last executing test programs: 7m2.707869535s ago: executing program 32 (id=28): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000280)='$}[/\x00', 0x16100, &(0x7f00000002c0)={@align=0x8, {0x9, 0x1, 0x2, 0xffffffffffffffff}}, 0x1, &(0x7f0000000300), &(0x7f0000000400)=0x8}) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x400, 0x400140) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1}, './cgroup/../file0\x00'}) removexattr(&(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000100)=@known='system.advise\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000019000100000000000000002092200000001100050000000008000f005f0b0000753ae8165110f2b353107d74b44c20b5c8ed180a86c7b71ef778960bf2961e76439c9da6d246412fe313035635f2ce9fe5616a8998449f060acffb0508a1f2e5660655ef7891966a9d06b5085e6ae7a9015289eabd480a57a20b89dce15c01a24b0b61e07ea868c23518fb7c8352804e27c39fb4dbab72469da88811b2e9e4d2782a0da9e9b6fa63709e501fdebe953274dda98a7a602ae5ecc001c7"], 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x0, 0x5, 0x2) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) futex(0x0, 0x6, 0x42, 0x0, 0x0, 0xfffffff7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0xfff) write(r6, &(0x7f0000000340)="bdf90d20fbd173a671d9d04e4c70bf9c5bc66f9bd077d97111d22c7bf050551fd91ebff8328c1a2949c239f0b20537478d7ff45b48117e08583e8e59dcd2ff7bb6db1951cc95ac3b7d5a1bdff5c53541eddfaa5e4bc75f1d3af9a4cb0a7bd8966818c3b40ab643a30ab5de7829d593d2466739ebf5fab3944246f9129ff9ade211d7f6e9e7f7d7b45e2ccd4709a9c68f27be9f947f8d35bb689b8f0000000000000000", 0xfffffe39) splice(r5, 0x0, r7, 0x0, 0x39000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x3000, 0x7, &(0x7f0000b3a000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) r9 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x19bff) openat$rtc(0xffffffffffffff9c, 0x0, 0xa600, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 6m47.589742514s ago: executing program 33 (id=158): socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) lseek(r0, 0x20, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f00000001c0)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000540)="a43b2eaab4000000000080006558", 0xe}], 0x3) 6m32.984165681s ago: executing program 5 (id=266): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x3, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x7, 0x0, 0x4, 0x0, 0x2, 0xcadf8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x6, 0x7}, 0x100004, 0x1, 0x6, 0x7, 0x10000, 0x25, 0x3, 0x0, 0xfffffffb, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000406000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3d9f0f42e934fe6c06f62546af866ea9bb38c93fa60e000000000000c937fd71f9b78c4e69"], 0x0, 0x52, 0x0, 0x0, 0x100000}, 0x28) mlockall(0x2) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 6m31.658310771s ago: executing program 5 (id=283): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000080)={[{@usrjquota}, {@jqfmt_vfsv1}, {@noinit_itable}, {@nodiscard}, {@noquota}]}, 0x5, 0x476, &(0x7f00000000c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='d'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) (async) ptrace$cont(0x21, r0, 0x80000001, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 6m31.345224929s ago: executing program 5 (id=292): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) unshare(0x48000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) 6m30.768754381s ago: executing program 5 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084110000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 6m30.767093911s ago: executing program 34 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084110000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 6m8.893869872s ago: executing program 6 (id=481): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000140", 0x58}], 0x1) 6m8.557085659s ago: executing program 6 (id=485): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x6ef7, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) recvmmsg(r2, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/29, 0x17}, 0x6}], 0x636, 0x40010003, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r3, &(0x7f0000000080)=""/200, 0xc8, 0x9) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6m8.371591523s ago: executing program 6 (id=487): syz_open_dev$evdev(0x0, 0x0, 0x822b01) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x4, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f4}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc5}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x614e00, 0x100) open_by_handle_at(r2, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb, 0xe911}}, 0x20cc03) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x64, 0x14, &(0x7f00000000c0)="517bc3fa6a82bdcc478a11adc265cc0c94ba8117908ae6fd24e8d0554962d54712e80141bba715e8ef1280c0e9ef6d7a37e3a5775781edb8c0a1cc6a21b6a1a4e86c17ff59a118039f5e08e89482a34989f3d554d1a1e260b58d6dc0b0764af695b9f5d4", &(0x7f0000000140)=""/20, 0x0, 0x0, 0xdd, 0x4b, &(0x7f00000001c0)="c1eb37e71f7e064090fb2ab8cc7f579f3974b9c7a8c9296b8f88ea1d4bb6d7acb38e2d9ff8b5a3bb006e016234595abe468e993ae95dd6b35ae4f1506d9e3a1f465201d71d00991d5f3cbaf9807ddb16792a141b121635a0c5f9b432271a388b512ab67046e836b6fedec4f7da794eac52e87dd6f62358be62c8ff2bee9dc01a102f3df2d78926664964fcfa728650d233f69947d70cc7649a01bbb612d589591407a3d4ec5f7c4c33305f58ba415ceada9e2d0e66b8aea75840ee5d3bde6eca1cfa4ec366158956634f2f3839e8b0552def47e8e78085f8c8ab68d0ad", &(0x7f00000002c0)="df64d931259f621a06bf7a5ec630afa261473dc185d9ba11df7fa53f3923d9b4746f68a1a306bc26b542124deb1d885995e6f9d789ce8a1deea7f5355fa1d1bc19af6ba3f3d2e16e8c622a", 0x2, 0x0, 0x4}, 0x50) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) lseek(0xffffffffffffffff, 0x101, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x42200, 0x0) read$rfkill(r3, &(0x7f00000001c0), 0x8) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xbfd, 0x414000) 6m6.817575948s ago: executing program 6 (id=493): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x4060, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000280)={[{@grpid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0x81}}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}]}, 0x3, 0x455, &(0x7f00000005c0)="$eJzs3MtvG0UYAPBvN49SSkko5dEHECiIiEfStAV64AAIJA5FQoIDHKMkrQJug5og0SqiKULhhBASd4Q48V/AAQlxQuIKd1SpQrk05WS09m7sOHaah11D/fup287s7Hbmy+zYszt2AuhZI9lfSeVPxVDU0msHjFT/WV1ZnLq5sjiVRLn8zt9J5bgbK4tTxaHFefvyzGgakX6exJEm9c5fuvzhZKk0czHPjy+c/2h8/tLl52fPT56bOTdz4cTp06dOTrz04okX2hJn1qYbhz+dO3rozfe/fuvMl+vib4ijTUY2K3yqXG5zdd21vy6d9HexIWxLX0Rk3TUQEX/EUPRFrfOG4o3Puto4oKPK5XJ5X+vipTJwB0tifd6Qh15RvNFn97/F1jgJeKVz04+uu/5q9QYoi3s136ol/ZHmxww03N+200hEvLf0z7fZFp15DgEAsM6P2fznuWbzvzQerDvu3nxtaDgi7ouIAxFxf0QcjIgHIirHPhQRD2+z/sZFko3zn/TajgLbomz+93K+trV+/lfM/mK4L8/tr8Q/kJydLc0cz38mozGwJ8tPbFLHT6///lWrsvr5X7Zl9Rdzwbwd1/r3rD9nenJhcjcx17t+NeJwf7P4k7WVgCQiDkXE4R3WMfvMD0dbld06/k20YZ2p/F3E09X+X4qG+AtJvj65/HM137A+OX5XlGaOjxdXxUa//rb8dqv6dxV/G2T9f3fT638t/uGkfr12fvt1LP/5Rct7mp1e/4PJu5X0YL7vk8mFhYsTEYPJmWqj6/efqJ1b5Ivjs/hHjzUf/wei9pM4EhHZRfxIRDwaEY/lbX88Ip6IiGObxP/La09+sPP4OyuLf3pb/V9LDEbjnqaJ1Q2VDteSefw3N+//U5XUaL5nK69/W2jXDq9mAAAA+P9JI+KeSNKxtXSajo1VPy9/MCItzc0vPHt27uML01lZ5flnWjzpGqp7HjqR39ZX81cjovrRgqL8ZP7c+Ju+vZX82NRcabrbwUOP29di/Gf+6ut264CO830t6F3GP/Qu4x96l/EPvavJ+N/bjXYAt1+z9/8rXWgHcPs1jH/LftBD3P9D72o5/u/k3/wDVHj/h540vzdu/SX5WuL7KxuKiv9pK6f3UiIG/hPN2H2inDTt3Ei73TCJTia6+7oEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQLv8GAAD//9Qx3JQ=") socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0xe4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) dup(0xffffffffffffffff) timerfd_create(0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x2000)=nil) 6m6.367863678s ago: executing program 6 (id=499): mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b00), 0x2000000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000540)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000540)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) (async) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c32, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000940), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r6) keyctl$read(0xb, r6, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r7, 0xc0105303, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') ptrace$ARCH_SET_CPUID(0x1e, r2, 0x0, 0x1012) 6m5.896194519s ago: executing program 6 (id=505): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 6m5.896105068s ago: executing program 35 (id=505): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 2m12.951484112s ago: executing program 4 (id=2727): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) ioprio_set$pid(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0xc000) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cfb}], 0x75, 0x5000, 0x0, 0x3) 2m12.752872747s ago: executing program 4 (id=2729): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0xa) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x2, 0x9}, 0x800, 0x2, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000030000001c000000200001801400020076657468315f766972745f776966690008000100", @ANYRES32=r9], 0x34}, 0x1, 0x0, 0x0, 0xb4cc7b9586dc8dbf}, 0x4) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x104, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010027bd7000fddbdf250500000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x8890}, 0x0) 2m10.115717357s ago: executing program 4 (id=2738): io_uring_setup(0x1b7c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048800}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@init_itable}]}, 0x1, 0xbb5, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000200)='./file1\x00', 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008084}, 0x4040040) r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0xff01, 0x3) 2m9.836389214s ago: executing program 4 (id=2743): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@nodiscard}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@data_err_ignore}, {@debug}]}, 0xff, 0x45c, &(0x7f0000000d80)="$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") r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000300)={0x0, 0x0, 0x100, 0x0, 0x2}) fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x214000, 0x800}, 0x20) keyctl$search(0xa, 0x0, &(0x7f0000000440)='.request_key_auth\x00', 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000001c0)=0x0) setpriority(0x1, r9, 0x5) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 2m9.635140218s ago: executing program 4 (id=2745): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffff89ffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000000000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000020004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) accept$packet(r0, 0x0, &(0x7f0000000240)) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a00)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc3, 0xc3, 0xb, [@datasec={0x9, 0xa, 0x0, 0xf, 0x3, [{0x1, 0xfffffff9, 0xadd}, {0x5, 0x1, 0x3ab8}, {0x5, 0x6, 0x3}, {0x2, 0x3580, 0xb224}, {0x1, 0x0, 0x7fff}, {0x5, 0x2, 0x1}, {0x5, 0x7ff, 0x2}, {0x3, 0x6, 0x3}, {0x3, 0x1, 0x9}, {0x4, 0x3, 0x5}], "a8685b"}, @ptr={0x7, 0x0, 0x0, 0x2, 0x4}, @ptr={0x8, 0x0, 0x0, 0x2, 0x2}, @const={0x3, 0x0, 0x0, 0xa, 0x4}, @union={0x2, 0x1, 0x0, 0x5, 0x1, 0x400, [{0xb, 0x0, 0x1}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x1, 0x5f, 0x30, 0x30, 0x0, 0x61]}}, &(0x7f0000000a00)=""/4096, 0xe7, 0x1000, 0x0, 0x200, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001bc0)={0xffffffffffffffff, 0x20, &(0x7f0000001b80)={&(0x7f0000001ac0)=""/42, 0x2a, 0x0, &(0x7f0000001b00)=""/111, 0x6f}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1, 0xffffffffffffffff}, &(0x7f0000001c00), &(0x7f0000001c40)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0xb, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0xeb, &(0x7f0000000300)=""/235, 0x40f00, 0x5f, '\x00', r7, @fallback=0x15, r8, 0x8, &(0x7f0000001a40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0xf, 0x0, 0xff}, 0x10, r9, 0xffffffffffffffff, 0x1, &(0x7f0000001cc0)=[r4, r10], &(0x7f0000001d00)=[{0x3, 0x4, 0x5, 0x8}], 0x10, 0x200}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) 2m8.501309344s ago: executing program 4 (id=2753): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000c0000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b03"], 0xfdef) 2m8.485248844s ago: executing program 36 (id=2753): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000c0000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b03"], 0xfdef) 1m1.231924436s ago: executing program 7 (id=3162): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x6, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) mlockall(0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x9004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17b, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x8a) syz_clone3(&(0x7f0000000700)={0x4084000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x1f}, &(0x7f00000004c0)=""/244, 0xf4, &(0x7f00000005c0)=""/209, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000780)={0x0, 0x3, 0x400, 0xd, r2}) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(0xffffffffffffffff, 0x406, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0x1c) r5 = dup2(r4, r4) write$tun(r5, 0x0, 0xb2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 1m0.079279532s ago: executing program 7 (id=3168): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aae000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x104}}, 0x0) 1m0.004114483s ago: executing program 7 (id=3169): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)={[{@nojournal_checksum}, {@orlov}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") (async) r0 = memfd_create(&(0x7f0000000240)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd4\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1fffffffffffd}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010040, &(0x7f00000000c0), 0x1, 0x5ba, &(0x7f0000000240)="$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") (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) (async) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) (async) setpgid(0x0, r5) (async) fchdir(r4) (async) listxattr(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f00000010c0)='./file1/file3\x00', 0x100, 0x1) (async, rerun: 32) r6 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) (rerun: 32) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) (rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8}, 0x38) (async, rerun: 32) sendmsg$AUDIT_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x3e9, 0x2, 0x70bd26, 0x25dfdbff, {0x11, 0x1, 0x0, 0x0, 0xfffff000, 0xffffffff, 0x39c4, 0xfffffff7, 0x0, 0x9, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x2) (rerun: 32) open(0x0, 0x0, 0x14) 59.968307514s ago: executing program 7 (id=3170): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$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") r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000) r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) 59.580251613s ago: executing program 7 (id=3172): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") socket$xdp(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000003000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 58.192022255s ago: executing program 7 (id=3177): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') (fail_nth: 1) 58.191573165s ago: executing program 37 (id=3177): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') (fail_nth: 1) 18.769589792s ago: executing program 8 (id=3420): socket(0x840000000002, 0x3, 0x100) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002"], 0x310) 18.702198414s ago: executing program 8 (id=3421): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) socket$inet(0x2, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00db5fe4ceb3b26fde713c00000206010800000000000000000000004005000100060000000500050073797a3180000000110003006861736a3a69702c6d61726b000000000000000000000000ff00000000000000"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000001240)='+}\\)>&^}\x00', 0xa0882, &(0x7f00000001c0)={@align=0x2, {0xa, 0x4, 0x7, 0xf80000000000}}, 0xf6, 0x0, 0x0}) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, 0x0, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1, 0x1}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x40006, 0x5) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000040)={@remote, r8}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000e7ffff07000340"], 0x88}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 18.304037123s ago: executing program 8 (id=3424): pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TCFLSH(r0, 0x541b, 0x7ffffffffffffffe) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) (async) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140), 0xffffffffffffff2d) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendfile(r2, r1, 0x0, 0xf03a0005) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x440c0) (async) close(0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socket(0x11, 0x3, 0x0) (async, rerun: 32) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) (async, rerun: 64) write$cgroup_subtree(r5, 0x0, 0x32600) (rerun: 64) getsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 32) 18.135599717s ago: executing program 8 (id=3425): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) migrate_pages(0x0, 0x4, &(0x7f0000000180)=0x1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0xc000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={0x0}) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) 16.409213296s ago: executing program 8 (id=3431): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="380100001000010027bd700000010000fe880000000000000000000000000001ac14143d000000000000000000000000000107144e230405000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000101000004d46c00000000000000000000000000000000000000000000000000000004000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000fbffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcfaffff000000002abd7000043500000a0001002000000000000000480003006465666c6174650000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 15.528282916s ago: executing program 8 (id=3436): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 15.412377909s ago: executing program 38 (id=3436): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 15.097351596s ago: executing program 9 (id=3444): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000010340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008840) r2 = fcntl$getown(r1, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="d80000001000810468f70082db44b904021d080b01000000e8fe55a118001500060014fe800000120800040043000000a80016000a00014006000600000010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x2, 0x10001, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) close_range(r4, r4, 0x2) bind$inet6(r4, &(0x7f0000001800)={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsync(r5) 14.776167493s ago: executing program 9 (id=3447): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x82c00, 0x6b0ebd178df2bd79) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x1, 0x10019, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c5f83f1886fb50e076a3aa47b8b01c3e296834cc07fac507844c139228110a7002dc8aada05a7c0bda02f7ff87fdc11bc403000000000000000000006667c388", "ee221bd6914010cf943aaaf1069be93a8dc7d78055821a5718fd6b88965c471e", [0x3, 0x6]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fsmount(0xffffffffffffffff, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', r4, 0x0, 0x41) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) getpgid(0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a000700726f757465"], 0xf4}}, 0x10) 14.47375474s ago: executing program 9 (id=3448): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x8, 0x0, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r0, 0x80000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFC_CMD_DEP_LINK_UP(r1, 0x0, 0x4800) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x800, 0x2, 0x209}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x2f) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e371340018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x8, 0x0, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace$cont(0x21, r0, 0x80000001, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r1, 0x0, 0x4800) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x800, 0x2, 0x209}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x2f) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e371340018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) (async) timer_settime(0x0, 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 14.145528428s ago: executing program 9 (id=3452): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x1, 0x452, &(0x7f0000000140)="$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") r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000006c0), 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2801c}, 0x20) r3 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3}, {0x0, 0xf}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8e, 0x0, 0x100000}, 0x20) r8 = syz_clone(0x30000000, 0x0, 0xffffffffffffff67, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) socket$nl_xfrm(0x10, 0x3, 0x6) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b002d62248dbc8e10f55116000000001b000007000000000000ffe0bdab427dd1af91e71b366f56d2d5a4453f37de034900d24f71eb2448f253051c28f904000000e198c72fed9b6e73a8c164792ac2ecb6d615c1243ec7c42abdcab2cf59902a9a4b0c929f34d46cefc12b7497f3fa7200a689bf079cccfd4e5bd1fd5cb5c9cb71833a5e3621c0e475f7c7fe0cbbb93d012e12ef904d64b968a133b9588724cc3717cd5cc834ac2f5f54c07b828ca1f4dcc6af17ab8fc81e7a32df209967fcb7d63078a4a018f96d0000", @ANYBLOB="2fbae76472eecdfbef41803c4a74ba28c01685b9a13ee16ac39a401bd06e54f9795aef8c29b3be67680dcef3fa84a0ad45781d34854f072aa9eb6a04426990db4de3f966482b0df5c1aaed371498c5d855219c91dd2173e7ec3d61467530dcf0f02f3b07abcf7a748a33a8171b34bfc6a988665355dd5700ca98ca12daa3a9cc518e3317bb19d380795c", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000004040000002e0e0700000000000000bd32a2c8160300000000b2db612578e22f5c930ac35530904ee5b473a9dc85467851c76fca31e55b8c2b5f0d489e967d186f2ae30874ce933c06b79fd600"/92], 0x50) 13.412245334s ago: executing program 9 (id=3463): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) r2 = mq_open(&(0x7f0000000000)='`atadv_sbave_1\x00\xee\x80\v\xdb\xaf\xa3|\\\xce\x8c\xabs^\xb4\xbde2\xb3\xb9\xb1t\xb9\xcc\x99\x98\xa7]\xfc=\x81Q2\x05a\x99\xbc\xa9zc\x9fw\xc3\xa8\x16\x8c\b\x00G\xf5&\x8c\r\xa7\x8e\x89\xb1 \x8e\xc4r\xfa\xa8>\xcb\xdf\x99Z\xd6[0\xafCb\xe7\x99{p\xcc\"\xd4\xaa9v\b\xab\x1e\x88D\xf4\x03\x14\x9fl7\x13t/\xfar\xdfT\xfb\x17`\xc4\xec\xc8\f\x14u\xf4\xa6\xf4\x94.\x16\xca}9\x8a@\x10\xb2\xfd\xc3\x88\xac\x9e;z\xa1', 0x8c2, 0x30, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0xfd, 0x2}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa3b2c9156b10badcb"], 0x0) ftruncate(r2, 0x20000000003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r4, &(0x7f0000001900)=[{&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x3, 0x4004, 0x0) getpid() 13.060016162s ago: executing program 9 (id=3471): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x82c00, 0x6b0ebd178df2bd79) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x1, 0x10019, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c5f83f1886fb50e076a3aa47b8b01c3e296834cc07fac507844c139228110a7002dc8aada05a7c0bda02f7ff87fdc11bc403000000000000000000006667c388", "ee221bd6914010cf943aaaf1069be93a8dc7d78055821a5718fd6b88965c471e", [0x3, 0x6]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fsmount(0xffffffffffffffff, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', r4, 0x0, 0x41) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) getpgid(0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a000700726f757465"], 0xf4}}, 0x10) 13.059508712s ago: executing program 39 (id=3471): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x82c00, 0x6b0ebd178df2bd79) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x1, 0x10019, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c5f83f1886fb50e076a3aa47b8b01c3e296834cc07fac507844c139228110a7002dc8aada05a7c0bda02f7ff87fdc11bc403000000000000000000006667c388", "ee221bd6914010cf943aaaf1069be93a8dc7d78055821a5718fd6b88965c471e", [0x3, 0x6]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fsmount(0xffffffffffffffff, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', r4, 0x0, 0x41) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) getpgid(0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a000700726f757465"], 0xf4}}, 0x10) 5.520232014s ago: executing program 2 (id=3531): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x3, 0x9, 0x8}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendto$inet6(r0, &(0x7f00000000c0)="11", 0x1, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 1.905322306s ago: executing program 2 (id=3538): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x3, 0x1, 0x401}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x80, @private2, 0x40}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}], 0x84) setsockopt$inet_mreqn(r1, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @broadcast}, 0xc) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/226, 0xe2}, 0x718}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/13, 0xd}, 0x2}], 0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000003000000002dbd7000fedbdf2502102007fd04fd01001a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x10048090}, 0x24000000) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x614e00, 0x100) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xe000, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.786023229s ago: executing program 0 (id=3539): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x110, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @multicast2, 0x37d9281a700b31cd, 0xffffff00, 'veth0_vlan\x00', 'syzkaller0\x00', {}, {0xff}, 0xc, 0x0, 0x71}, 0x74000002, 0xe0, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@ttl={{0x28}, {0x3, 0x2c}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6, 0xb}, {0xffffffffffffffff, 0x2}, 0x101}}}, {{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', {}, {}, 0x62, 0x2}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0xffffff00, 0xff000000, 0xffffff, 0xff000000], 0x4e32, 0x1, 0x5, 0x4e21, 0x10, 0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x2], 0x1, 0xb}, {0x24, [0x2, 0x4, 0x7, 0x8e6edc646ec3eb3b, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x0, 0x4, 0x4]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 1.693655231s ago: executing program 0 (id=3541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a30000000002c000000030a01010000000000000000010024000900030073797a31000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800d00010073796e70726f7879000000000c000280060001400001000008000b40000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 1.619994053s ago: executing program 0 (id=3544): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x100000001, 0x8}, 0x10c0e8, 0x0, 0x0, 0x3, 0x9, 0x8004, 0x7fff, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x400000000000126, 0xc040) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700880000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x80, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc011}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r5, 0x29, 0xb, 0x8, 0xfffffc01, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00', 0x80, 0x7, 0x8001, 0x8d}}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000005c0)={r10, 0x1, 0x6, @remote}, 0x10) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000040), 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x44}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0xfffffffb, 0x5, 0xa, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r14, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x5, 0x5, 0x74, 0x7, 0x0, 0x200, 0x2000000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x0, @perf_config_ext={0x200000000003, 0x5}, 0x2, 0x2, 0x5, 0x3, 0x10, 0x628b, 0x2000, 0x0, 0x3, 0x0, 0xb}) r15 = socket(0x1, 0x803, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x60, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 1.531531955s ago: executing program 5 (id=3472): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") close(0xffffffffffffffff) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x18, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in6=@mcast2, 0x0, 0x32}, @in=@private=0xa010101, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x3, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}, 0x80ff}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x2000000, 0x1, 0x70bd28}}]}, 0x154}}, 0x800) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)={0x1, "5ca37109df26814c0023749d"}, 0x14, 0x800) syz_clone(0x40000200, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1.483822946s ago: executing program 1 (id=3549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB, @ANYRESOCT=r0, @ANYRES32, @ANYRES32=r1], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x382, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1000000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2}, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0xfffffffffffffff7}, 0x1a2a, 0x35, 0x4, 0x6, 0x4, 0x364, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000480a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) 1.088614655s ago: executing program 2 (id=3552): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r4, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/60, 0x3c}], 0x1, 0x4, 0x880) io_setup(0x9, &(0x7f0000001d00)) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000300)=0x4) (async) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000300)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) (async) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0xc08f, 0x40, 0x4, 0x318}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000380), 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) (async) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ff, 0x80000000000000}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x180, r9, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x97b}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000845}, 0x890) (async) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x180, r9, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x97b}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000845}, 0x890) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) 1.082038775s ago: executing program 0 (id=3554): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111790000000000851000000200000085000000340000009500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xd832e000) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xe6, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}], {0x95, 0x0, 0x0, 0x1200}}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 916.623569ms ago: executing program 5 (id=3555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000001200000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 826.703221ms ago: executing program 1 (id=3556): perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x41104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0x3}, 0x11540, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x4, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000008000000000000000900000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018220000", @ANYRES32=0x1, @ANYBLOB="00000000090000000d000f000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000e10100000000000004000000186900000700000000000000080000009500000000000000575a1e694c86841677121a6e76ef764f4ca877ea5b804d5033f0bb0fb3d9e42ca55b314dc1c5a7f126fe6bf50e41c125dccf8849791f1d543b03620fbf18ff14f15f033eaf97"], &(0x7f00000007c0)='syzkaller\x00', 0x1c, 0xfc, &(0x7f0000000800)=""/252, 0x41100, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x0, 0xf, 0xd, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xfffffffa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x12, r0, 0xdc44e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r4, 0x80186e83, &(0x7f0000000040)) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x7fffffffffffffff}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="383431034e1af5e8490d71000000000000000000", @ANYRES32=r8, @ANYBLOB="c3840500808101001800128008000100677470000c00028008000100", @ANYRES32=r7, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r8, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) 781.789742ms ago: executing program 1 (id=3557): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=ANY=[@ANYBLOB="400000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88801200500180012800e000100776972656775617264000000043d0724e1d2bf710002800800040003feff0038fadacab012c33a16912081e1c9cd025cf3bd7a8ec132f0d9e093a749b6fe9db98f9a7f8c856cec014b473a5b4d43c264c4c23d9cc2b4b1994613998310661dbf081a7987f36a965da16431b92efe7e0658e7117fe89143a0612047001892f1de7e45d9bc563eb745665e3dc12669cd330197ad2de166f225eead72d5ad380638fa0d9dcdbfd27415700740939fa13e38f625db2c407aaf02419069a3d72d5a4e3a20bc876467fc60f181fffb76e9277386626c9cfe4422fe9e0f01"], 0x40}}, 0x440088c4) 708.001424ms ago: executing program 1 (id=3558): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x7, @loopback, 0xd1}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0x29, 0x0, [0x2, 0x6, 0x9, 0x582d, 0x2000000, 0x6, 0x7, 0x81, 0x4, 0x800, 0x6, 0x4, 0x0, 0x7, 0x0, 0xbe]}, {0x22, 0x0, [0x9, 0x40, 0x4, 0x9, 0x5, 0x8, 0x8b1b, 0x9, 0x10001, 0x7, 0xfffffffe, 0x5, 0x2, 0x6, 0xffffffc0, 0x9]}, {0x10, 0x0, [0x7ff, 0x6, 0x3, 0x6, 0xf43, 0xb, 0x3, 0x9, 0x6, 0x1, 0x1, 0x422b, 0x7, 0x4, 0x61a4, 0xffff]}], r1, 0x1, 0x1, 0xd8}}, 0x20) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x1080000, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') 652.170315ms ago: executing program 1 (id=3560): socket(0x840000000002, 0x3, 0x100) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002"], 0x310) 612.438376ms ago: executing program 1 (id=3562): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x3}, 0x4, 0x0, 0x7ff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) unshare(0x26040680) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x0, 0xf3}) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x3d, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0xfffffffc}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x5d2, &(0x7f0000000cc0)="$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") add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x72) openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) 612.173946ms ago: executing program 3 (id=3563): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000100000001"], 0xfdef) 540.161967ms ago: executing program 0 (id=3564): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x30000000, 0x0, 0x4000015}, 0x2c000010) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) 539.841847ms ago: executing program 0 (id=3565): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x3, 0x1, 0x401}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x18}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_config_ext={0xb, 0x6}, 0x14411, 0xc8, 0x200, 0x3, 0xfffffffffffffff7, 0x0, 0x7fff, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8112032900fc08000000000200875a65969ff57b00fc"], 0xfdef) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @broadcast}, 0xc) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/226, 0xe2}, 0x718}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/13, 0xd}, 0x2}], 0x2, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x614e00, 0x100) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800718, &(0x7f0000000180)={[{@resuid={'resuid', 0x3d, 0xee01}}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2000000000000060}}, {@nodiscard}, {@lazytime}, {@resuid}, {@nombcache}, {@noblock_validity}, {@bh}, {@debug}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xc}}, {@dax}]}, 0x22, 0x4aa, &(0x7f0000000f80)="$eJzs3MtrXFUYAPDv3jz7TKz10Vo1WoSgmDRp1S7cKAoiFQVd1GVMpiV02kgTwT6wUcSVIAVdi0vRv0DciCDqSnAluHIlhaLZtHUVuTP3JplJJm2aSSZkfj+YzDlzz51zvrmvc8+ZSQBtayD7k0Tsjog/I6Kvmq0tMFB9ujl3efzW3OXxJObn3/wnqZS7MXd5vCharLcrzwymEenHSV5JrekLF8+Mlcul83l+eOZsT54cO106XTo3evz4saMjzz07+kxT4sziunHwg6lDB155++pr4yevvvPLt1l7d+fLl8axRn8MN1gwkAX+73xF/bIn7rKyrWrPknTS2cKGsCYdEZFtrq7K8d8XHbG48fri5Y9a2jhgQ/Wsvnh2HtjGst480I6KC/3OuY7x7B54+X1w30Z1PbaE6y9Ub4CyuG/mj+qSzkjzMl1197fNNBARJ2f/+zJ7xPrGIQAA7sin41+c6I6IS7e+eTXreyz29tLO+yvPf1X+7s17gv0RcU9E7IuIeyNif0TcFxFZ2Qci4sF1tmd5/ye9ts63XFXW/3s+n9uq7f8Vvb/o78hzeyrxdyWnJsulI/lnMhhdPVl+ZJU6fnjp988aLVva/8seWf1FXzBvx7XOukG6ibGZsUqntAmufxhxsDNJlsefLMwEJBFxICIOru2t9xaJySe/PtSo0O3jX0UT5pnmv8rCm822/2zUxV9IqvOT7w5PX7j49OTZ+vnJ4d4ol44MF3vFcr/+9skbjeqvxt+b5/L45/tq4t+x/jAbul6qPi/Z/kuWLhwDi/O1082t/073/6Vz0hNjM2l38lZlnrk7f+39sZmZ8yMR3cmJSr7m9dHFdYt8UT7b/wcPr3z878vXyep+KCKynfjhiHgkIh7N2/5YRDweEYdXifHnF28ff6R3sf83QRb/xIrnv4VPvD+p2f5rT3Sc+em7RvXf2fY/VkkN5q9Uzn91krr8Ss3pjOipa2D9agAAALAtpZXvwCfp0EI6TYeGqt/h3x870/LU9MxTp6beOzdR/a58f3SlxUhXXz4eWp4sl0aS2fwdq+Ojo/lYcTFeejQfN/68Y0clPzQ+VZ5ocezQ7nY1OP4zf3e0unXABuuuyRUTwKPdLWkMsMnq59HT2uyV18PJALYrv9eG9nWb4z/drHYAm8/1H9rXSsf/lbq8uQDYnlz/oX05/qFNpT+u+PL3m94QoBVc/6Etred3/RuY6N0azWhNYrM3SqypcBSJtOUfVLMSvbElmtEgUfz7l1XKXMqLNLP2Fp6UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmuj/AAAA//8NLdKk") ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x1d2f0, 0x402000, 0xf, 0xadea, 0x800000}) 510.135948ms ago: executing program 3 (id=3566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 418.453141ms ago: executing program 3 (id=3567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x4005, &(0x7f0000000080)=0x10000000004, 0xd) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a3000f500002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300dbbcaf6f08000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xd4}}, 0x0) 336.186902ms ago: executing program 3 (id=3568): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020e0080150000000200000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400", @ANYRES64=r0], 0xa8}, 0x1, 0x300}, 0x2) 335.970562ms ago: executing program 2 (id=3569): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0xa) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$evdev(0x0, 0x2, 0x8000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x2, 0x9}, 0x800, 0x2, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000030000001c000000200001801400020076657468315f766972745f7769666900080001"], 0x34}, 0x1, 0x0, 0x0, 0xb4cc7b9586dc8dbf}, 0x4) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x104, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fddbdf250500000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x8890}, 0x0) 335.903332ms ago: executing program 3 (id=3570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174005c000000060a010400000000000000000100000008000b40000000000900010073797a30000000003400048030000180080001006e6174002400028008000240679349b9080004400000000c0800034000000009080001"], 0xec}}, 0x0) 286.758083ms ago: executing program 3 (id=3571): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffff89ffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000000000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000020004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) accept$packet(r0, 0x0, &(0x7f0000000240)) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a00)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc3, 0xc3, 0xc, [@datasec={0x9, 0xa, 0x0, 0xf, 0x3, [{0x1, 0xfffffff9, 0xadd}, {0x5, 0x1, 0x3ab8}, {0x5, 0x6, 0x3}, {0x2, 0x3580, 0xb224}, {0x1, 0x0, 0x7fff}, {0x5, 0x2, 0x1}, {0x5, 0x7ff, 0x2}, {0x3, 0x6, 0x3}, {0x3, 0x1, 0x9}, {0x4, 0x3, 0x5}], "a8685b"}, @ptr={0x7, 0x0, 0x0, 0x2, 0x4}, @ptr={0x8, 0x0, 0x0, 0x2, 0x2}, @const={0x3, 0x0, 0x0, 0xa, 0x4}, @union={0x2, 0x1, 0x0, 0x5, 0x1, 0x400, [{0xb, 0x0, 0x1}]}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x0, 0x1, 0x5f, 0x30, 0x30, 0x0, 0x61]}}, &(0x7f0000000a00)=""/4096, 0xe8, 0x1000, 0x0, 0x200, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001bc0)={0xffffffffffffffff, 0x20, &(0x7f0000001b80)={&(0x7f0000001ac0)=""/42, 0x2a, 0x0, &(0x7f0000001b00)=""/111, 0x6f}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1, 0xffffffffffffffff}, &(0x7f0000001c00), &(0x7f0000001c40)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0xb, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0xeb, &(0x7f0000000300)=""/235, 0x40f00, 0x5f, '\x00', r7, @fallback=0x15, r8, 0x8, &(0x7f0000001a40)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x1, &(0x7f0000001cc0)=[r4, r10], &(0x7f0000001d00)=[{0x3, 0x4, 0x5, 0x8}], 0x10, 0x200}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) 219.464645ms ago: executing program 2 (id=3572): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") r0 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r0, &(0x7f0000000040)=""/204, 0xcc, 0x12002, &(0x7f0000000280)=@hci={0x1f, 0x4, 0x1}, 0x80) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0xc000) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket(0x15, 0x800, 0x2d0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket(0x26, 0x3, 0x2ab) brk(0x55555ede6001) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) write$snapshot(r6, &(0x7f0000000000)="dd", 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040051}, 0x4000000) prlimit64(0x0, 0xf, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) 0s ago: executing program 2 (id=3573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x518, &(0x7f0000000180)="$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") ioctl$PIO_SCRNMAP(r1, 0x4b41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40083, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8805, 0x4, @perf_config_ext={0x7, 0x200000000000}, 0xc3, 0x0, 0x10bfe, 0xc08209d7a90684a1, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x9) r2 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x90, &(0x7f0000000740), 0x1, 0x7b2, &(0x7f00000009c0)="$eJzs3c9rXNUeAPDvnfxq077XPHjw2rdpVloonbQ1tgqCERciWCjoVtswmYaYSaZkJqUJWbSIIIigxYWgG9dV686t6Nq/wY2ItFRNgxUXMnLnR5Lmd9KZTNt8PnCTc+6cO+d87517z5m5h5kA9qz+9E8m4khEfJhEHKqvTyKiq5rqjBiqlbs/P5dLlyQqldd/S6plFubncrFsm9SBeuZwRHz3bsTxzOp6SzOz48OFQn6qnh8oT1weKM3MnhibGB7Nj+Ynz5waHDx99tmzZ5oX6x8/zB6889ErT3819Nc7/7v1wfdJDMXB+mPL42iW/uiv75OudBc+4OVmV9ZmSbsbwI6kp2ZH7SyPI3EoOqopAOBJlvb/FQBgj0n0/wCwxzQ+B1iYn8s1lvZ+IrG77r4UEftq8Tfub9Ye6azfs9tXvQ/au5BEZ/2OaOrNJtXfHxGfffPWF+mS5hc6bzbpmQE2du16RFzs6199/U9WzVnYrpNbKNO/Ir/X+h9op2/T8c9za43/Movjn1gc/yzpWePc3Yn+iO7l+dXnf+b2mhu+2ITK6+O/F2pz29JA6+O/5FrtzlhVX0f9Ptm/0szRiBgr5NNr278j4lh09VwaK+RPbVDHsXt/31vvseXjv99vvH0zrT/9v1Qic7uz58FtRobLww8Z9qK71yP+37k0t68afzX02vV/f31u18rjn647v9ETH11Kvvr8e5+uVyyNP423sayOv7Uqn0c8FSvir1qa0ZZsOD9xID38J2t/167j658+6V2v/uXHP13S+hvvBdbRvfNoV0uPf+/G8fcly+drlppZ+1biX/v13528UU03dsbV4XJ56lREd/La6vWnl7Zt5Bvl0/hrka6Mf+n6t9brP30neHGLMXbe+fXLnce/qCVTLNP4R7Z1/LefuHV/vGPn8afHf7CaOlZfs5Xr31Yb+DD7DgAAAAAAAAAAAAAAAAAAAAAAAAC2KhMRByPJZBfTmUw2W/sN7/9Gb6ZQLJWPXypOT45E9bey+6Ir0/iqy0O1fNL4/tO+ZfnTK/LPRMR/IuLjnv3VfDZXLIy0O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqDuwzu//p37paXfrAICW2bdpiXv5B7KVSqXSwvYAAK23ef8PADxpNuj/9+9mOwCA3eP9PwDsPfp/ANh79P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC02Plz59Kl8uf8XC7Nj1yZmR4vXjkxki+NZyemc9lccepydrRYHC3ks7nixGbPVygWLw/G5PTVgXK+VB4ozcxemChOT5YvjE0Mj+Yv5Lt2JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7SzOz4cKGQn3oiEu9HxCPQjFYkkngkmtGWxM8nfjy8UZkbm7yMhx6JKB6zRLuvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPh38CAAD//4BhJWs=") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x88000, 0x1) open_by_handle_at(r3, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80480, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)={r4, 0xe, 0xaa4}) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0x5, 0x6, 0x200, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x4008000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [{{0x254, 0x1, {{0x3, 0x1}, 0x9d, 0x7, 0xc, 0xc2a, 0x1, 'syz0\x00', "4df6189fc887bfeea9f2170baa7696144122611f822011c37536a70ecedf6bf1", "469b13f6455ed787424765d2bb5eff2fc4d8a640462230ef01e651416c00e6f0", [{0x1, 0x4, {0x2, 0x350}}, {0x1, 0x2, {0x3, 0x2d0a15d9}}, {0x5, 0xc4dd, {0x1, 0x7}}, {0x3ff, 0x6c2, {0x1, 0x6}}, {0x2, 0x7fff, {0x3, 0x8}}, {0x8, 0xb000}, {0x6, 0xff75, {0x0, 0xff}}, {0xfffa, 0x60, {0x2, 0x1}}, {0x1000}, {0x9, 0x3ff, {0x2}}, {0x5, 0x6, {0x0, 0x3}}, {0x4, 0x3, {0x2, 0x9}}, {0x3, 0x3ff, {0x0, 0x7}}, {0x7, 0x2, {0x1, 0x5}}, {0x53, 0x488, {0x0, 0xf}}, {0x3, 0x61, {0x2, 0x2}}, {0x1e, 0x0, {0x2, 0x3a11}}, {0xb1, 0x18, {0x3, 0x6}}, {0x7ff8, 0x7, {0x0, 0xf44}}, {0x3, 0x8, {0x0, 0x3}}, {0x7, 0x0, {0x0, 0x1}}, {0x1000, 0x0, {0x3, 0x800}}, {0x8001, 0xffff, {0x2, 0x4}}, {0x0, 0x73, {0x1, 0x101}}, {0xff, 0xa4d, {0x3, 0x4}}, {0x2, 0x3, {0x0, 0x101}}, {0xf41e, 0x7f, {0x1, 0x9}}, {0xd630, 0x9, {0x2, 0x9}}, {0xb, 0x5, {0x3, 0x100}}, {0x1, 0x14, {0x1, 0x7}}, {0x0, 0x840a, {0x0, 0x8}}, {0x9, 0x4, {0x2, 0x8a}}, {0x8, 0x2, {0x1, 0x3}}, {0x6, 0x7, {0x1, 0x3}}, {0x1, 0x8000, {0x3, 0x8}}, {0x800, 0x6, {0x0, 0x80000000}}, {0xc3fc, 0x1, {0x0, 0x4}}, {0x0, 0x9, {0x3, 0xac}}, {0x2, 0x7, {0x3, 0x80000000}}, {0x8d0, 0xa, {0x1, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4040800}, 0x44) kernel console output (not intermixed with test programs): ] RSP: 002b:00007f1fe7e57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.341473][T14768] RAX: ffffffffffffffda RBX: 00007f1fe9685fa0 RCX: 00007f1fe93fde99 [ 402.341534][T14768] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 402.341546][T14768] RBP: 00007f1fe7e57090 R08: 0000000000000000 R09: 0000000000000000 [ 402.341558][T14768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.341570][T14768] R13: 00007f1fe9686038 R14: 00007f1fe9685fa0 R15: 00007ffe23ba09d8 [ 402.341591][T14768] [ 402.394327][T14768] debugfs: out of free dentries, can not create file 'netdev@ffff88812820c5e0' [ 402.635209][T14760] EXT4-fs (loop2): 1 truncate cleaned up [ 402.693442][T14760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.776872][T14160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.823362][T14781] loop8: detected capacity change from 0 to 4096 [ 402.838080][T14783] tipc: Started in network mode [ 402.844396][T14783] tipc: Node identity , cluster identity 4711 [ 402.853515][T14783] tipc: Failed to obtain node identity [ 402.860594][T14783] tipc: Enabling of bearer rejected, failed to enable media [ 402.895944][T14781] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.917512][T14783] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3132'. [ 402.931668][ T28] audit: type=1400 audit(1784579257.678:11394): avc: denied { write } for pid=14779 comm="syz.8.3131" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.012907][T11180] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.027945][T14785] loop2: detected capacity change from 0 to 512 [ 403.035028][T14785] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 403.071197][T14785] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 1024 [ 403.168550][T14791] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3135'. [ 403.195639][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3135'. [ 403.293045][T10835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.334998][ T28] audit: type=1326 audit(1784579258.088:11395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.3138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164709de99 code=0x7ffc0000 [ 403.364964][T14799] netlink: 'syz.1.3138': attribute type 4 has an invalid length. [ 403.375610][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 403.396999][T14802] netlink: 'syz.8.3139': attribute type 1 has an invalid length. [ 403.404952][ T28] audit: type=1326 audit(1784579258.108:11396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.3138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164709de99 code=0x7ffc0000 [ 403.415149][T14802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 403.435927][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 403.452974][ T28] audit: type=1326 audit(1784579258.108:11397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.3138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164709de99 code=0x7ffc0000 [ 403.478727][ T28] audit: type=1326 audit(1784579258.108:11398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.3138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f164709de99 code=0x7ffc0000 [ 403.513600][ T28] audit: type=1326 audit(1784579258.108:11399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.3138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164709de99 code=0x7ffc0000 [ 403.827580][T14813] syz_tun: entered allmulticast mode [ 404.457087][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 404.457104][ T28] audit: type=1326 audit(1784579259.208:11452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.3138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f164709de99 code=0x7ffc0000 [ 404.619896][ T28] audit: type=1400 audit(1784579259.308:11453): avc: denied { write } for pid=14817 comm="syz.1.3144" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 404.689159][ T28] audit: type=1400 audit(1784579259.308:11454): avc: denied { listen } for pid=14817 comm="syz.1.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 404.838146][T14835] lo speed is unknown, defaulting to 1000 [ 404.889586][ T28] audit: type=1400 audit(1784579259.348:11455): avc: denied { shutdown } for pid=14822 comm="syz.1.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 404.910180][ T28] audit: type=1400 audit(1784579259.348:11456): avc: denied { read } for pid=14822 comm="syz.1.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 405.041149][T14837] xt_ecn: cannot match TCP bits for non-tcp packets [ 405.105076][T14838] netlink: 'syz.7.3148': attribute type 10 has an invalid length. [ 405.116028][T14838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.125915][T14838] team0: Port device netdevsim2 added [ 405.139433][T14837] netlink: 'syz.7.3148': attribute type 10 has an invalid length. [ 405.167123][T14837] team0: Port device netdevsim2 removed [ 405.184096][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.205693][T14837] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 405.275818][ T28] audit: type=1400 audit(1784579259.428:11457): avc: denied { mount } for pid=14822 comm="syz.1.3146" name="/" dev="hugetlbfs" ino=41857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 405.311740][T14834] syzkaller1: entered promiscuous mode [ 405.381767][T14834] syzkaller1: entered allmulticast mode [ 405.795014][T14829] uprobe: syz.2.3149:14829 failed to unregister, leaking uprobe [ 405.805303][T14829] uprobe: syz.2.3149:14829 failed to unregister, leaking uprobe [ 405.814663][T14850] loop9: detected capacity change from 0 to 4096 [ 405.831914][T14850] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.931876][T14854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.957413][ T28] audit: type=1400 audit(1784579260.688:11458): avc: denied { write } for pid=14849 comm="syz.9.3153" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 405.990524][T14854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.124175][T13227] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.200959][T14866] Unknown options in mask 6faf [ 406.254056][T14868] loop9: detected capacity change from 0 to 512 [ 406.281200][T14868] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.319047][T14868] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.379673][T13227] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.203482][T14882] loop8: detected capacity change from 0 to 512 [ 407.410178][T14882] EXT4-fs: Ignoring removed oldalloc option [ 407.474237][T14882] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 407.509220][T14882] EXT4-fs (loop8): orphan cleanup on readonly fs [ 407.534463][T14882] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 407.587799][T14882] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 407.617451][T14882] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.3161: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 407.671725][T14882] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 407.672523][T14882] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3161: couldn't read orphan inode 13 (err -117) [ 407.681982][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 407.682022][ C1] EXT4-fs (loop8): last error at time 1784579262: ext4_ext_check_inode:521: inode 13 [ 407.721097][T14895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3167'. [ 407.736179][ T28] audit: type=1400 audit(1784579262.468:11459): avc: denied { write } for pid=14894 comm="syz.1.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 407.774060][T14898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3168'. [ 407.792744][T14882] loop8: lost filesystem error report for type 5 error -117 [ 407.807201][T14882] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 407.833001][T14901] loop7: detected capacity change from 0 to 512 [ 407.900683][T14907] loop7: detected capacity change from 0 to 512 [ 407.918913][T14907] EXT4-fs: Ignoring removed nobh option [ 407.968665][T14905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14905 comm=syz.1.3167 [ 408.065830][T14907] EXT4-fs (loop7): 1 orphan inode deleted [ 408.072136][T14907] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.128611][T14907] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.7.3170: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 408.217070][T14388] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 408.263143][T14388] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 408.301833][T14388] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 408.317345][T11180] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.867334][T14388] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.880116][ T3489] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.038708][ T3489] bond0: (slave netdevsim2): Releasing backup interface [ 409.069575][ T3489] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.141229][T14926] FAULT_INJECTION: forcing a failure. [ 409.141229][T14926] name failslab, interval 1, probability 0, space 0, times 0 [ 409.219279][T14926] CPU: 1 UID: 0 PID: 14926 Comm: syz.1.3176 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 409.219313][T14926] Tainted: [W]=WARN [ 409.219359][T14926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 409.219371][T14926] Call Trace: [ 409.219378][T14926] [ 409.219385][T14926] __dump_stack+0x1d/0x30 [ 409.219412][T14926] dump_stack_lvl+0x95/0xd0 [ 409.219465][T14926] dump_stack+0x15/0x1b [ 409.219482][T14926] should_fail_ex+0x25e/0x270 [ 409.219512][T14926] should_failslab+0x8c/0xb0 [ 409.219534][T14926] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 409.219567][T14926] ? security_inode_alloc+0x37/0x100 [ 409.219618][T14926] ? security_inode_alloc+0x37/0x100 [ 409.219647][T14926] security_inode_alloc+0x37/0x100 [ 409.219700][T14926] inode_init_always_gfp+0x495/0x4e0 [ 409.219733][T14926] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 409.219762][T14926] alloc_inode+0x58/0x170 [ 409.219785][T14926] new_inode+0x1d/0xe0 [ 409.219806][T14926] __debugfs_create_file+0x97/0x2b0 [ 409.219827][T14926] debugfs_create_file_full+0x3f/0x60 [ 409.219895][T14926] ? __pfx_geneve_setup+0x10/0x10 [ 409.219926][T14926] ref_tracker_dir_debugfs+0x10e/0x220 [ 409.219961][T14926] alloc_netdev_mqs+0x1a9/0xa90 [ 409.220063][T14926] rtnl_create_link+0x239/0x720 [ 409.220098][T14926] rtnl_newlink_create+0x175/0x650 [ 409.220128][T14926] rtnl_newlink+0x1181/0x1400 [ 409.220201][T14926] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 409.220272][T14926] ? hrtimer_start_range_ns+0x108/0x120 [ 409.220306][T14926] ? __rcu_read_unlock+0x4e/0x70 [ 409.220333][T14926] ? avc_has_perm_noaudit+0xa3/0x120 [ 409.220355][T14926] ? cred_has_capability+0x224/0x2a0 [ 409.220394][T14926] ? selinux_capable+0x31/0x40 [ 409.220419][T14926] ? security_capable+0x7b/0x90 [ 409.220443][T14926] ? ns_capable+0x80/0xb0 [ 409.220556][T14926] ? __pfx_rtnl_newlink+0x10/0x10 [ 409.220581][T14926] rtnetlink_rcv_msg+0x64b/0x720 [ 409.220610][T14926] netlink_rcv_skb+0x11e/0x220 [ 409.220649][T14926] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.220743][T14926] rtnetlink_rcv+0x1c/0x30 [ 409.220761][T14926] netlink_unicast+0x5a7/0x680 [ 409.220784][T14926] netlink_sendmsg+0x5be/0x6f0 [ 409.220814][T14926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.220914][T14926] ____sys_sendmsg+0x532/0x580 [ 409.220943][T14926] ___sys_sendmsg+0x195/0x1e0 [ 409.221028][T14926] __x64_sys_sendmsg+0xd4/0x160 [ 409.221103][T14926] x64_sys_call+0x194c/0x3020 [ 409.221124][T14926] do_syscall_64+0x136/0x3c0 [ 409.221193][T14926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.221219][T14926] RIP: 0033:0x7f164709de99 [ 409.221235][T14926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.221304][T14926] RSP: 002b:00007f1645af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.221366][T14926] RAX: ffffffffffffffda RBX: 00007f1647325fa0 RCX: 00007f164709de99 [ 409.221461][T14926] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 409.221476][T14926] RBP: 00007f1645af7090 R08: 0000000000000000 R09: 0000000000000000 [ 409.221528][T14926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.221539][T14926] R13: 00007f1647326038 R14: 00007f1647325fa0 R15: 00007ffc09c477d8 [ 409.221563][T14926] [ 409.221912][T14915] loop9: detected capacity change from 0 to 4096 [ 409.560421][T14926] debugfs: out of free dentries, can not create file 'netdev@ffff88811a5335e0' [ 409.676954][T14930] sctp: [Deprecated]: syz.1.3178 (pid 14930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.676954][T14930] Use struct sctp_sack_info instead [ 409.724906][ T3489] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.811312][ T3489] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.835392][T14927] loop2: detected capacity change from 0 to 128 [ 409.848223][T14915] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 409.898268][T14927] EXT4-fs: Ignoring removed i_version option [ 409.980878][T14931] lo speed is unknown, defaulting to 1000 [ 410.006949][ T3489] bridge_slave_1: left allmulticast mode [ 410.017857][T14915] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 410.048168][ T3489] bridge_slave_1: left promiscuous mode [ 410.063893][T14927] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.085077][ T3489] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.121139][T14927] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 410.174617][T14955] loop8: detected capacity change from 0 to 4096 [ 410.186757][T14955] EXT4-fs (loop8): bad geometry: block count 261888 exceeds size of device (512 blocks) [ 410.198134][ T3489] bridge_slave_0: left allmulticast mode [ 410.209634][ T3489] bridge_slave_0: left promiscuous mode [ 410.216055][T13227] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.230604][T14927] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.3175: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 410.250127][ T3489] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.271769][T14927] EXT4-fs (loop2): Remounting filesystem read-only [ 410.307338][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3181'. [ 410.350356][T14960] netlink: 'syz.9.3182': attribute type 1 has an invalid length. [ 410.776389][ T28] audit: type=1400 audit(1784579265.528:11460): avc: denied { write } for pid=14946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.068940][ T3489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.187799][ T3489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.209878][ T28] audit: type=1400 audit(1784579265.958:11461): avc: denied { write } for pid=14971 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.289235][ T3489] bond0 (unregistering): Released all slaves [ 411.324892][T14960] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 411.372345][T14975] loop9: detected capacity change from 0 to 512 [ 411.389319][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 411.464580][T14975] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.499822][T14975] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.597421][ T3489] hsr_slave_0: left promiscuous mode [ 411.607895][T13227] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.620812][ T3489] hsr_slave_1: left promiscuous mode [ 411.643125][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.688600][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.726725][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.755800][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.786350][ T3489] veth1_macvtap: left promiscuous mode [ 411.800740][ T3489] veth0_macvtap: left promiscuous mode [ 411.817342][ T3489] veth1_vlan: left promiscuous mode [ 411.890018][ T3489] veth0_vlan: left promiscuous mode [ 411.949674][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3189'. [ 412.002592][ T28] audit: type=1400 audit(1784579266.748:11462): avc: denied { write } for pid=14979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.089649][T15001] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 412.089649][T15001] program syz.9.3188 not setting count and/or reply_len properly [ 412.218621][ T28] audit: type=1400 audit(1784579266.948:11463): avc: denied { write } for pid=15000 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.144193][ T3489] team0 (unregistering): Port device team_slave_1 removed [ 413.609728][ T3489] team0 (unregistering): Port device team_slave_0 removed [ 413.934997][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 414.191676][ T28] audit: type=1400 audit(1784579268.938:11464): avc: denied { write } for pid=15016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.276108][ T28] audit: type=1326 audit(1784579269.018:11465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15034 comm="syz.9.3197" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc60e23de99 code=0x0 [ 414.335134][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 414.353413][ T28] audit: type=1400 audit(1784579269.028:11466): avc: denied { write } for pid=15033 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.378331][T15037] loop9: detected capacity change from 0 to 512 [ 414.525736][ T28] audit: type=1400 audit(1784579269.278:11467): avc: denied { write } for pid=15039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.591783][ T28] audit: type=1400 audit(1784579269.338:11468): avc: denied { write } for pid=15050 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.648471][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24 [ 414.676419][T15037] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.3197: iget: bad i_size value: 38620345925642 [ 414.694931][T14160] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 414.721056][T15037] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 414.721303][T15037] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3197: couldn't read orphan inode 15 (err -117) [ 414.730494][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 414.730530][ C1] EXT4-fs (loop9): initial error at time 1784579269: ext4_orphan_get:1399: inode 15 [ 414.730565][ C1] EXT4-fs (loop9): last error at time 1784579269: ext4_orphan_get:1399: inode 15 [ 414.923394][T14931] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.931322][T15037] loop9: lost filesystem error report for type 5 error -117 [ 414.931992][T15037] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.979684][T14931] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.001234][T14931] bridge_slave_0: entered allmulticast mode [ 415.094066][ T28] audit: type=1400 audit(1784579269.788:11469): avc: denied { write } for pid=15034 comm="syz.9.3197" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.193559][T15073] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3197: bg 0: block 5: invalid block bitmap [ 415.234109][T15073] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 415.320439][T15073] EXT4-fs (loop9): This should not happen!! Data will be lost [ 415.320439][T15073] [ 415.368506][T15073] EXT4-fs (loop9): Total free blocks count 0 [ 415.395479][T15073] EXT4-fs (loop9): Free/Dirty block details [ 415.420599][T15073] EXT4-fs (loop9): free_blocks=0 [ 415.439095][T15073] EXT4-fs (loop9): dirty_blocks=1744 [ 415.477434][T15073] EXT4-fs (loop9): Block reservation details [ 415.503901][T15073] EXT4-fs (loop9): i_reserved_data_blocks=1744 [ 415.541590][T14931] bridge_slave_0: entered promiscuous mode [ 415.559633][T14931] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.566785][T14931] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.574016][T14931] bridge_slave_1: entered allmulticast mode [ 415.580471][T14931] bridge_slave_1: entered promiscuous mode [ 415.600545][T15069] lo speed is unknown, defaulting to 1000 [ 415.601699][T14931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.624788][T14931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.671083][T14931] team0: Port device team_slave_0 added [ 415.717581][T14931] team0: Port device team_slave_1 added [ 415.728050][ T321] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 1736 with error 28 [ 415.755120][T14931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.759243][T13227] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 415.762625][T14931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.844005][T14931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.876924][T14931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.891069][T14931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.972574][T15083] loop9: detected capacity change from 0 to 7 [ 415.972587][T14931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.005816][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.015436][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.023634][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.033244][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.044199][T15083] loop9: unable to read partition table [ 416.051715][T15083] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 416.061515][T14931] hsr_slave_0: entered promiscuous mode [ 416.069623][T14931] hsr_slave_1: entered promiscuous mode [ 416.087662][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.097285][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.105734][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.115345][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.123601][T14931] debugfs: 'hsr0' already exists in 'hsr' [ 416.129608][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.139222][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.148571][T14931] Cannot create hsr debugfs directory [ 416.154429][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.164038][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.183088][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 416.192721][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 416.335537][T15091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.517980][T15091] loop2: detected capacity change from 0 to 512 [ 416.699769][T15091] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 416.749903][T15098] lo speed is unknown, defaulting to 1000 [ 417.309000][T15091] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.3205: corrupted xattr entries [ 417.350489][T15091] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 417.350724][T15091] EXT4-fs (loop2): Remounting filesystem read-only [ 417.359949][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 417.359968][ C1] EXT4-fs (loop2): initial error at time 1784579272: xattr_find_entry:337: inode 15 [ 417.360020][ C1] EXT4-fs (loop2): last error at time 1784579272: xattr_find_entry:337: inode 15 [ 417.620424][T15091] EXT4-fs (loop2): 1 truncate cleaned up [ 417.635964][T15091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.243364][T14160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.259108][ T28] audit: type=1400 audit(1784579273.008:11470): avc: denied { search } for pid=15110 comm="syz.9.3207" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 418.589477][T15121] FAULT_INJECTION: forcing a failure. [ 418.589477][T15121] name failslab, interval 1, probability 0, space 0, times 0 [ 418.619441][T15122] loop8: detected capacity change from 0 to 128 [ 418.661881][T15122] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 418.678581][T15121] CPU: 1 UID: 0 PID: 15121 Comm: syz.9.3210 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 418.678724][T15121] Tainted: [W]=WARN [ 418.678732][T15121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 418.678743][T15121] Call Trace: [ 418.678749][T15121] [ 418.678756][T15121] __dump_stack+0x1d/0x30 [ 418.678818][T15121] dump_stack_lvl+0x95/0xd0 [ 418.678843][T15121] dump_stack+0x15/0x1b [ 418.678864][T15121] should_fail_ex+0x25e/0x270 [ 418.678960][T15121] should_failslab+0x8c/0xb0 [ 418.678986][T15121] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 418.679008][T15121] ? security_inode_alloc+0x37/0x100 [ 418.679029][T15121] ? security_inode_alloc+0x37/0x100 [ 418.679091][T15121] security_inode_alloc+0x37/0x100 [ 418.679179][T15121] inode_init_always_gfp+0x495/0x4e0 [ 418.679204][T15121] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 418.679233][T15121] alloc_inode+0x58/0x170 [ 418.679255][T15121] new_inode+0x1d/0xe0 [ 418.679423][T15121] __debugfs_create_file+0x97/0x2b0 [ 418.679444][T15121] debugfs_create_file_full+0x3f/0x60 [ 418.679465][T15121] ? __pfx_geneve_setup+0x10/0x10 [ 418.679500][T15121] ref_tracker_dir_debugfs+0x10e/0x220 [ 418.679576][T15121] alloc_netdev_mqs+0x1a9/0xa90 [ 418.679607][T15121] rtnl_create_link+0x239/0x720 [ 418.679764][T15121] rtnl_newlink_create+0x175/0x650 [ 418.679795][T15121] rtnl_newlink+0x1181/0x1400 [ 418.679830][T15121] ? __siphash_unaligned+0x185/0x2d0 [ 418.679895][T15121] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 418.679929][T15121] ? __rcu_read_unlock+0x4e/0x70 [ 418.679958][T15121] ? avc_has_perm_noaudit+0xa3/0x120 [ 418.680038][T15121] ? cred_has_capability+0x224/0x2a0 [ 418.680059][T15121] ? selinux_capable+0x31/0x40 [ 418.680084][T15121] ? security_capable+0x7b/0x90 [ 418.680212][T15121] ? ns_capable+0x80/0xb0 [ 418.680247][T15121] ? __pfx_rtnl_newlink+0x10/0x10 [ 418.680288][T15121] rtnetlink_rcv_msg+0x64b/0x720 [ 418.680311][T15121] netlink_rcv_skb+0x11e/0x220 [ 418.680332][T15121] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.680359][T15121] rtnetlink_rcv+0x1c/0x30 [ 418.680430][T15121] netlink_unicast+0x5a7/0x680 [ 418.680484][T15121] netlink_sendmsg+0x5be/0x6f0 [ 418.680515][T15121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.680578][T15121] ____sys_sendmsg+0x532/0x580 [ 418.680608][T15121] ___sys_sendmsg+0x195/0x1e0 [ 418.680726][T15121] __x64_sys_sendmsg+0xd4/0x160 [ 418.680764][T15121] x64_sys_call+0x194c/0x3020 [ 418.680785][T15121] do_syscall_64+0x136/0x3c0 [ 418.680864][T15121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.680887][T15121] RIP: 0033:0x7fc60e23de99 [ 418.680904][T15121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.680929][T15121] RSP: 002b:00007fc60cc97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.680953][T15121] RAX: ffffffffffffffda RBX: 00007fc60e4c5fa0 RCX: 00007fc60e23de99 [ 418.680967][T15121] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 418.680979][T15121] RBP: 00007fc60cc97090 R08: 0000000000000000 R09: 0000000000000000 [ 418.680991][T15121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.681021][T15121] R13: 00007fc60e4c6038 R14: 00007fc60e4c5fa0 R15: 00007ffe01a87938 [ 418.681039][T15121] [ 418.682946][T15121] debugfs: out of free dentries, can not create file 'netdev@ffff88811b09d5e0' [ 419.171207][T15122] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 419.182048][ T28] audit: type=1400 audit(1784579273.918:11471): avc: denied { write } for pid=15108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.221438][ T28] audit: type=1400 audit(1784579273.968:11472): avc: denied { write } for pid=15129 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.315348][T14931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 419.341274][T14931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.394729][T14931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 419.448318][T14931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.488450][T14931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 419.531168][T14931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.564553][T14931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 419.605056][T14931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.644133][ T28] audit: type=1400 audit(1784579274.388:11473): avc: denied { write } for pid=15136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.741148][ T28] audit: type=1400 audit(1784579274.488:11474): avc: denied { write } for pid=15156 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.858819][T14931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.900742][T14931] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.909701][ T28] audit: type=1400 audit(1784579274.658:11475): avc: denied { write } for pid=15160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.915691][T15166] loop8: detected capacity change from 0 to 4096 [ 419.953543][ T2042] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.960677][ T2042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.967938][ T28] audit: type=1400 audit(1784579274.708:11476): avc: denied { write } for pid=15177 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.985660][T15174] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 420.013571][T15166] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.050912][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.058037][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.130991][ T28] audit: type=1400 audit(1784579274.868:11477): avc: denied { write } for pid=15162 comm="syz.8.3215" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.168269][T14931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.197600][T14931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.262979][T15130] loop2: detected capacity change from 0 to 512 [ 420.313774][T15139] loop9: detected capacity change from 0 to 4096 [ 420.335372][T15130] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.3208: corrupted in-inode xattr: invalid ea_ino [ 420.349241][T15130] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 420.353964][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 420.369551][ C0] EXT4-fs (loop2): initial error at time 1784579275: ext4_iget_extra_inode:5180: inode 15 [ 420.379454][ C0] EXT4-fs (loop2): last error at time 1784579275: ext4_iget_extra_inode:5180: inode 15 [ 420.471724][T15130] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3208: couldn't read orphan inode 15 (err -117) [ 420.485706][T15130] loop2: lost filesystem error report for type 5 error -117 [ 420.534869][T15130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.587652][T15139] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 420.666828][ T9] hid (null): global environment stack underflow [ 420.673679][ T9] hid (null): invalid report_count 32885 [ 420.680244][ T9] hid (null): report_id 39430 is invalid [ 420.705132][ T9] hid (null): unknown global tag 0x29 [ 420.724201][ T9] hid (null): unknown global tag 0x6e [ 420.739881][ T9] hid (null): unknown global tag 0xd [ 420.757459][ T9] hid (null): unknown global tag 0xb4 [ 420.774416][ T9] hid (null): unknown global tag 0x3e [ 420.793590][T14931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.800979][ T9] hid (null): invalid report_size 53655 [ 420.825230][ T9] hid (null): unknown global tag 0x41 [ 420.843849][ T9] hid (null): unknown global tag 0xe [ 420.875839][ T9] hid (null): unknown global tag 0xd [ 420.893505][ T9] hid (null): unknown global tag 0xc [ 420.906814][ T9] hid (null): unknown global tag 0xe5 [ 420.924270][ T9] hid (null): unknown global tag 0xa9 [ 420.940345][ T9] hid (null): invalid report_size 46122 [ 420.993503][ T9] hid (null): global environment stack overflow [ 421.003989][ T9] hid (null): invalid report_count 59035 [ 421.020988][T14931] veth0_vlan: entered promiscuous mode [ 421.026657][ T9] hid (null): unknown global tag 0xc [ 421.032541][ T9] hid (null): unknown global tag 0xd [ 421.042215][T14931] veth1_vlan: entered promiscuous mode [ 421.048473][ T9] hid (null): unknown global tag 0xd [ 421.059308][ T9] hid (null): unknown global tag 0xe [ 421.070766][T14931] veth0_macvtap: entered promiscuous mode [ 421.076601][ T9] hid (null): invalid report_count 21358 [ 421.084194][T14931] veth1_macvtap: entered promiscuous mode [ 421.090028][ T9] hid (null): unknown global tag 0xe [ 421.097097][ T9] hid (null): unknown global tag 0xe [ 421.107809][T14931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.115399][ T9] hid (null): global environment stack overflow [ 421.125950][ T9] hid (null): unknown global tag 0xc [ 421.131287][T14931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.138906][ T9] hid (null): bogus close delimiter [ 421.149202][ T4642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.158727][ T9] hid (null): global environment stack overflow [ 421.168121][ T4642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.177345][ T9] hid (null): unknown global tag 0xe [ 421.182764][ T9] hid (null): invalid report_count -1752952980 [ 421.189336][ T4642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.198363][ T9] hid (null): unknown global tag 0xc [ 421.204666][ T9] hid (null): unknown global tag 0xe9 [ 421.210755][ T9] hid-generic 0800:0008:0441.0006: unknown main item tag 0x2 [ 421.218910][ T9] hid-generic 0800:0008:0441.0006: global environment stack underflow [ 421.227272][ T9] hid-generic 0800:0008:0441.0006: item 0 0 1 11 parsing failed [ 421.235353][ T9] hid-generic 0800:0008:0441.0006: probe with driver hid-generic failed with error -22 [ 421.270102][ T3489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.270233][T15139] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 421.315433][ T28] audit: type=1400 audit(1784579276.068:11478): avc: denied { write } for pid=15181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.374096][T14160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.397883][T13227] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.426647][ T28] audit: type=1400 audit(1784579276.168:11479): avc: denied { write } for pid=15218 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.462633][T11180] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.737969][T15245] bridge0: port 3(veth1_macvtap) entered blocking state [ 421.764652][T15245] bridge0: port 3(veth1_macvtap) entered disabled state [ 421.795197][T15245] veth1_macvtap: entered allmulticast mode [ 421.819033][T15245] veth1_macvtap: left allmulticast mode [ 421.836644][T15257] Unknown options in mask 6faf [ 421.871030][T15261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3219'. [ 423.314891][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 423.314905][ T28] audit: type=1400 audit(1784579278.058:11486): avc: denied { create } for pid=15306 comm="syz.0.3235" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 424.295367][ T28] audit: type=1400 audit(1784579278.788:11487): avc: denied { read write } for pid=15306 comm="syz.0.3235" name="file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 424.524827][ T28] audit: type=1400 audit(1784579278.788:11488): avc: denied { open } for pid=15306 comm="syz.0.3235" path="/5/file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 424.596057][ T28] audit: type=1400 audit(1784579279.068:11489): avc: denied { ioctl } for pid=15306 comm="syz.0.3235" path="/5/file0" dev="tmpfs" ino=44 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 424.707017][ T28] audit: type=1400 audit(1784579279.458:11490): avc: denied { unlink } for pid=14931 comm="syz-executor" name="file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 424.758106][ T28] audit: type=1400 audit(1784579279.498:11491): avc: denied { nlmsg_write } for pid=15338 comm="syz.0.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 424.848840][T15351] FAULT_INJECTION: forcing a failure. [ 424.848840][T15351] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 424.868061][ T28] audit: type=1400 audit(1784579279.618:11492): avc: denied { write } for pid=15336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.898896][T15351] CPU: 1 UID: 0 PID: 15351 Comm: syz.0.3245 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 424.898934][T15351] Tainted: [W]=WARN [ 424.898942][T15351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 424.899018][T15351] Call Trace: [ 424.899026][T15351] [ 424.899035][T15351] __dump_stack+0x1d/0x30 [ 424.899062][T15351] dump_stack_lvl+0x95/0xd0 [ 424.899085][T15351] dump_stack+0x15/0x1b [ 424.899106][T15351] should_fail_ex+0x25e/0x270 [ 424.899196][T15351] should_fail_alloc_page+0xf2/0x100 [ 424.899223][T15351] __alloc_frozen_pages_noprof+0x108/0x350 [ 424.899299][T15351] alloc_pages_mpol+0xa9/0x1d0 [ 424.899331][T15351] alloc_pages_noprof+0x8f/0x140 [ 424.899363][T15351] get_free_pages_noprof+0xc/0x40 [ 424.899431][T15351] selinux_genfs_get_sid+0x33/0x180 [ 424.899460][T15351] inode_doinit_with_dentry+0x606/0x7b0 [ 424.899497][T15351] selinux_d_instantiate+0x27/0x40 [ 424.899525][T15351] security_d_instantiate+0x76/0x90 [ 424.899605][T15351] d_make_persistent+0x49/0x110 [ 424.899627][T15351] __debugfs_create_file+0x14e/0x2b0 [ 424.899654][T15351] debugfs_create_file_full+0x3f/0x60 [ 424.899680][T15351] ? __pfx_geneve_setup+0x10/0x10 [ 424.899799][T15351] ref_tracker_dir_debugfs+0x10e/0x220 [ 424.899838][T15351] alloc_netdev_mqs+0x1a9/0xa90 [ 424.899953][T15351] rtnl_create_link+0x239/0x720 [ 424.899989][T15351] rtnl_newlink_create+0x175/0x650 [ 424.900015][T15351] ? security_capable+0x7b/0x90 [ 424.900040][T15351] ? netlink_ns_capable+0x86/0xa0 [ 424.900142][T15351] rtnl_newlink+0x1181/0x1400 [ 424.900171][T15351] ? __siphash_unaligned+0x185/0x2d0 [ 424.900209][T15351] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 424.900300][T15351] ? __rcu_read_unlock+0x4e/0x70 [ 424.900329][T15351] ? avc_has_perm_noaudit+0xa3/0x120 [ 424.900355][T15351] ? cred_has_capability+0x224/0x2a0 [ 424.900375][T15351] ? selinux_capable+0x31/0x40 [ 424.900443][T15351] ? security_capable+0x7b/0x90 [ 424.900466][T15351] ? rtnetlink_rcv_msg+0x300/0x720 [ 424.900497][T15351] ? __pfx_rtnl_newlink+0x10/0x10 [ 424.900524][T15351] rtnetlink_rcv_msg+0x64b/0x720 [ 424.900572][T15351] netlink_rcv_skb+0x11e/0x220 [ 424.900599][T15351] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.900628][T15351] rtnetlink_rcv+0x1c/0x30 [ 424.900651][T15351] netlink_unicast+0x5a7/0x680 [ 424.900673][T15351] netlink_sendmsg+0x5be/0x6f0 [ 424.900703][T15351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.900809][T15351] ____sys_sendmsg+0x532/0x580 [ 424.900846][T15351] ___sys_sendmsg+0x195/0x1e0 [ 424.900905][T15351] __x64_sys_sendmsg+0xd4/0x160 [ 424.900942][T15351] x64_sys_call+0x194c/0x3020 [ 424.900968][T15351] do_syscall_64+0x136/0x3c0 [ 424.901054][T15351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.901079][T15351] RIP: 0033:0x7fa53035de99 [ 424.901124][T15351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.901142][T15351] RSP: 002b:00007fa52edb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.901165][T15351] RAX: ffffffffffffffda RBX: 00007fa5305e5fa0 RCX: 00007fa53035de99 [ 424.901180][T15351] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 424.901195][T15351] RBP: 00007fa52edb7090 R08: 0000000000000000 R09: 0000000000000000 [ 424.901248][T15351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.901263][T15351] R13: 00007fa5305e6038 R14: 00007fa5305e5fa0 R15: 00007ffd34e5f298 [ 424.901284][T15351] [ 424.931093][ T28] audit: type=1400 audit(1784579279.638:11493): avc: denied { write } for pid=15358 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.089646][T15366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3246'. [ 425.221935][ T28] audit: type=1400 audit(1784579279.968:11494): avc: denied { write } for pid=15362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.252574][T15347] lo speed is unknown, defaulting to 1000 [ 425.263892][T15376] 9p: Bad value for 'source' [ 425.401502][ T28] audit: type=1400 audit(1784579280.148:11495): avc: denied { write } for pid=15381 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.462407][T15392] tap0: tun_chr_ioctl cmd 1074025677 [ 425.462578][T15392] tap0: linktype set to 773 [ 425.462780][T15392] tap0: tun_chr_ioctl cmd 2147767519 [ 425.709405][T15387] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 425.741140][T15387] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 426.139033][T15439] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 426.139033][T15439] program syz.0.3254 not setting count and/or reply_len properly [ 426.906157][T15447] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3257'. [ 427.092602][T15451] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3259'. [ 427.671449][T15468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.762126][T15486] Unknown options in mask 6faf [ 427.825357][T15493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3268'. [ 427.865501][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3268'. [ 427.894521][T15498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.919115][T15498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.983725][T15509] loop8: detected capacity change from 0 to 512 [ 427.998102][T15509] EXT4-fs: Ignoring removed mblk_io_submit option [ 428.009759][T15509] EXT4-fs (loop8): orphan cleanup on readonly fs [ 428.018734][T15509] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 428.027498][T15509] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.3272: attempt to clear invalid blocks 2 len 1 [ 428.040703][T15509] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 428.040886][T15509] EXT4-fs (loop8): Remounting filesystem read-only [ 428.050146][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 428.050164][ C1] EXT4-fs (loop8): initial error at time 1784579282: ext4_clear_blocks:876: inode 13 [ 428.050190][ C1] EXT4-fs (loop8): last error at time 1784579282: ext4_clear_blocks:876: inode 13 [ 428.083042][T15509] EXT4-fs (loop8): 1 truncate cleaned up [ 428.091175][T15509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 428.116869][T11180] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.183324][T15524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.323958][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 428.323974][ T28] audit: type=1326 audit(2000000000.050:11572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.0.3277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa53035dcc7 code=0x7ffc0000 [ 428.385333][T15530] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3277'. [ 428.395108][ T28] audit: type=1326 audit(2000000000.090:11573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.0.3277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa53031e6ce code=0x7ffc0000 [ 428.430015][ T28] audit: type=1326 audit(2000000000.090:11574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.0.3277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa53031e6ce code=0x7ffc0000 [ 428.471961][ T28] audit: type=1326 audit(2000000000.090:11575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.0.3277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53035de99 code=0x7ffc0000 [ 428.511324][T15538] x_tables: duplicate underflow at hook 1 [ 428.534522][ T28] audit: type=1326 audit(2000000000.090:11576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.0.3277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53035de99 code=0x7ffc0000 [ 428.589907][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3283'. [ 428.605571][ T28] audit: type=1326 audit(2000000000.090:11577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.0.3277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53035de99 code=0x7ffc0000 [ 428.675636][ T28] audit: type=1326 audit(2000000000.090:11578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.0.3277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fa53035de99 code=0x7ffc0000 [ 428.717377][T15549] loop9: detected capacity change from 0 to 4096 [ 428.724324][ T28] audit: type=1326 audit(2000000000.090:11579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.0.3277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53035de99 code=0x7ffc0000 [ 428.754932][ T28] audit: type=1326 audit(2000000000.090:11580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.0.3277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53035de99 code=0x7ffc0000 [ 428.780932][ T28] audit: type=1326 audit(2000000000.090:11581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.0.3277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53035de99 code=0x7ffc0000 [ 428.806829][T15553] loop2: detected capacity change from 0 to 1024 [ 428.821056][T15549] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.844334][T15553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.872189][T13227] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.884511][T14160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.557307][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3295'. [ 432.629156][T15616] loop8: detected capacity change from 0 to 128 [ 432.646710][T15616] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 432.661495][T15620] netlink: 88 bytes leftover after parsing attributes in process `syz.9.3300'. [ 432.700954][T15613] syzkaller1: entered promiscuous mode [ 432.707176][T15613] syzkaller1: entered allmulticast mode [ 432.713696][T15616] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 432.752916][T15628] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3301'. [ 432.939780][T15653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3304'. [ 432.979562][T15656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.988972][T15656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.042302][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3307'. [ 433.051256][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3307'. [ 433.202690][T15666] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3309'. [ 433.221860][T15666] geneve3: entered allmulticast mode [ 433.550396][T15673] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 433.550396][T15673] program syz.9.3310 not setting count and/or reply_len properly [ 435.410927][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 435.410986][ T28] audit: type=1326 audit(2000000007.140:11667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15676 comm="syz.0.3312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa53035de99 code=0x0 [ 435.458609][T15679] Unknown options in mask 6faf [ 436.149897][T15689] loop9: detected capacity change from 0 to 512 [ 436.183837][T15689] EXT4-fs: inline encryption not supported [ 436.222803][T15689] ext4: Unknown parameter 'audit' [ 436.297202][T15689] Cannot find add_set index 1 as target [ 436.527823][T15695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=15695 comm=syz.9.3320 [ 436.579572][T15695] loop9: detected capacity change from 0 to 512 [ 436.604369][T15695] EXT4-fs: Ignoring removed nobh option [ 436.616042][T15695] EXT4-fs warning (device loop9): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 436.658947][T15685] loop2: detected capacity change from 0 to 4096 [ 436.712503][T15685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 436.876546][T15685] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 436.945751][T14160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.698000][T15716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3328'. [ 437.725952][T15716] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3328'. [ 437.813763][T15705] loop9: detected capacity change from 0 to 512 [ 437.842951][T15705] ext4: Bad value for 'debug_want_extra_isize' [ 437.952740][T15721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.992266][T15721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.032696][ T28] audit: type=1400 audit(2000000009.760:11668): avc: denied { read } for pid=15722 comm="syz.9.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 438.366576][T15731] syzkaller1: entered promiscuous mode [ 438.372114][T15731] syzkaller1: entered allmulticast mode [ 438.581890][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3335'. [ 438.605204][T15738] loop9: detected capacity change from 0 to 128 [ 438.636596][T15738] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 438.649802][T15740] netlink: 'syz.2.3336': attribute type 1 has an invalid length. [ 438.688236][T15738] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 438.731516][T15740] bond2: entered promiscuous mode [ 438.736632][ T28] audit: type=1400 audit(2000000010.460:11669): avc: denied { write } for pid=15737 comm="syz.9.3335" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.762460][T15740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.798197][T13227] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.814434][T15745] bond2: (slave bridge1): making interface the new active one [ 438.822059][ T28] audit: type=1400 audit(2000000010.460:11670): avc: denied { write } for pid=15737 comm="syz.9.3335" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.853762][T15745] bridge1: entered promiscuous mode [ 438.875934][ T28] audit: type=1400 audit(2000000010.460:11671): avc: denied { write } for pid=15737 comm="syz.9.3335" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.898276][ T28] audit: type=1400 audit(2000000010.460:11672): avc: denied { write } for pid=15737 comm="syz.9.3335" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.920487][ T28] audit: type=1400 audit(2000000010.460:11673): avc: denied { write } for pid=15737 comm="syz.9.3335" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.942722][T15745] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 439.008512][T15751] futex_wake_op: syz.2.3339 tries to shift op by 32; fix this program [ 439.069774][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3341'. [ 439.185651][T15762] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3345'. [ 439.244639][T15767] random: crng reseeded on system resumption [ 439.250732][ T28] audit: type=1400 audit(2000000010.980:11674): avc: denied { write } for pid=15766 comm="syz.2.3348" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 439.310854][ T28] audit: type=1400 audit(2000000010.980:11675): avc: denied { open } for pid=15766 comm="syz.2.3348" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 439.353175][ T28] audit: type=1400 audit(2000000011.010:11676): avc: denied { ioctl } for pid=15766 comm="syz.2.3348" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 439.382062][T15767] netlink: 'syz.2.3348': attribute type 6 has an invalid length. [ 439.486795][T15769] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3347'. [ 439.537776][T15778] FAULT_INJECTION: forcing a failure. [ 439.537776][T15778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.551117][T15778] CPU: 1 UID: 0 PID: 15778 Comm: syz.1.3352 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 439.551204][T15778] Tainted: [W]=WARN [ 439.551212][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 439.551226][T15778] Call Trace: [ 439.551232][T15778] [ 439.551272][T15778] __dump_stack+0x1d/0x30 [ 439.551298][T15778] dump_stack_lvl+0x95/0xd0 [ 439.551322][T15778] dump_stack+0x15/0x1b [ 439.551416][T15778] should_fail_ex+0x25e/0x270 [ 439.551444][T15778] should_fail+0xb/0x20 [ 439.551471][T15778] should_fail_usercopy+0x1a/0x20 [ 439.551544][T15778] _copy_from_user+0x1c/0xb0 [ 439.551565][T15778] __sys_bpf+0x1e2/0xc30 [ 439.551603][T15778] ? get_pid_task+0x92/0xc0 [ 439.551696][T15778] ? vfs_write+0x800/0x990 [ 439.551720][T15778] __x64_sys_bpf+0x69/0x80 [ 439.551750][T15778] x64_sys_call+0x10cb/0x3020 [ 439.551774][T15778] do_syscall_64+0x136/0x3c0 [ 439.551801][T15778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.551824][T15778] RIP: 0033:0x7f164709de99 [ 439.551841][T15778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.551928][T15778] RSP: 002b:00007f1645af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.551950][T15778] RAX: ffffffffffffffda RBX: 00007f1647325fa0 RCX: 00007f164709de99 [ 439.551964][T15778] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 439.551978][T15778] RBP: 00007f1645af7090 R08: 0000000000000000 R09: 0000000000000000 [ 439.551992][T15778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.552004][T15778] R13: 00007f1647326038 R14: 00007f1647325fa0 R15: 00007ffc09c477d8 [ 439.552022][T15778] [ 439.552950][T15780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.735723][T15780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.099188][T15818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.145466][T15818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.302048][T15823] Unknown options in mask 6faf [ 444.142842][T15841] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 444.142842][T15841] program syz.2.3371 not setting count and/or reply_len properly [ 444.196251][T15840] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3373'. [ 444.279554][T15840] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3373'. [ 444.674616][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3376'. [ 444.759026][T15845] loop8: detected capacity change from 0 to 128 [ 444.809898][T15845] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 444.852682][T15845] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 444.942275][ T28] audit: type=1400 audit(2000000016.670:11677): avc: denied { write } for pid=15844 comm="syz.8.3376" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.025189][ T28] audit: type=1400 audit(2000000016.730:11678): avc: denied { write } for pid=15844 comm="syz.8.3376" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.088873][T11180] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 445.152768][ T28] audit: type=1400 audit(2000000016.730:11679): avc: denied { write } for pid=15844 comm="syz.8.3376" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.190923][T15859] FAULT_INJECTION: forcing a failure. [ 445.190923][T15859] name failslab, interval 1, probability 0, space 0, times 0 [ 445.271401][ T28] audit: type=1400 audit(2000000016.730:11680): avc: denied { write } for pid=15844 comm="syz.8.3376" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.293436][T15859] CPU: 1 UID: 0 PID: 15859 Comm: syz.0.3382 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 445.293491][T15859] Tainted: [W]=WARN [ 445.293497][T15859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 445.293548][T15859] Call Trace: [ 445.293585][T15859] [ 445.293615][T15859] __dump_stack+0x1d/0x30 [ 445.293683][T15859] dump_stack_lvl+0x95/0xd0 [ 445.293707][T15859] dump_stack+0x15/0x1b [ 445.293727][T15859] should_fail_ex+0x25e/0x270 [ 445.293752][T15859] ? __get_vm_area_node+0x106/0x1d0 [ 445.293810][T15859] should_failslab+0x8c/0xb0 [ 445.293978][T15859] __kmalloc_cache_node_noprof+0x81/0x3e0 [ 445.294007][T15859] ? __get_vm_area_node+0x106/0x1d0 [ 445.294036][T15859] __get_vm_area_node+0x106/0x1d0 [ 445.294064][T15859] __vmalloc_node_range_noprof+0x266/0x11e0 [ 445.294094][T15859] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 445.294152][T15859] ? avc_has_perm_noaudit+0xa3/0x120 [ 445.294179][T15859] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 445.294217][T15859] __vmalloc_noprof+0xa4/0xf0 [ 445.294239][T15859] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 445.294270][T15859] bpf_prog_alloc_no_stats+0x47/0x390 [ 445.294302][T15859] ? bpf_prog_alloc+0x2a/0x150 [ 445.294329][T15859] bpf_prog_alloc+0x3c/0x150 [ 445.294353][T15859] bpf_prog_load+0x54b/0x1100 [ 445.294380][T15859] ? avc_has_perm_noaudit+0xa3/0x120 [ 445.294419][T15859] ? vfs_write+0x800/0x990 [ 445.294440][T15859] __sys_bpf+0xbae/0xc30 [ 445.294474][T15859] ? vfs_write+0x800/0x990 [ 445.294559][T15859] ? vfs_write+0x800/0x990 [ 445.294584][T15859] __x64_sys_bpf+0x69/0x80 [ 445.294614][T15859] x64_sys_call+0x10cb/0x3020 [ 445.294678][T15859] do_syscall_64+0x136/0x3c0 [ 445.294699][T15859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.294719][T15859] RIP: 0033:0x7fa53035de99 [ 445.294736][T15859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.294813][T15859] RSP: 002b:00007fa52edb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.294901][T15859] RAX: ffffffffffffffda RBX: 00007fa5305e5fa0 RCX: 00007fa53035de99 [ 445.294916][T15859] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 445.294928][T15859] RBP: 00007fa52edb7090 R08: 0000000000000000 R09: 0000000000000000 [ 445.294998][T15859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.295013][T15859] R13: 00007fa5305e6038 R14: 00007fa5305e5fa0 R15: 00007ffd34e5f298 [ 445.295033][T15859] [ 445.589030][ T28] audit: type=1400 audit(2000000016.730:11681): avc: denied { write } for pid=15844 comm="syz.8.3376" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.591127][T15859] syz.0.3382: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 445.632078][T15859] CPU: 0 UID: 0 PID: 15859 Comm: syz.0.3382 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 445.632110][T15859] Tainted: [W]=WARN [ 445.632122][T15859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 445.632205][T15859] Call Trace: [ 445.632212][T15859] [ 445.632221][T15859] __dump_stack+0x1d/0x30 [ 445.632247][T15859] dump_stack_lvl+0x95/0xd0 [ 445.632335][T15859] dump_stack+0x15/0x1b [ 445.632353][T15859] warn_alloc+0x145/0x1c0 [ 445.632456][T15859] __vmalloc_node_range_noprof+0x28b/0x11e0 [ 445.632490][T15859] ? avc_has_perm_noaudit+0xa3/0x120 [ 445.632550][T15859] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 445.632695][T15859] __vmalloc_noprof+0xa4/0xf0 [ 445.632721][T15859] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 445.632783][T15859] bpf_prog_alloc_no_stats+0x47/0x390 [ 445.632813][T15859] ? bpf_prog_alloc+0x2a/0x150 [ 445.632844][T15859] bpf_prog_alloc+0x3c/0x150 [ 445.632930][T15859] bpf_prog_load+0x54b/0x1100 [ 445.632960][T15859] ? avc_has_perm_noaudit+0xa3/0x120 [ 445.633019][T15859] ? vfs_write+0x800/0x990 [ 445.633036][T15859] __sys_bpf+0xbae/0xc30 [ 445.633066][T15859] ? vfs_write+0x800/0x990 [ 445.633106][T15859] ? vfs_write+0x800/0x990 [ 445.633138][T15859] __x64_sys_bpf+0x69/0x80 [ 445.633168][T15859] x64_sys_call+0x10cb/0x3020 [ 445.633235][T15859] do_syscall_64+0x136/0x3c0 [ 445.633261][T15859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.633284][T15859] RIP: 0033:0x7fa53035de99 [ 445.633330][T15859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.633349][T15859] RSP: 002b:00007fa52edb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.633372][T15859] RAX: ffffffffffffffda RBX: 00007fa5305e5fa0 RCX: 00007fa53035de99 [ 445.633467][T15859] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 445.633479][T15859] RBP: 00007fa52edb7090 R08: 0000000000000000 R09: 0000000000000000 [ 445.633491][T15859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.633503][T15859] R13: 00007fa5305e6038 R14: 00007fa5305e5fa0 R15: 00007ffd34e5f298 [ 445.633520][T15859] [ 445.676837][ T28] audit: type=1400 audit(2000000017.370:11682): avc: denied { write } for pid=15862 comm="syz.2.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 445.678128][T15859] Mem-Info: [ 445.907626][T15859] active_anon:29040 inactive_anon:0 isolated_anon:0 [ 445.907626][T15859] active_file:125 inactive_file:26116 isolated_file:0 [ 445.907626][T15859] unevictable:0 dirty:163 writeback:0 [ 445.907626][T15859] slab_reclaimable:3881 slab_unreclaimable:22063 [ 445.907626][T15859] mapped:34718 shmem:18804 pagetables:1698 [ 445.907626][T15859] sec_pagetables:0 bounce:0 [ 445.907626][T15859] kernel_misc_reclaimable:0 [ 445.907626][T15859] free:1846305 free_pcp:10815 free_cma:0 [ 445.958282][T15868] loop8: detected capacity change from 0 to 4096 [ 445.974596][T15868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.989918][ T28] audit: type=1400 audit(2000000017.720:11683): avc: denied { write } for pid=15867 comm="syz.8.3385" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.992309][T15859] Node 0 active_anon:106764kB inactive_anon:0kB active_file:500kB inactive_file:104464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138872kB dirty:652kB writeback:0kB shmem:65820kB kernel_stack:4560kB pagetables:6676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 446.054351][T15859] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.134505][T11180] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.147035][T15859] lowmem_reserve[]: 0 2878 7857 7857 [ 446.175290][T15859] Node 0 DMA32 free:2944044kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947672kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 446.260787][T15859] lowmem_reserve[]: 0 0 4978 4978 [ 446.266167][T15859] Node 0 Normal free:4466064kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:73588kB inactive_anon:0kB active_file:616kB inactive_file:104464kB unevictable:0kB writepending:652kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:42196kB local_pcp:20952kB free_cma:0kB [ 446.299610][T15859] lowmem_reserve[]: 0 0 0 0 [ 446.304360][T15859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 446.318775][T15859] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944044kB [ 446.371741][T15859] Node 0 Normal: 1117*4kB (UME) 1382*8kB (UME) 1235*16kB (UM) 887*32kB (UME) 701*64kB (UME) 441*128kB (UME) 214*256kB (UM) 108*512kB (UM) 30*1024kB (UM) 15*2048kB (UM) 1016*4096kB (UM) = 4498036kB [ 446.413361][T15859] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 446.505601][T15859] 34920 total pagecache pages [ 446.538603][T15859] 0 pages in swap cache [ 446.542804][T15859] Free swap = 124996kB [ 446.547459][T15859] Total swap = 124996kB [ 446.551698][T15859] 2097051 pages RAM [ 446.556004][T15859] 0 pages HighMem/MovableOnly [ 446.560840][T15859] 81734 pages reserved [ 446.590920][T15884] loop2: detected capacity change from 0 to 1024 [ 447.594830][T15897] loop9: detected capacity change from 0 to 7 [ 447.630191][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 447.639816][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 447.653941][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 447.663560][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 447.720597][T15897] loop9: unable to read partition table [ 447.743581][T15897] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 447.753424][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 447.763029][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 447.779449][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 447.789102][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 447.803932][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 447.813532][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 447.824604][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 447.834201][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 447.843943][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 447.853542][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 447.921837][T15903] loop2: detected capacity change from 0 to 512 [ 447.981639][T15903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.032719][T15910] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3396'. [ 448.043456][T15903] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.117636][T14160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.187213][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 448.204532][T15917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3398'. [ 448.307208][T15928] Cannot find add_set index 0 as target [ 448.396593][T15932] Unknown options in mask 6faf [ 448.559059][T15941] Unknown options in mask 6faf [ 448.650333][T15944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=15944 comm=syz.0.3409 [ 448.711024][T15948] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3411'. [ 448.781358][T15950] dvmrp1: entered allmulticast mode [ 448.793708][T15949] dvmrp1: left allmulticast mode [ 449.038917][T15969] loop9: detected capacity change from 0 to 7 [ 449.047229][T15971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.067674][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 449.077306][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 449.087380][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 449.097516][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 449.105863][T15969] loop9: unable to read partition table [ 449.114215][T15969] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 449.146371][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 449.156311][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 449.279284][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3421'. [ 449.304184][T15977] netlink: 'syz.8.3421': attribute type 3 has an invalid length. [ 449.351791][T15917] loop2: detected capacity change from 0 to 8192 [ 449.374886][T15917] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 449.539345][T15982] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3423'. [ 449.904378][T15993] loop8: detected capacity change from 0 to 4096 [ 451.073725][T15993] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.098020][T16005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3429'. [ 451.117534][ T28] audit: type=1400 audit(2000000022.850:11684): avc: denied { write } for pid=15992 comm="syz.8.3425" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.194610][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3429'. [ 451.401577][ T28] audit: type=1400 audit(2000000023.130:11685): avc: denied { write } for pid=11180 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.449773][T16009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3430'. [ 451.466122][T16007] syz_tun (unregistering): left allmulticast mode [ 451.505504][ T28] audit: type=1400 audit(2000000023.130:11686): avc: denied { write } for pid=11180 comm="syz-executor" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.569081][T16013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.609971][ T28] audit: type=1400 audit(2000000023.130:11687): avc: denied { write } for pid=11180 comm="syz-executor" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.650006][T16013] loop2: detected capacity change from 0 to 512 [ 451.676341][T16007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.700460][T16013] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 451.718353][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.748801][ T28] audit: type=1400 audit(2000000023.130:11688): avc: denied { unlink } for pid=11180 comm="syz-executor" name="file1" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 451.792737][T16013] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.3432: corrupted xattr entries [ 451.836891][T16013] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 451.837078][T16013] EXT4-fs (loop2): Remounting filesystem read-only [ 451.846280][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 451.846317][ C0] EXT4-fs (loop2): initial error at time 2000000023: xattr_find_entry:337: inode 15 [ 451.846360][ C0] EXT4-fs (loop2): last error at time 2000000023: xattr_find_entry:337: inode 15 [ 451.879714][ T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.895813][T16017] loop9: detected capacity change from 0 to 7 [ 451.906405][ T28] audit: type=1400 audit(2000000023.130:11689): avc: denied { write } for pid=11180 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.941201][T16017] loop9: unable to read partition table [ 451.962164][T16017] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 451.974514][ T28] audit: type=1400 audit(2000000023.130:11690): avc: denied { write } for pid=11180 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.012162][ T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.035899][T16013] EXT4-fs (loop2): 1 truncate cleaned up [ 452.048115][T16013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.066375][ T28] audit: type=1400 audit(2000000023.130:11691): avc: denied { write } for pid=11180 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.121232][ T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.132649][T14160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.145129][ T28] audit: type=1400 audit(2000000023.130:11692): avc: denied { write } for pid=11180 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.196033][ T28] audit: type=1400 audit(2000000023.130:11693): avc: denied { write } for pid=11180 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.322999][T16022] netlink: 'syz.9.3435': attribute type 1 has an invalid length. [ 452.390751][ T49] bridge_slave_1: left allmulticast mode [ 452.406121][ T49] bridge_slave_1: left promiscuous mode [ 452.439692][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.451178][T16034] netlink: 'syz.9.3440': attribute type 1 has an invalid length. [ 452.484973][ T49] bridge_slave_0: left allmulticast mode [ 452.515830][ T49] bridge_slave_0: left promiscuous mode [ 452.532582][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.636187][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.647203][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.657997][ T49] bond0 (unregistering): Released all slaves [ 452.666409][ T49] bond1 (unregistering): Released all slaves [ 452.675694][ T49] bond2 (unregistering): Released all slaves [ 452.684644][ T49] bond3 (unregistering): Released all slaves [ 452.694145][ T49] bond4 (unregistering): Released all slaves [ 452.709108][T16034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.722091][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 452.742962][T16056] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 452.747636][T16054] lo speed is unknown, defaulting to 1000 [ 452.787578][T16063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.831046][T16063] loop9: detected capacity change from 0 to 512 [ 452.861404][T16063] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 452.885018][T16063] EXT4-fs error (device loop9): xattr_find_entry:337: inode #15: comm syz.9.3444: corrupted xattr entries [ 452.898895][T16063] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 452.899431][T16063] EXT4-fs (loop9): Remounting filesystem read-only [ 452.908596][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 452.908621][ C0] EXT4-fs (loop9): initial error at time 2000000024: xattr_find_entry:337: inode 15 [ 452.908656][ C0] EXT4-fs (loop9): last error at time 2000000024: xattr_find_entry:337: inode 15 [ 452.941323][T16063] EXT4-fs (loop9): 1 truncate cleaned up [ 452.950525][T16063] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.003961][ T49] hsr_slave_0: left promiscuous mode [ 453.017900][T13227] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.029906][ T49] hsr_slave_1: left promiscuous mode [ 453.036700][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.054295][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.060404][T16081] loop9: detected capacity change from 0 to 7 [ 453.070487][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.087692][ C0] blk_print_req_error: 13 callbacks suppressed [ 453.087708][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 453.088703][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.121862][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.131512][ C0] buffer_io_error: 11 callbacks suppressed [ 453.131533][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 453.149378][ T49] veth1_macvtap: left promiscuous mode [ 453.157615][ T49] veth0_macvtap: left promiscuous mode [ 453.168187][ T49] veth1_vlan: left promiscuous mode [ 453.173536][ T49] veth0_vlan: left promiscuous mode [ 453.179129][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.188726][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 453.196902][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.206560][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 453.215061][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.224850][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 453.234067][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.243653][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 453.251850][T16081] loop9: unable to read partition table [ 453.258393][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.258419][T16081] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 453.268031][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 453.295832][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.305466][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 453.318818][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.328564][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 453.336591][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.346188][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 453.354920][ T2980] loop9: unable to read partition table [ 453.429994][ T49] team0 (unregistering): Port device team_slave_1 removed [ 453.442577][ T49] team0 (unregistering): Port device team_slave_0 removed [ 453.509678][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 453.520622][T16096] netlink: 180904 bytes leftover after parsing attributes in process `syz.9.3448'. [ 453.535113][T16096] netlink: zone id is out of range [ 453.540533][T16096] netlink: zone id is out of range [ 453.546168][T16096] netlink: zone id is out of range [ 453.552365][T16096] netlink: zone id is out of range [ 453.558371][T16050] lo speed is unknown, defaulting to 1000 [ 453.572536][T16096] netlink: zone id is out of range [ 453.584046][T16096] netlink: zone id is out of range [ 453.601139][T16096] netlink: zone id is out of range [ 453.784271][T16121] 9p: Bad value for 'rfdno' [ 453.833770][T16115] loop9: detected capacity change from 0 to 512 [ 453.911458][T16115] EXT4-fs: Ignoring removed oldalloc option [ 453.930918][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 453.943894][T16115] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 453.997481][T16115] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.3452: invalid indirect mapped block 83886080 (level 1) [ 454.031869][T16115] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 454.033674][T16115] EXT4-fs (loop9): Remounting filesystem read-only [ 454.033984][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 454.034012][ C1] EXT4-fs (loop9): initial error at time 2000000025: ext4_free_branches:1023: inode 16 [ 454.034113][ C1] EXT4-fs (loop9): last error at time 2000000025: ext4_free_branches:1023: inode 16 [ 454.080040][T16115] EXT4-fs (loop9): 1 orphan inode deleted [ 454.089960][T16115] EXT4-fs (loop9): 1 truncate cleaned up [ 454.101882][T16050] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.111772][T16050] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.123041][T16050] bridge_slave_0: entered allmulticast mode [ 454.130331][T16050] bridge_slave_0: entered promiscuous mode [ 454.140053][T16150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3460'. [ 454.143276][T16050] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.157533][T16115] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.177627][T16050] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.187586][T16050] bridge_slave_1: entered allmulticast mode [ 454.196439][T16050] bridge_slave_1: entered promiscuous mode [ 454.287468][T16155] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=16155 comm=syz.9.3452 [ 454.346744][T16050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.390447][T16050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.439309][T16050] team0: Port device team_slave_0 added [ 454.470346][T16050] team0: Port device team_slave_1 added [ 454.498239][T16050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.499240][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 454.509396][T16050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.526374][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3465'. [ 454.550128][T16050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.593478][T16050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.609207][T16050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.647591][T16050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.658006][T16158] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.661778][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 454.689111][T16050] hsr_slave_0: entered promiscuous mode [ 454.695580][T16050] hsr_slave_1: entered promiscuous mode [ 454.707528][T16050] debugfs: 'hsr0' already exists in 'hsr' [ 454.713549][T16050] Cannot create hsr debugfs directory [ 454.713573][T16194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3470'. [ 454.782592][ T4642] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.793357][T16194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3470'. [ 454.842622][T16194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3470'. [ 454.845155][T16208] net_ratelimit: 82 callbacks suppressed [ 454.845169][T16208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.921044][ T4642] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.966152][ T4642] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.971658][T16222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3479'. [ 454.992575][T16217] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3478'. [ 455.031636][T16201] lo speed is unknown, defaulting to 1000 [ 455.039886][ T4642] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.065969][T16231] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 455.713815][T16256] lo speed is unknown, defaulting to 1000 [ 455.784295][ T4642] bridge_slave_1: left allmulticast mode [ 455.790659][ T4642] bridge_slave_1: left promiscuous mode [ 455.806413][ T4642] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.828800][ T4642] bridge_slave_0: left allmulticast mode [ 455.834748][ T4642] bridge_slave_0: left promiscuous mode [ 455.847660][ T4642] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.983545][T16281] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16281 comm=syz.1.3485 [ 456.008503][ T4642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.019033][ T4642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.029092][ T4642] bond0 (unregistering): Released all slaves [ 456.038983][ T4642] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 456.049683][ T4642] bond1 (unregistering): Released all slaves [ 456.066506][ T4642] bond2 (unregistering): Released all slaves [ 456.105187][T16293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.183151][T16305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3489'. [ 456.202005][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3489'. [ 456.220854][ T4642] hsr_slave_0: left promiscuous mode [ 456.231658][ T4642] hsr_slave_1: left promiscuous mode [ 456.239511][ T4642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.247058][ T4642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.254924][ T4642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.262349][ T4642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.274458][ T4642] veth1_macvtap: left promiscuous mode [ 456.301390][ T4642] veth0_macvtap: left promiscuous mode [ 456.307136][ T4642] veth1_vlan: left promiscuous mode [ 456.358800][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 456.358816][ T28] audit: type=1400 audit(2000000028.090:11713): avc: denied { write } for pid=16298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.409701][ T4642] veth0_vlan: left promiscuous mode [ 456.422116][ T28] audit: type=1400 audit(2000000028.150:11714): avc: denied { write } for pid=16325 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.555734][T16345] xt_ecn: cannot match TCP bits for non-tcp packets [ 456.649936][T16345] netlink: 'syz.0.3492': attribute type 10 has an invalid length. [ 456.771654][ T28] audit: type=1400 audit(2000000028.500:11715): avc: denied { write } for pid=16332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.951474][ T4642] team0 (unregistering): Port device team_slave_1 removed [ 456.993274][ T28] audit: type=1400 audit(2000000028.720:11716): avc: denied { write } for pid=16352 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.046627][ T4642] team0 (unregistering): Port device team_slave_0 removed [ 457.311247][T16356] loop2: detected capacity change from 0 to 512 [ 457.336277][T16356] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 457.419673][T16356] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.3496: corrupted xattr entries [ 457.467407][T16356] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 457.467600][T16356] EXT4-fs (loop2): Remounting filesystem read-only [ 457.476783][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 457.476808][ C1] EXT4-fs (loop2): initial error at time 2000000029: xattr_find_entry:337: inode 15 [ 457.476841][ C1] EXT4-fs (loop2): last error at time 2000000029: xattr_find_entry:337: inode 15 [ 457.511908][T16356] EXT4-fs (loop2): 1 truncate cleaned up [ 457.518728][T16356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.533829][T16345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.542837][T16345] team0: Port device netdevsim2 added [ 457.576734][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'. [ 457.615204][ T28] audit: type=1400 audit(2000000029.350:11717): avc: denied { write } for pid=16357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.640956][T16355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.685030][ T28] audit: type=1400 audit(2000000029.420:11718): avc: denied { write } for pid=16378 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.716155][T14160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.819071][T16201] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.833302][T16201] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.848706][T16201] bridge_slave_0: entered allmulticast mode [ 457.860359][T16201] bridge_slave_0: entered promiscuous mode [ 457.876143][T16201] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.890804][T16201] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.905023][T16201] bridge_slave_1: entered allmulticast mode [ 457.919448][ T28] audit: type=1400 audit(2000000029.650:11719): avc: denied { write } for pid=16387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.944165][T16201] bridge_slave_1: entered promiscuous mode [ 457.996787][T16201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.006117][ T28] audit: type=1400 audit(2000000029.710:11720): avc: denied { write } for pid=16398 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.029411][T16201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.040015][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 458.073591][T16201] team0: Port device team_slave_0 added [ 458.083509][T16201] team0: Port device team_slave_1 added [ 458.115462][T16201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.124900][T16201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.151243][T16201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.164193][T16201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.171146][T16201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.197315][T16201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.209489][T16405] netlink: 'syz.2.3499': attribute type 1 has an invalid length. [ 458.245157][T16412] FAULT_INJECTION: forcing a failure. [ 458.245157][T16412] name failslab, interval 1, probability 0, space 0, times 0 [ 458.270282][T16412] CPU: 1 UID: 0 PID: 16412 Comm: syz.1.3502 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 458.270325][T16412] Tainted: [W]=WARN [ 458.270333][T16412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 458.270343][T16412] Call Trace: [ 458.270349][T16412] [ 458.270391][T16412] __dump_stack+0x1d/0x30 [ 458.270468][T16412] dump_stack_lvl+0x95/0xd0 [ 458.270485][T16412] dump_stack+0x15/0x1b [ 458.270554][T16412] should_fail_ex+0x25e/0x270 [ 458.270578][T16412] ? __get_vm_area_node+0x106/0x1d0 [ 458.270597][T16412] should_failslab+0x8c/0xb0 [ 458.270616][T16412] __kmalloc_cache_node_noprof+0x81/0x3e0 [ 458.270649][T16412] ? __get_vm_area_node+0x106/0x1d0 [ 458.270669][T16412] __get_vm_area_node+0x106/0x1d0 [ 458.270778][T16412] __vmalloc_node_range_noprof+0x266/0x11e0 [ 458.270801][T16412] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 458.270826][T16412] ? tick_program_event+0x79/0xc0 [ 458.270930][T16412] ? __hrtimer_rearm_deferred+0x571/0x650 [ 458.270957][T16412] ? avc_has_perm_noaudit+0xa3/0x120 [ 458.270980][T16412] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 458.271070][T16412] __vmalloc_noprof+0xa4/0xf0 [ 458.271131][T16412] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 458.271155][T16412] bpf_prog_alloc_no_stats+0x47/0x390 [ 458.271215][T16412] ? bpf_prog_alloc+0x2a/0x150 [ 458.271237][T16412] bpf_prog_alloc+0x3c/0x150 [ 458.271303][T16412] bpf_prog_load+0x54b/0x1100 [ 458.271470][T16412] __sys_bpf+0xbae/0xc30 [ 458.271529][T16412] __x64_sys_bpf+0x69/0x80 [ 458.271551][T16412] x64_sys_call+0x10cb/0x3020 [ 458.271574][T16412] do_syscall_64+0x136/0x3c0 [ 458.271594][T16412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.271613][T16412] RIP: 0033:0x7f164709de99 [ 458.271628][T16412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.271701][T16412] RSP: 002b:00007f1645af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.271718][T16412] RAX: ffffffffffffffda RBX: 00007f1647325fa0 RCX: 00007f164709de99 [ 458.271730][T16412] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 458.271741][T16412] RBP: 00007f1645af7090 R08: 0000000000000000 R09: 0000000000000000 [ 458.271768][T16412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.271778][T16412] R13: 00007f1647326038 R14: 00007f1647325fa0 R15: 00007ffc09c477d8 [ 458.271795][T16412] [ 458.272536][T16405] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.276303][T16412] syz.1.3502: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 458.310389][T16050] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.392767][ T28] audit: type=1400 audit(2000000030.120:11721): avc: denied { write } for pid=16401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.398585][T16412] ,cpuset= [ 458.435123][ T28] audit: type=1400 audit(2000000030.170:11722): avc: denied { write } for pid=16427 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.444979][T16412] /,mems_allowed=0 [ 458.609854][T16050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.617794][T16412] CPU: 1 UID: 0 PID: 16412 Comm: syz.1.3502 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 458.617828][T16412] Tainted: [W]=WARN [ 458.617834][T16412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 458.617872][T16412] Call Trace: [ 458.617879][T16412] [ 458.617887][T16412] __dump_stack+0x1d/0x30 [ 458.617928][T16412] dump_stack_lvl+0x95/0xd0 [ 458.617946][T16412] dump_stack+0x15/0x1b [ 458.617967][T16412] warn_alloc+0x145/0x1c0 [ 458.618065][T16412] __vmalloc_node_range_noprof+0x28b/0x11e0 [ 458.618157][T16412] ? tick_program_event+0x79/0xc0 [ 458.618191][T16412] ? __hrtimer_rearm_deferred+0x571/0x650 [ 458.618236][T16412] ? avc_has_perm_noaudit+0xa3/0x120 [ 458.618265][T16412] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 458.618291][T16412] __vmalloc_noprof+0xa4/0xf0 [ 458.618314][T16412] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 458.618402][T16412] bpf_prog_alloc_no_stats+0x47/0x390 [ 458.618433][T16412] ? bpf_prog_alloc+0x2a/0x150 [ 458.618464][T16412] bpf_prog_alloc+0x3c/0x150 [ 458.618588][T16412] bpf_prog_load+0x54b/0x1100 [ 458.618665][T16412] __sys_bpf+0xbae/0xc30 [ 458.618698][T16412] __x64_sys_bpf+0x69/0x80 [ 458.618805][T16412] x64_sys_call+0x10cb/0x3020 [ 458.618897][T16412] do_syscall_64+0x136/0x3c0 [ 458.618918][T16412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.618940][T16412] RIP: 0033:0x7f164709de99 [ 458.619031][T16412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.619051][T16412] RSP: 002b:00007f1645af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.619070][T16412] RAX: ffffffffffffffda RBX: 00007f1647325fa0 RCX: 00007f164709de99 [ 458.619083][T16412] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 458.619095][T16412] RBP: 00007f1645af7090 R08: 0000000000000000 R09: 0000000000000000 [ 458.619107][T16412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.619121][T16412] R13: 00007f1647326038 R14: 00007f1647325fa0 R15: 00007ffc09c477d8 [ 458.619141][T16412] [ 458.619194][T16412] Mem-Info: [ 458.661232][T16050] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.688634][T16412] active_anon:13124 inactive_anon:0 isolated_anon:0 [ 458.688634][T16412] active_file:125 inactive_file:26124 isolated_file:0 [ 458.688634][T16412] unevictable:0 dirty:253 writeback:0 [ 458.688634][T16412] slab_reclaimable:3885 slab_unreclaimable:21975 [ 458.688634][T16412] mapped:31121 shmem:2694 pagetables:1783 [ 458.688634][T16412] sec_pagetables:0 bounce:0 [ 458.688634][T16412] kernel_misc_reclaimable:0 [ 458.688634][T16412] free:1865902 free_pcp:7253 free_cma:0 [ 458.895487][T16412] Node 0 active_anon:52380kB inactive_anon:0kB active_file:500kB inactive_file:104496kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124484kB dirty:1012kB writeback:0kB shmem:10776kB kernel_stack:4336kB pagetables:6668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 458.898901][T16050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.926674][T16412] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.942244][T16201] hsr_slave_0: entered promiscuous mode [ 458.970610][T16201] hsr_slave_1: entered promiscuous mode [ 458.971857][T16412] lowmem_reserve[]: 0 2878 7857 7857 [ 458.977919][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 458.982485][T16412] Node 0 DMA32 free:2944044kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947672kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 459.044358][T16412] lowmem_reserve[]: 0 0 4978 4978 [ 459.056910][T16050] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 459.069854][T16050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.081033][T16412] Node 0 Normal free:4519276kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47160kB inactive_anon:0kB active_file:500kB inactive_file:104496kB unevictable:0kB writepending:1012kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:16436kB local_pcp:976kB free_cma:0kB [ 459.115616][T16050] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 459.122554][T16412] lowmem_reserve[]: 0 0 0 0 [ 459.129243][T16050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.139622][T16412] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 459.153326][T16412] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944044kB [ 459.186788][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.196251][T16412] Node 0 Normal: 1740*4kB (UME) 1095*8kB (UME) 887*16kB (UME) 916*32kB (UME) 719*64kB (UME) 489*128kB (UME) 232*256kB (UM) 119*512kB (UM) 36*1024kB (UM) 16*2048kB (UM) 1016*4096kB (UM) = 4519320kB [ 459.210264][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.216839][T16412] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 459.233478][T16412] 27489 total pagecache pages [ 459.238504][T16412] 0 pages in swap cache [ 459.242690][T16412] Free swap = 124996kB [ 459.244551][ T3019] 8021q: adding VLAN 0 to HW filter on device eth25 [ 459.247124][T16412] Total swap = 124996kB [ 459.256445][T16456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.275231][T16412] 2097051 pages RAM [ 459.279383][T16412] 0 pages HighMem/MovableOnly [ 459.302465][T16412] 81734 pages reserved [ 459.341272][T16050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.386346][T16050] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.406517][T11377] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.413652][T11377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.418001][T16479] netlink: 'syz.1.3511': attribute type 6 has an invalid length. [ 459.427267][ T2042] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.435785][ T2042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.441842][T16479] netlink: 'syz.1.3511': attribute type 7 has an invalid length. [ 459.459548][T16479] netlink: 'syz.1.3511': attribute type 8 has an invalid length. [ 459.641507][ T3019] 8021q: adding VLAN 0 to HW filter on device eth26 [ 460.093619][T16514] lo speed is unknown, defaulting to 1000 [ 460.095186][T16520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.327080][T16201] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 460.498058][T16201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.545636][T16201] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 460.574635][T16201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.623105][T16201] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 460.647592][T16201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 460.679680][T16201] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 461.367897][T16554] __nla_validate_parse: 1 callbacks suppressed [ 461.367960][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3522'. [ 461.415976][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 461.416063][ T28] audit: type=1400 audit(2000000033.150:11733): avc: denied { write } for pid=16555 comm="syz.2.3523" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 461.544982][T16201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.549797][ T28] audit: type=1400 audit(2000000033.280:11734): avc: denied { write } for pid=16544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.605387][T16550] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 461.626416][ T28] audit: type=1400 audit(2000000033.350:11735): avc: denied { write } for pid=16575 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.635048][T16050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.729232][ T28] audit: type=1400 audit(2000000033.460:11736): avc: denied { ioctl } for pid=16579 comm="syz.1.3526" path="socket:[48296]" dev="sockfs" ino=48296 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 461.749622][T16201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.801938][T16201] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.835197][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.842331][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.877325][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.884434][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.915976][ T28] audit: type=1400 audit(2000000033.640:11737): avc: denied { write } for pid=16587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.964392][ T28] audit: type=1400 audit(2000000033.690:11738): avc: denied { write } for pid=16610 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.982748][T16201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.019607][T16201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.035507][T16050] veth0_vlan: entered promiscuous mode [ 462.045224][T16050] veth1_vlan: entered promiscuous mode [ 462.075375][T16050] veth0_macvtap: entered promiscuous mode [ 462.102672][T16050] veth1_macvtap: entered promiscuous mode [ 462.119065][T16050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.154468][T16050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.162022][ T28] audit: type=1400 audit(2000000033.890:11739): avc: denied { write } for pid=16614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.203869][ T2042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.217223][ T2042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.226919][ T28] audit: type=1400 audit(2000000033.950:11740): avc: denied { write } for pid=16634 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.256336][ T2042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.267599][ T2042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.361407][T16201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.575254][ T28] audit: type=1400 audit(2000000034.290:11741): avc: denied { write } for pid=16639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.613982][T16668] xt_ecn: cannot match TCP bits for non-tcp packets [ 463.603741][ T28] audit: type=1400 audit(2000000035.330:11742): avc: denied { write } for pid=16672 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.975003][T16674] xt_ecn: cannot match TCP bits for non-tcp packets [ 465.370886][T16674] netlink: 'syz.1.3532': attribute type 10 has an invalid length. [ 465.752217][T16674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 465.762162][T16674] team0: Port device netdevsim2 added [ 465.837391][T16201] veth0_vlan: entered promiscuous mode [ 465.911817][T16201] veth1_vlan: entered promiscuous mode [ 465.977292][T16201] veth0_macvtap: entered promiscuous mode [ 466.011832][T16201] veth1_macvtap: entered promiscuous mode [ 466.055219][T16201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.088043][T16201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.105594][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.118429][T16710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3540'. [ 466.153263][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.187057][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.218093][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.235636][T16725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3545'. [ 466.254473][T16720] netlink: 'syz.0.3544': attribute type 1 has an invalid length. [ 466.309650][T16741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16741 comm=syz.0.3544 [ 466.336000][T16747] loop5: detected capacity change from 0 to 512 [ 466.359281][T16720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.372195][T16747] EXT4-fs (loop5): 1 truncate cleaned up [ 466.381418][T16747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.431306][T16720] macvlan2: entered promiscuous mode [ 466.441998][T16720] macvlan2: entered allmulticast mode [ 466.449815][T16720] bond1: entered allmulticast mode [ 466.455407][T16720] bond1: entered promiscuous mode [ 466.455738][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 466.455751][ T28] audit: type=1400 audit(2000000038.190:11745): avc: denied { write } for pid=16733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.461487][T16720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 466.502142][T16720] team0: Port device macvlan2 added [ 466.515687][T16741] bond1: (slave ip6gretap1): making interface the new active one [ 466.518285][ T28] audit: type=1400 audit(2000000038.250:11746): avc: denied { write } for pid=16766 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.523541][T16741] ip6gretap1: entered promiscuous mode [ 466.553428][T16763] loop3: detected capacity change from 0 to 4096 [ 466.562872][T16741] ip6gretap1: entered allmulticast mode [ 466.585480][T16741] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 466.590027][T16763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.641798][ T28] audit: type=1400 audit(2000000038.300:11747): avc: denied { execute_no_trans } for pid=16740 comm="syz.5.3472" path="/0/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 466.645498][T16765] lo speed is unknown, defaulting to 1000 [ 466.685558][ T28] audit: type=1400 audit(2000000038.420:11748): avc: denied { write } for pid=16762 comm="syz.3.3551" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 466.751053][T16050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.762200][T16778] netlink: 'syz.2.3552': attribute type 10 has an invalid length. [ 466.787471][T16779] netlink: 'syz.2.3552': attribute type 10 has an invalid length. [ 466.808021][T16779] team0: Port device dummy0 added [ 466.818703][ T28] audit: type=1400 audit(2000000038.550:11749): avc: denied { write } for pid=16768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.863136][T16201] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 466.865536][ T28] audit: type=1400 audit(2000000038.590:11750): avc: denied { write } for pid=16201 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 466.904333][T16201] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 466.943258][ T28] audit: type=1400 audit(2000000038.670:11751): avc: denied { write } for pid=16790 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.056639][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3557'. [ 467.066073][T16806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3557'. [ 467.071405][ T28] audit: type=1400 audit(2000000038.800:11752): avc: denied { write } for pid=16794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.141016][ T28] audit: type=1400 audit(2000000038.860:11753): avc: denied { write } for pid=16810 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.164552][ T28] audit: type=1400 audit(2000000038.870:11754): avc: denied { ioctl } for pid=16814 comm="syz.3.3559" path="socket:[49209]" dev="sockfs" ino=49209 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 467.278087][T16828] lo speed is unknown, defaulting to 1000 [ 467.422204][T16849] Unknown options in mask 6faf [ 467.649545][T16875] loop2: detected capacity change from 0 to 4096 [ 467.660475][T16875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.713498][T16875] random: crng reseeded on system resumption [ 467.735623][T16875] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3572' sets config #1 [ 467.792365][T14160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.841975][T16895] loop2: detected capacity change from 0 to 512 [ 467.852951][T16895] EXT4-fs (loop2): invalid inodes per group: 0 [ 467.852951][T16895] [ 467.869436][ T2980] ================================================================== [ 467.877557][ T2980] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 467.885596][ T2980] [ 467.886556][T16895] loop2: detected capacity change from 0 to 2048 [ 467.887918][ T2980] write to 0xffff88811ac5f870 of 8 bytes by task 3290 on cpu 0: [ 467.887938][ T2980] dentry_unlink_inode+0x65/0x260 [ 467.906883][ T2980] d_delete+0x164/0x180 [ 467.911045][ T2980] d_delete_notify+0x32/0x100 [ 467.915711][ T2980] vfs_unlink+0x287/0x490 [ 467.920029][ T2980] filename_unlinkat+0x1dc/0x410 [ 467.924957][ T2980] __se_sys_unlink+0x2b/0xe0 [ 467.929541][ T2980] __x64_sys_unlink+0x1f/0x30 [ 467.934204][ T2980] x64_sys_call+0x2eb6/0x3020 [ 467.938872][ T2980] do_syscall_64+0x136/0x3c0 [ 467.943455][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.949336][ T2980] [ 467.951646][ T2980] read to 0xffff88811ac5f870 of 8 bytes by task 2980 on cpu 1: [ 467.959171][ T2980] step_into_slowpath+0x12c/0x4c0 [ 467.964192][ T2980] path_lookupat+0x2eb/0x4c0 [ 467.968797][ T2980] filename_lookup+0x18f/0x390 [ 467.973552][ T2980] do_readlinkat+0x74/0x2f0 [ 467.978048][ T2980] __x64_sys_readlink+0x47/0x60 [ 467.982901][ T2980] x64_sys_call+0x2b51/0x3020 [ 467.987569][ T2980] do_syscall_64+0x136/0x3c0 [ 467.992150][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.998039][ T2980] [ 468.000347][ T2980] value changed: 0xffff888124402eb8 -> 0x0000000000000000 [ 468.007436][ T2980] [ 468.009747][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 468.015885][ T2980] CPU: 1 UID: 0 PID: 2980 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 468.026297][ T2980] Tainted: [W]=WARN [ 468.030082][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 468.040123][ T2980] ================================================================== [ 468.053129][T16785] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.066686][T16895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.131071][T16895] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.3573: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 468.181348][T14160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.269108][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.477108][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.526885][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.577282][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.642094][ T30] bridge_slave_1: left allmulticast mode [ 468.647905][ T30] bridge_slave_1: left promiscuous mode [ 468.653635][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.661442][ T30] bridge_slave_0: left allmulticast mode [ 468.667175][ T30] bridge_slave_0: left promiscuous mode [ 468.672835][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.717521][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.727423][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.737279][ T30] bond0 (unregistering): Released all slaves [ 468.809848][ T30] hsr_slave_0: left promiscuous mode [ 468.817018][ T30] hsr_slave_1: left promiscuous mode [ 468.822749][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.830469][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.838293][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.846062][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.856088][ T30] veth1_macvtap: left promiscuous mode [ 468.861613][ T30] veth0_macvtap: left promiscuous mode [ 468.867189][ T30] veth1_vlan: left promiscuous mode [ 468.872445][ T30] veth0_vlan: left promiscuous mode [ 468.925700][ T30] team0 (unregistering): Port device team_slave_1 removed [ 468.935749][ T30] team0 (unregistering): Port device team_slave_0 removed [ 468.965306][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 469.056663][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 469.148026][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 469.236305][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10