.027044][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 129.113466][ T6113] loop5: detected capacity change from 0 to 1024 [ 129.132505][ T6113] EXT4-fs: Ignoring removed bh option [ 129.171929][ T6113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.202499][ T6113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.427611][ T6205] loop5: detected capacity change from 0 to 1024 [ 129.466640][ T6205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.486689][ T6205] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.506595][ T28] audit: type=1400 audit(1781486347.712:994): avc: denied { write } for pid=6204 comm="syz.5.641" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.507081][ T6205] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.641: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.543092][ T6211] loop7: detected capacity change from 0 to 164 [ 129.583409][ T6212] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.641: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.607403][ T6212] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.641: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.631359][ T6212] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.641: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.646058][ T28] audit: type=1400 audit(1781486347.852:995): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 129.648352][ T6212] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.641: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.683647][ T6212] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.641: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.685748][ T28] audit: type=1400 audit(1781486347.852:996): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 129.699071][ T6212] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.641: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.738448][ T6212] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.641: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.773143][ T6212] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.641: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.787166][ T6212] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.641: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.829258][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.6.646'. [ 129.903357][ T28] audit: type=1400 audit(1781486348.102:997): avc: denied { write } for pid=6216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.937559][ T6234] loop7: detected capacity change from 0 to 164 [ 130.256820][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.329870][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.5.657'. [ 130.545175][ T6285] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 6285 comm: syz.5.662) [ 130.729062][ T6292] loop7: detected capacity change from 0 to 512 [ 130.747783][ T6292] EXT4-fs: Ignoring removed i_version option [ 130.834934][ T6292] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -6 [ 130.929810][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.668'. [ 132.393060][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 132.393158][ T28] audit: type=1326 audit(1781486350.592:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0394f8ce59 code=0x7ffc0000 [ 132.546749][ T28] audit: type=1326 audit(1781486350.592:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0394f8ce59 code=0x7ffc0000 [ 132.623745][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.669'. [ 132.632763][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.669'. [ 132.711507][ T28] audit: type=1326 audit(1781486350.592:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0394f8cbc2 code=0x7ffc0000 [ 132.807965][ T28] audit: type=1326 audit(1781486350.592:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0394f8cc57 code=0x7ffc0000 [ 132.861975][ T28] audit: type=1326 audit(1781486350.592:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0394f49b51 code=0x7ffc0000 [ 132.890747][ T28] audit: type=1326 audit(1781486350.592:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0394f8dc49 code=0x7ffc0000 [ 133.023098][ T28] audit: type=1326 audit(1781486350.592:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0394f49bbb code=0x7ffc0000 [ 133.111712][ T28] audit: type=1326 audit(1781486350.592:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0394f8ce59 code=0x7ffc0000 [ 133.176339][ T28] audit: type=1326 audit(1781486350.592:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0394f8ce59 code=0x7ffc0000 [ 133.296356][ T28] audit: type=1326 audit(1781486350.592:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.671" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0394f492ac code=0x7ffc0000 [ 133.492794][ T6342] loop7: detected capacity change from 0 to 512 [ 133.531912][ T6342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.544601][ T6342] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.556152][ T6342] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.681: iget: bad i_size value: 2533274857506816 [ 133.574697][ T6342] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.681: iget: bad i_size value: 2533274857506816 [ 133.587853][ T6342] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.681: iget: bad i_size value: 2533274857506816 [ 133.601006][ T6342] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.681: iget: bad i_size value: 2533274857506816 [ 133.700261][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.767841][ T6353] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 133.780312][ T6353] batman_adv: batadv0: Adding interface: gretap1 [ 133.788956][ T6353] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.814732][ T6353] batman_adv: batadv0: Interface activated: gretap1 [ 133.821582][ T6353] batadv0: mtu less than device minimum [ 133.828371][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.839450][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.850361][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.861366][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.872414][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.883382][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.894245][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.905253][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.916261][ T6353] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.935632][ T6355] loop4: detected capacity change from 0 to 512 [ 134.022042][ T6363] loop4: detected capacity change from 0 to 512 [ 134.043352][ T6363] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.687: bad orphan inode 13 [ 134.054626][ T6363] loop4: lost filesystem error report for type 5 error -117 [ 134.055369][ T6363] ext4_test_bit(bit=12, block=4) = 1 [ 134.068143][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 134.068182][ C0] EXT4-fs (loop4): initial error at time 1781486352: ext4_orphan_get:1423 [ 134.068207][ C0] EXT4-fs (loop4): last error at time 1781486352: ext4_orphan_get:1423 [ 134.103699][ T6363] is_bad_inode(inode)=0 [ 134.113767][ T6363] NEXT_ORPHAN(inode)=0 [ 134.118016][ T6363] max_ino=32 [ 134.121521][ T6363] i_nlink=1 [ 134.125731][ T6363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.226104][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.156201][ T6429] loop7: detected capacity change from 0 to 164 [ 135.180488][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'. [ 135.182307][ T6433] FAULT_INJECTION: forcing a failure. [ 135.182307][ T6433] name failslab, interval 1, probability 0, space 0, times 0 [ 135.247532][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: syz.2.712 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 135.247568][ T6433] Tainted: [W]=WARN [ 135.247577][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.247592][ T6433] Call Trace: [ 135.247600][ T6433] [ 135.247610][ T6433] __dump_stack+0x1d/0x30 [ 135.247708][ T6433] dump_stack_lvl+0x95/0xd0 [ 135.247816][ T6433] dump_stack+0x15/0x1b [ 135.247838][ T6433] should_fail_ex+0x25e/0x270 [ 135.247881][ T6433] ? do_kimage_alloc_init+0x2f/0x160 [ 135.247936][ T6433] should_failslab+0x8c/0xb0 [ 135.247976][ T6433] __kmalloc_cache_noprof+0x5f/0x400 [ 135.248096][ T6433] do_kimage_alloc_init+0x2f/0x160 [ 135.248128][ T6433] do_kexec_load+0xc9/0x510 [ 135.248162][ T6433] __se_sys_kexec_load+0x134/0x160 [ 135.248197][ T6433] __x64_sys_kexec_load+0x55/0x70 [ 135.248296][ T6433] x64_sys_call+0x16c0/0x3020 [ 135.248379][ T6433] do_syscall_64+0x136/0x3c0 [ 135.248413][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.248491][ T6433] RIP: 0033:0x7fa9364cce59 [ 135.248508][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.248583][ T6433] RSP: 002b:00007fa934f27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 135.248609][ T6433] RAX: ffffffffffffffda RBX: 00007fa936745fa0 RCX: 00007fa9364cce59 [ 135.248623][ T6433] RDX: 0000200000000380 RSI: 0000000000000001 RDI: 0000000000000006 [ 135.248636][ T6433] RBP: 00007fa934f27090 R08: 0000000000000000 R09: 0000000000000000 [ 135.248648][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.248726][ T6433] R13: 00007fa936746038 R14: 00007fa936745fa0 R15: 00007ffe4de2cad8 [ 135.248758][ T6433] [ 135.449304][ T6415] loop4: detected capacity change from 0 to 512 [ 135.471535][ T3380] kernel write not supported for file /sg0 (pid: 3380 comm: kworker/0:2) [ 135.491471][ T6415] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.570568][ T6446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=6446 comm=syz.2.718 [ 135.600127][ T6446] syzkaller1: entered promiscuous mode [ 135.615403][ T6446] syzkaller1: entered allmulticast mode [ 135.666845][ T6415] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 135.688122][ T6415] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.704: bg 0: block 248: padding at end of block bitmap is not set [ 135.703977][ T6415] loop4: lost filesystem error report for type 5 error -117 [ 135.705178][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 135.723700][ C1] EXT4-fs (loop4): last error at time 1781486353: ext4_validate_block_bitmap:441 [ 135.752589][ T6415] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.704: Failed to acquire dquot type 1 [ 135.773592][ T6415] loop4: lost filesystem error report for type 5 error -28 [ 135.791183][ T6415] EXT4-fs (loop4): 1 truncate cleaned up [ 135.853996][ T6415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 135.946866][ T6415] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.704: deleted inode referenced: 12 [ 136.623760][ T6415] syz.4.704 (6415) used greatest stack depth: 8448 bytes left [ 136.631786][ T6467] sctp: [Deprecated]: syz.5.723 (pid 6467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.631786][ T6467] Use struct sctp_sack_info instead [ 136.651469][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 136.737673][ T6478] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 136.744273][ T6478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.777684][ T6484] loop5: detected capacity change from 0 to 164 [ 136.806092][ T6478] vhci_hcd vhci_hcd.0: Device attached [ 136.874607][ T6484] rock: corrupted directory entry. extent=32 out of volume (nzones=32) [ 136.955187][ T6496] loop5: detected capacity change from 0 to 512 [ 136.981787][ T6496] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.731: bad orphan inode 13 [ 136.992123][ T6496] loop5: lost filesystem error report for type 5 error -117 [ 136.992321][ T6496] ext4_test_bit(bit=12, block=4) = 1 [ 136.999659][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 136.999694][ C1] EXT4-fs (loop5): initial error at time 1781486355: ext4_orphan_get:1423 [ 136.999723][ C1] EXT4-fs (loop5): last error at time 1781486355: ext4_orphan_get:1423 [ 137.031248][ T6496] is_bad_inode(inode)=0 [ 137.035623][ T6496] NEXT_ORPHAN(inode)=0 [ 137.039770][ T6496] max_ino=32 [ 137.043064][ T6496] i_nlink=1 [ 137.046281][ T889] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 137.054854][ T6496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.082606][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.310865][ T6506] loop7: detected capacity change from 0 to 4096 [ 137.331529][ T6511] netlink: 52 bytes leftover after parsing attributes in process `syz.5.732'. [ 137.347991][ T6506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.372847][ T6479] vhci_hcd: connection reset by peer [ 137.386397][ T1766] vhci_hcd vhci_hcd.2: stop threads [ 137.391764][ T1766] vhci_hcd vhci_hcd.2: release socket [ 137.397326][ T1766] vhci_hcd vhci_hcd.2: disconnect device [ 137.406791][ T6518] netlink: 48 bytes leftover after parsing attributes in process `syz.5.732'. [ 137.429219][ T6506] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 137.480745][ T6524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.481062][ T28] kauditd_printk_skb: 199 callbacks suppressed [ 137.481103][ T28] audit: type=1400 audit(1781486355.682:1255): avc: denied { ioctl } for pid=6503 comm="syz.7.735" path="/newroot/dev/usbmon2" dev="devtmpfs" ino=148 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 137.491465][ T6524] bridge0: port 3(bond1) entered blocking state [ 137.526250][ T6524] bridge0: port 3(bond1) entered disabled state [ 137.532836][ T6524] bond1: entered allmulticast mode [ 137.539389][ T6524] bond1: entered promiscuous mode [ 137.545742][ T6524] bridge0: port 3(bond1) entered blocking state [ 137.552105][ T6524] bridge0: port 3(bond1) entered forwarding state [ 137.605985][ T6533] loop4: detected capacity change from 0 to 512 [ 137.616179][ T6533] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.742: bad orphan inode 13 [ 137.630327][ T6533] loop4: lost filesystem error report for type 5 error -117 [ 137.630508][ T6533] ext4_test_bit(bit=12, block=4) = 1 [ 137.637874][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 137.637890][ C1] EXT4-fs (loop4): initial error at time 1781486355: ext4_orphan_get:1423 [ 137.637928][ C1] EXT4-fs (loop4): last error at time 1781486355: ext4_orphan_get:1423 [ 137.667216][ T6533] is_bad_inode(inode)=0 [ 137.673091][ T6533] NEXT_ORPHAN(inode)=0 [ 137.677271][ T6533] max_ino=32 [ 137.679527][ T2250] bridge0: port 3(bond1) entered disabled state [ 137.680488][ T6533] i_nlink=1 [ 137.690367][ T6533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.719355][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.740704][ T6531] 9p: Bad value for 'rfdno' [ 137.750209][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.741'. [ 137.773575][ T28] audit: type=1400 audit(1781486355.972:1256): avc: denied { ioctl } for pid=6537 comm="syz.4.743" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.817167][ T28] audit: type=1400 audit(1781486355.982:1257): avc: denied { connect } for pid=6537 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.958181][ T6549] netlink: 48 bytes leftover after parsing attributes in process `syz.2.747'. [ 137.967638][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 138.045646][ T6538] loop4: detected capacity change from 0 to 4096 [ 138.080361][ T6538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.097004][ T28] audit: type=1400 audit(1781486356.302:1258): avc: denied { setopt } for pid=6537 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.222456][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.250523][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.297546][ T6568] mmap: syz.2.754 (6568) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.310039][ T6570] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.753: bad orphan inode 13 [ 138.322708][ T28] audit: type=1400 audit(1781486356.512:1259): avc: denied { shutdown } for pid=6567 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.349820][ T6570] loop7: lost filesystem error report for type 5 error -117 [ 138.350032][ T6570] ext4_test_bit(bit=12, block=4) = 1 [ 138.357462][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 138.357487][ C0] EXT4-fs (loop7): initial error at time 1781486356: ext4_orphan_get:1423 [ 138.357527][ C0] EXT4-fs (loop7): last error at time 1781486356: ext4_orphan_get:1423 [ 138.388101][ T6576] batadv_slave_1: entered promiscuous mode [ 138.396690][ T28] audit: type=1400 audit(1781486356.532:1260): avc: denied { read } for pid=6567 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.427989][ T6576] batadv_slave_1: left promiscuous mode [ 138.441743][ T6570] is_bad_inode(inode)=0 [ 138.446020][ T6570] NEXT_ORPHAN(inode)=0 [ 138.450421][ T6570] max_ino=32 [ 138.453842][ T6570] i_nlink=1 [ 138.457574][ T6570] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.461274][ T28] audit: type=1400 audit(1781486356.592:1261): avc: denied { create } for pid=6563 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.491545][ T28] audit: type=1400 audit(1781486356.592:1262): avc: denied { bind } for pid=6563 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.513329][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.556764][ T6582] program syz.7.757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.610020][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.611382][ T6593] team0: No ports can be present during mode change [ 138.621440][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.674321][ T28] audit: type=1400 audit(1781486356.872:1263): avc: denied { setopt } for pid=6592 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.675606][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 138.802692][ T6613] netlink: 'syz.6.767': attribute type 4 has an invalid length. [ 138.923610][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 139.046635][ T6623] syzkaller0: entered promiscuous mode [ 139.052305][ T6623] syzkaller0: entered allmulticast mode [ 139.414586][ T6624] syz.6.770 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 139.428430][ T6624] CPU: 1 UID: 0 PID: 6624 Comm: syz.6.770 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 139.428466][ T6624] Tainted: [W]=WARN [ 139.428474][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.428488][ T6624] Call Trace: [ 139.428496][ T6624] [ 139.428504][ T6624] __dump_stack+0x1d/0x30 [ 139.428571][ T6624] dump_stack_lvl+0x95/0xd0 [ 139.428595][ T6624] dump_stack+0x15/0x1b [ 139.428629][ T6624] dump_header+0x80/0x240 [ 139.428654][ T6624] oom_kill_process+0x295/0x350 [ 139.428692][ T6624] out_of_memory+0x981/0xbc0 [ 139.428752][ T6624] try_charge_memcg+0x621/0xa00 [ 139.428791][ T6624] __memcg_kmem_charge_page+0x199/0x3a0 [ 139.428819][ T6624] __alloc_frozen_pages_noprof+0x18a/0x350 [ 139.428848][ T6624] alloc_pages_mpol+0xa9/0x1d0 [ 139.428939][ T6624] alloc_pages_noprof+0x8f/0x140 [ 139.428966][ T6624] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 139.429071][ T6624] __kvmalloc_node_noprof+0x3d4/0x640 [ 139.429121][ T6624] ? futex_hash_allocate+0x18d/0x960 [ 139.429156][ T6624] ? futex_hash_allocate+0x18d/0x960 [ 139.429192][ T6624] futex_hash_allocate+0x18d/0x960 [ 139.429227][ T6624] ? cap_task_prctl+0x13f/0x6b0 [ 139.429320][ T6624] futex_hash_prctl+0xd8/0xf0 [ 139.429354][ T6624] __se_sys_prctl+0x4f4/0x1400 [ 139.429384][ T6624] __x64_sys_prctl+0x67/0x80 [ 139.429451][ T6624] x64_sys_call+0x2533/0x3020 [ 139.429478][ T6624] do_syscall_64+0x136/0x3c0 [ 139.429576][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.429630][ T6624] RIP: 0033:0x7f0394f8ce59 [ 139.429649][ T6624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.429670][ T6624] RSP: 002b:00007f03939c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 139.429755][ T6624] RAX: ffffffffffffffda RBX: 00007f0395206090 RCX: 00007f0394f8ce59 [ 139.429771][ T6624] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 139.429786][ T6624] RBP: 00007f0395022d6f R08: 0000000000000000 R09: 0000000000000000 [ 139.429800][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.429814][ T6624] R13: 00007f0395206128 R14: 00007f0395206090 R15: 00007ffe3363c7b8 [ 139.429836][ T6624] [ 139.429843][ T6624] memory: usage 307200kB, limit 307200kB, failcnt 845 [ 139.657115][ T6624] memory+swap: usage 307440kB, limit 9007199254740988kB, failcnt 0 [ 139.665059][ T6624] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 139.672351][ T6624] Memory cgroup stats for /syz6: [ 139.672572][ T6624] cache 4096 [ 139.680737][ T6624] rss 0 [ 139.683553][ T6624] shmem 0 [ 139.686540][ T6624] mapped_file 4096 [ 139.690282][ T6624] dirty 0 [ 139.693230][ T6624] writeback 4096 [ 139.696853][ T6624] workingset_refault_anon 90 [ 139.701511][ T6624] workingset_refault_file 0 [ 139.706044][ T6624] swap 245760 [ 139.709380][ T6624] swapcached 4026368 [ 139.713283][ T6624] pgpgin 63349 [ 139.716732][ T6624] pgpgout 63347 [ 139.720276][ T6624] pgfault 53003 [ 139.723804][ T6624] pgmajfault 47 [ 139.727302][ T6624] inactive_anon 0 [ 139.730948][ T6624] active_anon 4096 [ 139.734687][ T6624] inactive_file 0 [ 139.738440][ T6624] active_file 4096 [ 139.742171][ T6624] unevictable 0 [ 139.745680][ T6624] hierarchical_memory_limit 314572800 [ 139.751145][ T6624] hierarchical_memsw_limit 9223372036854771712 [ 139.757390][ T6624] total_cache 4096 [ 139.761132][ T6624] total_rss 0 [ 139.764427][ T6624] total_shmem 0 [ 139.767934][ T6624] total_mapped_file 4096 [ 139.772181][ T6624] total_dirty 0 [ 139.775698][ T6624] total_writeback 4096 [ 139.779799][ T6624] total_workingset_refault_anon 90 [ 139.784946][ T6624] total_workingset_refault_file 0 [ 139.790007][ T6624] total_swap 245760 [ 139.793864][ T6624] total_swapcached 4026368 [ 139.798363][ T6624] total_pgpgin 63349 [ 139.802313][ T6624] total_pgpgout 63347 [ 139.806314][ T6624] total_pgfault 53003 [ 139.810306][ T6624] total_pgmajfault 47 [ 139.814321][ T6624] total_inactive_anon 0 [ 139.818505][ T6624] total_active_anon 4096 [ 139.822757][ T6624] total_inactive_file 0 [ 139.826939][ T6624] total_active_file 4096 [ 139.831274][ T6624] total_unevictable 0 [ 139.835364][ T6624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.770,pid=6619,uid=0 [ 139.849938][ T6624] Memory cgroup out of memory: Killed process 6619 (syz.6.770) total-vm:98536kB, anon-rss:1232kB, file-rss:26448kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 139.951678][ T6624] syz.6.770 (6624) used greatest stack depth: 8296 bytes left [ 140.280645][ T6652] netlink: 'syz.4.775': attribute type 21 has an invalid length. [ 141.186151][ T6659] set_capacity_and_notify: 1 callbacks suppressed [ 141.186173][ T6659] loop7: detected capacity change from 0 to 164 [ 141.203010][ T6653] kexec: Could not allocate control_code_buffer [ 141.579423][ T6659] rock: corrupted directory entry. extent=32 out of volume (nzones=32) [ 142.161230][ T889] usb 5-1: enqueue for inactive port 0 [ 142.183519][ T889] usb 5-1: enqueue for inactive port 0 [ 143.161522][ T889] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 143.712629][ T28] audit: type=1400 audit(1781486361.912:1264): avc: denied { bind } for pid=6668 comm="syz.5.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.744436][ T6672] loop4: detected capacity change from 0 to 164 [ 144.245753][ T6704] loop4: detected capacity change from 0 to 164 [ 144.253475][ T6704] rock: corrupted directory entry. extent=32 out of volume (nzones=32) [ 144.379159][ T6712] netlink: 'syz.4.799': attribute type 15 has an invalid length. [ 144.518979][ T6715] netlink: 'syz.2.795': attribute type 21 has an invalid length. [ 145.424537][ T6717] hsr0: entered allmulticast mode [ 145.429679][ T6717] hsr_slave_0: entered allmulticast mode [ 145.763863][ T6723] loop5: detected capacity change from 0 to 256 [ 145.807921][ T6726] loop4: detected capacity change from 0 to 164 [ 147.165947][ T6749] FAULT_INJECTION: forcing a failure. [ 147.165947][ T6749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.207091][ T6749] CPU: 0 UID: 0 PID: 6749 Comm: syz.5.812 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 147.207134][ T6749] Tainted: [W]=WARN [ 147.207214][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.207232][ T6749] Call Trace: [ 147.207240][ T6749] [ 147.207249][ T6749] __dump_stack+0x1d/0x30 [ 147.207332][ T6749] dump_stack_lvl+0x95/0xd0 [ 147.207427][ T6749] dump_stack+0x15/0x1b [ 147.207452][ T6749] should_fail_ex+0x25e/0x270 [ 147.207545][ T6749] should_fail+0xb/0x20 [ 147.207596][ T6749] should_fail_usercopy+0x1a/0x20 [ 147.207624][ T6749] _copy_from_user+0x1c/0xb0 [ 147.207669][ T6749] copy_from_bpfptr+0x5c/0x90 [ 147.207703][ T6749] bpf_prog_load+0x6be/0xfc0 [ 147.207801][ T6749] ? security_bpf+0x2b/0x90 [ 147.207828][ T6749] __sys_bpf+0x505/0x7e0 [ 147.207893][ T6749] __x64_sys_bpf+0x41/0x50 [ 147.207927][ T6749] x64_sys_call+0x10cb/0x3020 [ 147.207997][ T6749] do_syscall_64+0x136/0x3c0 [ 147.208035][ T6749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.208064][ T6749] RIP: 0033:0x7fbb7c1cce59 [ 147.208135][ T6749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.208160][ T6749] RSP: 002b:00007fbb7ac27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.208186][ T6749] RAX: ffffffffffffffda RBX: 00007fbb7c445fa0 RCX: 00007fbb7c1cce59 [ 147.208255][ T6749] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 147.208273][ T6749] RBP: 00007fbb7ac27090 R08: 0000000000000000 R09: 0000000000000000 [ 147.208290][ T6749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.208307][ T6749] R13: 00007fbb7c446038 R14: 00007fbb7c445fa0 R15: 00007ffd8c9eaf58 [ 147.208329][ T6749] [ 147.390490][ T6742] loop4: detected capacity change from 0 to 512 [ 147.408177][ T6742] EXT4-fs: inline encryption not supported [ 147.420721][ T6742] ext4: Bad value for 'journal_dev' [ 147.501164][ T6756] loop5: detected capacity change from 0 to 128 [ 147.503712][ T6759] FAULT_INJECTION: forcing a failure. [ 147.503712][ T6759] name failslab, interval 1, probability 0, space 0, times 0 [ 147.525594][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.4.817 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 147.525636][ T6759] Tainted: [W]=WARN [ 147.525645][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.525670][ T6759] Call Trace: [ 147.525734][ T6759] [ 147.525744][ T6759] __dump_stack+0x1d/0x30 [ 147.525773][ T6759] dump_stack_lvl+0x95/0xd0 [ 147.525793][ T6759] dump_stack+0x15/0x1b [ 147.525818][ T6759] should_fail_ex+0x25e/0x270 [ 147.526009][ T6759] should_failslab+0x8c/0xb0 [ 147.526042][ T6759] kmem_cache_alloc_noprof+0x66/0x3f0 [ 147.526184][ T6759] ? security_file_alloc+0x32/0xf0 [ 147.526213][ T6759] security_file_alloc+0x32/0xf0 [ 147.526233][ T6759] init_file+0x5b/0x1b0 [ 147.526266][ T6759] alloc_empty_file+0x85/0x1e0 [ 147.526294][ T6759] alloc_file_pseudo+0xf6/0x190 [ 147.526319][ T6759] __shmem_file_setup+0x226/0x260 [ 147.526340][ T6759] shmem_file_setup+0x3b/0x50 [ 147.526437][ T6759] memfd_alloc_file+0x4e/0x300 [ 147.526541][ T6759] __se_sys_memfd_create+0x2e1/0x3b0 [ 147.526678][ T6759] __x64_sys_memfd_create+0x31/0x40 [ 147.526707][ T6759] x64_sys_call+0x1f22/0x3020 [ 147.526732][ T6759] do_syscall_64+0x136/0x3c0 [ 147.526812][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.526835][ T6759] RIP: 0033:0x7f9b3c98ce59 [ 147.526852][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.526884][ T6759] RSP: 002b:00007f9b3b3dee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 147.526948][ T6759] RAX: ffffffffffffffda RBX: 0000000000000567 RCX: 00007f9b3c98ce59 [ 147.526964][ T6759] RDX: 00007f9b3b3deee0 RSI: 0000000000000000 RDI: 00007f9b3ca22f4f [ 147.526978][ T6759] RBP: 0000200000000200 R08: 00000000ffffffff R09: 0000000000000000 [ 147.526992][ T6759] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 147.527005][ T6759] R13: 00007f9b3b3deee0 R14: 00007f9b3b3deea0 R15: 00002000000009c0 [ 147.527026][ T6759] [ 147.858190][ T6766] loop4: detected capacity change from 0 to 164 [ 148.053873][ T6773] netlink: 'syz.6.816': attribute type 21 has an invalid length. [ 148.112599][ T6774] batman_adv: batadv0: Adding interface: dummy0 [ 148.125199][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.5.821'. [ 148.211663][ T6774] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.399583][ T6774] batman_adv: batadv0: Interface activated: dummy0 [ 148.438501][ T6772] loop5: detected capacity change from 0 to 512 [ 148.451134][ T6768] net_ratelimit: 10 callbacks suppressed [ 148.451159][ T6768] batadv0: mtu less than device minimum [ 148.477500][ T6772] EXT4-fs: Ignoring removed nobh option [ 148.491085][ T6768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.507263][ T6768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.524882][ T6768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.542132][ T6768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.558512][ T6768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.574613][ T6768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.590692][ T6768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.608013][ T6768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.623602][ T6768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.696239][ T6772] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.722198][ T6772] EXT4-fs error (device loop5): __ext4_iget:5481: inode #11: block 1: comm syz.5.821: invalid block [ 148.733513][ T6772] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 148.735275][ T6772] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.821: couldn't read orphan inode 11 (err -117) [ 148.744947][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 148.745277][ C1] EXT4-fs (loop5): initial error at time 1781486366: __ext4_iget:5481: inode 11: block 1 [ 148.745448][ C1] EXT4-fs (loop5): last error at time 1781486366: __ext4_iget:5481: inode 11: block 1 [ 148.914187][ T28] audit: type=1400 audit(1781486367.112:1265): avc: denied { write } for pid=6794 comm="syz.4.826" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 148.944170][ T6772] loop5: lost filesystem error report for type 5 error -117 [ 148.978274][ T6772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.045377][ T6798] FAULT_INJECTION: forcing a failure. [ 149.045377][ T6798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.107340][ T6798] CPU: 1 UID: 0 PID: 6798 Comm: syz.4.827 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 149.107385][ T6798] Tainted: [W]=WARN [ 149.107394][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.107411][ T6798] Call Trace: [ 149.107418][ T6798] [ 149.107426][ T6798] __dump_stack+0x1d/0x30 [ 149.107449][ T6798] dump_stack_lvl+0x95/0xd0 [ 149.107473][ T6798] dump_stack+0x15/0x1b [ 149.107497][ T6798] should_fail_ex+0x25e/0x270 [ 149.107550][ T6798] should_fail+0xb/0x20 [ 149.107568][ T6798] should_fail_usercopy+0x1a/0x20 [ 149.107589][ T6798] strncpy_from_user+0x27/0x250 [ 149.107619][ T6798] strncpy_from_bpfptr+0x43/0x50 [ 149.107730][ T6798] bpf_prog_load+0x7f7/0xfc0 [ 149.107770][ T6798] ? security_bpf+0x2b/0x90 [ 149.107797][ T6798] __sys_bpf+0x505/0x7e0 [ 149.107835][ T6798] __x64_sys_bpf+0x41/0x50 [ 149.107911][ T6798] x64_sys_call+0x10cb/0x3020 [ 149.108005][ T6798] do_syscall_64+0x136/0x3c0 [ 149.108041][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.108070][ T6798] RIP: 0033:0x7f9b3c98ce59 [ 149.108090][ T6798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.108180][ T6798] RSP: 002b:00007f9b3b3df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.108257][ T6798] RAX: ffffffffffffffda RBX: 00007f9b3cc05fa0 RCX: 00007f9b3c98ce59 [ 149.108271][ T6798] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 149.108284][ T6798] RBP: 00007f9b3b3df090 R08: 0000000000000000 R09: 0000000000000000 [ 149.108296][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.108310][ T6798] R13: 00007f9b3cc06038 R14: 00007f9b3cc05fa0 R15: 00007ffebb0be638 [ 149.108358][ T6798] [ 149.300862][ T6772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.425901][ T6800] loop7: detected capacity change from 0 to 164 [ 149.490682][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 149.500896][ T6805] loop4: detected capacity change from 0 to 128 [ 149.539697][ T6805] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.562966][ T6805] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.789563][ T28] audit: type=1400 audit(1781486367.992:1266): avc: denied { write } for pid=6804 comm="syz.4.830" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.830047][ T6788] kexec: Could not allocate control_code_buffer [ 149.914455][ T6814] netlink: 80 bytes leftover after parsing attributes in process `syz.5.833'. [ 149.923941][ T6815] FAULT_INJECTION: forcing a failure. [ 149.923941][ T6815] name failslab, interval 1, probability 0, space 0, times 0 [ 149.936717][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.2.831 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 149.936757][ T6815] Tainted: [W]=WARN [ 149.936766][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.936790][ T6815] Call Trace: [ 149.936797][ T6815] [ 149.936805][ T6815] __dump_stack+0x1d/0x30 [ 149.936828][ T6815] dump_stack_lvl+0x95/0xd0 [ 149.936855][ T6815] dump_stack+0x15/0x1b [ 149.936878][ T6815] should_fail_ex+0x25e/0x270 [ 149.936914][ T6815] should_failslab+0x8c/0xb0 [ 149.936951][ T6815] kmem_cache_alloc_noprof+0x66/0x3f0 [ 149.936990][ T6815] ? vm_area_alloc+0x2c/0xb0 [ 149.937027][ T6815] vm_area_alloc+0x2c/0xb0 [ 149.937058][ T6815] mmap_region+0x1112/0x20c0 [ 149.937087][ T6815] ? ebitmap_hash+0x404/0x420 [ 149.937107][ T6815] ? mas_ascend+0x1d1/0x570 [ 149.937142][ T6815] ? __rcu_read_unlock+0x33/0x70 [ 149.937188][ T6815] do_mmap+0x970/0xbc0 [ 149.937210][ T6815] ? selinux_mmap_file+0x5d/0x70 [ 149.937235][ T6815] vm_mmap_pgoff+0x183/0x2d0 [ 149.937270][ T6815] ksys_mmap_pgoff+0xc1/0x310 [ 149.937292][ T6815] ? __x64_sys_mmap+0x49/0x70 [ 149.937325][ T6815] x64_sys_call+0x14df/0x3020 [ 149.937349][ T6815] do_syscall_64+0x136/0x3c0 [ 149.937382][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.937405][ T6815] RIP: 0033:0x7fa9364ccbc2 [ 149.937422][ T6815] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 149.937443][ T6815] RSP: 002b:00007fa934f05df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 149.937464][ T6815] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa9364ccbc2 [ 149.937478][ T6815] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 149.937491][ T6815] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 149.937504][ T6815] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 149.937517][ T6815] R13: 00007fa934f05ee0 R14: 00007fa934f05ea0 R15: 00002000000009c0 [ 149.937537][ T6815] [ 149.956600][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.833'. [ 150.176297][ T6824] loop5: detected capacity change from 0 to 512 [ 150.193272][ T6824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.206769][ T6824] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.218712][ T28] audit: type=1400 audit(1781486368.422:1267): avc: denied { write } for pid=6823 comm="syz.5.836" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.245527][ T6824] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.836: iget: bad i_size value: 2533274857506816 [ 150.265201][ T6830] FAULT_INJECTION: forcing a failure. [ 150.265201][ T6830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.265771][ T28] audit: type=1400 audit(1781486368.422:1268): avc: denied { read append } for pid=6823 comm="syz.5.836" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.279819][ T6830] CPU: 1 UID: 0 PID: 6830 Comm: syz.2.838 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 150.279919][ T6830] Tainted: [W]=WARN [ 150.279941][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.280008][ T6830] Call Trace: [ 150.280035][ T6830] [ 150.280069][ T6830] __dump_stack+0x1d/0x30 [ 150.280205][ T6830] dump_stack_lvl+0x95/0xd0 [ 150.280276][ T6830] dump_stack+0x15/0x1b [ 150.280337][ T6830] should_fail_ex+0x25e/0x270 [ 150.280459][ T6830] should_fail+0xb/0x20 [ 150.280511][ T6830] should_fail_usercopy+0x1a/0x20 [ 150.280581][ T6830] strncpy_from_user+0x27/0x250 [ 150.280698][ T6830] strncpy_from_bpfptr+0x43/0x50 [ 150.280785][ T6830] bpf_prog_load+0x7f7/0xfc0 [ 150.280887][ T6830] ? security_bpf+0x2b/0x90 [ 150.281033][ T6830] __sys_bpf+0x505/0x7e0 [ 150.281134][ T6830] __x64_sys_bpf+0x41/0x50 [ 150.281272][ T6830] x64_sys_call+0x10cb/0x3020 [ 150.281409][ T6830] do_syscall_64+0x136/0x3c0 [ 150.281533][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.281604][ T6830] RIP: 0033:0x7fa9364cce59 [ 150.281653][ T6830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.281713][ T6830] RSP: 002b:00007fa934f27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.281846][ T6830] RAX: ffffffffffffffda RBX: 00007fa936745fa0 RCX: 00007fa9364cce59 [ 150.281894][ T6830] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 150.282013][ T6830] RBP: 00007fa934f27090 R08: 0000000000000000 R09: 0000000000000000 [ 150.282053][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.282093][ T6830] R13: 00007fa936746038 R14: 00007fa936745fa0 R15: 00007ffe4de2cad8 [ 150.282155][ T6830] [ 150.345503][ T6831] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.836: iget: bad i_size value: 2533274857506816 [ 150.350798][ T28] audit: type=1400 audit(1781486368.422:1269): avc: denied { open } for pid=6823 comm="syz.5.836" path="/145/bus/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.561156][ T6824] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.836: iget: bad i_size value: 2533274857506816 [ 150.563467][ T28] audit: type=1400 audit(1781486368.452:1270): avc: denied { ioctl } for pid=6823 comm="syz.5.836" path="/145/bus/file2" dev="loop5" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.598860][ T28] audit: type=1400 audit(1781486368.592:1271): avc: denied { getopt } for pid=6823 comm="syz.5.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.600847][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.619361][ T28] audit: type=1400 audit(1781486368.742:1272): avc: denied { write } for pid=6823 comm="syz.5.836" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.648894][ T28] audit: type=1400 audit(1781486368.742:1273): avc: denied { create } for pid=6823 comm="syz.5.836" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 150.687472][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.718083][ T28] audit: type=1400 audit(1781486368.922:1274): avc: denied { ioctl } for pid=6839 comm="syz.5.840" path="socket:[17483]" dev="sockfs" ino=17483 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.747942][ T6842] loop5: detected capacity change from 0 to 512 [ 150.766802][ T6842] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 150.777360][ T6845] batadv_slave_0: entered promiscuous mode [ 150.778751][ T6842] EXT4-fs (loop5): 1 truncate cleaned up [ 150.789668][ T6842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.816322][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.826749][ T6845] batadv_slave_0: left promiscuous mode [ 151.532946][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.856'. [ 151.564863][ T6882] can0: slcan on ttyS3. [ 151.614980][ T6882] can0 (unregistered): slcan off ttyS3. [ 151.791995][ T6888] loop7: detected capacity change from 0 to 1024 [ 151.800903][ T6888] EXT4-fs: Ignoring removed bh option [ 151.810756][ T6888] EXT4-fs: Invalid want_extra_isize 3678 [ 151.937571][ T6901] netlink: 'syz.5.865': attribute type 4 has an invalid length. [ 151.974380][ T6904] loop7: detected capacity change from 0 to 164 [ 152.197114][ T6901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.285943][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.333789][ T6919] FAULT_INJECTION: forcing a failure. [ 152.333789][ T6919] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 152.347843][ T6919] CPU: 1 UID: 0 PID: 6919 Comm: syz.5.871 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 152.347952][ T6919] Tainted: [W]=WARN [ 152.347963][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 152.347979][ T6919] Call Trace: [ 152.348051][ T6919] [ 152.348060][ T6919] __dump_stack+0x1d/0x30 [ 152.348090][ T6919] dump_stack_lvl+0x95/0xd0 [ 152.348117][ T6919] dump_stack+0x15/0x1b [ 152.348200][ T6919] should_fail_ex+0x25e/0x270 [ 152.348259][ T6919] should_fail_alloc_page+0xf2/0x100 [ 152.348344][ T6919] __alloc_frozen_pages_noprof+0x108/0x350 [ 152.348376][ T6919] alloc_pages_mpol+0xa9/0x1d0 [ 152.348461][ T6919] alloc_pages_noprof+0x8f/0x140 [ 152.348529][ T6919] pte_alloc_one+0x1c/0xc0 [ 152.348570][ T6919] __pte_alloc+0x32/0x2a0 [ 152.348592][ T6919] ? mtree_range_walk+0x444/0x480 [ 152.348685][ T6919] handle_mm_fault+0x22f8/0x2da0 [ 152.348730][ T6919] do_user_addr_fault+0x634/0x1060 [ 152.348817][ T6919] ? ksys_mmap_pgoff+0xc1/0x310 [ 152.348844][ T6919] ? __x64_sys_mmap+0x49/0x70 [ 152.348898][ T6919] ? trace_page_fault_user+0x1f/0xa0 [ 152.348978][ T6919] exc_page_fault+0x62/0xa0 [ 152.349050][ T6919] asm_exc_page_fault+0x26/0x30 [ 152.349077][ T6919] RIP: 0033:0x7fbb7c0841ce [ 152.349095][ T6919] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 152.349115][ T6919] RSP: 002b:00007fbb7ac26470 EFLAGS: 00010246 [ 152.349135][ T6919] RAX: 0000000000000001 RBX: 00007fbb7ac26530 RCX: 0000000000000101 [ 152.349209][ T6919] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fbb7ac265d0 [ 152.349227][ T6919] RBP: 0000000000000102 R08: 00007fbb72807000 R09: 0000000000000000 [ 152.349245][ T6919] R10: 0000000000000000 R11: 00007fbb7ac26540 R12: 0000000000000001 [ 152.349262][ T6919] R13: 00007fbb7c282980 R14: 0000000000000000 R15: 00007fbb7ac265d0 [ 152.349287][ T6919] [ 152.349520][ T6919] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 152.436306][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.447079][ T6919] set_capacity_and_notify: 2 callbacks suppressed [ 152.447122][ T6919] loop5: detected capacity change from 0 to 164 [ 152.453350][ T6906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.593958][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.609673][ T6919] rock: corrupted directory entry. extent=32 out of volume (nzones=32) [ 152.641980][ T6933] loop7: detected capacity change from 0 to 164 [ 152.663330][ T6933] rock: corrupted directory entry. extent=32, offset=0, size=4096 [ 152.873897][ T6942] usb usb7: usbfs: process 6942 (syz.7.879) did not claim interface 0 before use [ 153.282148][ T6955] loop7: detected capacity change from 0 to 164 [ 153.502111][ T6959] netlink: 'syz.6.885': attribute type 4 has an invalid length. [ 153.605436][ T6962] netlink: 3 bytes leftover after parsing attributes in process `syz.6.886'. [ 153.647353][ T6966] gre0 speed is unknown, defaulting to 1000 [ 153.653863][ T6966] gre0 speed is unknown, defaulting to 1000 [ 153.660172][ T6966] gre0 speed is unknown, defaulting to 1000 [ 153.698025][ T6966] infiniband syz1: set down [ 153.702629][ T889] gre0 speed is unknown, defaulting to 1000 [ 153.709421][ T6966] infiniband syz1: added gre0 [ 153.728805][ T6966] RDS/IB: syz1: added [ 153.735067][ T6966] smc: adding ib device syz1 with port count 1 [ 153.741336][ T6966] smc: ib device syz1 port 1 has no pnetid [ 153.749228][ T6966] gre0 speed is unknown, defaulting to 1000 [ 153.755576][ T6721] gre0 speed is unknown, defaulting to 1000 [ 153.790663][ T6966] gre0 speed is unknown, defaulting to 1000 [ 153.823122][ T6974] FAULT_INJECTION: forcing a failure. [ 153.823122][ T6974] name failslab, interval 1, probability 0, space 0, times 0 [ 153.836175][ T6974] CPU: 1 UID: 0 PID: 6974 Comm: syz.4.890 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 153.836209][ T6974] Tainted: [W]=WARN [ 153.836216][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.836233][ T6974] Call Trace: [ 153.836241][ T6974] [ 153.836252][ T6974] __dump_stack+0x1d/0x30 [ 153.836281][ T6974] dump_stack_lvl+0x95/0xd0 [ 153.836382][ T6974] dump_stack+0x15/0x1b [ 153.836404][ T6974] should_fail_ex+0x25e/0x270 [ 153.836490][ T6974] should_failslab+0x8c/0xb0 [ 153.836528][ T6974] kmem_cache_alloc_noprof+0x66/0x3f0 [ 153.836567][ T6974] ? __anon_vma_prepare+0x70/0x2f0 [ 153.836653][ T6974] ? __rcu_read_lock+0x36/0x50 [ 153.836680][ T6974] __anon_vma_prepare+0x70/0x2f0 [ 153.836719][ T6974] handle_mm_fault+0x2407/0x2da0 [ 153.836754][ T6974] do_user_addr_fault+0x634/0x1060 [ 153.836794][ T6974] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 153.836826][ T6974] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 153.836957][ T6974] ? trace_page_fault_user+0x1f/0xa0 [ 153.836987][ T6974] exc_page_fault+0x62/0xa0 [ 153.837016][ T6974] asm_exc_page_fault+0x26/0x30 [ 153.837041][ T6974] RIP: 0033:0x7f9b3c844123 [ 153.837056][ T6974] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 153.837083][ T6974] RSP: 002b:00007f9b3b3de470 EFLAGS: 00010202 [ 153.837105][ T6974] RAX: 0000000000008000 RBX: 00007f9b3b3de530 RCX: 00007f9b32fbf000 [ 153.837123][ T6974] RDX: 00007f9b3b3de6d0 RSI: 0000000000000006 RDI: 00007f9b3b3de5d0 [ 153.837140][ T6974] RBP: 0000000000000102 R08: 0000000000000006 R09: 000000000000000d [ 153.837154][ T6974] R10: 000000000000001a R11: 00007f9b3b3de530 R12: 0000000000000001 [ 153.837167][ T6974] R13: 00007f9b3ca42980 R14: 0000000000000001 R15: 00007f9b3b3de5d0 [ 153.837214][ T6974] [ 153.837248][ T6974] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 153.852518][ T6966] gre0 speed is unknown, defaulting to 1000 [ 153.885406][ T6974] loop4: detected capacity change from 0 to 164 [ 154.043510][ T6974] rock: corrupted directory entry. extent=32 out of volume (nzones=32) [ 154.069219][ T6966] gre0 speed is unknown, defaulting to 1000 [ 154.107835][ T6966] gre0 speed is unknown, defaulting to 1000 [ 154.152866][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 154.152881][ T28] audit: type=1400 audit(1781486372.352:1281): avc: denied { write } for pid=6975 comm="syz.5.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.192485][ T28] audit: type=1400 audit(1781486372.352:1282): avc: denied { create } for pid=6975 comm="syz.5.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.228304][ T28] audit: type=1400 audit(1781486372.382:1283): avc: denied { setopt } for pid=6975 comm="syz.5.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.254928][ T6981] loop7: detected capacity change from 0 to 1024 [ 154.288745][ T6983] loop5: detected capacity change from 0 to 1024 [ 154.295527][ T28] audit: type=1400 audit(1781486372.382:1284): avc: denied { ioctl } for pid=6975 comm="syz.5.891" path="socket:[16895]" dev="sockfs" ino=16895 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.299428][ T6981] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 154.328868][ T6983] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.330953][ T6981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.375957][ T6983] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 154.387244][ T6983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 154.399771][ T6983] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.410867][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.419996][ T28] audit: type=1400 audit(1781486372.622:1285): avc: denied { write } for pid=6982 comm="syz.5.894" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.520863][ T7000] netlink: 'syz.6.901': attribute type 4 has an invalid length. [ 154.589555][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 154.707311][ T28] audit: type=1400 audit(1781486372.622:1286): avc: denied { write } for pid=6982 comm="syz.5.894" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.986614][ T7006] loop5: detected capacity change from 0 to 256 [ 154.990002][ T7007] netlink: 'syz.7.899': attribute type 4 has an invalid length. [ 155.033619][ T7009] netlink: 'syz.6.903': attribute type 21 has an invalid length. [ 155.050553][ T7009] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.062849][ T7009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.070252][ T7009] IPv6: NLM_F_CREATE should be set when creating new route [ 155.077721][ T7009] IPv6: NLM_F_CREATE should be set when creating new route [ 155.081756][ T7007] loop7: detected capacity change from 0 to 512 [ 155.085237][ T7009] IPv6: NLM_F_CREATE should be set when creating new route [ 155.087479][ T7012] netlink: 'syz.6.903': attribute type 21 has an invalid length. [ 155.109108][ T7012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.144599][ T7009] vlan2: entered promiscuous mode [ 155.150099][ T7009] bridge0: entered promiscuous mode [ 155.161572][ T7016] loop5: detected capacity change from 0 to 164 [ 155.183445][ T7009] netlink: 20 bytes leftover after parsing attributes in process `syz.6.903'. [ 155.184809][ T7007] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.207106][ T28] audit: type=1400 audit(1781486373.392:1287): avc: denied { ioctl } for pid=7008 comm="syz.6.903" path="socket:[16936]" dev="sockfs" ino=16936 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 155.315319][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.443290][ T28] audit: type=1400 audit(1781486373.642:1288): avc: denied { write } for pid=7019 comm="syz.4.905" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.471535][ T7034] loop4: detected capacity change from 0 to 512 [ 155.519832][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.909'. [ 155.531192][ T7034] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 155.558161][ T7034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 155.577095][ T7034] EXT4-fs (loop4): orphan cleanup on readonly fs [ 155.586660][ T7034] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.905: iget: bad i_size value: 12154761577498 [ 155.600977][ T7034] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 155.601217][ T7034] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.905: couldn't read orphan inode 13 (err -117) [ 155.610465][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 155.610487][ C1] EXT4-fs (loop4): initial error at time 1781486373: ext4_orphan_get:1397: inode 13 [ 155.610523][ C1] EXT4-fs (loop4): last error at time 1781486373: ext4_orphan_get:1397: inode 13 [ 155.648987][ T7034] loop4: lost filesystem error report for type 5 error -117 [ 155.649543][ T7034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 155.671550][ T7034] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.905: dx entry: limit 65535 != root limit 120 [ 155.684912][ T7034] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.905: Corrupt directory, running e2fsck is recommended [ 155.817016][ T7050] FAULT_INJECTION: forcing a failure. [ 155.817016][ T7050] name failslab, interval 1, probability 0, space 0, times 0 [ 155.829967][ T7050] CPU: 1 UID: 0 PID: 7050 Comm: syz.2.913 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 155.830079][ T7050] Tainted: [W]=WARN [ 155.830086][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.830099][ T7050] Call Trace: [ 155.830107][ T7050] [ 155.830114][ T7050] __dump_stack+0x1d/0x30 [ 155.830170][ T7050] dump_stack_lvl+0x95/0xd0 [ 155.830212][ T7050] dump_stack+0x15/0x1b [ 155.830286][ T7050] should_fail_ex+0x25e/0x270 [ 155.830330][ T7050] ? nfnetlink_rcv+0xa41/0x1740 [ 155.830466][ T7050] should_failslab+0x8c/0xb0 [ 155.830507][ T7050] __kmalloc_cache_noprof+0x5f/0x400 [ 155.830544][ T7050] nfnetlink_rcv+0xa41/0x1740 [ 155.830654][ T7050] netlink_unicast+0x5a7/0x680 [ 155.830824][ T7050] netlink_sendmsg+0x5be/0x6f0 [ 155.830863][ T7050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.830897][ T7050] ____sys_sendmsg+0x532/0x580 [ 155.830986][ T7050] ___sys_sendmsg+0x195/0x1e0 [ 155.831065][ T7050] __x64_sys_sendmsg+0xd4/0x160 [ 155.831096][ T7050] x64_sys_call+0x194c/0x3020 [ 155.831205][ T7050] do_syscall_64+0x136/0x3c0 [ 155.831243][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.831272][ T7050] RIP: 0033:0x7fa9364cce59 [ 155.831347][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.831370][ T7050] RSP: 002b:00007fa934f27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.831439][ T7050] RAX: ffffffffffffffda RBX: 00007fa936745fa0 RCX: 00007fa9364cce59 [ 155.831455][ T7050] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 155.831512][ T7050] RBP: 00007fa934f27090 R08: 0000000000000000 R09: 0000000000000000 [ 155.831525][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.831537][ T7050] R13: 00007fa936746038 R14: 00007fa936745fa0 R15: 00007ffe4de2cad8 [ 155.831556][ T7050] [ 156.149948][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.685569][ T7074] EXT4-fs error (device loop7): ext4_quota_enable:7221: comm syz.7.920: Bad quota inum: 1, type: 2 [ 156.736453][ T7074] loop7: lost filesystem error report for type 5 error -117 [ 156.736861][ T7074] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 156.780464][ T7059] gre0 speed is unknown, defaulting to 1000 [ 156.784810][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 156.792947][ C0] EXT4-fs (loop7): initial error at time 1781486374: ext4_quota_enable:7221 [ 156.801674][ C0] EXT4-fs (loop7): last error at time 1781486374: ext4_quota_enable:7221 [ 156.811439][ T7074] EXT4-fs (loop7): mount failed [ 156.894381][ T7071] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 156.923303][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.933640][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.126720][ T7085] netlink: 'syz.5.923': attribute type 4 has an invalid length. [ 157.220360][ T7091] FAULT_INJECTION: forcing a failure. [ 157.220360][ T7091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.265936][ T7091] CPU: 1 UID: 0 PID: 7091 Comm: syz.2.926 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 157.266041][ T7091] Tainted: [W]=WARN [ 157.266051][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.266176][ T7091] Call Trace: [ 157.266183][ T7091] [ 157.266191][ T7091] __dump_stack+0x1d/0x30 [ 157.266262][ T7091] dump_stack_lvl+0x95/0xd0 [ 157.266288][ T7091] dump_stack+0x15/0x1b [ 157.266309][ T7091] should_fail_ex+0x25e/0x270 [ 157.266344][ T7091] should_fail+0xb/0x20 [ 157.266390][ T7091] should_fail_usercopy+0x1a/0x20 [ 157.266443][ T7091] _copy_to_user+0x20/0xa0 [ 157.266474][ T7091] simple_read_from_buffer+0xb5/0x130 [ 157.266515][ T7091] proc_fail_nth_read+0x10e/0x150 [ 157.266608][ T7091] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.266636][ T7091] vfs_read+0x18e/0x7c0 [ 157.266720][ T7091] ? __rcu_read_unlock+0x4e/0x70 [ 157.266747][ T7091] ? __fget_files+0x184/0x1c0 [ 157.266774][ T7091] ? mutex_lock+0x57/0x90 [ 157.266805][ T7091] ksys_read+0xdc/0x1a0 [ 157.266843][ T7091] __x64_sys_read+0x40/0x50 [ 157.266874][ T7091] x64_sys_call+0x2886/0x3020 [ 157.266963][ T7091] do_syscall_64+0x136/0x3c0 [ 157.266996][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.267066][ T7091] RIP: 0033:0x7fa93648d68e [ 157.267088][ T7091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.267107][ T7091] RSP: 002b:00007fa934f26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.267231][ T7091] RAX: ffffffffffffffda RBX: 00007fa934f276c0 RCX: 00007fa93648d68e [ 157.267246][ T7091] RDX: 000000000000000f RSI: 00007fa934f270a0 RDI: 0000000000000005 [ 157.267316][ T7091] RBP: 00007fa934f27090 R08: 0000000000000000 R09: 0000000000000000 [ 157.267329][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.267341][ T7091] R13: 00007fa936746038 R14: 00007fa936745fa0 R15: 00007ffe4de2cad8 [ 157.267367][ T7091] [ 157.529778][ T7085] set_capacity_and_notify: 2 callbacks suppressed [ 157.529799][ T7085] loop5: detected capacity change from 0 to 512 [ 157.547814][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.930'. [ 157.559872][ T7100] loop7: detected capacity change from 0 to 512 [ 157.567700][ T7100] EXT4-fs: Mount option(s) incompatible with ext3 [ 157.579169][ T28] audit: type=1400 audit(1781486375.732:1289): avc: denied { bind } for pid=7099 comm="syz.7.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.651716][ T7085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.654982][ T28] audit: type=1400 audit(1781486375.732:1290): avc: denied { write } for pid=7099 comm="syz.7.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.862745][ T4103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.937955][ T7115] FAULT_INJECTION: forcing a failure. [ 157.937955][ T7115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.953338][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.5.934 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 157.953379][ T7115] Tainted: [W]=WARN [ 157.953386][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.953399][ T7115] Call Trace: [ 157.953429][ T7115] [ 157.953439][ T7115] __dump_stack+0x1d/0x30 [ 157.953470][ T7115] dump_stack_lvl+0x95/0xd0 [ 157.953493][ T7115] dump_stack+0x15/0x1b [ 157.953592][ T7115] should_fail_ex+0x25e/0x270 [ 157.953628][ T7115] should_fail+0xb/0x20 [ 157.953643][ T7115] should_fail_usercopy+0x1a/0x20 [ 157.953670][ T7115] _copy_from_iter+0xcc/0xe70 [ 157.953690][ T7115] ? kmem_cache_alloc_node_noprof+0x20a/0x450 [ 157.953776][ T7115] ? __alloc_skb+0x362/0x690 [ 157.953814][ T7115] ? __alloc_skb+0x4f6/0x690 [ 157.953837][ T7115] ? _copy_from_iter+0x13b/0xe70 [ 157.953866][ T7115] skb_copy_datagram_from_iter+0xad/0x480 [ 157.953901][ T7115] tun_get_user+0x8fc/0x2790 [ 157.953994][ T7115] ? _parse_integer+0x27/0x40 [ 157.954033][ T7115] ? ref_tracker_alloc+0x1eb/0x2f0 [ 157.954082][ T7115] tun_chr_write_iter+0x15a/0x210 [ 157.954126][ T7115] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 157.954215][ T7115] vfs_write+0x57d/0x9b0 [ 157.954258][ T7115] ksys_write+0xdc/0x1a0 [ 157.954297][ T7115] __x64_sys_write+0x40/0x50 [ 157.954411][ T7115] x64_sys_call+0x27e1/0x3020 [ 157.954492][ T7115] do_syscall_64+0x136/0x3c0 [ 157.954572][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.954601][ T7115] RIP: 0033:0x7fbb7c1cce59 [ 157.954648][ T7115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.954667][ T7115] RSP: 002b:00007fbb7ac27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 157.954689][ T7115] RAX: ffffffffffffffda RBX: 00007fbb7c445fa0 RCX: 00007fbb7c1cce59 [ 157.954707][ T7115] RDX: 000000000000006b RSI: 0000200000000280 RDI: 0000000000000003 [ 157.954724][ T7115] RBP: 00007fbb7ac27090 R08: 0000000000000000 R09: 0000000000000000 [ 157.954810][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.954836][ T7115] R13: 00007fbb7c446038 R14: 00007fbb7c445fa0 R15: 00007ffd8c9eaf58 [ 157.954860][ T7115] [ 158.288433][ T7127] ================================================================== [ 158.296569][ T7127] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 158.304057][ T7127] [ 158.306384][ T7127] write to 0xffff888105627800 of 8 bytes by task 7124 on cpu 1: [ 158.314030][ T7127] mas_wmb_replace+0x22e/0x1770 [ 158.318899][ T7127] mas_wr_store_entry+0x54a7/0x5a90 [ 158.324150][ T7127] mas_store_prealloc+0x421/0x670 [ 158.329203][ T7127] vma_complete+0x3c7/0x850 [ 158.333717][ T7127] __split_vma+0x5da/0x640 [ 158.338141][ T7127] vma_modify+0xbcc/0xc80 [ 158.342478][ T7127] vma_modify_flags+0x182/0x210 [ 158.347357][ T7127] mprotect_fixup+0x3a2/0x680 [ 158.352086][ T7127] do_mprotect_pkey+0x69e/0x950 [ 158.356976][ T7127] __x64_sys_mprotect+0x48/0x60 [ 158.361854][ T7127] x64_sys_call+0x2768/0x3020 [ 158.366676][ T7127] do_syscall_64+0x136/0x3c0 [ 158.371300][ T7127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.377218][ T7127] [ 158.379558][ T7127] read to 0xffff888105627800 of 8 bytes by task 7127 on cpu 0: [ 158.387120][ T7127] mtree_range_walk+0x35a/0x480 [ 158.392008][ T7127] mas_walk+0x1ac/0x340 [ 158.396188][ T7127] lock_vma_under_rcu+0xc9/0x210 [ 158.401166][ T7127] do_user_addr_fault+0x237/0x1060 [ 158.406308][ T7127] exc_page_fault+0x62/0xa0 [ 158.410838][ T7127] asm_exc_page_fault+0x26/0x30 [ 158.415706][ T7127] [ 158.418044][ T7127] value changed: 0xffff88810545bd01 -> 0xffff888105627800 [ 158.425162][ T7127] [ 158.427509][ T7127] Reported by Kernel Concurrency Sanitizer on: [ 158.433704][ T7127] CPU: 0 UID: 0 PID: 7127 Comm: syz.5.937 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 158.444578][ T7127] Tainted: [W]=WARN [ 158.448394][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.458727][ T7127] ==================================================================