last executing test programs: 7.052220247s ago: executing program 1 (id=936): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @short}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r6, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x40, r1, &(0x7f0000000040)="93a095a87746f8dc15148b8af5d50092d44366a29c2fd2b7524b99b2b23d373157f570d1dc03c79fce3161", 0x2b, 0x0, 0x0, 0x3}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x4, r2, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f00000001c0)="292f6bfd33dfbc95f119233a0368f0c98b39ef4345b95a72b521ac15723a1a2ac891b7e84e8db6ef2f3427e4729d4801bb5fa438aa62d09f98585f33c83b52a4ede1cad87a856ac03ead7862049772c43efbd4dc1c0239e11900b6c58bafb04c2a8227b56cca3c7861254d2b94d960eaf668be4c3205e543ccebfb694527", 0x7e, 0x2, 0x0, 0x0, r3}]) 6.733889527s ago: executing program 1 (id=938): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004010) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x28) 6.418764537s ago: executing program 1 (id=940): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40043, 0x8) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') unshare(0x40400) select(0x40, &(0x7f0000000040)={0x1, 0xf, 0x10001, 0x1, 0x4, 0x1, 0x3, 0x9}, 0x0, &(0x7f00000000c0)={0x9, 0x7ff, 0x9, 0xc, 0x10000, 0x3, 0x6, 0x3}, &(0x7f0000000100)={0x0, 0xea60}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0xfffffffc}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10) bind$tipc(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfff, 0x7}}, './file2\x00'}) creat(&(0x7f0000000040)='./file1\x00', 0x32) 6.366465699s ago: executing program 1 (id=941): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000804, &(0x7f0000000100), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x9, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x400000200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) modify_ldt$write(0x1, &(0x7f0000000300)={0x2, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x25181e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'nr0\x00'}) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600180000fe80000000000000000000000000001efe8000000000000000000000000000aaff0100000000000000010007080000000200080c00000000788145d0b125f1f205edb2994688f7814d00dce70f9e019eda8528d6b5ad5f724565fe91c147bf5961cfcde3297f432fd41ab2316f8d377e5771b6955ce214700378348ad19739"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000040)=0x6945, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004200)=@newtaction={0x48, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x8, 0x7ffc0001}]}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fstat(r4, &(0x7f0000000100)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x25e, 0x100000002, 0x0, 0xfff}) 6.193496425s ago: executing program 1 (id=943): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fa0cc001800000000000c00d359a88e50fbf18900000000000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00004063b85c0000000283000000000002000000", @ANYRES32=0x0, @ANYBLOB="01b10100000000000c001a8004001c0004"], 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, 0x0, 0xfebc) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x1a0, 0x2e8, 0x98, 0x1a0, 0x250, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @private=0xa010101, 0x0, 0xff, 'macvlan0\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x53}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="61e41727f52f04", 0x7}], 0x1}, 0x24008080) r5 = socket$kcm(0x11, 0x3, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="27030200590214000600002fb96dbc9b4ccb8edb9bbe55ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x6d}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 5.934142742s ago: executing program 1 (id=946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) 5.897173724s ago: executing program 32 (id=946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) 3.710208573s ago: executing program 2 (id=964): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0x100000a, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = dup(0xffffffffffffffff) file_setattr(r0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x80000103, 0x400, 0x72, 0x3, 0x8}, 0x18, 0x100) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x6}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @remote}, {0x306, @random="8a4263842a2b"}, 0x8, {0x2, 0x4e22, @local}, 'veth1_to_batadv\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = gettid() ptrace$pokeuser(0x6, r2, 0x4, 0xe714) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000810) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006d00fd0129bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="2740800080b0040004003580"], 0x24}, 0x1, 0x0, 0x0, 0x20004885}, 0x40d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) getgid() remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 3.641935746s ago: executing program 3 (id=965): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000001180)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000300)) keyctl$unlink(0x9, 0x0, r0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x185, 0x0}, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="94010000100001002dbd700000000000ff020000000000000000000000000001ac14140d0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x44050) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(0xffffffffffffffff) write$UHID_INPUT(r6, 0x0, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000340)={0x0, 0x1, 0x8, 0x17, 0x200, &(0x7f0000019900)="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"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xc}, 0x10, r1}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r8) fchown(r2, 0x0, r8) fsetxattr$system_posix_acl(r7, &(0x7f0000001080)='system.posix_acl_default\x00', &(0x7f00000010c0)=ANY=[@ANYBLOB="020000007f3358accb2782a262000000", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="040002000000000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="10000000000000002000040000000000"], 0x4c, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a"], 0x68}}, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x20000880) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff}, 0x80800) fcntl$setpipe(r10, 0x407, 0x176) r11 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000f80)={0x0, @in6={{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff0001}}, 0xde3d, 0x9, 0x5, 0x75f3b37b, 0x10, 0xb, 0x80}, &(0x7f0000001040)=0x9c) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.425092752s ago: executing program 2 (id=967): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) getrlimit(0x0, 0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000000), 0xc, &(0x7f0000000940)=[{&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000680)=""/71, 0x47}, {&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f0000000900)=""/32, 0x20}], 0x4, &(0x7f0000000c00)=[{0x88, 0x0, 0x0, ""/120}, {0x18, 0x0, 0x0, ""/1}, {0x30, 0x0, 0x0, ""/32}, {0x28, 0x0, 0x0, ""/17}, {0x30, 0x0, 0x0, ""/31}, {0xd8, 0x0, 0x0, ""/197}, {0x40, 0x0, 0x0, ""/45}, {0x88, 0x0, 0x0, ""/115}], 0x2c8, 0x40000000}, 0x38, 0x103) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x292, @tick=0x65757100, 0x3, {0x1, 0xfc}}) ioctl$OCFS2_IOC_RESVSP64(r5, 0x4030582a, &(0x7f00000004c0)={0x2, 0x1, 0x9, 0x4, 0xffffffff, 0x8}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x105083, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', r8, 0x7800, 0x7800, 0x8, 0x8, {{0x25, 0x4, 0x0, 0x34, 0x94, 0x65, 0x0, 0x9, 0x29, 0x0, @remote, @multicast1, {[@generic={0x86, 0xb, "c984a5a8499f6cf528"}, @lsrr={0x83, 0x13, 0x94, [@loopback, @remote, @multicast2, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x68, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0xf9}, {@local, 0x100}]}, @rr={0x7, 0x7, 0x81, [@multicast1]}, @lsrr={0x83, 0x7, 0xe6, [@multicast1]}, @cipso={0x86, 0xe, 0x2, [{0x0, 0x8, "7a5c846241c5"}]}, @lsrr={0x83, 0x17, 0x97, [@multicast1, @rand_addr=0x64010100, @rand_addr=0x64010102, @remote, @empty]}]}}}}}) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) write$tun(r10, &(0x7f0000000b80)={@val={0x0, 0x6558}, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x2c, 0x6, 0x0, @empty, @mcast2, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x58) 2.169792192s ago: executing program 3 (id=970): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb8, &(0x7f0000000c00)="$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") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 2.098013214s ago: executing program 0 (id=971): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004010) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x28) 1.983030338s ago: executing program 0 (id=972): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9d", 0x2f}], 0x1}}], 0x1, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000a00)={0x126c, 0x14, 0x200, 0x70bd2b, 0x25dfdbfb, {0x6, 0x37}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "38078b7a38f311f2b2efa4779678a12d6318d3b2d75f1aad684107296e819f214735fd4f0ae6c9349c659c48477e1eac78482900687cad05b0dd358a422a4d7e01484bb8d6e7deb2d72e9392b52388700f1571b58ce93f691e86a5d50abcc440f9585b791330cf360d8771c548f6d6a56002330f694053c4253e86bb225f4ef486d5bed0a78780dbb9b62958793c7f8706725d2a5048bb9fb3ff1ec81d53966e9fb87b74096eac1d026c85871148d06d00ed8542aff9f62a95edb346af553f4225022a7586e4bb67c46b4f05ac49bef2d6b8108c97a602c54818e84c796a3b16ffe823652b3b6da2d0c1f87635bdacb0ad2166ba58295fe33cd39c1d546796a43019228fa1bd69fec0ab38c0ec4ba8780e1dee68b887728770f82594607214ee584bf5ac1907dc847a58bdc63211db11007f3ea5dbf1db26d8e5a1b9490b32ba473c6696b189c5aa544c9b55b547e8cf604b3cd72a4acab9106edb733a9f046a69dbe8046da8bc336821e38190eb212557c9afbe72dd77573ec26d0ab99b4c4d93bbad1ef511699a4ef7f865e4d00a22239d6e12f0a13094bca6add9f534f2cc9b33e22e14b90bc41fcacc20c4550f3d1f55e59b2389121ee75c3d520e81c35a7410e33eb2f0db21a7a5e3a92ea12edfde438d2c5907a0b2367e6d452c898686fa8a01105ca57bc340e3ee482a53fca1a28ef01516e4e123800ec4f59055c776961f01fbe777dd9d1766bf7df733f5e0b9513b9bac77f44300dbcd726a07495e03f40a3418ecefd1baf26c9c6411a157d995a4e810600dfcfb4c3621536cdbb0cfbda4026b0cdf106eefc2bb6646b1f8d80cdc3ae01504e4900e40277e61e221d7ecc575ca3c3c7ca8b5e571ecdccd68823d8ec06388552475704a51032f0d695b5519b9a43b1213bdda0ab589d747c496bdbb159aa317197783823b90314e0b6b6f5645face5307c34f3863fd7da501e10ce86f175423294bc49fd7dd899508957acef9ccf2c020a559228549e426235ca7204d7f06b5015f2e6105087c95b5b59d1335b4d9e25a695fd6e781ab108cf957b4515817452fc25fab0b9bc0c29c5a1d03fa83c202e4900696d53e61c2c7631b62b1f4dda1738acbad6fd336751ae2e4c7c18068dfb8af4fe179bc29f91f171480a2db1ab137eaa33ee5069f28a13ffdfacf237e02ddbdf4c26cdfff1c89d23678fd2ccbef1ce30a0c1722fceae211fa9b7df84a13c490c9cf2d7327d9f03ec5557dfc3dc3ad75ce4a46e300cb25b377e9a8c8400cd07d32367c62de410ee999fbf4ab7f62ebf95e9453c0bc928f01fc536d9e604d6b6613d937837900af56a746818fc58864759ec3730302e80eddca115617d4878b4b2f462fc3feafedd2443941d74449fee21364db209532badf0ac5165ee8a004f9589345d6129eb95323af04d6e46e9e001739cb1c7477acc0db85c80b63dc65f98f7f6f61abfee1f140b9268496e1e940ce58a45601bc37d8475a15a2d0ff49196d75db110116535d701120c8211a15371d950e0343aff3a91825dd4856def21bd8ec69390240ca2f301310b405a283ec81ea53c1a776b2a9d4325f740a680782a388044a18dca4344d9648f4ed8e14a05e3c3934bc85dde449fa6d6aec0e7e9fe16bae578558a4bb575ffa09d63c071cb45489e83e8f11cb8e9c66018b90d1dabb1afa9a72b46a9bdd373482a245de79a63b5899659ad79b1c1d11bdcc42311a5b0faf4fd06a6a4c6c8b74de6df9fdfc9580495fd0680a42ecfede7dea5706d9edc8edb36859c8779a1f60b9750218877c932376251e0a29a968aad32aec31ee397b3649c17559b8a84a9d1d2f8d282998665df8f6b3935cc039851844b687426254a2897d2519def894da1b57d25e777a737d57a6b7cbf071a5c5faab7b84750d0417b914cfa84b5d6a7ef48d85a051c6e3872afb9e9be7322b97d3b6ea3289825628b4846edace0b85273d167df3d330135c3bbf32bf89fb0e16b0d3a63d6381d7f8622edb9df265ebd5871b24f821dec7714e7f2797a2b62783780bb3fafbde20348905c76147448bc832f1a774dce7d23df78554c665375b307e9667d5a749d3ae7f7255d89df09a194e817ab70064a1f3b01af61ee2351554b4ea3d762f3212e328a0de51a43de1a95ee0d551656d4189a945f75bc5cb08bec007e1682c61b4169c77d475b26f2af86f5b8f62cfb2ac7e3831d05324caff6271a5bbd95770c82a5ca7e386d8960111c96243999aa63e7537bb370423a40ef3c2bc5bcbb70bc04990f6600aefa0757caa684a7b9baed9218b31c08f84d02676e1d1f27f2fd136453328dd90dba059af2db5a02b01e226ad2970bb4621292028f83c5f9661480b245d511390309a1cd737cbe9dd5af990db3c122284b61742332b650e3fd10d4701748f4956c8b5c7dc891a8e9f7be531e2db00b870357aa300d29bf92a1764ec1d55d42a8813fb7f501d0daa0733e382086a05503a21975d04055dff1a996b13f97908bfb27641301e2af1f25a2a84bbfb22b8b1aadf41a4e235eeb1af0c7f68dbfb5eb09339fdff8a6105e55b0e67ba4d7c374e6f92cf81e8c4b18ca9bedf62fb4fa39b1cc0af3eddd06aa2b76ed7b927fac4b22672d6747ffb21691c866294f1de9184af9f4304c769c4d5e3474b2e376eaf0089b4584b48a6979a39b416e522e2018b7938cf6e43a56ff91c18962e2f3be6bc3a51152671f4e33ce38e5684b02b4f899a3eb6033c80ca9ad711d4c663cb151d0401d6601682b24f5eeb5f1149ef0bbb6de2219537c1b1065f05b49571fd132a3189f34c9b93734d1722d20ee66749da877cbba1e016508ecc5b2bc027dc8794b38422112f24c34a0e890bdce53746a342a00d6ce520295621f860dc6179a1a061689dc5a82addebed384bb84500e919f9ee6b09d6d4dd638d97dfbd6061502515ca942d7e20c8db8ca4e21639bfd20fec602ce9d06a3f688d0e60d3121646c17d52d603f3c80ee1d2e981bbe2c7d91657635380d35fd072cf8ac7eb3d36d6ec497aa701c5cf4a2d0145fb61cbae4324b3f9df50baa435fa6aeb61951e54b355af433732e0e96048508ce0c08bd71f6d94d05327efd4377dd68acccbbb6b6253ad3e4da9c6f9dc9552e2d11e56592b1f0da477520b7fcd2eea0dc4809c7baf9b403e08977709b33136313cfac899daa406d1e2a27950339e4ef9488038572390fcb09de4991d76e7ef14664f1e79ef18c44ea0f949fa0da1a40719e618f859ca595ae341984b2e69272f3f6151f0c3f76817307a4ec3b87d66d36a2e9345b95a4f73926bdc71cd087bf183fd12348bd8391049e54b8bcbcf0f7027eb813f100c3183be30ef2d695a02f821594d1bd5f837bf82f42de4ba680c56a57ddd9a7984f5980836b6c110807f4ff3a3e79be66925477a3162cbb4a63c69ff48de02fdb3b6827ac7156c31dfb84a4e5de4c1f0cf155f8115024b8b18b7284607bb4f8945e06b45d222113d5403391ebdaa4def11f2f04315138bcfc0dd9d11088d065ab4d365f0c0f9a21a06e300f2e7639d0628d40fac4c3de702d049cc606b35af5615f51bf854965d8c172ca47ef8ab87e0bdcfb2b4da6463b84ef8c4daca1a3396f3199baeb67cfc4a6c8c041863d624b3c6ac7af01b024a528e6edcc4b15e641bf4815b63cc0dc210d09f39e25095dc1f40d60b1573822d009963a6b2aad99ac93f5c5b2279090fd6d9591b4c0d22c7e352ad3ff0a35018838b5362d583d3eebb3761d5852b1e0bcfa8a0570eea7ec7b4727361a2df0b93259d175f0c530437c1fc34ba75f9522aa7404b1e7f3908b012e913e36b4a3155d5beed181e61732a826e21eb6275dd102c5d0139e429cf9565e1a934ec1831f3840ddecb245cf4803a398c99f109e45eb8d105d8ffdcb7d12b0daeb2b5aa642f9c84f24595113b16f3b66c0c418c359e30535d298deb42551deae64843e828cedb63a1f9703a640dda8dfc1c5c7bd341f90a30c9e331234653a49891eeb936492b34795084b5de85c0f304b5126824b67c88bfabd68d4b390821c664fedd1c41605fcae8b91aa7b86d1bf174efae90f814f0aec9f5d023c9b28d8dfc556b7417b07be0730265057b913cad908089ef7f81abba93c4267496e6244e914fd4eed789367c0b86a12f372104e506cc7e51d89ba08f9b5c1e889010fa0c7e9fc0851dfab6b07209007918bd446dd2135a789bafd7b60f716b7c4822ba2da4e09059977938b4a6b6c1c4481a5b79b16aa2da4274045cd16e0cf8dbea608106cb54d49804f43a0521dddfb484e28f287acb16950f55ce41a27ad22be50815ee2244d7c1b6e77ca331493acc9afd562b1b65f96622de9cc0b61a87541fcd7e40327006a301d6a741d271387efb26098851e75c50500e346c38e753e5ae9503b102504f2786c55420160c3da14efd3cbeb8953ba9588d0448e165a188763ccea64e541248460db589931004babccc293cb3d167be833d7ff9d6d889b9423eb69dab83d4410df0877f44228a8f8a677fb25d5c96ffa729705e5c1c7e4f77f80ffb794eac5172fe46414536b951cf6c552ff8a9d05bf754d2fd7f2bc85c6b6a835e766473fb2702398b93445a387f838fb3d0ff9c293f1a90c291348878bb8dbc1b917635ffe08c6468247243b9d71e1af6001e7f7cd95013ba3f2a8df19e98c5fb73ac20ec53fc6deda215a4559907f47863ff55031fb82060cd01dfa0ad443142444d597e7301a9c01caa9bc18dab676f4916cebf7407afa61e8942638ba9d9bf33b617f8d54354ca7d73fd469c1aa2453d37ef807be3efe20b59615a8c35467fa6e163160cf986748246737c1672592b2122960c5377d798bbb757575f555d17f5ea1b93f3fd8e03afb55e4aad46f4c906cf3950c9cd9b5d0d8f5b93b051cb7d907a9df75e71112a7804d5ec6b686cffa90a47c04221c83c1269ff6bdf5d69ab9a6cc081d6d8c7d46285a7599819fa03e865e4f5a6e295fdb207db405dce15de87bed72560bb251764c16caa7da193899ae24fd09f6f27c187ad0253b3e49cbab7853c79328ac21cbbb8424b350c6ad955eb47d0c30a0cdf581f5ec70fc7acd509bd97ce3cd35fd7229149f9fb27f69ce51e8fcd83d0d217cd148686210fb233c41eafd3b3af0dd084fe3ec7451bd2548b4a4b264ea384f644509fe34fb108c48914f8a667f787202b4626fc57e26162e5a04786f5a8b93d8f0a9a924a95b38b9b28c597e2fab9a90af336527e68ddaefe513a6ba1286ac6eb029a0cdfb0f7f61956f7c0161eedb2694a30aa91ed108413cb23f68463baf38f198c4b283a0eba54bc538ecdf7ab5c4c1724bc3708991d7c022b44be55d19dacec3ee9984fb7a687bda7f1e62e61d9203d9666a8dc80733b1dbe7e4ed11a8133e310e3a28c9c0dd74634c1cfe6b16df740fed2c00913946488e133ce058742488315aeb5b96be03dc9e76fd2fd95a024b258dd4b9e7b7cd5a5e6d6e8cd96f00caa090586b84287121a1e6f59e738f78a10cd5da43c05b252439a8823c66a4cfa11efdc5f0a174500ab369f23bb90260be9a538eb432a6cc3de18185e885855210be6d4418825a5af3f1fbb879f69d6e82bcc283eb104fca16ae73a9f92a1d8334d56c1fb58281064154a0faef6f2e839e848362781f5352e08d672a40500f80ccba5bce0d76db76576e22fef0bd83d390395a3be826630dceac8a606a4906613a46e8311951f8f0897951f424c5980520a36ec2f8d18bd75c00e71bf828b6f697cd047b7745a10edd9151df060fb928608cf7c4c0e8c"}, @INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "9722c4d7f7acdd2f2ab4ad012409b70b95d9eac8efddadc7b0bc534522be8e5167fb48a7fff3b5ac607d023bacca47920ee4fab1785486a61941dc6a61ebbedf80a9c0a48d64814141f7bd388ebdcd12e6e326043d5c25e9c9e36c31487bf9a92f9ae94569b0b500971933295aad55ebbd607ae66b04e2fb37240ac43e0ca28b5ab736ea6eb1ee37f0e5c91b513e9ae9ac6325d671149bddceacb35ab03c98b333ec3738d9cc98e830457f4a27ae3e6a2b252c3e32c7fc9f41395257adfdd7d7a9496847d395e038710d0258a282aba1bf4e9a594af6edecee441ee043033747ac1244"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "8431136d81248fac34f5ba99276134c7f86ddc11cf9980ab538bac1354f8b65bc9e1026baed56d"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "e4e5c84831b02d69c70ddd3286d607d876fd7e564410ed13a4bcb3411b853e659b922cd4b820f92b1918ad9017dec25cf713422619239e23baa490eea001a35f258a54d65b4519c28bd29a292ba919ec12de54a9213618b74ef63fcfbf9c9e47fb537b14eed81031962281ae6c25f0708b9a3ebf3725e2ae668ac4524146b7cb562a3da3370cb6d9616154f95e37c54d73a6f413ac5f914f5f544459f720de12b8dc129c095e623f0dc6c280473725070885c5"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "76417f319314fbd3923d6eaf6c40dc223d429781e7b00bf24515ffa8332b53b22d3a944c2dcc243f98935cb23aeadf252990a540c15f560739a17e5ee4be41bfa558e88d8e42b6137a1c8ca5cbcb11b47afdf407134a7fc479055750c9454cab13665e85910df30804163ccc051f5ed2264822ab9755851c10ec3dc29135171c7a143f16"}]}, 0x126c}, 0x1, 0x0, 0x0, 0xc000}, 0x8810) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="75016a009cdc58"], 0xdd12}, {&(0x7f00000002c0)={0x10, 0x12, 0x2, 0x70bd27, 0x25dfdbfd}, 0x10}], 0x2, 0x0, 0x0, 0x200488c7}, 0x4048820) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 1.975816758s ago: executing program 3 (id=973): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fa0cc001800000000000c00d359a88e50fbf18900000000000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00004063b85c0000000283000000000002000000", @ANYRES32=0x0, @ANYBLOB="01b10100000000000c001a8004001c0004"], 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, 0x0, 0xfebc) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x1a0, 0x2e8, 0x98, 0x1a0, 0x250, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @private=0xa010101, 0x0, 0xff, 'macvlan0\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x53}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="61e41727f52f04", 0x7}], 0x1}, 0x24008080) setitimer(0x1, &(0x7f0000000000)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="27030200590214000600002fb96dbc9b4ccb8edb9bbe55ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x6d}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 1.971906568s ago: executing program 0 (id=974): pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') splice(r1, 0x0, r0, 0x0, 0x401, 0xc) preadv(r1, &(0x7f0000002440)=[{&(0x7f0000000140)=""/210, 0xd2}], 0x1, 0xa, 0x40) 1.92257529s ago: executing program 0 (id=975): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x3026, 0x32, 0x43a1bd56, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xdc9b, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1.61557211s ago: executing program 2 (id=977): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000006c0)=r0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000400)="2ae0e7", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000008b99941ccf443a510000000000000000009160e1de6dc5f63e148e58ce08a9f22dc438640eca5391d7cf3c5a1e1b570ad49eb658ac3f0614bd13f64f88dce8359f393b3a61f6f932894c8b781de9bfdb257e453543e55e527698a40e64e1eea47ef894343e50f46b65e114e4f1efb3a6fbae0c02f0913a4f834736994516ae60381a01b67d14bec7690c16bc9e28f484319a"], 0x50) rt_sigpending(&(0x7f0000000680), 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x84400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x3f7, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000b40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000780)={0x34c, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ee7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbc9}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x71c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1d89e28c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x94}]}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdea}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x914}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x748}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @loopback, 0x3e1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff86}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x40}, 0x100) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x84, 0x0, 0x0, 0x6}], "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"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.615372859s ago: executing program 5 (id=947): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0x100000a, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = dup(0xffffffffffffffff) file_setattr(r0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x80000103, 0x400, 0x72, 0x3, 0x8}, 0x18, 0x100) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x6}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @remote}, {0x306, @random="8a4263842a2b"}, 0x8, {0x2, 0x4e22, @local}, 'veth1_to_batadv\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = gettid() ptrace$pokeuser(0x6, r2, 0x4, 0xe714) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000810) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006d00fd0129bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="2740800080b0040004003580"], 0x24}, 0x1, 0x0, 0x0, 0x20004885}, 0x40d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) getgid() remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 1.611365119s ago: executing program 0 (id=978): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0), 0x0, 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="d9ea693249ca0180c200eb000186dd61fbddf000083afffe8000004400000000000000000000aaff0200000000000000000000000000058100907800020004749d51fcf421c5bb600eb4cdbad56f875e6c6dcf3a2a5599fe011471b5fd0d6c2677de3338939da29509733437efa293f142b1c943c9960ad5454f4f0e506098e8350b330b8732ddfcb1a27cbf8bc7e4b97160bdb5cc5d70f71cf3144dc91d46be5a99644d7ec87a03ef1193c0d2acbcacb141229831408f0da3143d2e6d7201000000010000008ec84818f839f211727b00"/219], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="84000000000000006c1ecdc9bf49c16124a089ef35595cc921bdf05211992ab0a10b80dcebf12c41262524ca308ae9fd381237c4b3cbb431591ae1ec094628"], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f00000002c0)=0xa4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x11c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_USERDATA={0x92, 0x7, 0x1, 0x0, "a81eb2c394fca8ccc1c8f1add61f7c34f5947765ada15c68072166140f0bc40d9b2b84055c677c441cd5564a6384c823e87a1bf9581c5ff90f84e979a3ab4c2e5ceae1cb545f61188cb0b0d745196c6cca3af763137666f5da98f8f8e12282a548b520f5791f48819e1b9bf9d64d3457b9dc02b132ddb2783171e155018c37fda94063f3143dcc3ad35ba4636ee3"}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x14}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1a8}}, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x5351}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) keyctl$chown(0x4, 0x0, 0xee01, 0x0) listen(r7, 0x6f6) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x854}, 0x880) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) sendto(r5, &(0x7f0000000480)="6cf2780e007d71cf66c00f8d2b25e6f64194885dd5821af3412b5c0d70ecbe37ea96379cee9ca285a1fb0ea448d68ee24ca7f874c6fead3c81368ae7093a886399ec45f50dc1df3c070a72bb75e69409e01ebc495ae87da486b6d59d3ed7ffc43f5ff1a1e0d96d7fb660c5edbfce197ee5e82657901fd205c6bc09c437fcff390592625162e91ea9f13fe316f8a4d4868477ce73e73ebd6ce6637307e03886b1cea8e1f6ce0507935cf626f97445886111db4458d4c88a874bb4db05980bc7cd04da049f69a41fa191013d8d74e860a28d67b9e58a825c900dd2c17dc87e45", 0xdf, 0x4800, &(0x7f00000005c0)=@nfc={0x27, r9, 0x0, 0x1}, 0x80) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@newlink={0xa0, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49308}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x5}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40ffff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5e6a6330}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x204}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc07, 0xa39}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x83c}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.452459755s ago: executing program 0 (id=980): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setresuid(0xee01, 0x0, 0x0) getegid() write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4e, 0x2, {0x3, 0x6, 0x80}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c840) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) close(0x3) 1.430624996s ago: executing program 5 (id=981): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) epoll_create1(0x0) unshare(0x22020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f00000001c0)="1e", 0x0, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000380)='v', &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}]}, 0x18, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x12a) write$UHID_CREATE(r7, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0xf5, 0x0, 0x8, 0x4}}, 0x120) 1.313950339s ago: executing program 3 (id=983): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x20044045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[], 0xd4}}, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x6, 0xf2}, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000100)='U', 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x20004080) readahead(r0, 0xfffffffffffffff1, 0x77) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000007f40)={'syztnl1\x00', &(0x7f0000007ec0)={'ip6_vti0\x00', 0x0, 0x2b, 0x40, 0xc, 0x4d, 0x1a, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0x80, 0xe, 0x8bb}}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000200)={0x2, {0x2, 0x2, 0xfeff, 0x3, 0x9d94, 0xf}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 1.260633451s ago: executing program 4 (id=984): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x20, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x10, &(0x7f00000001c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.154000584s ago: executing program 3 (id=985): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r6, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8}) openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b00), 0x2402, 0x0) ioctl$PTP_PIN_SETFUNC2(r7, 0xc4c03d12, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.121343095s ago: executing program 4 (id=986): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = open(&(0x7f0000000140)='./bus\x00', 0x10927e, 0x65) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000004040)=[{0x0, 0x0, 0xc53, 0x4}], 0x0) 1.097164866s ago: executing program 4 (id=987): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206030000000000000000000000000014000780080012400000000005001500020000000500010006000000050005"], 0x4c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0) statx(r2, &(0x7f0000000300)='./file1/file0\x00', 0x0, 0x4, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@filename='./file1\x00', r4, &(0x7f0000000280)={0x4, 0x746, 0x6, 0x8, 0x1, 0x6, 0x20000000ffe, 0xf64, 0xffeffffc}) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80282, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x2, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) (async) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (async) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x8, 0x9, 0x0, 0xffffff83, 0x0}) (async) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$binfmt_script(r5, &(0x7f0000000bc0)={'#! ', '', [], 0xa, "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"}, 0x120) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) (async) mknod$loop(&(0x7f0000000400)='./file1/file0\x00', 0x2000, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900"], 0xa4}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6f6e, 0xd0c, 0x2, 0x4000c, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x5, 0x7, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001c110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000080037b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d4}, 0x94) 761.607326ms ago: executing program 4 (id=988): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = open(&(0x7f0000000140)='./bus\x00', 0x14927e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000004040)=[{0x0, 0x0, 0xc53, 0x4}], 0x0) 738.524197ms ago: executing program 2 (id=989): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$eJzs3M9uG0UYAPBvN/9I0tZB4oAKh0ggCAKSOhCgCInCGU7AA0RJWircpmqMREsOBXHixAFx49BX4AGqCiEh8Qq8AKpUoTQXbkZr7zpOHCd2Y8dJ+/tJI8/sjj3zeZ3VzGZ3AnhqzUbEpYgYiYjFiCjl29M8xZ1Gyuo92tpc2d7aXEmiVvvs3ySSfFvxWUn+Op0X5tKI9IeIF+60t7tx6/ZXy5XK2s28vFC9dmNh49btN69eW76ydmXtevndi+Xy0uJ75bf7FusvL792ceTjS+d//bt0f2l8fDLr75l8X2scPZnuvGs2ZpvfyV5Lj9XYyTU+7A4AANCVNB/7j9bH/6UYqecaSrGwOdTOAQAAAH1R+zB/BQAAAJ5gibk/AAAAPOGK+wAebW2uFGmItyMcu4cfRcTMzrPN2834R+OZvM7YAJ9vnY2IG68kpSzFUZ5DBgDo0v1s/HNhv/FfGs+31JuIqI+HJvvc/uyecvv4J33Q5yZ3ycZ/H0TEdtv4Ly2qzIzkpbP1oeJYcvlqZe1CRJyLiLkYm8jK5Q6fX+u0AEwui/+P5Oy5ImXtZ687NdIHoxO737O6XF1+/Ih3e/hdxPnR/eJPmuPfLISpI7Qx8u3d9zvtOzz+wardjXh13+O/c+CSg9cnWqj/HhaKX0W7/77/7dNO7Q87/uz4Tx0c/0zSul7TRu9t3Pvyrxc77Wud//Ty+x9PPq/ni3nZN8vV6s1yxHjySfv2xZ33FuWifhb/3Ev7//0X578kX+bpTH4O6NWPP/3+RjfxZylrv5gLHocs/tWejn/vmXfu/flFp/YPjz87/o01wObyLd2c/7rt4FG+OwAAADgt0vp1jSSdb+bTdH6+cb3juZhKK+sb1dcvr399fbVx/WMmxtLiSlep5XpoufFv9GZ5cU/5rYh4NiJ+Lk3Wy/Mr65XVYQcPAAAAT4npDvP/zD/HdhcCAAAAMHAzB+9Oj6sfAAAAwOAcMv8HAAAATrejrOvXlkn69DkDzoydjG7IyJzgzLDPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfb/wEAAP//TtW0Wg==") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0x100000a, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = dup(0xffffffffffffffff) file_setattr(r0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x80000103, 0x400, 0x72, 0x3, 0x8}, 0x18, 0x100) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x6}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @remote}, {0x306, @random="8a4263842a2b"}, 0x8, {0x2, 0x4e22, @local}, 'veth1_to_batadv\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = gettid() ptrace$pokeuser(0x6, r2, 0x4, 0xe714) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000810) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006d00fd0129bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="2740800080b0040004003580"], 0x24}, 0x1, 0x0, 0x0, 0x20004885}, 0x40d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) getgid() remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 434.563577ms ago: executing program 3 (id=990): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setresuid(0xee01, 0x0, 0x0) getegid() write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4e, 0x2, {0x3, 0x6, 0x80}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c840) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) close(0x3) 434.161787ms ago: executing program 4 (id=991): r0 = syz_clone(0xa1302400, 0x0, 0x57, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) writev(0xffffffffffffffff, &(0x7f0000000780), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000008c0)="a905000000007464000100000000ae5774ee54bbda4c1a986374cf1ea1a6aefe6a5c90db", 0x2c}], 0x1}}], 0x1, 0x24004044) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140102000032e9cb4578000000000001a1014f3833e38ac6cb9a5e46a66cea39e7dea68dfc2465efb5b40a1f2f8d7740bf7b54a72b8d0448b078a073a9ea0b80be0bc6b487d6d28599565672e231421d60dca2f47dd03646bdb2725a3a726020d78a4a8fe0ecbed19fb54c136f14949ef6d6525f42512efab4c6dd8a27164f5c75a662a7f3cca2a94dea1079f90f6cc9884415c184cb2eab9fedaa59444c54564711e5635d6989eb5c7186e28416d06700"/186], 0x14}, 0x1, 0x0, 0x0, 0x40030}, 0x20000000) r6 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000500)="9b7385220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553a187d0", 0x30}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000140)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1}) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000200)=0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x188c8ca, &(0x7f00000002c0)=ANY=[@ANYRES8=r6, @ANYRESHEX, @ANYRES8=r1], 0x0, 0x2c5, &(0x7f0000000f00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x33, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 344.393859ms ago: executing program 2 (id=992): perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x9) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) fsmount(0xffffffffffffffff, 0x0, 0xf) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) madvise(&(0x7f0000951000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mlockall(0x7) (async, rerun: 32) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000000)) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) (async, rerun: 64) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) (async, rerun: 64) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21081e, &(0x7f0000000180)={[{@noinit_itable}, {@nogrpid}, {@quota}, {@nobh}], [{@euid_gt}]}, 0x80, 0x51b, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WufHtqtqD1BOCKFKiB5B2obEG0Wx4yh2ShP2sD1zRaISJzjyB3DuiTsXBDcu5YDEjwjUICExaMbj1Ju1s9FmY2fjz0cazXvzHH+/L9bMi1/seQGMrWsR8SAiJiPivYiYK44nxRZvd7bscZ8e3F89PLi/mkSavvuPJG/PjkXPz2SuFs9ZiYgffCfix8mjcVt7+5sr9Xptp6gvtBvbC629/ZsbjZX12nptK/vh24tv3Xpz+an19ZXGZFH68ie/f/CNn2ZpzRZHevvxJJJOl/sdj4jyUZzMRER87yzBLpArRX8mR50IT6QUES9GxKv5+T8XV/JXEwC4zNJ0LtK53joAcNmV8jmwpFQt5gJmo1SqVjtzeC/FTKnebLVv3Gvubq11/kyYj3Lp3ka9tljMFc5HOcnqS3n5s/pypz7Vrd+KiBci4udT03m9utqsr43yDx8AGGNXj43//57qjP8AwCVXGXUCAMDQGf8BYPwY/wFg/Bj/AWD8dMb/6VGnAQAM0Ynv/90PCAAuJfP/ADBWvv/OO9mWHhb3v157f293s/n+zbVaa7Pa2F2trjZ3tqvrzeZ6fs+exuOer95sbi+9EbsfzH9zu9VeaO3t3200d7fad/P7et+tlfNH9b1VNgAwJC+88vGfkmxEvjOdb9GzlkN5pJkB56006gSAkbky6gSAkTnTp3sqPhsEz7IzvMc3PQCXRJ8leh9S6fcFoTRN007pf+k55QWcn+tfMP8P46pn/t+ngGHMmP+H8WUGH8ZXmianXfM/TvtAAOBiM8cPDPj//4vF/jfFPwd+tHb8ER+dZ1YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXXX/60Wa4HPRqlUrUY8FxHzUU7ubdRrixHxfET8cao8ldWXRpwzAHBWpb8mxfpf1+den32o6eWrR8XJiPjJL9/9xQcr7fbOHyImk39OdY+3PyqOLw8/ewDgZNl7/e44ne973sh/enB/tbsNM6e/fTsiKp34hweTcXgUfyIm8n0lyhEx86+kqHckPXMXZ/Hgw4j4fL/+JzGbz4F0Vj49Hj+L/dxQ45ceil/K2zr77HfxuaeQC4ybj7Prz9v9zr9SXMv3/c//Sn6FOrvi+pc91ephfg38LH73+ndlwPXv2mljvPG773ZK04+2fRjxxYmIbuzDnutPN34yIP7rp4z/5y+9/OqgtvRXEdfjTt/4vbEW2o3thdbe/s2Nxsp6bb22tbx8e+n24lu33lxeyOeoFwaPBn+/c+P5QW1Z/2eif/8rj+n/V0/Z/1//970ffuWE+F9/rV/8Urx0QvxsTPzaKeOvzPy2Mqgti782oP+Pe/1vnDL+J3/Zf2TZcABgdFp7+5sr9Xpt51kvzJY7Hboo+SicRyF7hS9AGn0L3xpWrMno3/Sz1zqnwLGmNH2iWIOuGE9j1g24CI5O+oj4z6iTAQAAAAAAAAAAAAAA+hrGN5ZG3UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAur/8HAAD//5enzt4=") 237.020883ms ago: executing program 2 (id=993): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fa0cc001800000000000c00d359a88e50fbf18900000000000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00004063b85c0000000283000000000002000000", @ANYRES32=0x0, @ANYBLOB="01b10100000000000c001a8004001c0004"], 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, 0x0, 0xfebc) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x1a0, 0x2e8, 0x98, 0x1a0, 0x250, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @private=0xa010101, 0x0, 0xff, 'macvlan0\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x53}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="61e41727f52f04", 0x7}], 0x1}, 0x24008080) setitimer(0x1, &(0x7f0000000000)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="27030200590214000600002fb96dbc9b4ccb8edb9bbe55ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x6d}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3}, 0x0) 235.097543ms ago: executing program 5 (id=994): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x400002) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x4, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x6, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x3, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x0, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb910, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x3, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8009, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0x0, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0xffffffff, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x2, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x46, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe8ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0x800f, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x4179, &(0x7f0000000180)={0x0, 0xfe74, 0x10000, 0x3, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xb3f3b000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) 0s ago: executing program 4 (id=995): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb8, &(0x7f0000000c00)="$eJzs3M1rHGUYAPBnJpvv2KQiaotgQKqiuE2bUqGn1rOooAePjcmmhGw/TCKY0ENa7+pBxENB+icI3u3Fk+ChHrT+BUUsUvTS9rAy+5Fsu9ltTDYZk/5+8Gbed97JPs+TyWbegZ0E8MQaz76kEYci4mwSMVrfn0ZEX7U3ELFaO+7+3cvTWUuiUnn/rySSiLh39/J047WS+na4PhiIiJtvJfH0Z61xF5dX5qfK5dJCfXx06fylo4vLK2/MnZ86VzpXunBi8s0TkycnJ7tY6+1LH33zwi/vvHz1+ucT73594KckTsdIfa65jm4Zj/G1n0mzQkRMdTtYTnrq9TTXmRRyTAgAgI7SpjXcszEaPbG+eBuNH3/NNTkAAACgKyo9ERUAAABgn0vc/wMAAMA+1/gcwL27l6cbbXOfHNgfD3neORMRY7X6G88312YKsVrdDkRvRAz9nTxUcVL7tm0bzyJ9/3Mpa7FDzyF3snolIp7f6Pwn1frHqk9xt9afRsREF+KPPzLeS/Wf7kL8vOsH4Ml040ztQtZ6/UvX1j+xwfWvsMG1ayvyvv411n/3W9Z/6/X3tFn/vbfJGIcfvHaz3Vzz+u/DL36fyeJn220V9R/cuRJxuLBR/cla/Umb+s9uMsbw9O1r7eay+rN6G223669cjzhSXc211t+QdPr/REdn58qlidrXDV5/+WTn+M3nP2tZ/Ma9wG7Izv9QbO38X9pkjLHn/jzUbu7x9ad/9CUfVHt99T2fTi0tLRyL6Evebt1/vHMujWMar5HV/+pLnd//G9Wf/U1Yrf8cst+eK/VtNr76SMzhI8e/23r9a0Y6V7Y1Wf0zWzz/X24yxrc/XPu43Vzev/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7A1pRIxEkhbX+mlaLEYMR8QzMZSWLy4uvT578ZMLM9lcxFj0prNz5dJERIzWxkk2Plbtr4+PPzKejIiDEfHV6GB1XJy+WJ7Ju3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADWDEfESCRpMSLSiPhnNE2LxbyzAgAAALpuLO8EAAAAgB3n/h8AAAD2v5b7/8JDo4HdzAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB96eCLN24lEbF6arDaMn31ud5cMwN2Wrq5w4Z2Og9g9/XknQCQm0JTv1KpVHJMBdhl6/f43v3wpEoeMz/Qdqa/67kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P/1yqEbt5KIWD01WG2Zvvpcb66ZATstzTsBIDc9nSaTx+4A9rBC3gkAuXGPD9RW9g8qNa3zA22/s3/bUQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYO0aqLUmLEZFW+2laLEY8FRFj0ZvMzpVLExFxICJ+G+3tz8bH8k4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArltcXpmfKpdLC7VOodEp6+jobKMzGLsWa7D+Zm5zTH/7qQ6dnP8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi8Xllfmpcrm0sJh3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeFpdX5qfK5dLCDnbyrhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPz8GwAA//9jRA1W") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) kernel console output (not intermixed with test programs): QUOTA feature is enabled [ 73.196046][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.231856][ T4589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.242408][ T4593] loop4: detected capacity change from 0 to 1024 [ 73.257955][ T4593] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.271326][ T4589] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.303179][ T4593] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.286: Invalid block bitmap block 0 in block_group 0 [ 73.320003][ T4593] loop4: lost filesystem error report for type 5 error -117 [ 73.320149][ T4593] Quota error (device loop4): write_blk: dquota write failed [ 73.334995][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 73.335023][ C0] EXT4-fs (loop4): initial error at time 1779586161: ext4_read_block_bitmap_nowait:483 [ 73.335051][ C0] EXT4-fs (loop4): last error at time 1779586161: ext4_read_block_bitmap_nowait:483 [ 73.360440][ T4598] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 73.360744][ T4593] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 73.381600][ T4593] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.286: Failed to acquire dquot type 0 [ 73.395207][ T4593] loop4: lost filesystem error report for type 5 error -117 [ 73.429082][ T4593] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.286: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.466278][ T4593] loop4: lost filesystem error report for type 5 error -117 [ 73.466914][ T4593] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.286: Invalid inode bitmap blk 0 in block_group 0 [ 73.487063][ T68] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 73.501417][ T4593] loop4: lost filesystem error report for type 5 error -117 [ 73.502655][ T68] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 0 [ 73.522832][ T68] loop4: lost filesystem error report for type 5 error -117 [ 73.529333][ T4593] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 73.546132][ T28] audit: type=1400 audit(1779586161.841:1083): avc: denied { ioctl } for pid=4597 comm="syz.3.287" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 73.984586][ T4593] loop4: lost filesystem error report for type 5 error -117 [ 73.995815][ T4593] EXT4-fs (loop4): 1 orphan inode deleted [ 74.305326][ T4593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.402393][ T4602] loop3: detected capacity change from 0 to 512 [ 74.508093][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop3 [ 74.532277][ T4602] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 74.543522][ T4607] loop2: detected capacity change from 0 to 1024 [ 74.551986][ T28] audit: type=1400 audit(1779586162.841:1084): avc: denied { write } for pid=4592 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.613857][ T4607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.637766][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.680958][ T4607] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.017691][ T4620] gretap1: entered allmulticast mode [ 75.041505][ T4620] team0: Port device gretap1 added [ 75.064023][ T4620] bridge0: port 3(team0) entered blocking state [ 75.073114][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 75.089201][ T4620] bridge0: port 3(team0) entered disabled state [ 75.105552][ T4615] loop3: detected capacity change from 0 to 512 [ 75.123087][ T4620] team0: entered allmulticast mode [ 75.139564][ T4620] team_slave_0: entered allmulticast mode [ 75.158229][ T4620] team_slave_1: entered allmulticast mode [ 75.175486][ T4620] team0: entered promiscuous mode [ 75.180717][ T4620] team_slave_0: entered promiscuous mode [ 75.186512][ T4620] team_slave_1: entered promiscuous mode [ 75.192567][ T4620] gretap1: entered promiscuous mode [ 75.206725][ T4615] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.292: inode has both inline data and extents flags [ 75.245875][ T4615] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.246172][ T4615] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.292: couldn't read orphan inode 15 (err -117) [ 75.256010][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 75.256029][ C1] EXT4-fs (loop3): initial error at time 1779586163: ext4_orphan_get:1397: inode 15 [ 75.256058][ C1] EXT4-fs (loop3): last error at time 1779586163: ext4_orphan_get:1397: inode 15 [ 75.367405][ T4615] loop3: lost filesystem error report for type 5 error -117 [ 75.383319][ T4615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.422281][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.460781][ T4355] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.498513][ T28] audit: type=1400 audit(1779586163.811:1085): avc: denied { read } for pid=4629 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.572186][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.732106][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'. [ 75.750404][ T28] audit: type=1400 audit(1779586164.061:1086): avc: denied { map } for pid=4643 comm="syz.4.303" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.794804][ T28] audit: type=1400 audit(1779586164.061:1087): avc: denied { execute } for pid=4643 comm="syz.4.303" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.868668][ T4653] gretap1: entered allmulticast mode [ 75.991783][ T4653] team0: Port device gretap1 added [ 75.997781][ T4657] bridge0: port 3(team0) entered blocking state [ 76.027335][ T4657] bridge0: port 3(team0) entered disabled state [ 76.035069][ T4657] team0: entered allmulticast mode [ 76.040657][ T4657] team_slave_0: entered allmulticast mode [ 76.046969][ T4657] team_slave_1: entered allmulticast mode [ 76.077661][ T4657] team0: entered promiscuous mode [ 76.083405][ T4657] team_slave_0: entered promiscuous mode [ 76.096648][ T4657] team_slave_1: entered promiscuous mode [ 76.126190][ T4657] gretap1: entered promiscuous mode [ 76.140489][ T4657] bridge0: port 3(team0) entered blocking state [ 76.147133][ T4657] bridge0: port 3(team0) entered forwarding state [ 76.498266][ T28] audit: type=1400 audit(1779586164.801:1088): avc: denied { lock } for pid=4643 comm="syz.4.303" path="socket:[8017]" dev="sockfs" ino=8017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 77.478197][ T4631] Bluetooth: hci0: command 0x1003 tx timeout [ 77.484254][ T3530] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.569490][ T4682] loop4: detected capacity change from 0 to 512 [ 77.591249][ T4682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.591344][ T4682] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.690644][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.043619][ T4700] loop0: detected capacity change from 0 to 512 [ 78.050684][ T4704] loop2: detected capacity change from 0 to 512 [ 78.118416][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 78.118428][ T28] audit: type=1400 audit(1779586166.371:1091): avc: denied { create } for pid=4702 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.161295][ T4700] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 78.177693][ T4704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 78.201844][ T4700] System zones: 0-2, 18-18, 34-34 [ 78.221711][ T4700] EXT4-fs (loop0): 1 orphan inode deleted [ 78.229128][ T4703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.320'. [ 78.248278][ T4704] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.259758][ T4700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.273203][ T28] audit: type=1400 audit(1779586166.481:1092): avc: denied { wake_alarm } for pid=4702 comm="syz.4.320" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.306333][ T4700] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.520256][ T68] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 78.561631][ T68] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 78.578994][ T68] EXT4-fs (loop0): Remounting filesystem read-only [ 78.918719][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.992904][ T28] audit: type=1400 audit(1779586167.291:1093): avc: denied { create } for pid=4722 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.072239][ T4725] tipc: Started in network mode [ 79.088565][ T4725] tipc: Node identity ac1414aa, cluster identity 4711 [ 79.096022][ T28] audit: type=1400 audit(1779586167.321:1094): avc: denied { setopt } for pid=4722 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.117335][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 79.117402][ T4725] tipc: Enabled bearer , priority 2 [ 79.126552][ T28] audit: type=1400 audit(1779586167.321:1095): avc: denied { write } for pid=4722 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.126573][ T28] audit: type=1400 audit(1779586167.351:1096): avc: denied { setopt } for pid=4724 comm="syz.0.322" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.126671][ T28] audit: type=1400 audit(1779586167.361:1097): avc: denied { cpu } for pid=4722 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 79.183264][ T4716] loop3: detected capacity change from 0 to 512 [ 79.200982][ T28] audit: type=1400 audit(1779586167.511:1098): avc: denied { connect } for pid=4728 comm="syz.4.326" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.248859][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop3 [ 79.260480][ T4716] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 79.271500][ T4730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.290368][ T28] audit: type=1400 audit(1779586167.531:1099): avc: denied { write } for pid=4728 comm="syz.4.326" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.323629][ T4731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.356764][ T4730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.382197][ T4731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.410920][ T4744] netlink: 'syz.2.325': attribute type 2 has an invalid length. [ 79.426311][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 79.438099][ T4743] loop0: detected capacity change from 0 to 1024 [ 79.455459][ T4743] EXT4-fs: quotafile must be on filesystem root [ 79.479555][ T3383] IPVS: starting estimator thread 0... [ 79.485164][ T4743] loop0: detected capacity change from 0 to 128 [ 79.497736][ T4743] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 79.510871][ T4743] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.548792][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.588327][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.595504][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.598527][ T4747] IPVS: using max 2496 ests per chain, 124800 per kthread [ 79.675120][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.714669][ T82] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.743569][ T82] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.765927][ T82] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.774894][ T82] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.861748][ T4764] FAULT_INJECTION: forcing a failure. [ 79.861748][ T4764] name failslab, interval 1, probability 0, space 0, times 0 [ 79.874612][ T4764] CPU: 0 UID: 0 PID: 4764 Comm: syz.0.332 Not tainted syzkaller #0 PREEMPT(full) [ 79.874710][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.874792][ T4764] Call Trace: [ 79.874799][ T4764] [ 79.874808][ T4764] __dump_stack+0x1d/0x30 [ 79.874832][ T4764] dump_stack_lvl+0x95/0xd0 [ 79.874953][ T4764] dump_stack+0x15/0x1b [ 79.874973][ T4764] should_fail_ex+0x263/0x280 [ 79.875001][ T4764] should_failslab+0x8c/0xb0 [ 79.875062][ T4764] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 79.875097][ T4764] ? perf_event_alloc+0x14b/0x1a10 [ 79.875125][ T4764] perf_event_alloc+0x14b/0x1a10 [ 79.875212][ T4764] ? __rcu_read_unlock+0x4e/0x70 [ 79.875234][ T4764] ? __fget_files+0x184/0x1c0 [ 79.875330][ T4764] __se_sys_perf_event_open+0x63b/0x1270 [ 79.875390][ T4764] __x64_sys_perf_event_open+0x67/0x80 [ 79.875418][ T4764] x64_sys_call+0x2789/0x3020 [ 79.875470][ T4764] do_syscall_64+0x12c/0x3b0 [ 79.875502][ T4764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.875525][ T4764] RIP: 0033:0x7fbf5755ce59 [ 79.875541][ T4764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.875564][ T4764] RSP: 002b:00007fbf55fb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 79.875585][ T4764] RAX: ffffffffffffffda RBX: 00007fbf577d5fa0 RCX: 00007fbf5755ce59 [ 79.875601][ T4764] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000340 [ 79.875634][ T4764] RBP: 00007fbf55fb7090 R08: 000000000000000b R09: 0000000000000000 [ 79.875648][ T4764] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 79.875726][ T4764] R13: 00007fbf577d6038 R14: 00007fbf577d5fa0 R15: 00007ffd78305028 [ 79.875746][ T4764] [ 80.070062][ T4766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.333'. [ 80.079201][ T4766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 80.137516][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 80.212343][ T4772] loop2: detected capacity change from 0 to 128 [ 80.228357][ T23] tipc: Node number set to 2886997162 [ 80.228768][ T4772] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 80.283986][ T4772] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.337067][ T4774] loop0: detected capacity change from 0 to 512 [ 80.347877][ T4774] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 80.348818][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop0 [ 80.371720][ T4772] ext2 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.373808][ T4780] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.475270][ T4793] loop4: detected capacity change from 0 to 512 [ 80.482906][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.504295][ T4793] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 80.528125][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 80.534576][ C0] EXT4-fs (loop4): initial error at time 1779586168: mb_free_blocks:2049: inode 11: block 64 [ 80.544795][ C0] EXT4-fs (loop4): last error at time 1779586168: mb_free_blocks:2049: inode 11: block 64 [ 80.565506][ T4793] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.343: corrupted inode contents [ 80.597203][ T874] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.598639][ T4793] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.607926][ T874] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.620412][ T4793] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #11: comm syz.4.343: mark_inode_dirty error [ 80.625930][ T874] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.645417][ T4793] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.645920][ T4793] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.343: invalid indirect mapped block 1 (level 1) [ 80.658241][ T874] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.687901][ T4793] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.688202][ T4793] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.343: corrupted inode contents [ 80.711034][ T4793] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.714550][ T4793] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 80.734445][ T4793] loop4: lost filesystem error report for type 5 error -117 [ 80.734702][ T4793] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.343: corrupted inode contents [ 80.745435][ T4805] loop2: detected capacity change from 0 to 512 [ 80.755078][ T4793] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.761004][ T4793] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.343: mark_inode_dirty error [ 80.782605][ T4793] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.782794][ T4793] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 80.801475][ T4793] loop4: lost filesystem error report for type 5 error -117 [ 80.801780][ T4793] EXT4-fs (loop4): 1 truncate cleaned up [ 80.815890][ T4793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.882244][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.894969][ T4809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.911863][ T4809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.015763][ T4816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.350'. [ 81.025951][ T4816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.350'. [ 81.074162][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop1 [ 81.083817][ T4820] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 81.331632][ T4830] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.401426][ T4830] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 81.410033][ T4830] System zones: 1-12 [ 81.425572][ T4830] EXT4-fs (loop0): 1 truncate cleaned up [ 81.442089][ T4830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.823654][ T4848] EXT4-fs: Ignoring removed orlov option [ 81.844827][ T4846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.872171][ T4848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.908314][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 81.953754][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.967925][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.001314][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.110872][ T4859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.227992][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.256696][ T3823] udevd[3823]: incorrect ext4 checksum on /dev/loop0 [ 82.264980][ T4866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.367'. [ 82.274806][ T4861] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 82.349059][ T4868] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 82.372977][ T4868] netlink: 'syz.4.366': attribute type 1 has an invalid length. [ 82.400097][ T4868] netlink: 'syz.4.366': attribute type 2 has an invalid length. [ 82.602363][ T4879] set_capacity_and_notify: 8 callbacks suppressed [ 82.602377][ T4879] loop0: detected capacity change from 0 to 2048 [ 82.619562][ T4881] syzkaller1: entered promiscuous mode [ 82.625074][ T4881] syzkaller1: entered allmulticast mode [ 82.628758][ T4879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.646997][ T4879] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.708257][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.749098][ T4892] loop4: detected capacity change from 0 to 512 [ 82.756983][ T4892] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 82.963804][ T4897] loop0: detected capacity change from 0 to 512 [ 82.979676][ T4897] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.053359][ T4897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 83.063071][ T4897] System zones: 1-12 [ 83.074896][ T4897] EXT4-fs (loop0): 1 truncate cleaned up [ 83.082342][ T4897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.344581][ T4906] loop4: detected capacity change from 0 to 512 [ 83.363177][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop4 [ 83.380767][ T4906] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 83.519972][ T4912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4912 comm=syz.4.381 [ 83.522175][ T4914] loop3: detected capacity change from 0 to 512 [ 83.534255][ T4912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 83.548703][ T4912] netlink: 'syz.4.381': attribute type 5 has an invalid length. [ 83.583929][ T4912] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 83.601070][ T4912] geneve2: entered promiscuous mode [ 83.607171][ T4912] geneve2: entered allmulticast mode [ 83.632177][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.641953][ T4917] loop1: detected capacity change from 0 to 512 [ 83.767048][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 83.767073][ T28] audit: type=1400 audit(1779586172.071:1123): avc: denied { append } for pid=4925 comm="syz.0.387" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.809370][ T4928] loop1: detected capacity change from 0 to 512 [ 83.809673][ T4928] EXT4-fs: Ignoring removed nobh option [ 83.843557][ T4928] ext4: Unknown parameter 'smackfstransmute' [ 83.877276][ T28] audit: type=1400 audit(1779586172.181:1124): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 83.911029][ T4928] loop1: detected capacity change from 0 to 512 [ 83.917625][ T4928] EXT4-fs: Ignoring removed bh option [ 83.927170][ T4928] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.965224][ T4928] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 83.981747][ T4928] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 83.998633][ T4928] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 84.012977][ T4936] loop4: detected capacity change from 0 to 512 [ 84.020077][ T4928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.040085][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop4 [ 84.078822][ T4936] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 84.080808][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop4 [ 84.204876][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.332766][ T4948] loop0: detected capacity change from 0 to 4096 [ 84.347770][ T4948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.608059][ T28] audit: type=1400 audit(1779586172.681:1125): avc: denied { write } for pid=4937 comm="syz.0.392" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.827525][ T4940] bridge0: port 3(team0) entered disabled state [ 84.833883][ T4940] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.841018][ T4940] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.890562][ T4956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 84.915736][ T28] audit: type=1400 audit(1779586173.221:1126): avc: denied { setopt } for pid=4952 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.918319][ T4956] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.998316][ T28] audit: type=1400 audit(1779586173.221:1127): avc: denied { bind } for pid=4952 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.019254][ T28] audit: type=1400 audit(1779586173.221:1128): avc: denied { listen } for pid=4952 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.063808][ T4940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.083921][ T28] audit: type=1400 audit(1779586173.391:1129): avc: denied { execute } for pid=4952 comm="syz.3.395" path=2F37372F05 dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.111496][ T4940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.280827][ T4954] netlink: 128 bytes leftover after parsing attributes in process `syz.3.395'. [ 85.306514][ T4954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.380875][ T82] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.450341][ T82] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.497704][ T82] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.527543][ T82] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.632016][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.692656][ T4975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.718746][ T4982] ip6t_srh: unknown srh match flags 41C4 [ 85.724805][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 85.783541][ T28] audit: type=1400 audit(1779586174.091:1130): avc: denied { write } for pid=4974 comm="syz.4.400" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.812254][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 85.819151][ T4982] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.841764][ T4982] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 85.856956][ T4982] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.883263][ T28] audit: type=1400 audit(1779586174.191:1131): avc: denied { map } for pid=4974 comm="syz.4.400" path="/83/file1/pids.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.891458][ T4975] mmap: syz.4.400 (4975) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.915381][ T4982] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 85.961415][ T4982] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 85.976382][ T4982] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 85.983694][ T4982] EXT4-fs (loop3): 1 truncate cleaned up [ 85.994856][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.004526][ T4982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.090458][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.104621][ T4988] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 86.116605][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop1 [ 86.225655][ T5007] random: crng reseeded on system resumption [ 86.254007][ T4997] bridge0: port 3(team0) entered disabled state [ 86.260364][ T4997] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.266008][ T5008] 9p: Could not find request transport: fd®rfdˆo=0x0000000000000006 [ 86.267512][ T4997] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.282170][ T5008] netlink: 'syz.1.408': attribute type 10 has an invalid length. [ 86.358049][ T4997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.382495][ T5015] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.393108][ T4997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.459025][ T5008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.470939][ T5008] team0: Port device netdevsim1 added [ 86.488653][ T68] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.505600][ T68] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.532620][ T68] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.546174][ T68] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.012910][ T5028] EXT4-fs: test_dummy_encryption option not supported [ 87.123066][ T5036] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 87.149054][ T5036] EXT4-fs (loop4): 1 truncate cleaned up [ 87.159425][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop0 [ 87.163360][ T5035] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 87.182978][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop0 [ 87.490323][ T5044] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.421: inode has both inline data and extents flags [ 87.568580][ T5044] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.572911][ T5044] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.421: couldn't read orphan inode 15 (err -117) [ 87.583019][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 87.583075][ C0] EXT4-fs (loop2): initial error at time 1779586175: ext4_orphan_get:1397: inode 15 [ 87.583207][ C0] EXT4-fs (loop2): last error at time 1779586175: ext4_orphan_get:1397: inode 15 [ 87.766062][ T5044] loop2: lost filesystem error report for type 5 error -117 [ 87.945009][ T5062] set_capacity_and_notify: 10 callbacks suppressed [ 87.945024][ T5062] loop4: detected capacity change from 0 to 512 [ 88.274397][ T5071] loop0: detected capacity change from 0 to 512 [ 88.324243][ T5071] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.366059][ T5046] Set syz1 is full, maxelem 65536 reached [ 88.834534][ T5080] loop3: detected capacity change from 0 to 512 [ 88.904929][ T5080] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 88.948332][ T5082] loop4: detected capacity change from 0 to 1024 [ 88.972876][ T5082] EXT4-fs: Ignoring removed i_version option [ 88.988281][ T5082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.013854][ T28] kauditd_printk_skb: 1310 callbacks suppressed [ 89.013866][ T28] audit: type=1400 audit(1779586177.321:2442): avc: denied { write } for pid=5081 comm="syz.4.432" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.484104][ T5099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.508868][ T28] audit: type=1400 audit(1779586177.491:2443): avc: denied { connect } for pid=5081 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.602285][ T5099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.706002][ T5108] loop1: detected capacity change from 0 to 128 [ 89.723602][ T5108] msdos: Bad value for 'gid' [ 89.746298][ T5108] msdos: Bad value for 'gid' [ 89.754415][ T5101] loop4: detected capacity change from 0 to 8192 [ 89.869688][ T5101] loop4: p1 < > p2 p4 < p5 > [ 89.889054][ T5101] loop4: partition table partially beyond EOD, truncated [ 89.909192][ T28] audit: type=1400 audit(1779586178.211:2444): avc: denied { load_policy } for pid=5109 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.946146][ T5110] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 89.957799][ T5101] loop4: p1 start 134217728 is beyond EOD, truncated [ 89.971698][ T5108] 9p: Bad value for 'wfdno' [ 89.999532][ T5101] loop4: p2 size 591360 extends beyond EOD, truncated [ 90.062916][ T28] audit: type=1400 audit(1779586178.301:2445): avc: denied { setopt } for pid=5100 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.135930][ T5101] loop4: p5 size 591360 extends beyond EOD, truncated [ 90.226820][ T28] audit: type=1400 audit(1779586178.311:2446): avc: denied { connect } for pid=5100 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.253609][ T28] audit: type=1400 audit(1779586178.401:2447): avc: denied { read } for pid=5100 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.580657][ T5125] loop3: detected capacity change from 0 to 512 [ 90.623375][ T28] audit: type=1400 audit(1779586178.931:2448): avc: denied { create } for pid=5126 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.739924][ T5132] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 90.775841][ T5137] loop0: detected capacity change from 0 to 512 [ 90.801146][ T5137] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.815537][ T5142] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 90.843607][ T5142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 90.921783][ T5144] loop1: detected capacity change from 0 to 512 [ 90.933833][ T5144] EXT4-fs: dax option not supported [ 90.944872][ T28] audit: type=1400 audit(1779586179.251:2449): avc: denied { write } for pid=5143 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.093582][ T5144] netlink: 'syz.1.449': attribute type 4 has an invalid length. [ 91.986615][ T5160] loop3: detected capacity change from 0 to 512 [ 91.993583][ T5160] EXT4-fs (loop3): #blocks per group too big: 65535 [ 92.803005][ T5165] can0: slcan on ptm1. [ 92.842098][ T28] audit: type=1400 audit(1779586181.141:2450): avc: denied { read } for pid=3019 comm="dhcpcd" name="n28" dev="tmpfs" ino=4434 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.871452][ T28] audit: type=1400 audit(1779586181.141:2451): avc: denied { open } for pid=3019 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=4434 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.919705][ T5165] can0 (unregistered): slcan off ptm1. [ 92.991152][ T5165] loop2: detected capacity change from 0 to 512 [ 93.022287][ T5165] EXT4-fs: Ignoring removed oldalloc option [ 93.036075][ T5192] loop3: detected capacity change from 0 to 512 [ 93.043655][ T5192] EXT4-fs: Ignoring removed bh option [ 93.050841][ T5165] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.093485][ T5165] EXT4-fs (loop2): 1 truncate cleaned up [ 93.140387][ T5192] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.344828][ T5216] loop4: detected capacity change from 0 to 512 [ 93.365283][ T5216] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (40000) [ 93.401151][ T5216] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 93.835093][ T5246] loop3: detected capacity change from 0 to 512 [ 93.909730][ T5246] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.432065][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 94.440961][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 94.450375][ T5216] netlink: 'syz.4.462': attribute type 13 has an invalid length. [ 95.081136][ T5216] netlink: 'syz.4.462': attribute type 12 has an invalid length. [ 95.438198][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 95.438214][ T28] audit: type=1400 audit(1779586183.731:2469): avc: denied { connect } for pid=5268 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.681534][ T28] audit: type=1400 audit(1779586183.731:2470): avc: denied { read } for pid=5268 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.683467][ T5280] loop2: detected capacity change from 0 to 4096 [ 95.721244][ T28] audit: type=1400 audit(1779586184.031:2471): avc: denied { write } for pid=5268 comm="syz.2.466" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.810980][ T28] audit: type=1400 audit(1779586184.111:2472): avc: denied { write } for pid=5252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.868155][ T28] audit: type=1400 audit(1779586184.171:2473): avc: denied { write } for pid=5298 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.902416][ T28] audit: type=1400 audit(1779586184.211:2474): avc: denied { create } for pid=5294 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 95.966014][ T5304] loop1: detected capacity change from 0 to 1024 [ 96.009506][ T5304] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 96.028398][ T5304] System zones: 0-1, 3-8 [ 96.033289][ T5304] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.045441][ T28] audit: type=1400 audit(1779586184.361:2475): avc: denied { write } for pid=5303 comm="syz.1.473" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.068332][ T28] audit: type=1400 audit(1779586184.381:2476): avc: denied { map } for pid=5303 comm="syz.1.473" path="/91/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.105842][ T5304] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.473: bg 0: block 112: padding at end of block bitmap is not set [ 96.120126][ T28] audit: type=1400 audit(1779586184.411:2477): avc: denied { write } for pid=5303 comm="syz.1.473" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.155401][ T5304] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.473: lblock 0 mapped to illegal pblock 0 (length 1) [ 96.198907][ T28] audit: type=1400 audit(1779586184.481:2478): avc: denied { write } for pid=5302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.237611][ T5304] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 96.256360][ T5304] EXT4-fs (loop1): This should not happen!! Data will be lost [ 96.256360][ T5304] [ 96.276933][ T5327] 9p: Bad value for 'wfdno' [ 96.287582][ T3303] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 96.413650][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 96.522462][ T5352] loop3: detected capacity change from 0 to 128 [ 96.550147][ T5352] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 96.578687][ T5352] EXT4-fs mount: 21 callbacks suppressed [ 96.578700][ T5352] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.597765][ T5355] loop4: detected capacity change from 0 to 764 [ 96.611621][ T5355] iso9660: Unknown parameter '00000000000000000003' [ 96.638478][ T5352] ext2 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.723078][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.752340][ T5359] loop4: detected capacity change from 0 to 512 [ 96.775267][ T5359] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.486: invalid indirect mapped block 256 (level 2) [ 96.814313][ T5364] FAULT_INJECTION: forcing a failure. [ 96.814313][ T5364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.828398][ T5359] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 96.829874][ T5359] EXT4-fs (loop4): Remounting filesystem read-only [ 96.839112][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 96.839127][ C1] EXT4-fs (loop4): initial error at time 1779586185: ext4_free_branches:1023: inode 11 [ 96.839152][ C1] EXT4-fs (loop4): last error at time 1779586185: ext4_free_branches:1023: inode 11 [ 96.872517][ T5364] CPU: 0 UID: 0 PID: 5364 Comm: syz.1.487 Not tainted syzkaller #0 PREEMPT(full) [ 96.872542][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 96.872591][ T5364] Call Trace: [ 96.872597][ T5364] [ 96.872641][ T5364] __dump_stack+0x1d/0x30 [ 96.872663][ T5364] dump_stack_lvl+0x95/0xd0 [ 96.872735][ T5364] dump_stack+0x15/0x1b [ 96.872802][ T5364] should_fail_ex+0x263/0x280 [ 96.872834][ T5364] should_fail+0xb/0x20 [ 96.872859][ T5364] should_fail_usercopy+0x1a/0x20 [ 96.872886][ T5364] _copy_from_iter+0xcf/0xea0 [ 96.872966][ T5364] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 96.872995][ T5364] ? __build_skb+0x43/0x220 [ 96.873014][ T5364] ? __build_skb+0x1b3/0x220 [ 96.873030][ T5364] ? is_vmalloc_addr+0x37/0x90 [ 96.873120][ T5364] netlink_sendmsg+0x4ae/0x6f0 [ 96.873152][ T5364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.873182][ T5364] sock_write_iter+0x2e8/0x320 [ 96.873275][ T5364] ? __pfx_sock_write_iter+0x10/0x10 [ 96.873307][ T5364] vfs_write+0x5a6/0x9f0 [ 96.873336][ T5364] ksys_write+0xdc/0x1a0 [ 96.873361][ T5364] __x64_sys_write+0x40/0x50 [ 96.873460][ T5364] x64_sys_call+0x27e1/0x3020 [ 96.873574][ T5364] do_syscall_64+0x12c/0x3b0 [ 96.873672][ T5364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.873691][ T5364] RIP: 0033:0x7fb050bdce59 [ 96.873705][ T5364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.873722][ T5364] RSP: 002b:00007fb04f637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.873789][ T5364] RAX: ffffffffffffffda RBX: 00007fb050e55fa0 RCX: 00007fb050bdce59 [ 96.873801][ T5364] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 96.873813][ T5364] RBP: 00007fb04f637090 R08: 0000000000000000 R09: 0000000000000000 [ 96.873824][ T5364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.873835][ T5364] R13: 00007fb050e56038 R14: 00007fb050e55fa0 R15: 00007ffc207d7bf8 [ 96.873868][ T5364] [ 96.885124][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.894649][ T5359] EXT4-fs (loop4): 2 truncates cleaned up [ 96.913218][ T5369] loop1: detected capacity change from 0 to 512 [ 96.926677][ T5359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.143954][ T5369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.162881][ T5371] netlink: 180 bytes leftover after parsing attributes in process `syz.2.488'. [ 97.245140][ T5375] openvswitch: netlink: Flow actions attr not present in new flow. [ 97.415738][ T5378] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 97.445951][ T5385] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 97.484809][ T5385] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.497436][ T5385] ext2 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.645816][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.655584][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.667914][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.737969][ T5390] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 97.814821][ T5396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.858938][ T5401] msdos: Bad value for 'gid' [ 97.858988][ T5398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.882531][ T5401] msdos: Bad value for 'gid' [ 98.028402][ T5414] set_capacity_and_notify: 6 callbacks suppressed [ 98.028928][ T5414] loop0: detected capacity change from 0 to 512 [ 98.173145][ T5414] EXT4-fs: Ignoring removed nobh option [ 98.261178][ T5414] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #3: comm syz.0.505: corrupted inode contents [ 98.356570][ T5414] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 98.357279][ T5414] EXT4-fs (loop0): Remounting filesystem read-only [ 98.366369][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 98.366384][ C0] EXT4-fs (loop0): initial error at time 1779586186: ext4_do_update_inode:5690: inode 3 [ 98.366429][ C0] EXT4-fs (loop0): last error at time 1779586186: ext4_do_update_inode:5690: inode 3 [ 98.445624][ T5414] EXT4-fs (loop0): 1 truncate cleaned up [ 98.453036][ T5414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.466547][ T5414] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.477445][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.507627][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.520235][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 98.548921][ T5414] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 98.558887][ T5421] loop4: detected capacity change from 0 to 512 [ 98.572325][ T5414] netlink: 224 bytes leftover after parsing attributes in process `syz.0.505'. [ 98.603021][ T5421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.619156][ T5421] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.768766][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.801974][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.914141][ T5438] loop0: detected capacity change from 0 to 4096 [ 98.927785][ T5438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.942760][ T5438] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.509: iget: bad i_size value: 648518346341351434 [ 98.956699][ T5438] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.509: iget: bad i_size value: 648518346341351434 [ 98.973284][ T5443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'. [ 99.015844][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.036822][ T5458] loop3: detected capacity change from 0 to 512 [ 99.056979][ T5458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.087957][ T5456] loop1: detected capacity change from 0 to 1764 [ 99.129637][ T5456] ISOFS: Unable to identify CD-ROM format. [ 99.467256][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 99.478257][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.498447][ T5467] 9p: Could not find request transport: fdIµfdno=I9IÝL@A7nñç”ÿ8²€Û½lÙ0xffffffffffffffff [ 99.612455][ T5473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.518'. [ 99.624371][ T5473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.518'. [ 100.493381][ T5484] loop0: detected capacity change from 0 to 512 [ 100.564818][ T5484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.822283][ T5495] loop4: detected capacity change from 0 to 512 [ 100.830002][ T4631] Bluetooth: hci0: command 0x1003 tx timeout [ 100.838533][ T3530] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 100.858407][ T5495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.927813][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 101.031760][ T5495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.131861][ T5495] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.199542][ T5499] loop3: detected capacity change from 0 to 512 [ 101.300139][ T5499] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 101.316890][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 101.316901][ T28] audit: type=1400 audit(2000000002.479:2514): avc: denied { write } for pid=5483 comm="syz.0.523" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.380781][ T5495] xt_hashlimit: invalid rate [ 101.403262][ T28] audit: type=1400 audit(2000000002.569:2515): avc: denied { getopt } for pid=5492 comm="syz.4.525" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.454788][ T5495] EXT4-fs (loop4): shut down requested (2) [ 101.496741][ T28] audit: type=1400 audit(2000000002.599:2516): avc: denied { write } for pid=5492 comm="syz.4.525" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.534192][ T5504] loop2: detected capacity change from 0 to 512 [ 101.629294][ T5504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.656520][ T28] audit: type=1400 audit(2000000002.819:2517): avc: denied { append } for pid=5483 comm="syz.0.523" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.689244][ T5504] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.605844][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 102.622263][ T5513] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 102.633176][ T5513] audit: out of memory in audit_log_start [ 102.689132][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.701287][ T4355] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 102.715180][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.718366][ T5522] loop3: detected capacity change from 0 to 512 [ 102.747068][ T5522] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 102.766399][ T5522] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 102.803396][ T5522] EXT4-fs (loop3): group descriptors corrupted! [ 102.940628][ T5541] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.962070][ T5537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 102.989640][ T5541] EXT4-fs (loop0): 1 truncate cleaned up [ 102.998180][ T5537] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.000941][ T5541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.868718][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.975199][ T28] audit: type=1400 audit(2000000004.199:2518): avc: denied { write } for pid=5538 comm="syz.0.542" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.998122][ T28] audit: type=1400 audit(2000000004.199:2519): avc: denied { setattr } for pid=5538 comm="syz.0.542" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.020483][ T28] audit: type=1400 audit(2000000004.199:2520): avc: denied { write } for pid=5538 comm="syz.0.542" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.079323][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.157039][ T5559] set_capacity_and_notify: 2 callbacks suppressed [ 104.157058][ T5559] loop0: detected capacity change from 0 to 256 [ 104.791069][ T5574] loop0: detected capacity change from 0 to 1024 [ 104.806179][ T5574] EXT4-fs: Ignoring removed bh option [ 104.856713][ T5574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.066593][ T5582] loop4: detected capacity change from 0 to 8192 [ 105.493749][ T5590] loop4: detected capacity change from 0 to 512 [ 105.533193][ T5590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.592489][ T5590] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.825049][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.913661][ T5609] loop3: detected capacity change from 0 to 256 [ 106.002770][ T5619] loop3: detected capacity change from 0 to 512 [ 106.009584][ T5619] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.021745][ T5619] EXT4-fs (loop3): orphan file too big: 67108874 [ 106.028222][ T5619] EXT4-fs (loop3): mount failed [ 106.085267][ T5626] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.207925][ T5630] loop3: detected capacity change from 0 to 512 [ 106.235665][ T5630] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.270377][ T5630] EXT4-fs (loop3): 1 truncate cleaned up [ 106.287663][ T5630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.365508][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 106.440085][ T28] kauditd_printk_skb: 422 callbacks suppressed [ 106.440100][ T28] audit: type=1400 audit(2000000007.609:2943): avc: denied { read write } for pid=5634 comm="syz.4.567" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.482717][ T5635] loop1: detected capacity change from 0 to 128 [ 106.539012][ T28] audit: type=1400 audit(2000000007.609:2944): avc: denied { open } for pid=5634 comm="syz.4.567" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.614153][ T28] audit: type=1400 audit(2000000007.639:2945): avc: denied { prog_run } for pid=5633 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.669604][ T28] audit: type=1400 audit(2000000007.649:2946): avc: denied { create } for pid=5633 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.700992][ T28] audit: type=1400 audit(2000000007.679:2947): avc: denied { mount } for pid=5633 comm="syz.1.568" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 106.738490][ T5626] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 106.755195][ T28] audit: type=1400 audit(2000000007.699:2948): avc: denied { ioctl } for pid=5634 comm="syz.4.567" path="socket:[12370]" dev="sockfs" ino=12370 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.798025][ T28] audit: type=1400 audit(2000000007.709:2949): avc: denied { sys_module } for pid=5634 comm="syz.4.567" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 106.863347][ T28] audit: type=1400 audit(2000000007.769:2950): avc: denied { getopt } for pid=5633 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.892253][ T28] audit: type=1400 audit(2000000007.809:2951): avc: denied { name_bind } for pid=5641 comm="syz.4.569" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 106.920753][ T5650] loop1: detected capacity change from 0 to 256 [ 106.936090][ T28] audit: type=1400 audit(2000000007.809:2952): avc: denied { node_bind } for pid=5641 comm="syz.4.569" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 106.995258][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.161760][ T5615] Set syz1 is full, maxelem 65536 reached [ 107.318393][ T5668] loop0: detected capacity change from 0 to 512 [ 107.368041][ T5668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 107.395324][ T5668] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.591435][ T5678] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.618515][ T5678] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.639803][ T5678] ext3: Unknown parameter 'uid<00000000000000000000' [ 107.785097][ T5678] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.580: inode has both inline data and extents flags [ 107.837703][ T5678] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.838144][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 107.854863][ C1] EXT4-fs (loop2): initial error at time 2000000008: ext4_orphan_get:1397: inode 15 [ 107.864885][ C1] EXT4-fs (loop2): last error at time 2000000008: ext4_orphan_get:1397: inode 15 [ 107.926299][ T5678] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.580: couldn't read orphan inode 15 (err -117) [ 107.973720][ T5678] loop2: lost filesystem error report for type 5 error -117 [ 108.004954][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.178679][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 108.271670][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.433057][ T5689] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.583: inode has both inline data and extents flags [ 108.497490][ T5689] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.498118][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 108.513680][ C1] EXT4-fs (loop3): initial error at time 2000000009: ext4_orphan_get:1397: inode 15 [ 108.518755][ T5689] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.583: couldn't read orphan inode 15 (err -117) [ 108.523087][ C1] EXT4-fs (loop3): last error at time 2000000009: ext4_orphan_get:1397: inode 15 [ 108.616398][ T5689] loop3: lost filesystem error report for type 5 error -117 [ 108.620634][ T5689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.709355][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.815790][ T5719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.072253][ T5727] EXT4-fs (loop1): orphan cleanup on readonly fs [ 109.081112][ T5727] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.593: ea_inode with extended attributes [ 109.094102][ T5727] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.094453][ T5727] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.593: error while reading EA inode 11 err=-117 [ 109.103579][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 109.103601][ C0] EXT4-fs (loop1): initial error at time 2000000010: ext4_xattr_inode_iget:441: inode 11 [ 109.103633][ C0] EXT4-fs (loop1): last error at time 2000000010: ext4_xattr_inode_iget:441: inode 11 [ 109.141573][ T5727] loop1: lost filesystem error report for type 5 error -117 [ 109.141993][ T5727] EXT4-fs (loop1): 1 orphan inode deleted [ 109.155609][ T5727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 109.189950][ T5722] loop0: p1 < > p2 p4 < p5 > [ 109.222752][ T5722] loop0: partition table partially beyond EOD, truncated [ 109.247908][ T5722] loop0: p1 start 134217728 is beyond EOD, truncated [ 109.259330][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.289432][ T5722] loop0: p2 size 591360 extends beyond EOD, truncated [ 109.316569][ T5681] Set syz1 is full, maxelem 65536 reached [ 109.320229][ T5722] loop0: p5 size 591360 extends beyond EOD, truncated [ 109.527201][ T5744] netlink: 72 bytes leftover after parsing attributes in process `syz.4.596'. [ 109.661095][ T5746] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 109.788762][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.301140][ T5763] set_capacity_and_notify: 7 callbacks suppressed [ 110.301204][ T5763] loop4: detected capacity change from 0 to 1764 [ 110.350783][ T5759] loop1: detected capacity change from 0 to 512 [ 110.394628][ T5759] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.602: inode #1: comm syz.1.602: iget: illegal inode # [ 110.434510][ T5759] loop1: lost filesystem error report for type 5 error -117 [ 110.437992][ T5759] EXT4-fs (loop1): no journal found [ 110.438251][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 110.438280][ C1] EXT4-fs (loop1): initial error at time 2000000011: ext4_get_journal_inode:5896 [ 110.438562][ C1] EXT4-fs (loop1): last error at time 2000000011: ext4_get_journal_inode:5896 [ 111.094488][ T5776] netlink: 'syz.3.606': attribute type 21 has an invalid length. [ 111.168856][ T5780] loop1: detected capacity change from 0 to 256 [ 111.183366][ T5776] netlink: 128 bytes leftover after parsing attributes in process `syz.3.606'. [ 111.313574][ T5776] netlink: 'syz.3.606': attribute type 5 has an invalid length. [ 111.321514][ T5776] netlink: 3 bytes leftover after parsing attributes in process `syz.3.606'. [ 112.027552][ T5782] xt_NFQUEUE: number of total queues is 0 [ 112.302292][ T5789] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 112.313600][ T5789] SELinux: failed to load policy [ 112.320754][ T5789] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 112.380333][ T5799] loop4: detected capacity change from 0 to 1024 [ 112.388748][ T5799] EXT4-fs: test_dummy_encryption option not supported [ 113.599278][ T5820] loop0: detected capacity change from 0 to 512 [ 113.651786][ T5824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.620'. [ 113.703132][ T5824] loop1: detected capacity change from 0 to 128 [ 113.746463][ T5819] loop3: detected capacity change from 0 to 8192 [ 113.790620][ T5824] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 113.831233][ T5819] loop3: p1 < > p2 p4 < p5 > [ 113.845696][ T5819] loop3: partition table partially beyond EOD, truncated [ 113.862910][ T5828] loop2: detected capacity change from 0 to 512 [ 113.881448][ T5824] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.896824][ T5819] loop3: p1 start 134217728 is beyond EOD, truncated [ 113.898554][ T5828] EXT4-fs: Ignoring removed bh option [ 113.903601][ T5819] loop3: p2 size 591360 extends beyond EOD, truncated [ 113.911275][ T5824] ext2 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.008226][ T5828] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.039888][ T5828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.062001][ T5819] loop3: p5 size 591360 extends beyond EOD, truncated [ 114.081543][ T5828] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.122885][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 114.122899][ T28] audit: type=1400 audit(2000000015.289:3005): avc: denied { write } for pid=5827 comm="syz.2.622" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.150897][ T5842] FAULT_INJECTION: forcing a failure. [ 114.150897][ T5842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.212124][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz.0.623 Not tainted syzkaller #0 PREEMPT(full) [ 114.212224][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.212235][ T5842] Call Trace: [ 114.212241][ T5842] [ 114.212247][ T5842] __dump_stack+0x1d/0x30 [ 114.212268][ T5842] dump_stack_lvl+0x95/0xd0 [ 114.212286][ T5842] dump_stack+0x15/0x1b [ 114.212311][ T5842] should_fail_ex+0x263/0x280 [ 114.212342][ T5842] should_fail+0xb/0x20 [ 114.212404][ T5842] should_fail_usercopy+0x1a/0x20 [ 114.212428][ T5842] _copy_to_user+0x20/0xa0 [ 114.212500][ T5842] simple_read_from_buffer+0xb5/0x130 [ 114.212530][ T5842] proc_fail_nth_read+0x10e/0x150 [ 114.212558][ T5842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.212586][ T5842] vfs_read+0x1ab/0x7f0 [ 114.212656][ T5842] ? __rcu_read_unlock+0x4e/0x70 [ 114.212676][ T5842] ? __fget_files+0x184/0x1c0 [ 114.212697][ T5842] ? mutex_lock+0x57/0x90 [ 114.212722][ T5842] ksys_read+0xdc/0x1a0 [ 114.212746][ T5842] __x64_sys_read+0x40/0x50 [ 114.212818][ T5842] x64_sys_call+0x2886/0x3020 [ 114.212842][ T5842] do_syscall_64+0x12c/0x3b0 [ 114.212873][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.212897][ T5842] RIP: 0033:0x7fbf5751d68e [ 114.212912][ T5842] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.212931][ T5842] RSP: 002b:00007fbf55f95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.212948][ T5842] RAX: ffffffffffffffda RBX: 00007fbf55f966c0 RCX: 00007fbf5751d68e [ 114.213036][ T5842] RDX: 000000000000000f RSI: 00007fbf55f960a0 RDI: 0000000000000003 [ 114.213047][ T5842] RBP: 00007fbf55f96090 R08: 0000000000000000 R09: 0000000000000000 [ 114.213076][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.213110][ T5842] R13: 00007fbf577d6128 R14: 00007fbf577d6090 R15: 00007ffd78305028 [ 114.213128][ T5842] [ 114.495369][ T28] audit: type=1400 audit(2000000015.639:3006): avc: denied { name_bind } for pid=5845 comm="syz.4.625" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 114.521004][ T28] audit: type=1400 audit(2000000015.639:3007): avc: denied { node_bind } for pid=5845 comm="syz.4.625" saddr=172.20.20.34 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 114.544344][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.565470][ T28] audit: type=1400 audit(2000000015.729:3008): avc: denied { read } for pid=5850 comm="syz.4.627" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.571420][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.594084][ T28] audit: type=1400 audit(2000000015.759:3009): avc: denied { read write } for pid=5850 comm="syz.4.627" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.622453][ T28] audit: type=1400 audit(2000000015.759:3010): avc: denied { open } for pid=5850 comm="syz.4.627" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.701663][ T5855] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 114.701663][ T28] audit: type=1400 audit(2000000015.869:3011): avc: denied { mac_admin } for pid=5850 comm="syz.4.627" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.764790][ T28] audit: type=1400 audit(2000000015.889:3012): avc: denied { relabelto } for pid=5850 comm="syz.4.627" name="118" dev="tmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 114.825355][ T28] audit: type=1400 audit(2000000015.889:3013): avc: denied { associate } for pid=5850 comm="syz.4.627" name="118" dev="tmpfs" ino=666 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 114.878203][ T28] audit: type=1400 audit(2000000015.909:3014): avc: denied { write } for pid=5850 comm="syz.4.627" name="118" dev="tmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 114.950765][ T5868] loop2: detected capacity change from 0 to 8192 [ 115.000051][ T5868] loop2: p1 < > p2 p4 < p5 > [ 115.010363][ T5868] loop2: partition table partially beyond EOD, truncated [ 115.030542][ T5868] loop2: p1 start 134217728 is beyond EOD, truncated [ 115.043282][ T5868] loop2: p2 size 591360 extends beyond EOD, truncated [ 115.059019][ T5868] loop2: p5 size 591360 extends beyond EOD, truncated [ 115.452004][ T5877] loop1: detected capacity change from 0 to 256 [ 115.466537][ T5877] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.652709][ T5880] process 'syz.0.635' launched './file0' with NULL argv: empty string added [ 115.926305][ T5889] loop0: detected capacity change from 0 to 128 [ 116.033877][ T5903] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 116.260659][ T5904] loop0: detected capacity change from 0 to 256 [ 117.087383][ T5921] loop3: detected capacity change from 0 to 4096 [ 117.115324][ T5921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.220716][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.289157][ T5925] loop3: detected capacity change from 0 to 512 [ 117.315784][ T5925] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.649: invalid indirect mapped block 256 (level 2) [ 117.329216][ T5925] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 117.329749][ T5925] EXT4-fs (loop3): 2 truncates cleaned up [ 117.338924][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 117.338954][ C0] EXT4-fs (loop3): initial error at time 2000000018: ext4_free_branches:1023: inode 11 [ 117.339025][ C0] EXT4-fs (loop3): last error at time 2000000018: ext4_free_branches:1023: inode 11 [ 117.413704][ T5925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.445807][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.553573][ T5933] random: crng reseeded on system resumption [ 117.709487][ T5933] loop3: detected capacity change from 0 to 8192 [ 117.784991][ T5940] loop4: detected capacity change from 0 to 128 [ 117.809254][ T5940] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 117.853945][ T5940] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.885917][ T5940] ext2 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.886446][ T5948] ip6tnl1: entered allmulticast mode [ 117.956228][ T5950] loop3: detected capacity change from 0 to 512 [ 117.977718][ T5950] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 118.058845][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.168556][ T5955] loop2: detected capacity change from 0 to 256 [ 118.192673][ T5955] FAT-fs (loop2): bogus number of reserved sectors [ 118.201115][ T5955] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 118.211135][ T5955] FAT-fs (loop2): Can't find a valid FAT filesystem [ 120.500492][ T5956] loop1: detected capacity change from 0 to 8192 [ 120.647853][ T5965] netlink: 'syz.3.664': attribute type 39 has an invalid length. [ 120.708215][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 120.708366][ T28] audit: type=1400 audit(2000000021.869:3048): avc: denied { mounton } for pid=5952 comm="syz.1.659" path="/137/file2/file0" dev="loop1" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 120.785127][ T5979] loop4: detected capacity change from 0 to 512 [ 120.810885][ T28] audit: type=1400 audit(2000000021.929:3049): avc: denied { bind } for pid=5952 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.857567][ T5983] loop3: detected capacity change from 0 to 128 [ 120.947843][ T3303] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 120.957498][ T5979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.971960][ T3303] FAT-fs (loop1): Filesystem has been set read-only [ 120.984685][ T5983] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 121.007037][ T28] audit: type=1400 audit(2000000022.169:3050): avc: denied { write } for pid=5977 comm="syz.4.667" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.048532][ T5983] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.089946][ T5983] ext2 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.125011][ T5998] FAULT_INJECTION: forcing a failure. [ 121.125011][ T5998] name failslab, interval 1, probability 0, space 0, times 0 [ 121.140738][ T5998] CPU: 1 UID: 0 PID: 5998 Comm: syz.2.673 Not tainted syzkaller #0 PREEMPT(full) [ 121.140764][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.140777][ T5998] Call Trace: [ 121.140783][ T5998] [ 121.140791][ T5998] __dump_stack+0x1d/0x30 [ 121.140821][ T5998] dump_stack_lvl+0x95/0xd0 [ 121.140839][ T5998] dump_stack+0x15/0x1b [ 121.140956][ T5998] should_fail_ex+0x263/0x280 [ 121.140982][ T5998] should_failslab+0x8c/0xb0 [ 121.141011][ T5998] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 121.141111][ T5998] ? __alloc_skb+0x2d6/0x690 [ 121.141134][ T5998] __alloc_skb+0x2d6/0x690 [ 121.141151][ T5998] ? dib3000mc_sleep+0x170/0x350 [ 121.141182][ T5998] ? __alloc_skb+0x200/0x690 [ 121.141330][ T5998] netlink_alloc_large_skb+0xbf/0xf0 [ 121.141358][ T5998] netlink_sendmsg+0x40c/0x6f0 [ 121.141390][ T5998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.141560][ T5998] ____sys_sendmsg+0x563/0x5b0 [ 121.141587][ T5998] ___sys_sendmsg+0x195/0x1e0 [ 121.141677][ T5998] __x64_sys_sendmsg+0xd4/0x160 [ 121.141765][ T5998] x64_sys_call+0x194c/0x3020 [ 121.141789][ T5998] do_syscall_64+0x12c/0x3b0 [ 121.141865][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.141888][ T5998] RIP: 0033:0x7fa0d2afce59 [ 121.141910][ T5998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.141925][ T5998] RSP: 002b:00007fa0d1557028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.141968][ T5998] RAX: ffffffffffffffda RBX: 00007fa0d2d75fa0 RCX: 00007fa0d2afce59 [ 121.141985][ T5998] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 121.141997][ T5998] RBP: 00007fa0d1557090 R08: 0000000000000000 R09: 0000000000000000 [ 121.142009][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.142021][ T5998] R13: 00007fa0d2d76038 R14: 00007fa0d2d75fa0 R15: 00007ffdeb60bd68 [ 121.142075][ T5998] [ 121.189791][ T28] audit: type=1400 audit(2000000022.309:3051): avc: denied { write } for pid=5982 comm="syz.3.670" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.195177][ T5999] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 121.384977][ T5999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.408918][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.419570][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.460471][ T28] audit: type=1400 audit(2000000022.629:3052): avc: denied { associate } for pid=6003 comm="syz.2.676" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 121.538854][ T6016] netlink: 'syz.2.678': attribute type 39 has an invalid length. [ 121.566637][ T28] audit: type=1400 audit(2000000022.729:3053): avc: denied { read write } for pid=6019 comm="syz.3.681" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 121.632326][ T28] audit: type=1400 audit(2000000022.729:3054): avc: denied { open } for pid=6019 comm="syz.3.681" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 121.642912][ T6029] loop4: detected capacity change from 0 to 128 [ 121.731973][ T6024] loop0: detected capacity change from 0 to 256 [ 121.777689][ T6029] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 121.814230][ T6029] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.828381][ T6029] ext2 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.002186][ T28] audit: type=1400 audit(2000000023.169:3055): avc: denied { write } for pid=6027 comm="syz.4.684" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.901188][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.141786][ T28] audit: type=1400 audit(2000000024.309:3056): avc: denied { mount } for pid=6053 comm="syz.0.692" name="/" dev="configfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 123.301580][ T28] audit: type=1400 audit(2000000024.389:3057): avc: denied { search } for pid=6053 comm="syz.0.692" name="/" dev="configfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.588424][ T6061] loop4: detected capacity change from 0 to 512 [ 124.001816][ T6068] netlink: 'syz.1.697': attribute type 39 has an invalid length. [ 124.555982][ T6080] loop4: detected capacity change from 0 to 128 [ 124.596200][ T6080] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 124.708580][ T6080] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.790348][ T6080] ext2 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.895794][ T6089] loop1: detected capacity change from 0 to 512 [ 124.931329][ T6089] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.090889][ T6084] EXT4-fs error (device loop1): ext4_empty_dir:3085: inode #12: comm syz.1.702: Directory hole found for htree leaf block 0 [ 125.139640][ T6084] EXT4-fs (loop1): Remounting filesystem read-only [ 125.175759][ T6107] loop4: detected capacity change from 0 to 512 [ 125.229641][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 125.282503][ T6112] loop1: detected capacity change from 0 to 512 [ 125.726288][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 125.726304][ T28] audit: type=1400 audit(2000000026.889:3087): avc: denied { cpu } for pid=6132 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 125.768745][ T6135] set_capacity_and_notify: 1 callbacks suppressed [ 125.768767][ T6135] loop3: detected capacity change from 0 to 128 [ 125.885857][ T6135] ext4 filesystem being mounted at /149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.018112][ T28] audit: type=1400 audit(2000000027.179:3088): avc: denied { unmount } for pid=6134 comm="syz.3.721" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.550220][ T28] audit: type=1400 audit(2000000027.709:3089): avc: denied { ioctl } for pid=6152 comm="syz.1.724" path="socket:[14403]" dev="sockfs" ino=14403 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.596722][ T6156] ref_ctr increment failed for inode: 0x352 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103bc4a40 [ 126.645849][ T6149] EXT4-fs unmount: 4 callbacks suppressed [ 126.645862][ T6149] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.680031][ T28] audit: type=1400 audit(2000000027.849:3090): avc: denied { wake_alarm } for pid=6165 comm="syz.2.727" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.719912][ T6155] uprobe: syz.3.725:6155 failed to unregister, leaking uprobe [ 126.768649][ T6175] loop2: detected capacity change from 0 to 512 [ 126.797003][ T6175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 126.827702][ T6175] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.140543][ T28] audit: type=1400 audit(2000000028.309:3091): avc: denied { mount } for pid=6201 comm="syz.0.735" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 127.220972][ T6206] loop1: detected capacity change from 0 to 512 [ 127.238303][ T6206] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 127.376309][ T28] audit: type=1400 audit(2000000028.539:3092): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 127.434734][ T28] audit: type=1400 audit(2000000028.599:3093): avc: denied { create } for pid=6211 comm="syz.0.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.487021][ T28] audit: type=1400 audit(2000000028.599:3094): avc: denied { setopt } for pid=6211 comm="syz.0.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.535692][ T28] audit: type=1400 audit(2000000028.599:3095): avc: denied { write } for pid=6211 comm="syz.0.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.735075][ T6214] loop0: detected capacity change from 0 to 512 [ 127.761315][ T6214] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.739: invalid indirect mapped block 256 (level 2) [ 127.782824][ T6214] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.783471][ T6214] EXT4-fs (loop0): 2 truncates cleaned up [ 127.792725][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 127.792760][ C0] EXT4-fs (loop0): initial error at time 2000000028: ext4_free_branches:1023: inode 11 [ 127.792796][ C0] EXT4-fs (loop0): last error at time 2000000028: ext4_free_branches:1023: inode 11 [ 127.828827][ T6214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.884831][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.935386][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 128.077315][ T28] audit: type=1326 audit(2000000029.239:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.2.741" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2afce59 code=0x7ffc0000 [ 128.138760][ T6221] loop2: detected capacity change from 0 to 512 [ 128.162943][ T6221] EXT4-fs: Ignoring removed bh option [ 128.175313][ T6221] EXT4-fs: inline encryption not supported [ 128.201392][ T6221] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.252324][ T6221] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 128.269055][ T6221] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.741: bg 0: block 248: padding at end of block bitmap is not set [ 128.283497][ T6221] loop2: lost filesystem error report for type 5 error -117 [ 128.285375][ T6221] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.741: Failed to acquire dquot type 1 [ 128.292872][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 128.292902][ C1] EXT4-fs (loop2): last error at time 2000000029: ext4_validate_block_bitmap:441 [ 128.321602][ T6221] loop2: lost filesystem error report for type 5 error -28 [ 128.326314][ T6221] EXT4-fs (loop2): 1 truncate cleaned up [ 128.344895][ T6221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 128.369305][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.746'. [ 128.409061][ T6221] syz.2.741 (6221) used greatest stack depth: 8064 bytes left [ 128.442481][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 128.566714][ T6244] netlink: 132 bytes leftover after parsing attributes in process `syz.1.748'. [ 129.316750][ T6267] loop4: detected capacity change from 0 to 512 [ 129.567068][ T6254] loop1: detected capacity change from 0 to 8192 [ 129.628914][ T6254] loop1: p1 < > p2 p4 < p5 > [ 129.664413][ T6254] loop1: partition table partially beyond EOD, truncated [ 129.697134][ T6254] loop1: p1 start 134217728 is beyond EOD, truncated [ 129.703871][ T6254] loop1: p2 size 591360 extends beyond EOD, truncated [ 129.730539][ T6254] loop1: p5 size 591360 extends beyond EOD, truncated [ 129.974403][ T6288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.705450][ T6334] loop0: detected capacity change from 0 to 764 [ 130.731579][ T28] kauditd_printk_skb: 124 callbacks suppressed [ 130.731592][ T28] audit: type=1326 audit(2000000031.899:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf5751d68e code=0x7ffc0000 [ 130.768479][ T6334] Symlink component flag not implemented [ 130.777584][ T6334] Symlink component flag not implemented (116) [ 130.791307][ T28] audit: type=1326 audit(2000000031.929:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbf5755b297 code=0x7ffc0000 [ 130.816638][ T28] audit: type=1326 audit(2000000031.929:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf5751d68e code=0x7ffc0000 [ 130.842134][ T28] audit: type=1326 audit(2000000031.929:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5755ce59 code=0x7ffc0000 [ 130.867740][ T28] audit: type=1326 audit(2000000031.929:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5755ce59 code=0x7ffc0000 [ 130.893277][ T28] audit: type=1326 audit(2000000031.929:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5755ce59 code=0x7ffc0000 [ 130.939826][ T28] audit: type=1326 audit(2000000031.929:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fbf5755ce59 code=0x7ffc0000 [ 130.985853][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 131.009971][ T28] audit: type=1326 audit(2000000031.939:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5755ce59 code=0x7ffc0000 [ 131.059853][ T6339] loop0: detected capacity change from 0 to 512 [ 131.073380][ T28] audit: type=1326 audit(2000000031.949:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5755ce59 code=0x7ffc0000 [ 131.120258][ T28] audit: type=1326 audit(2000000031.949:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6333 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5755ce59 code=0x7ffc0000 [ 131.320249][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.775'. [ 131.338507][ T6350] IPVS: set_ctl: invalid protocol: 89 255.255.255.255:20000 [ 131.430447][ T6354] loop2: detected capacity change from 0 to 512 [ 131.463789][ T6354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 131.515266][ T6365] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 131.530462][ T6354] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.282971][ T6384] loop0: detected capacity change from 0 to 512 [ 132.310409][ T6384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.620519][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.834510][ T6402] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 132.935958][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.791'. [ 132.965129][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 133.097465][ T6425] loop2: detected capacity change from 0 to 512 [ 133.115483][ T6425] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 133.187745][ T6428] loop2: detected capacity change from 0 to 512 [ 133.198273][ T6428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.324858][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.522066][ T6442] gretap1: entered allmulticast mode [ 133.546112][ T6442] team0: Port device gretap1 added [ 133.560971][ T6442] bridge0: port 3(team0) entered blocking state [ 133.586531][ T6442] bridge0: port 3(team0) entered disabled state [ 133.595247][ T6442] team0: entered allmulticast mode [ 133.608124][ T6442] team_slave_0: entered allmulticast mode [ 133.614184][ T6442] team_slave_1: entered allmulticast mode [ 133.620345][ T6442] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 133.629084][ T6442] team0: entered promiscuous mode [ 133.634199][ T6442] team_slave_0: entered promiscuous mode [ 133.640218][ T6442] team_slave_1: entered promiscuous mode [ 133.640313][ T6446] netlink: 'syz.2.803': attribute type 39 has an invalid length. [ 133.646019][ T6442] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 133.661396][ T6442] gretap1: entered promiscuous mode [ 133.700634][ T6448] loop1: detected capacity change from 0 to 256 [ 133.712794][ T6448] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.736885][ T6448] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.830394][ T6455] loop2: detected capacity change from 0 to 512 [ 133.849102][ T6455] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 133.869138][ T6463] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 134.008865][ T6477] netlink: 'syz.0.816': attribute type 39 has an invalid length. [ 134.039927][ T6480] loop4: detected capacity change from 0 to 1024 [ 134.046843][ T6480] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 134.046843][ T6480] [ 134.071707][ T6480] SELinux: syz.4.817 (6480) wrote to checkreqprot. This is no longer supported. [ 134.091663][ T6480] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 134.117957][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 134.637178][ T6507] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 134.892936][ T6519] netlink: 'syz.4.829': attribute type 39 has an invalid length. [ 134.950873][ T6522] loop0: detected capacity change from 0 to 512 [ 135.113265][ T6537] gretap1: entered allmulticast mode [ 135.127528][ T6537] team0: Port device gretap1 added [ 135.143923][ T6537] bridge0: port 3(team0) entered blocking state [ 135.157297][ T6537] bridge0: port 3(team0) entered disabled state [ 135.164181][ T6537] team0: entered allmulticast mode [ 135.169481][ T6537] team_slave_0: entered allmulticast mode [ 135.175262][ T6537] team_slave_1: entered allmulticast mode [ 135.181528][ T6537] team0: entered promiscuous mode [ 135.186785][ T6537] team_slave_0: entered promiscuous mode [ 135.192549][ T6537] team_slave_1: entered promiscuous mode [ 135.198425][ T6537] gretap1: entered promiscuous mode [ 135.249287][ T6544] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 135.327832][ T6548] loop1: detected capacity change from 0 to 4096 [ 135.346840][ T6548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.418761][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.634989][ T6575] tipc: Started in network mode [ 135.641088][ T6575] tipc: Node identity ac1414aa, cluster identity 4711 [ 135.648948][ T6575] tipc: Enabling of bearer rejected, failed to enable media [ 136.098464][ T28] kauditd_printk_skb: 193 callbacks suppressed [ 136.098479][ T28] audit: type=1326 audit(2000000037.269:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbc3ce59 code=0x7ffc0000 [ 136.130450][ T28] audit: type=1326 audit(2000000037.289:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbc3ce59 code=0x7ffc0000 [ 136.214677][ T28] audit: type=1326 audit(2000000037.289:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbc3ce59 code=0x7ffc0000 [ 136.247674][ T28] audit: type=1326 audit(2000000037.289:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbc3ce59 code=0x7ffc0000 [ 136.278393][ T28] audit: type=1326 audit(2000000037.289:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f25dbc3ce59 code=0x7ffc0000 [ 136.332771][ T6597] loop4: detected capacity change from 0 to 512 [ 136.340317][ T28] audit: type=1326 audit(2000000037.289:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbc3ce59 code=0x7ffc0000 [ 136.367495][ T28] audit: type=1326 audit(2000000037.289:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbc3ce59 code=0x7ffc0000 [ 136.402590][ T6597] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.403083][ T28] audit: type=1326 audit(2000000037.289:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbc3ce59 code=0x7ffc0000 [ 136.441550][ T28] audit: type=1326 audit(2000000037.289:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f25dbc3ce59 code=0x7ffc0000 [ 136.470761][ T28] audit: type=1326 audit(2000000037.329:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f25dbc3ce59 code=0x7ffc0000 [ 136.507805][ T6597] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.859: invalid indirect mapped block 32768 (level 2) [ 136.550139][ T6597] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 136.556748][ T6597] EXT4-fs (loop4): Remounting filesystem read-only [ 136.566340][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 136.566370][ C0] EXT4-fs (loop4): initial error at time 2000000037: ext4_free_branches:1023: inode 16 [ 136.566459][ C0] EXT4-fs (loop4): last error at time 2000000037: ext4_free_branches:1023: inode 16 [ 136.614466][ T6597] EXT4-fs (loop4): 1 orphan inode deleted [ 136.623695][ T6597] EXT4-fs (loop4): 1 truncate cleaned up [ 136.632664][ T6597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.684533][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.721373][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'. [ 136.772953][ T6628] loop1: detected capacity change from 0 to 512 [ 136.819127][ T6628] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 136.858107][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 136.864582][ C1] EXT4-fs (loop1): initial error at time 2000000038: mb_free_blocks:2049: inode 11: block 64 [ 136.874796][ C1] EXT4-fs (loop1): last error at time 2000000038: mb_free_blocks:2049: inode 11: block 64 [ 136.879631][ T6628] EXT4-fs (loop1): Remounting filesystem read-only [ 136.894101][ T6636] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.873'. [ 136.946125][ T6641] loop4: detected capacity change from 0 to 128 [ 136.966855][ T6641] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 136.977543][ T6628] EXT4-fs (loop1): 1 truncate cleaned up [ 136.987702][ T6628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.000905][ T6641] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.016989][ T6641] ext2 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.076941][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.109838][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.219549][ T6656] gtp0: entered allmulticast mode [ 137.240916][ T6656] gtp0: entered promiscuous mode [ 137.254181][ T6656] team0: Device gtp0 is of different type [ 137.308392][ T6653] loop2: detected capacity change from 0 to 8192 [ 137.327579][ T6666] loop1: detected capacity change from 0 to 512 [ 137.347810][ T6653] loop2: p1 < > p2 p4 < p5 > [ 137.362153][ T6669] veth0: entered promiscuous mode [ 137.369644][ T6653] loop2: partition table partially beyond EOD, truncated [ 137.379171][ T6653] loop2: p1 start 134217728 is beyond EOD, truncated [ 137.386150][ T6653] loop2: p2 size 591360 extends beyond EOD, truncated [ 137.396489][ T6669] veth0: left promiscuous mode [ 137.405556][ T6653] loop2: p5 size 591360 extends beyond EOD, truncated [ 137.421957][ T2980] loop2: p1 < > p2 p4 < p5 > [ 137.437509][ T2980] loop2: partition table partially beyond EOD, truncated [ 137.444934][ T2980] loop2: p1 start 134217728 is beyond EOD, truncated [ 137.457148][ T2980] loop2: p2 size 591360 extends beyond EOD, truncated [ 137.467117][ T2980] loop2: p5 size 591360 extends beyond EOD, truncated [ 137.509727][ T6680] loop4: detected capacity change from 0 to 128 [ 137.524559][ T6680] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 137.561797][ T6680] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.647356][ T6680] ext2 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.736934][ T6690] loop0: detected capacity change from 0 to 4096 [ 137.746163][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.769411][ T6690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.822019][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.914241][ T6698] loop0: detected capacity change from 0 to 2048 [ 138.194603][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'. [ 138.215863][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.898'. [ 138.246806][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'. [ 138.280812][ T6712] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.901'. [ 138.306879][ T6712] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.901'. [ 138.430096][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.462886][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.093498][ T6723] loop1: detected capacity change from 0 to 4096 [ 139.104504][ T6723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.158972][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.210641][ T6730] macsec0: entered promiscuous mode [ 139.235250][ T6730] macsec0: entered allmulticast mode [ 139.244787][ T6730] veth1_macvtap: entered allmulticast mode [ 139.625487][ T6780] loop0: detected capacity change from 0 to 1764 [ 140.300455][ T6797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.362059][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.487521][ T6813] ip6tnl1: left allmulticast mode [ 140.518603][ T6813] netlink: 332 bytes leftover after parsing attributes in process `syz.2.932'. [ 140.538239][ T6813] netlink: 'syz.2.932': attribute type 9 has an invalid length. [ 140.568137][ T6813] netlink: 108 bytes leftover after parsing attributes in process `syz.2.932'. [ 140.593494][ T6813] netlink: 'syz.2.932': attribute type 6 has an invalid length. [ 141.053515][ T6822] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 141.075910][ T6822] FAT-fs (loop4): Filesystem has been set read-only [ 141.084395][ T6822] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 141.127740][ T6826] tipc: Failed to remove unknown binding: 66,2,2/0:1129528973/1129528976 [ 141.159809][ T6828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.172409][ T6828] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.192838][ T6828] netlink: 'syz.1.941': attribute type 6 has an invalid length. [ 141.201066][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 141.201077][ T28] audit: type=1326 audit(2000000043.376:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb050bdce59 code=0x7ffc0000 [ 141.252171][ T6833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.942'. [ 141.274085][ T28] audit: type=1326 audit(2000000043.406:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb050bdce59 code=0x7ffc0000 [ 141.301189][ T3303] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 141.369980][ T28] audit: type=1326 audit(2000000043.406:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb050bdce59 code=0x7ffc0000 [ 141.419224][ T6837] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 141.436034][ T28] audit: type=1326 audit(2000000043.406:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb050bdce59 code=0x7ffc0000 [ 141.471911][ T6831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.483970][ T28] audit: type=1326 audit(2000000043.406:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb050b9d68e code=0x7ffc0000 [ 141.518037][ T6841] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 141.542468][ T28] audit: type=1326 audit(2000000043.406:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb050b9d68e code=0x7ffc0000 [ 141.589180][ T28] audit: type=1326 audit(2000000043.416:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb050bdce59 code=0x7ffc0000 [ 141.615866][ T28] audit: type=1326 audit(2000000043.416:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb050bdce59 code=0x7ffc0000 [ 141.645481][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 141.664764][ T28] audit: type=1326 audit(2000000043.416:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb050bdce59 code=0x7ffc0000 [ 141.699080][ T28] audit: type=1326 audit(2000000043.416:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.1.941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fb050bdce59 code=0x7ffc0000 [ 141.708711][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 141.765439][ T68] team0: Port device netdevsim1 removed [ 141.976988][ T68] team0: left allmulticast mode [ 141.987007][ T68] team_slave_0: left allmulticast mode [ 141.996131][ T68] team_slave_1: left allmulticast mode [ 142.007270][ T68] team0: left promiscuous mode [ 142.018252][ T68] team_slave_0: left promiscuous mode [ 142.025793][ T68] team_slave_1: left promiscuous mode [ 142.032443][ T68] gretap1: left promiscuous mode [ 142.037627][ T68] bridge0: port 3(team0) entered disabled state [ 142.044630][ T68] bridge_slave_1: left allmulticast mode [ 142.051039][ T68] bridge_slave_1: left promiscuous mode [ 142.056397][ T6865] netlink: 'syz.2.949': attribute type 8 has an invalid length. [ 142.060598][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.071790][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 142.081044][ T68] bridge_slave_0: left allmulticast mode [ 142.086779][ T68] bridge_slave_0: left promiscuous mode [ 142.095666][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.157610][ T68] team0: Port device gretap1 removed [ 142.220679][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.230297][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.232723][ T6880] set_capacity_and_notify: 3 callbacks suppressed [ 142.232736][ T6880] loop4: detected capacity change from 0 to 1024 [ 142.256226][ T68] bond0 (unregistering): Released all slaves [ 142.262321][ T6880] EXT4-fs: test_dummy_encryption option not supported [ 142.301099][ T68] bond1 (unregistering): Released all slaves [ 142.423946][ T6888] loop0: detected capacity change from 0 to 512 [ 142.428809][ T6865] bond0: entered promiscuous mode [ 142.436435][ T6865] bond_slave_0: entered promiscuous mode [ 142.437007][ T6888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.457582][ T6865] bond_slave_1: entered promiscuous mode [ 142.493749][ T6865] batadv0: entered promiscuous mode [ 142.530036][ T6865] debugfs: 'hsr0' already exists in 'hsr' [ 142.548171][ T6865] Cannot create hsr debugfs directory [ 142.580510][ T6865] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 142.637602][ T6865] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 142.668910][ T6865] hsr0: entered promiscuous mode [ 142.682221][ T6865] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 142.699768][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 142.725851][ T68] tipc: Left network mode [ 142.804014][ T68] hsr_slave_0: left promiscuous mode [ 142.833182][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.873902][ T68] hsr_slave_1: left promiscuous mode [ 142.896378][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.945635][ T6899] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 143.211593][ T68] team0 (unregistering): Port device team_slave_1 removed [ 143.239467][ T68] team0 (unregistering): Port device team_slave_0 removed [ 143.391265][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 143.440912][ T6925] loop0: detected capacity change from 0 to 4096 [ 143.452951][ T6925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.522121][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 143.570572][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.584822][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.600478][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.616517][ T6845] bridge_slave_0: entered allmulticast mode [ 143.630200][ T6845] bridge_slave_0: entered promiscuous mode [ 143.644503][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.660879][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.674835][ T6845] bridge_slave_1: entered allmulticast mode [ 143.688888][ T6845] bridge_slave_1: entered promiscuous mode [ 143.732813][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.761299][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.819174][ T6845] team0: Port device team_slave_0 added [ 143.826980][ T6946] loop2: detected capacity change from 0 to 512 [ 143.839091][ T6845] team0: Port device team_slave_1 added [ 143.853576][ T6946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.902088][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.924943][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.991559][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 144.001968][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.014239][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.965'. [ 144.053804][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.089728][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.092663][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.148579][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.216507][ T6982] loop4: detected capacity change from 0 to 1024 [ 144.251436][ T6845] hsr_slave_0: entered promiscuous mode [ 144.276764][ T6982] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 144.289948][ T6845] hsr_slave_1: entered promiscuous mode [ 144.294520][ T6982] System zones: 0-1, 3-8 [ 144.300956][ T6970] loop0: detected capacity change from 0 to 512 [ 144.307585][ T6845] debugfs: 'hsr0' already exists in 'hsr' [ 144.308010][ T6982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.313354][ T6845] Cannot create hsr debugfs directory [ 144.330046][ T6982] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.358313][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 144.399445][ T6990] sg_write: data in/out 1108040255/46 bytes for SCSI command 0x0-- guessing data in; [ 144.399445][ T6990] program syz.2.967 not setting count and/or reply_len properly [ 144.421963][ T6970] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 144.744770][ T6845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.766747][ T6845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.788719][ T6845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.818059][ T6845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.846842][ T6845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.877521][ T6845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.887640][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 144.896343][ T6845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.910202][ T6845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.045197][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.065921][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.084507][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.091570][ T4355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.120850][ T6845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.131886][ T6845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.145273][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.152354][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.249877][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.329460][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.470726][ T7039] loop4: detected capacity change from 0 to 128 [ 145.503124][ T7039] tipc: Started in network mode [ 145.520950][ T7039] tipc: Node identity 0eff4c2964ad, cluster identity 4711 [ 145.546547][ T7039] tipc: Enabled bearer , priority 0 [ 145.559963][ T7048] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 145.578251][ T7051] syzkaller0: entered promiscuous mode [ 145.594770][ T7051] syzkaller0: entered allmulticast mode [ 145.630147][ T7039] tipc: Resetting bearer [ 145.648808][ T7037] tipc: Resetting bearer [ 145.656802][ T7037] tipc: Disabling bearer [ 145.680109][ T6845] veth0_vlan: entered promiscuous mode [ 145.689643][ T6845] veth1_vlan: entered promiscuous mode [ 145.704979][ T6845] veth0_macvtap: entered promiscuous mode [ 145.737540][ T7057] loop4: detected capacity change from 0 to 512 [ 145.746446][ T6845] veth1_macvtap: entered promiscuous mode [ 145.774599][ T7057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.791999][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.807253][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.819193][ T4355] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.834031][ T4355] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.859073][ T4355] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.870189][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.904723][ T7065] loop5: detected capacity change from 0 to 512 [ 145.923390][ T7065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.976773][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.013868][ T7072] loop4: detected capacity change from 0 to 128 [ 146.035914][ T7072] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 146.045907][ T7072] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.058840][ T7072] ext2 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.083669][ T6845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.093741][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.152313][ T7077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.252796][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.490687][ T7096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.503427][ T7096] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.727083][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.890893][ T7105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.979121][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 146.979136][ T28] audit: type=1400 audit(2000000049.156:3542): avc: denied { write } for pid=7104 comm="syz.2.989" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.172480][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.320388][ T7111] set_capacity_and_notify: 3 callbacks suppressed [ 147.320411][ T7111] loop4: detected capacity change from 0 to 256 [ 147.341544][ T7123] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 147.544661][ T7129] loop5: detected capacity change from 0 to 8192 [ 147.601172][ T7129] loop5: p1 < > p2 p4 < p5 > [ 147.609129][ T7129] loop5: partition table partially beyond EOD, truncated [ 147.609622][ T7132] loop4: detected capacity change from 0 to 4096 [ 147.630470][ T7129] loop5: p1 start 134217728 is beyond EOD, truncated [ 147.646086][ T7129] loop5: p2 size 591360 extends beyond EOD, truncated [ 147.659393][ T7115] ================================================================== [ 147.667457][ T7115] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 147.674720][ T7115] [ 147.677020][ T7115] write to 0xffffc9000221fe20 of 8 bytes by task 7114 on cpu 0: [ 147.684624][ T7115] shmem_fallocate+0x724/0x920 [ 147.689374][ T7115] vfs_fallocate+0x3b6/0x400 [ 147.693969][ T7115] __x64_sys_fallocate+0x7a/0xd0 [ 147.698897][ T7115] x64_sys_call+0x298e/0x3020 [ 147.703568][ T7115] do_syscall_64+0x12c/0x3b0 [ 147.708575][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.714460][ T7115] [ 147.716756][ T7115] read to 0xffffc9000221fe20 of 8 bytes by task 7115 on cpu 1: [ 147.724273][ T7115] shmem_writeout+0x2c1/0x920 [ 147.728928][ T7115] shrink_folio_list+0x1f52/0x2840 [ 147.734030][ T7115] evict_folios+0x285f/0x3370 [ 147.738690][ T7115] try_to_shrink_lruvec+0x858/0xc20 [ 147.743891][ T7115] shrink_lruvec+0x256/0x1bc0 [ 147.748547][ T7115] shrink_node+0x697/0x20a0 [ 147.753049][ T7115] do_try_to_free_pages+0x408/0xc90 [ 147.758232][ T7115] try_to_free_mem_cgroup_pages+0x201/0x420 [ 147.764127][ T7115] try_charge_memcg+0x373/0xa10 [ 147.768958][ T7115] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 147.774535][ T7115] __alloc_frozen_pages_noprof+0x18a/0x350 [ 147.780317][ T7115] alloc_pages_mpol+0xb3/0x260 [ 147.785057][ T7115] alloc_pages_noprof+0x8f/0x140 [ 147.789978][ T7115] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 147.795844][ T7115] __kvmalloc_node_noprof+0x3d4/0x640 [ 147.801190][ T7115] futex_hash_allocate+0x190/0x9a0 [ 147.806280][ T7115] futex_hash_prctl+0xd8/0xf0 [ 147.810936][ T7115] __se_sys_prctl+0x4f4/0x1400 [ 147.815675][ T7115] __x64_sys_prctl+0x67/0x80 [ 147.820240][ T7115] x64_sys_call+0x2533/0x3020 [ 147.824892][ T7115] do_syscall_64+0x12c/0x3b0 [ 147.829461][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.835346][ T7115] [ 147.837644][ T7115] value changed: 0x00000000000011d5 -> 0x00000000000011d6 [ 147.844718][ T7115] [ 147.847013][ T7115] Reported by Kernel Concurrency Sanitizer on: [ 147.853132][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.3.990 Not tainted syzkaller #0 PREEMPT(full) [ 147.862301][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.872329][ T7115] ================================================================== [ 147.916190][ T7129] loop5: p5 size 591360 extends beyond EOD, truncated [ 147.946851][ T7132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.066555][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.813156][ T28] audit: type=1400 audit(2000000056.986:3543): avc: denied { write } for pid=7138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.836182][ T28] audit: type=1400 audit(2000000056.986:3544): avc: denied { write } for pid=7149 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.227983][ T28] audit: type=1400 audit(2000000057.396:3545): avc: denied { write } for pid=7152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.251043][ T28] audit: type=1400 audit(2000000057.396:3546): avc: denied { write } for pid=7163 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.921587][ T28] audit: type=1400 audit(2000000059.096:3547): avc: denied { write } for pid=7166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.944664][ T28] audit: type=1400 audit(2000000059.096:3548): avc: denied { write } for pid=7177 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.302154][ T28] audit: type=1400 audit(2000000059.476:3549): avc: denied { write } for pid=7180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.325482][ T28] audit: type=1400 audit(2000000059.476:3550): avc: denied { write } for pid=7191 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1