last executing test programs: 4m34.895065326s ago: executing program 2 (id=3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="0a000300010000", 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x1}}}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 4m19.477402814s ago: executing program 32 (id=3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="0a000300010000", 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x1}}}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 2m43.560290405s ago: executing program 4 (id=358): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x179}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m43.516588302s ago: executing program 4 (id=360): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0xfffffff7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_io_uring_setup(0x360, &(0x7f00000004c0)={0x0, 0x77d0, 0x1, 0x1, 0x2b6, 0x0, r2}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000018310000000000000000010018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181a0000", @ANYRES32=r2, @ANYBLOB="000000000000000018240000", @ANYRES32=r2, @ANYBLOB="000000000700000018f94307c0991100006cdd57bfe344a5e0ef7d0856ba29387891441589b7defe2f5f43a5c77ede5b19ff7b8b2ee5b8b0e081c7049b26c7f3d2f9f33c2e0a2366552cd63a3972295bc3bd7d5baf14d3a36c6b271728f1460da86527d2f92d75c60706588a4570a86ac93042567c434596ab753b0e0b0957dd928617726b6d23b10d8137e0499ddcc4f2c104cd7edd7ef151283e817ad0704b81d093c048496c416bd607e061b0b000fe7431668243d926d9dc2000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085100000ffffffff8500000088000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x8, &(0x7f0000000d00)=""/8, 0x1e00, 0x26, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000d40)={0x3, 0x3}, 0xffffff80, 0x10, &(0x7f0000000d80)={0x2, 0x9, 0x2, 0x10000000}, 0x10, 0x25a3a, 0xffffffffffffffff, 0x1, &(0x7f0000000e40)=[r2, 0xffffffffffffffff, r2, r2], &(0x7f0000000e80)=[{0x5, 0x5, 0xc, 0x4}], 0x10, 0x8}, 0x94) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8000000010001000fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020000010000580012800800010067f265004c00028008000600ac1414bb08001500ae1e0d000500166868e27b000400120008001400e900000004001200050008000800000105000800000000088014000600000008000500", @ANYRES32=0x0, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fea01001800000000000000180000001800000006000000040000000100000508000000010000000300000001000080002e7e612e00"], 0x0, 0x36, 0x0, 0x1, 0xd96b}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1000) r7 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000680)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@data_err_ignore}, {@grpjquota, 0x2e}, {@dax}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f8, &(0x7f0000001340)="$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") quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$TCSBRKP(r6, 0x5425, 0x8) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000040)="aefdda9d242003005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) open(&(0x7f0000000080)='./file0\x00', 0x400002, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) 2m43.118858779s ago: executing program 4 (id=363): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0xfffffff7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_io_uring_setup(0x360, &(0x7f00000004c0)={0x0, 0x77d0, 0x1, 0x1, 0x2b6, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000018310000000000000000010018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181a0000", @ANYRES32=r1, @ANYBLOB="000000000000000018240000", @ANYRES32=r1, @ANYBLOB="000000000700000018f94307c0991100006cdd57bfe344a5e0ef7d0856ba29387891441589b7defe2f5f43a5c77ede5b19ff7b8b2ee5b8b0e081c7049b26c7f3d2f9f33c2e0a2366552cd63a3972295bc3bd7d5baf14d3a36c6b271728f1460da86527d2f92d75c60706588a4570a86ac93042567c434596ab753b0e0b0957dd928617726b6d23b10d8137e0499ddcc4f2c104cd7edd7ef151283e817ad0704b81d093c048496c416bd607e061b0b000fe7431668243d926d9dc2000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085100000ffffffff8500000088000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x8, &(0x7f0000000d00)=""/8, 0x1e00, 0x26, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000d40)={0x3, 0x3}, 0xffffff80, 0x10, &(0x7f0000000d80)={0x2, 0x9, 0x2, 0x10000000}, 0x10, 0x25a3a, 0xffffffffffffffff, 0x1, &(0x7f0000000e40)=[r1, 0xffffffffffffffff, r1, r1], &(0x7f0000000e80)=[{0x5, 0x5, 0xc, 0x4}], 0x10, 0x8}, 0x94) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8000000010001000fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020000010000580012800800010067f265004c00028008000600ac1414bb08001500ae1e0d000500166868e27b000400120008001400e900000004001200050008000800000105000800000000088014000600000008000500", @ANYRES32=0x0, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fea01001800000000000000180000001800000006000000040000000100000508000000010000000300000001000080002e7e612e00"], 0x0, 0x36, 0x0, 0x1, 0xd96b}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1000) r6 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000680)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@data_err_ignore}, {@grpjquota, 0x2e}, {@dax}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f8, &(0x7f0000001340)="$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") quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$TCSBRKP(r5, 0x5425, 0x8) r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000040)="aefdda9d242003005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r9 = open(&(0x7f0000000080)='./file0\x00', 0x400002, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r9, 0x40082102, &(0x7f0000000180)) 2m41.850454172s ago: executing program 4 (id=368): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) creat(&(0x7f0000000880)='./file0\x00', 0xa5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 2m41.781944984s ago: executing program 4 (id=369): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x22c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_NAT_SRC={0x14c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x14, 0x17, [0x40, 0x3ff, 0x0, 0xfffffff9]}, @CTA_TUPLE_REPLY={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4810) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000063adf1000000"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200"], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d000df0", 0x13}, {&(0x7f0000000200)="24f5", 0x2}], 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000002040)={&(0x7f00000002c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000840)="f8a5ac4a3726f651baffff7db311562fa853963d0f4a642e158bd6246a4481528d9b50ccf8b6edf29c9ff0bfc21dbf75c52dff63741d4f3a9a3a1a4f248a156753bbd3cfd957b348a8a7d6a91e42d0b8bac811711f76c1046e8503899506892e22e81f67861209dde7f787117f6688c5c8", 0x71}, {&(0x7f00000008c0)="4d589e9227831c00b0a5b6dad0cb7bfe58efdbb60bb84536ddb1971ad5e1ef50301f26ebb519", 0x26}, {&(0x7f0000000900)="47c69bc734d59a1e4480738a3577144671f23a18970944e9ddd8894e5dc09c9b6e08f5f26977d868b533335e2cb99584b4b5baa3420fe17c450677f29ece7d73b49acc2c37fa011be3fc4aa07f41d5f2f2b16a10f92f2341d2faffc03608402db51fa425d06f66c0d335a98be2d9afbb6f590a5734b9320fad05ea4eff73d44c2b01131119955df96e3063877e42e9ad6290080aac2e9ba2aac8ff2c5605afc2805b2457856cd6078ffa15556f1726e11699a953dff79ea84ca8306bf0fcf6b0cf467ee0eeaf8c109de4e0515f31effc47a741add612e20af2920971", 0xdc}], 0x3, &(0x7f0000000cc0)=[{0xa8, 0x184, 0x3, "a7465c54527b8ccf4f6ba7a720c079d330612ce45c70894afc77c7927df5f64ff9184f4a7e2a4166affbf3de60d22edc3dc96d99e887ee1cb3037677e180f5ab926a913e4478f7348fcaa1efd13bab72f37d5f618b481465a31b95bac0c5847c03a8600e2996fdef6f9c2321b562bc3a92c65a9a7a940feb505e62be3176aab2c333a944111d1c28da641a885ffef1cf4b9075ede1cc"}, {0xd8, 0x29, 0x2, "58e82ce27a96602f80e1ce6bfa987ac461f3133fc2bb30fd5d6c9b9d3ab36468b0bfcd35ce9dbf4b1722f1e37359a6a5551288924e00292ec59f9e62306b6eaf0706feefd2762bbed775ccfa6c27849c337d9a35dcfea30a98f7e42fa861b7eee1a3b76d7397ca4af9325082c135d75f21bcadaf0f254b652702b4504ff66997160019e7ad6de2a8c0be7b3618807e8c55834772339e92c779b9d9dad5e8e3ad43c58f352fb1ad3c7452969dfbfd81a6504845620abf774f246b80aca7177189238b9734"}, {0x1010, 0x107, 0x9, "c660c3ca432842ff311c33f010ad572d7702ab8400733184d8f8c829e8b11cf1134620cb289cad89f685dd0e9878b518937584014b1830f0ad90bebe62b15861cf0478f2b4591a74987b137c2b6eea3c6e6db7135e2339f2df72d0586b5cd343f4921dd063f3053d03801e4ccb7cc54d086215af1ddfc7073338dbca8aec61a43fbada091a0f0867d3242d08d85379ae1132ffc485a5e20b9945b561f71185ae117a6e3dc70ff2df6ed1d9f347a6f2d85bb976bb66008e06c3f4b2cf3320404cec19665c7ffad55cfaf346a59fcd954a707bd4fdc4f44845809db90bc24bd200acc7efeb0a279c048d90525cd9b025379328ecad9c97de968fc6bbcc13a16c20eaa1ea506ff4a5cdc596bb4c5d8440ca68c0791214c2528365e11726ce7080850ab4cb191de8fa20a08cfc3fa1c931119ca5b1b20a6c14a5be854f7ffd69b4618b87f2e363d760445651ac54782377dcddd2acd900def017630718369ee1d1a776003411add8b848dd30d132169cd27ef5b7c5c71475102265dee538d52b7ab61c54f38b9cfeabdb80eb239b851d3ef26898a207ec94a668965406fb73d2ecf3737325120448611308f6b251fe32c4ea17c2393c7296acb22b86f3cad6baff987eb1ccfe4db401b73489945031648baefcf420654b5170011bd268129f0bf51ae6a4f96f33a1f2ec5019949e3b6bac89ef8e6ba6587ebf664f86c2a2df9ae5fc96b5e5995cacbd29fcb6c9701c6297d6b801a204371d628775855537827504bf57be43c0844860e54bde9af100a35963334d795a4e4c99a85c15de93dd9dc6b2b7edeef715142c8cf4e2f1cf2ba58026eaaf128a17a651fa88db1bb39f4c3c3d3da19df00243dd213497f728e4f60f48a922843485de5d9141a659b9e4338ee6c51682ed63c2fe06a743ec7db18a440e2ba0553fa3cdef596c3fa9864ddd7e0df6e18a576006093ee3aad0316a5e0f5a612a8684363d3b4085d84f1dadd275b87c34939c2f78d3b03249d3bf469c0808fb9460e9dd15bb35f010531e3d9308cb68d7fd3a7553b9432549da416618b9074ce5687f1415ac8c31067b8cafc01abe045dcc32b54a5e2e37287a0a48d17340b50d704b9aebb2811eae85fd915dae84f01f5e21fe0d7a5c7abb2bf40418bf753b2bbb07b4cd8de18204ea5c3cd3a4052b22388482eb512738ae72b84302d45adba49a8b8ff3abbb52b0af057098c66bc7d500827fbc73169044277937e017a5fdb6b3b2b254c742024bbdc699647b19fc753ba21d80fffe1e3ee5fb8215452a8c77c88d597867bc8cf6c2eae765ebcf951e83b816041146aa189422aac4ba5ce0a3bb8b35501d6d46fce06f133b05855b953c345dee861971560b66ba80516b7041fca712409a398e1782a8eac152245cef1ffde789f03c2014acd93b7b8671640bdee9cf1bbc50982b454d14520c2d7a72f86cc87528b483e35779be74aa31803d9a3fc961fc89b42bf351c5486af2f1810bbe009ca3e70ab3ffb7611d0baa781085a9736f0e952ee3cecbfffa32a619349befa9a7b9defb17a325c8e95d939496c890034151a0adfa50525329fe6b0fc03df6374c1da7711c21cc67086e7f6c6ada37a0e144e99ce57baaee3ba06e64407637fa133a13219c3dbe6af2c8af6676cf89efb7285b14fdd1c39849c8fd187a6edda286045c9f7dc5ee8f678cd67ea8a99b5f68fe9a21c6cc336ee702f8fd7d93bdcf127252043e24c4652384aea7e0cac113ba80c8bfcb10ef9948661681f22e5f6a1046417d7b9534332ecf7ec5b22ec2cad7e25d7cca9bf9b7ba887d52ef623fefd85a9ffa695dafac23ad6e5701f62eaa03b6ae8cd201054c342c266613dacab79d112fd287eb3aedcd506686516ae9d3bcd193f85ed13c4a69e87482754afafd2cb233df082434e4b9017f8c82b4af045534ebe476a452e6e2a761f160c97edb617089c928059923c66ab4787f0bd8e2eacd3b56f719b229168d5e9eca8cd8441a3dbea5c8d97fc2aeb1db9a20482b0588f4bd170cf979920ef8f4d19ffb527541de600986b515c56ca3a3a1b205fdd14d41570c4f82368656d353ab7e2b2857d27f8ede493f0314868cffafb13045129755749dc204be29e13c8024e283e74112b89f06a5c69205de73f28d4a8088d7d1cdd2373f657c9a1efe659d496b44c6dc1d8d7611ec45be721769200e7a97900d45a19cdad871ebb2a809049335531d301c28049838bc859d9f9c6862bbec0a52d6a047552fd5fb40f2ad55a54e5273c4f9f1a8a4370db8d1db4d7f605f1916b97d4b5f24563887f1e67bf184ef7c252d0ab7cf3cf063c69013289e8b9f93e0d8ea24b5bc79cae18eb85b35843d0c7485d1d7ef55ae7bcf34c1066f2374004752b06ca27393d979f554ca10350ff1d3be66f0d5ba31c263efa28c8a9a30ff94c6e28c5b5ad8083fc4d7b364dea93c49eef4b3732e1bea3ff5d540be85b6cb099cbb1c7459f32e3fb4f5f14026e92a584daa7711db816fb0f190a3f7f46c729e6a6dcc9cd8685edccddb8c6dfc28220edc2d6d50fd2df5e426f57d0d46e4caadc5763e5342455b2cc06a15e6b3cc4aaa025f4adfc19f3e946f6150e9ce55480d9ef8dcf31587d205ecb4218f96c225fd5093531bdd896204cabeb76083681929552175bb449eeec7414e2d3ce29f4ef2705977b4bdd4035b355f3e7de7b39980dcdb9789d0413c98f3b7793b79555630f107bdaca0f6679832f43fada06d11c84519c935c092f8e4b8a9437cb91e722cfa868f75c6a777937a74e04cc4e5134707a94b67790d18a40a5093ec54180b600450abb461f3fccfa978503270b78b27172a4baa8de04401cc54730a4a5efbe5475b60e44ed9b6dcf0908f118851eeb34d0bc2830b55137da8e56243f346e1b47cca775352ee2ecb7f717d3e72f9f96f50333abcd234b44bb87aa1fb386f3c9d2c545487924559e1b9c019c617f9dee10077fd0ce47fc81fd1f085336cb5975bc63dff81b9a78cb079df426b101f9af7cb23cb93815a248102305c00ccc82ff546e39787a8895d60dfaa6e3cb77a305b3711f6528c2ebfb5043e63d1b23bd0ca9d04df2fc28dc7da37901fdbf76660a906924f13db76f1a78ae049e5fcf3e1d5c137c16e6dce4acac00529a4dbd3342caa46e6b4ccff2f6879f665653c410b4051be788857ddd4a8b732ef1e8be7f9e44b2905682e2bd58a8705aed4707c2b10f8ef19a05908af79c3d2c3977f4aa64e95b4fdd4772853ac31baa0c5207a24ac1a3de07db5cdb8031f3470fd73f2daa8960826d12c5b2df2a332d65ce8af43e86404a768d8bd73a920f83826b20479d85948c8ae7bc0840ed6aa0040af42512c8c7789d88e5330b9b075e8799fdf5401c893d9d7ea17845a8c054c3e94322e76253873c9c1763e4a767f3da3e59675f56c8536d9cc03b61dcaf4912208012432ba81f1b7f1cac32f1654273127fb496ec379f7f4b69492b48f5920b69e1d63b03c5aad2c9d3e7abc654141cc4d161c36f637f3050c5b968c18ed410b4429c5a58621faa388cf5a64c8b7734d18d5c1e81be84849ca9475c860316e6974e217eaeb08d5a65e95c4087ec7b34f4281447129c224da3252ed6722064f7db5f177a1d4252ac37ceebbce20110764ab34c12c5665a45a8acd72c353b321c5167f53dff842bd87c5282ad66bf365461373d65a12afaf34491cbe40fd94038385ade9c133b92c1787319d749e66bb89919ef59f374efa942da1d1d99f13b8dbbf8193d1cc40e62cc518e203cc0a43bf378da27fa95ff546fd75c1f7c4177b76122134a149c10dc91f25e470dee4baa81be7e324aab88ed537b9ea951f9b8793e7be570facc2fbb19c43450c93d1c531d638142ed408ed2f86c1c07decc2420d957d0b631a8dbe9b8f69bb7536862af8867485fdb67c7386d248855fa22b892688e8a05eecfb170bd7916fad59800d66cfd48b1e7d3b1cb01c503c4ee9c8acaf42235705a8eb3092a87d1cad6d4bab2a50ea1e21e7bbd9f6c2ab5735c4867643a6b77512eacfeefc385f762af643d2acad0f639e08feaaebb39bb3b2db1ac7d6c23e84cf492b50083df8958113c12b82ce2cfc7f76318ea33fdbddce2f3e2cdc04b64b0fdd18cbb062e6a4f10e0f102bce9a2a2ad9f3111387f30b8636a2662b6e7b75078350c8cd04711fe2effd3e2e7a8cfa8dea126f8889a334bb1ade256aea6d136f9c33901c2967739a0a071427733cc01fa3869ae6c9219dd211e00f596304ae3a6747d1aea5c50b37fc2a6527a40a7277e850678a9e46878669c7a833faaaa73f7fa833645196779bb4ca5db122d15763d8e4f0ce9f6946fe067a37ab833285c8792b67b9ef970da2902a95f9c55f5a4d3c9cf13ded3e09349baf57ef53168fa443e25e61c61d101fed38d38e19679f90fb3319b890ad27d75b64ad468fc4fa4fa7dda4098077a432798e6a0a5807afad916e06835a2b60b888623ee17445ced1a4a0f40a92faa9fee036a3d810c6e3a1758272567ed4a9f8a42fd426aa2279226c967bd73bb1c977799ce8799f45d588b7328511eac2b21d76f280c4dc644d2e471629f7ba2718d222d668b708df0c4bbe97c8bebefa4012adc2e3d4a9060d8c608ab260ffac246adc55a047e60683579a5d8ece2467bcd04f78a07749d8acbc39f51986b083b7656b2470c41adecf51f80e7e6a1e3b2b96363c5e456f79e10426d3958d11e575dacfcbab0de3986159d0675aed7ab014fa64d2382a77d1c274dbfb3781a6a8b340bac6a8dd64d8144620b66931a94b7db34b765f5c77bac68c8c123ef04a005a815768cb7c1b1be3778ac38ec159bcc68efa253eac2daf0d5899c100ae0076d9ce04338c8fcb9267b68c7e96b7b6ea306e84577a498f85d8cd71637eaab5f4fe9f3c76dc81360dc0812117822e72ef64a5924172abb823141fb4073bc20a8044c5dea2754ef1d8e3c35fd5ba69d398f547104eb36c6d53efe96389472aa463ec4f22beedb26ed330e780719d39530b325b0c42810fc25c0e07a8622b9240434aacce8ea61b04446597cea87ea32ae43fd144908f5b312e4d6c84882ba7d292d6359e4b63d1813099848ac0ba5faeafb787badf240f1191d3c9a1a21600b286e71024c9fadc35e949abc44385d6c72e2f1d0763f9a2880b1894ee541bbac721e7317da928812dcf1d9e717de1dd5a90fe61fb8e144fafa1e35ca2f17c7d58675f56b8901f040b87fc49f48affeeec0aaa747d5b23e0a65b36aa98ebe05dd5c60a1da658e694b12f16d4008a1b0f58ddcb5a03e9bd6c46305c685ec62002a61721dd34fc4bcab268d1a68dba8b95ed6b38cd281c84e994bfa9886454df4d647c96d67eb426c33351f5646cd5e0c5ff4d5c907ff6e497d4e7f69c7efb49d8eb1d82abf7f4bc205498e4c53a2d741555f260c09e4e53827f5272acadf8a038ca42b661a8ac47973b3e790c034c47eaa213a483f7821f0dd78fbdf90e3c20b90bd31994dc5a270b1695e96d2630713a676e573789c54144b4e2a582a1deca36597e939a4278271480585c10a26dbf3af6f2b71d6ddbee97fa0fd34372070bf2c3d06ace2da79bf7e810fbb4c4fddef72e6c61c329f1ba96d6cefbd8452c0ba597a04a653b253987b9baa15761011c8aa95279559406b45d4e77bba3e63f7b660fb35f22c3cf65d9872aa8e62bec877abf6da51c0373a97879bfc06b688e688c0cc7393d01b4ab507cfc763507fb0c953894eb1b2df8feb6490b1e67c7ea8096bafeec98075b781ba5956817b4002abbc84fc315ec69a0"}, {0xc8, 0x119, 0x1000, "3e63149d445a6315d281686173d0c08ac7af5b19b5eb2a28dc954b77eb4d8e62c741e5348de008763d6bab7674c43d2e26d65d69e968249c92d052c2b17eb11a25c52fe045881979742b2081f41a9850d72bd1d35942cec4e199ce1491cccc275669d1ad70c894945e042c66b9a27a5725ad52b6ad89bbda9d56dafd917d157d868d24cdf0801f7ac01bca02d3d4c6be52c934c8c193d14f8fab7cbce3ab9083f6febc87e22d6c152c21c71dd5f60d145bb1d71e157a6b"}, {0x70, 0x115, 0x8, "ac2278b5007609b5f5677c5596b73bb698259552abb3a60e20e758e15c42b19273138dafe560e01ff1e3fad8748559f082c4c7bf4c02fdc7ded403d0d3ea2df711373452dd160f4552580bdee9cf67e05be7fe320404eb792761b6c5f067"}, {0x28, 0x109, 0xe21, "7639a91fe1bd267d0974d7a5f438b48462"}, {0x60, 0x10f, 0x6, "e9d6c0446717a3de72b97418b26097fbc5276ccc584c37d1f9f98472690e97bcdac72de1b8b7a471501fd888de84ff858ea29b25e5718dbc0e3380d45ecc42732801cdc8146500d44d064bce68"}, {0x10, 0x104, 0x19f}], 0x1360}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) 2m41.532162945s ago: executing program 4 (id=372): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x80000000) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x4, 0x3, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0x10c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r0, 0x0, 0x0, 0x64, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x10000, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) 2m41.531992305s ago: executing program 33 (id=372): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x80000000) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x4, 0x3, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0x10c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r0, 0x0, 0x0, 0x64, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x10000, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) 1m43.754306224s ago: executing program 6 (id=626): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)) r0 = syz_io_uring_setup(0xf82, &(0x7f0000000280)={0x0, 0x80000002, 0x400, 0x3, 0x380}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x4, 0x9, 0x0, {0x0, 0x0, r0}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x22, 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000d700000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000200"/23], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, &(0x7f0000000380)="bd102c019908163f0a2487129138e919f0f037698f74c10e3630d7ec118845bca09bd79139953042b2883cb6b620d9ddbcbdc8ab87e37ebfb0", &(0x7f00000003c0)=""/254}, 0x20) r5 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x3, 0xca}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x12, 0x1, {0x2}}) r9 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x13) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) tkill(r9, 0x12) waitid(0x1, r9, 0x0, 0x8, &(0x7f0000000240)) io_uring_enter(r5, 0x742f, 0x77ae, 0x1, 0x0, 0x0) io_setup(0x4, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m43.5993307s ago: executing program 6 (id=628): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) rename(0x0, &(0x7f00000001c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") lseek(r2, 0x3, 0x0) 1m42.895647829s ago: executing program 6 (id=629): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r4, 0x7, 0x0, 0x781, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000113, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@barrier}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) openat$cgroup_netprio_ifpriomap(r10, &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x1, 0x29b, &(0x7f0000000ac0)="$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") 1m40.50390707s ago: executing program 6 (id=637): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$eJzs3M1rHOcZAPBnRqu1ZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p5begk4MQk5xGdfEpJrLol9TcghYIJiJWBCsmH2Q1K8Wkm2dzWO/PvBu/O+887u8zwer2Ze2N0AXlhj2UMacSwiLiYRpdb+NCKKjd5QRK153PrayvTnayvTSdTrf/okiSQiHq6tTLdfK2ltj7QGQxHx7m+T+N4/OuMuLC3PTVWrlfnW+OTilesnF5aWfzF7Zepy5XLl6sTpX02emjw9fmayZ7U++uDcnc9+8vuPal+8/OXtT//9UhLnYqQ1t7WOXhmLsY1/k60KETHV62A5GWjVs7XOpLDLk9I+JwUAQFfplnu4H0QpBmLz5q0Ub76Xa3IAAABAT9QHIuoAAADAAZdY/wMAAMAB1/4cwMO1lel2y/cTCfvrwfmIGG3Wv95qzZlC1BrboRiMiMMPk9j6tdak+bRnNhYRH94/81rWouN7yP+71YMQO6qtRsQPtzv/SaP+0ca3uDvrTyNivAfxxx4b7/f/v2ep/1wP4uddPwAvprvnmxeyzutfunH/E9tc/wrbXLueRt7Xv/b933rH/d9m/QNd7v/+uMcYN2/990a3uaz+X9/53avtlsXPts9U1BN4sBrxo8J29Scb9Sdd6r+4xxilr25Uus3lXX/9/xHHY/v625Kdf5/o5MxstTLefNw2xuo7k690i593/dn5P9yl/vbvP3U7/9f3GOMvFy683rHz/mZ35/rTj4vJnxu9YmvP36YWF+cnIorJHzr3n9ohkdrmMe3XyOo/8dOd3//b1T/QfLnGXLYWWG1ts/HfHwv7m9s33+iWUnv998Tnf3jXI/Ykq/9Sl/O/tf63C53n/597jPGzt/51otvc1vVv1rL47bUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSlETESSVre6KdpuRxxJCK+H4fT6rWFxZ/PXPvr1UvZXMRoDKYzs9XKeESUmuMkG080+pvjU4+NfxkRRyPiP6Xhxrg8fa16Ke/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HAkIkYiScsRkUbEeilNy+W8swIAAAB6bjTvBAAAAIC+s/4HAACAg8/6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD47+uO795KIqJ0dbrRMsTU3mGtmQL+leScA5GYg7wSA3BTyTgDIzROu8d0uwAGU7DI/1HXmUM9zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5dfzY3XtJRNTODjdaptiaG8w1M6Df0rwTAHIzsNNkYf/yAPaftzi8uKzxgWSX+aHNY2rfnDnUt5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeP6MNFqSliOi2NpXLkd8JyJGYzCZma1WxiPiuxHxfmnwUDaeyDlnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAem9haXluqlqtzGedNFqdjT3fgk4kzUr6HqsVp5Z/yTo96RTjKZ/+qF6v55183zu5/lkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnC0vLc1PVamV+Ie9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLwtLC3PTVWrlfk+dvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/HwdAAD///TiCwo=") mkdir(&(0x7f0000000000)='./bus\x00', 0x64) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) fchdir(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[], 0xdd12}], 0x1, 0x0, 0x0, 0x4000054}, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000300)='personality\x00') pread64(r4, &(0x7f0000000500)=""/31, 0x1f, 0x6677) 1m39.904579881s ago: executing program 6 (id=641): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a20032080203fcebff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000280)="a9b13f6775c936c20ca79c4b00bb56bd604911c194106520f76d4abb954fd2e341eaca48f228f9ca32ad8dc9d9b7947d15f48836b6b01b69b63ecfd0516b5ce2f8427f83c708e3a16b1b4142531f67ce77b04d744081bf9946ff399a1dc563550c354594af4e9f04d3fdd55c200356269d56a0d44e5db8d44cedbe9c874e39bc8e0d88c1754ba4582b50e2f5e9950d4fcd2e488ee111cd1e0a17434c3c410cc5098c011ab99235cf746e69dee5ebefbad74d90a9adf264b6d434298798c9cc45274a301b787c7730e247a56744a9cdb8b219f4960f1a424cb764a139dc1fe3ec999a47eda3dc931c7120e200") setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) shutdown(r2, 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff, 0x8a21}, {0x1}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e24, @in=@remote}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r4, 0x5, 0x0, @void}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000240)='syz1\x00', 0x1ff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r7, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x303}, "9f0ea3a11fc1f8b1", "0c3404eb8aec22b61fa20569edb1a3a559dc1316dd84a861adbc8e07b4ddc71f", "8dc7ddd2", "50543757c4bddd53"}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000085000000000000001200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000386000000bf0200000000000055090100000000019500000000000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100}, 0x94) 1m37.28715241s ago: executing program 6 (id=650): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) ioperm(0x0, 0x7, 0x80006) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) wait4(r0, 0x0, 0x2, 0x0) tkill(r0, 0x3) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, 0x0, 0x1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) getcwd(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) 1m37.241472038s ago: executing program 34 (id=650): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) ioperm(0x0, 0x7, 0x80006) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) wait4(r0, 0x0, 0x2, 0x0) tkill(r0, 0x3) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, 0x0, 0x1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) getcwd(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) 17.321052073s ago: executing program 7 (id=1005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="800007000a000200aaaaaaaaaa1c"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x4048040}, 0x40804) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 17.188120985s ago: executing program 7 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 17.168898958s ago: executing program 3 (id=1008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff1, 0x10}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x800) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x740, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)=0xffffffff00002001) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 16.233941465s ago: executing program 5 (id=1011): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) socket$netlink(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x12001, 0x10001, 0xda, 0x5, 0x3, 0x20007, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) listen(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000010000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010000000000000000000900020073797a320000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x0, 0x8, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe}, 0x0, 0x0) 13.863617323s ago: executing program 3 (id=1012): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r4, 0x7, 0x0, 0x781, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000113, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@barrier}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x1) 13.263247914s ago: executing program 7 (id=1013): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="170000000000000000000000070000004408fc5cad8c00001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141412ac1e000100000000"], 0x38}, 0x4000004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000016c0), &(0x7f0000001740)=0x14) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc0049364, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000400)={0x2f26dc29e83cb238, 0x80, 0x4, 0xb, 0x3, 0x3, 0x0, 0x10000, 0x100, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x8, 0xe2da, 0x6, 0x7, 0x8, 0xba, 0x0, 0x9, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, r2, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x5020, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x2c9, &(0x7f00000005c0)="$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") r3 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r3, 0x0, 0x0, 0x8000, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6020400) r4 = socket(0x22, 0x3, 0x3) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) getsockopt$packet_buf(r4, 0x107, 0x16, &(0x7f00000002c0)=""/1, &(0x7f0000002180)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/4092, 0xffc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) 13.002909638s ago: executing program 1 (id=1015): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0xfffffff7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_io_uring_setup(0x360, &(0x7f00000004c0)={0x0, 0x77d0, 0x1, 0x1, 0x2b6, 0x0, r2}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000018310000000000000000010018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181a0000", @ANYRES32=r2, @ANYBLOB="000000000000000018240000", @ANYRES32=r2, @ANYBLOB="000000000700000018f94307c0991100006cdd57bfe344a5e0ef7d0856ba29387891441589b7defe2f5f43a5c77ede5b19ff7b8b2ee5b8b0e081c7049b26c7f3d2f9f33c2e0a2366552cd63a3972295bc3bd7d5baf14d3a36c6b271728f1460da86527d2f92d75c60706588a4570a86ac93042567c434596ab753b0e0b0957dd928617726b6d23b10d8137e0499ddcc4f2c104cd7edd7ef151283e817ad0704b81d093c048496c416bd607e061b0b000fe7431668243d926d9dc2000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085100000ffffffff8500000088000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x8, &(0x7f0000000d00)=""/8, 0x1e00, 0x26, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000d40)={0x3, 0x3}, 0xffffff80, 0x10, &(0x7f0000000d80)={0x2, 0x9, 0x2, 0x10000000}, 0x10, 0x25a3a, 0xffffffffffffffff, 0x1, &(0x7f0000000e40)=[r2, 0xffffffffffffffff, r2, r2], &(0x7f0000000e80)=[{0x5, 0x5, 0xc, 0x4}], 0x10, 0x8}, 0x94) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8000000010001000fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020000010000580012800800010067f265004c00028008000600ac1414bb08001500ae1e0d000500166868e27b000400120008001400e900000004001200050008000800000105000800000000088014000600000008000500", @ANYRES32=0x0, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fea01001800000000000000180000001800000006000000040000000100000508000000010000000300000001000080002e7e612e00"], 0x0, 0x36, 0x0, 0x1, 0xd96b}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1000) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000680)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@data_err_ignore}, {@grpjquota, 0x2e}, {@dax}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f8, &(0x7f0000001340)="$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") quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$TCSBRKP(r6, 0x5425, 0x8) r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000040)="aefdda9d242003005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r9 = open(&(0x7f0000000080)='./file0\x00', 0x400002, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r9, 0x40082102, &(0x7f0000000180)=r10) 12.962259154s ago: executing program 5 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 10.611604069s ago: executing program 0 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$eJzs3c9vHGf5APBn1nbiuFWStvn2W6K2nqQkdVvjrG2aYPUAjnftbLG9yHakRBya0jgoiqHQgtRWSKQS4oCoQAJx4VZx4lSpF3pBvcENLnBAQv0XKk7hZDSzu/bau+u1Xcd208/H2t358cz7PvNj581OducNPl9WT2wYW13NH7scv/rHfciYQ+xy6ZP3P3gve7x7N45ET7yY/CmiPyLSiN6IeCKib6q0UJ3rUtCdiBsR8XFEEhFHo/a6LTci+VU8vD7+cSS/z+rt6Mh2S6abVb7QDvr4AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwyiZKhWLo8mRqMxfvZbWRKQtpkoL1SRWV1vnNJap+Sjv9Tv56BcPdak3Iske0d/f6Or7iVPrsx+PiPRsPFkbezLvkDz6452HHj/50mO9hcbynbL5TI52KLYnWjbMm2+/c+fVlZXlN3ZYRf9ucztkZsrzlcVqZW5yppxWFqvpxMWLxQtXphfT6cpsefH64lJ5Lp1aKE8uVRfSoann0tGJifG0PHK9enV+pjQyW25MvPSVsWLxYvryyLfKkwuL1fkLL48sTl2pzM5W5mfymGx2FnMpOxC/WVlKl8qTc2l66/bK8vimnFp2UxY02m1NsqCxbkFjxbGx0dGxsdF3671nr024+OLEi5eKxd7iJtEScZ8OWg6XY5138/04jcOuFGrtf8RsVGI+rsa1SNv+TUUpFqIacx3m1zXa/3MXylvW29z+11v53qbZp7Ons/F0fbS/Q/vfIZf9+3sz3o534k68GiuxEsvxxoFn1PqX7ZEO84591rJnohzzUYnFqEYl5mIyn5LWp6QxERfjYhTjlbgSg7EYaUxHJWajHItxPRZjKcr5ETUVC1GOyViKaixEGkMxFc9FGqMxERMxHmmUYySuRzWuxnzMRCkm81Juxe18u49vkeNa0Oh2gsa2CGppzHfc/pdb/w3JF8zen8Rhl1br7f+R7qFDU/uREAAAALDnvvTXOH7q0b/8OyKJp/Lr8tOV2XLxoNMCAAAA9lASScST2VNfNvpUJD7/AwAAwIMmyX9jl0TEQAzWhhq/hHIRAAAAAB4Q+e16no5kcH2Cz/8AAADwgFm7x37tSsDaPXav9TSmdr0LfzLcuP1verP2erMeUS9iYLoyWx6Zqs6+NBrn87sM5L80aCmtJyLpy39+8HycqUWdGYi72evAeolZnf1Z1OjIS6PxfJytr8jQM9nLM0NtIsdqkc/WIp9tjuyJDZHjWSQAPOjObtEe1+6x3739fz6GaxHDp/Mmv/d0mza4qGUFgMNirY+d/9a7NGvT/tcjnu7U/n91i8//WcSjcWuw9pWCkXgtXo+VuBnDUf/GwWC7Uhu9EdS+hjDcdDUgt+lqwED9Kwt/v1SI4ZbrAf1r69ocuxxjMVy/InCsPr9+7SBZi00aOYzXAnruww4AgANwdst2eHvt/3CXz/8DvlIIAIfKWg/22x3IFtp2cG3goNcRANhIKw0AAAAAAAAAAAAAAAAAAAAAAAAAAAB7b1s38P/b+YiVleWInXYWsIOBk5un9O8kw60HCnF/cm4z0Hv/q9hqoGfnvTNsc+AfXWO+HjsuOdvHB7OhDHQbOOATEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsiiehpN71wNH8pRsSF/c7pfrp70AnslXR3iyX34l68Fcf3Oh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC+6+v3/C1F7fag2KXoLEeci4kZEfPugc9xL9w46gQPzvfy56f7/hYi+WE2it7bbI+mbKi1U57LdnxzN5n/y/gfvZY/uZbf2qpB3H1HY1LlEvYamKX0bl3okX2qgtPzmnR+9/oO0dDk/MC8vTc+W5mYWvrEe+HjyYa0LhOZuEBr5/uTcn3/dNPlIvfIPszVtb3O903m9pdZ6/7/d0h3q3YbbK8tjWU1L5WtLP/7+7beaZj0aZyKeGYoY2ljTd7NHh5rObN6eGyWfJj9Pjsfv4ka+/7Otkawm2S46ka//sVu3V5ZHXnt95eZaTj/dkNPJGIyImxH9289pMD+ftJUfdYW+rNZiHpQ9nepS3paaShztsF0fyQ+ZgR2tQ9p5HXL5du94cDUyGm+b0W9++Fic3/GePr/1nm4v+TT5V3Il/hk/a+r/o5Dt/3PR9t3Zpog8sulIaZ63YQsUapH5mo81z3hlc5lbbDj23C/jO/G1tf1faDr/1/fV/pyPmmps/76I2Pn74g8nWlqUdXmLdGpTi1Q/+7RdoH8tz1O1qA55/l+8ENF7ekdnlBe6nFH2/v1fr+/uUPwn7ur/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPySiJ520wsR5yLiZEScyMbTiNXNMXd3UV9hINlNmntmNzkfZklv26lNK7pxjZN7cS/eiuP7kBoAAAAAAAAA++By6ZP3P3gve+T/H98TXy7U56QRvRFxMvlt31RpoTrXpaC+iBuN/9Lv31kON7Knh9fHP87Gnuiy0MF+fQAAPtf+FwAA//822GxX") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 9.967314647s ago: executing program 7 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 8.57895092s ago: executing program 5 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 7.799530941s ago: executing program 1 (id=1021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f74, 0x100, 0x4, 0x9e}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x13c, 0x13, 0x400, 0x401, 0x25dfdbfd, {0x23, 0x7, 0x81, 0x6, {0x4e23, 0x4e20, [0xffffffff, 0x8, 0xfcf4, 0x2], [0x4, 0xfffffbff, 0x0, 0x400], r4, [0xdc6, 0x89]}, 0x0, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xde, 0x1, "fc308fe4a888e04b658393194349ae52b95ea2d1d18a890bfbe9fd7702e8274cc0acb48e7863750a06ec57da6039c9cc217d02daf7f1603226863525cb7db0ef0fd5607fb8613d9fc771b013faef4b9ec36648ffa15bc413e8c3da299dbb2c158efb29c4679cd00682291b28b8b6c18902da14fbbcbc203f1bceb00a76bae19ac5bd895a159d23cd57f1efb7a433d3622ce9d07ddb6f4629b171474ecd0b3b1c7e2229760acf8de64d9a917c7e959b7cdae2029bcc54d582fc9869d68e30f3405481969c77d19566b82e78733612a38885aba441f13b02e5936d"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "e916dd325600664cb249ec"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24004091}, 0x20004015) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x10, 0x6, 0x5, 0x4}, {0x71, 0x2, 0xf6, 0xd}, {0xc82, 0x5, 0x7, 0x2}, {0x85, 0x7f, 0xb, 0x1}]}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xb) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x84, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x50, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4c23, @rand_addr=0x64010102}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20d0}, 0x0) capget(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)={0x1000, 0x8000, 0x5, 0x9, 0xa, 0x19}) fcntl$setsig(r0, 0xa, 0x34) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@bridge_delneigh={0x54, 0x1d, 0x300, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x40, 0x20}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x7fffffff}, @NDA_FDB_EXT_ATTRS={0x10, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_FDB_EXT_ATTRS={0x18, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xc}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x54}, 0x1, 0xba01}, 0x810) 7.475942195s ago: executing program 1 (id=1022): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xf, 0x5, 0xfffffff9}}}}]}, 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x20, r7, 0x1, 0x4, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x80000001}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r7, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8891) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18400, &(0x7f0000000000)=ANY=[], 0x8, 0x2ef, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00800, &(0x7f0000000100)={[{@nobarrier}]}, 0x11, 0xbac, &(0x7f0000000c00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6.808229837s ago: executing program 3 (id=1023): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000001c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000000), 0x44, 0x4f3, &(0x7f00000010c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x81, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0x281, 0x70bd25, 0x0, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@mcast2, 0x4d6, 0x3c}, @in6=@empty, {0x0, 0x0, 0x0, 0x400008}, {}, {0x0, 0xfffffffc, 0xffffffff}, 0x2200000, 0x0, 0xa, 0x0, 0x0, 0x26}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x0) r4 = syz_open_pts(r2, 0x0) r5 = dup3(r4, r2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0x17) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 6.463387765s ago: executing program 0 (id=1024): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x404008, &(0x7f0000000240), 0x1, 0x52f, &(0x7f0000002900)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fallocate(r2, 0x28, 0x8, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000000c0)=""/177, 0xb1}], 0x3}, 0x10100) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 4.938889231s ago: executing program 7 (id=1025): statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/38) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) ppoll(&(0x7f0000000140)=[{r0, 0x4}], 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) io_uring_setup(0x28e, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xf, 0x4) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000300)={[], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}, 0x4, 0x7eb, &(0x7f0000000e40)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) fallocate(r2, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000080000008100000000000000070000f009edc4c89a92260000000000"]) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x200480c5) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048091) sendmsg$nl_route_sched(r3, 0x0, 0x2001c804) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000000)=0xa, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b80, 0x0, @perf_config_ext={0x6, 0x100}, 0x100000, 0x800000, 0x43a1bd76, 0x8, 0x401, 0x6, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x0) socketpair(0x5, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 4.440690705s ago: executing program 5 (id=1026): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) socket$netlink(0x10, 0x3, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x12001, 0x10001, 0xda, 0x5, 0x3, 0x20007, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) listen(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000010000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010000000000000000000900020073797a320000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x0, 0x8, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe}, 0x0, 0x0) 4.255836886s ago: executing program 3 (id=1027): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x57, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x2, 0x6, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xa4000061) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 3.918790532s ago: executing program 3 (id=1028): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$eJzs3c9vHGf5APBn1nbiuFWStvn2W6K2nqQkdVvjrG2aYPUAjnftbLG9yHakRBya0jgoiqHQgtRWSKQS4oCoQAJx4VZx4lSpF3pBvcENLnBAQv0XKk7hZDSzu/bau+u1Xcd208/H2t358cz7PvNj581OducNPl9WT2wYW13NH7scv/rHfciYQ+xy6ZP3P3gve7x7N45ET7yY/CmiPyLSiN6IeCKib6q0UJ3rUtCdiBsR8XFEEhFHo/a6LTci+VU8vD7+cSS/z+rt6Mh2S6abVb7QDvr4AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwyiZKhWLo8mRqMxfvZbWRKQtpkoL1SRWV1vnNJap+Sjv9Tv56BcPdak3Iske0d/f6Or7iVPrsx+PiPRsPFkbezLvkDz6452HHj/50mO9hcbynbL5TI52KLYnWjbMm2+/c+fVlZXlN3ZYRf9ucztkZsrzlcVqZW5yppxWFqvpxMWLxQtXphfT6cpsefH64lJ5Lp1aKE8uVRfSoann0tGJifG0PHK9enV+pjQyW25MvPSVsWLxYvryyLfKkwuL1fkLL48sTl2pzM5W5mfymGx2FnMpOxC/WVlKl8qTc2l66/bK8vimnFp2UxY02m1NsqCxbkFjxbGx0dGxsdF3671nr024+OLEi5eKxd7iJtEScZ8OWg6XY5138/04jcOuFGrtf8RsVGI+rsa1SNv+TUUpFqIacx3m1zXa/3MXylvW29z+11v53qbZp7Ons/F0fbS/Q/vfIZf9+3sz3o534k68GiuxEsvxxoFn1PqX7ZEO84591rJnohzzUYnFqEYl5mIyn5LWp6QxERfjYhTjlbgSg7EYaUxHJWajHItxPRZjKcr5ETUVC1GOyViKaixEGkMxFc9FGqMxERMxHmmUYySuRzWuxnzMRCkm81Juxe18u49vkeNa0Oh2gsa2CGppzHfc/pdb/w3JF8zen8Rhl1br7f+R7qFDU/uREAAAALDnvvTXOH7q0b/8OyKJp/Lr8tOV2XLxoNMCAAAA9lASScST2VNfNvpUJD7/AwAAwIMmyX9jl0TEQAzWhhq/hHIRAAAAAB4Q+e16no5kcH2Cz/8AAADwgFm7x37tSsDaPXav9TSmdr0LfzLcuP1verP2erMeUS9iYLoyWx6Zqs6+NBrn87sM5L80aCmtJyLpy39+8HycqUWdGYi72evAeolZnf1Z1OjIS6PxfJytr8jQM9nLM0NtIsdqkc/WIp9tjuyJDZHjWSQAPOjObtEe1+6x3739fz6GaxHDp/Mmv/d0mza4qGUFgMNirY+d/9a7NGvT/tcjnu7U/n91i8//WcSjcWuw9pWCkXgtXo+VuBnDUf/GwWC7Uhu9EdS+hjDcdDUgt+lqwED9Kwt/v1SI4ZbrAf1r69ocuxxjMVy/InCsPr9+7SBZi00aOYzXAnruww4AgANwdst2eHvt/3CXz/8DvlIIAIfKWg/22x3IFtp2cG3goNcRANhIKw0AAAAAAAAAAAAAAAAAAAAAAAAAAAB7b1s38P/b+YiVleWInXYWsIOBk5un9O8kw60HCnF/cm4z0Hv/q9hqoGfnvTNsc+AfXWO+HjsuOdvHB7OhDHQbOOATEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsiiehpN71wNH8pRsSF/c7pfrp70AnslXR3iyX34l68Fcf3Oh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC+6+v3/C1F7fag2KXoLEeci4kZEfPugc9xL9w46gQPzvfy56f7/hYi+WE2it7bbI+mbKi1U57LdnxzN5n/y/gfvZY/uZbf2qpB3H1HY1LlEvYamKX0bl3okX2qgtPzmnR+9/oO0dDk/MC8vTc+W5mYWvrEe+HjyYa0LhOZuEBr5/uTcn3/dNPlIvfIPszVtb3O903m9pdZ6/7/d0h3q3YbbK8tjWU1L5WtLP/7+7beaZj0aZyKeGYoY2ljTd7NHh5rObN6eGyWfJj9Pjsfv4ka+/7Otkawm2S46ka//sVu3V5ZHXnt95eZaTj/dkNPJGIyImxH9289pMD+ftJUfdYW+rNZiHpQ9nepS3paaShztsF0fyQ+ZgR2tQ9p5HXL5du94cDUyGm+b0W9++Fic3/GePr/1nm4v+TT5V3Il/hk/a+r/o5Dt/3PR9t3Zpog8sulIaZ63YQsUapH5mo81z3hlc5lbbDj23C/jO/G1tf1faDr/1/fV/pyPmmps/76I2Pn74g8nWlqUdXmLdGpTi1Q/+7RdoH8tz1O1qA55/l+8ENF7ekdnlBe6nFH2/v1fr+/uUPwn7ur/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPySiJ520wsR5yLiZEScyMbTiNXNMXd3UV9hINlNmntmNzkfZklv26lNK7pxjZN7cS/eiuP7kBoAAAAAAAAA++By6ZP3P3gve+T/H98TXy7U56QRvRFxMvlt31RpoTrXpaC+iBuN/9Lv31kON7Knh9fHP87Gnuiy0MF+fQAAPtf+FwAA//822GxX") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) accept(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 3.293010807s ago: executing program 5 (id=1029): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="170000000000000000000000070000004408fc5cad8c00001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141412ac1e000100000000"], 0x38}, 0x4000004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000016c0), &(0x7f0000001740)=0x14) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc0049364, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000400)={0x2f26dc29e83cb238, 0x80, 0x4, 0xb, 0x3, 0x3, 0x0, 0x10000, 0x100, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x8, 0xe2da, 0x6, 0x7, 0x8, 0xba, 0x0, 0x9, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, r2, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x5020, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x2c9, &(0x7f00000005c0)="$eJzs3b9rJFUcAPDvbGYne6TYFFYiOMUVNobkWgtzSAQxlbKFP0APLwdHdjlIYOFUXK66v8DCwv/Dzl6x8T8QLCztPCTwZGb2dveyexs35+YkfD7V4/u+33nv7bxkA8O8fP7a4Pjug9N7j77+LTqdLFr7sR9PstiOVjyVxgIAuBaepBR/Xur7PW+ta04AwHrNfP+3n5OyOR96e93TAgDW6MOPPn7/9uHhwQdl2Yn4+fGwl0XE4PGw1/Tfvhf3ox9HsRvd2Jg+C0ipab/73uFB5GVlO24ORsNeVTn47JdJahF1/V50Y3tx/V7ZmKkfDfP6L48si7i/X03kVnTjlbn6qv/g1oL66BXxRme8yGr8nejGr1/Eg+jH3fqZRl2/WY3/TRHlO+nbv776pEqu6rPRsLdZ502ljau+NwAAAAAAAAAAAAAAAAAAAAAAXF875cR23BxUoeb8nd7GWd2/80x/fb5Oq+5v6rOIom7sRjfOpufzjFJ835zvE/luWZYpa/In5/vcyOPVPPKXtnAAAAAAAAAAAAAAAAAAAAD4Hzl9+OXxnX7/6OQ/aYxf8p+81n/Z6+zPRF6P5cmbK40VG+P0aq7nc/Z++nQwiVSLuMzkh+0yYtmc23ORG9V8Lr7y3ymllGURL3ab2tE/yufWvlpja3lO9QH/+N3Wm8d3sos+w87TG/fDbFcRJ6cPz93TyJYPevZMJK20/YolOcV4x/yr62y94A/RW783g40j2QWraM9E2uNGPG/7dVbaz1f3OwgAAAAAAAAAAAAAAAAAAGhMX/pd0PloaWlrbZMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCs2/f//00bMRc41RvFHXbw4J6U0mkSKODl92WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+vsnAAD//7NtasQ=") r3 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r3, 0x0, 0x0, 0x8000, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6020400) r4 = socket(0x22, 0x3, 0x3) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) getsockopt$packet_buf(r4, 0x107, 0x16, &(0x7f00000002c0)=""/1, &(0x7f0000002180)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/4092, 0xffc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) 3.223900789s ago: executing program 0 (id=1030): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r4, 0x7, 0x0, 0x781, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@barrier}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) openat$cgroup_netprio_ifpriomap(r6, &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x1, 0x29b, &(0x7f0000000ac0)="$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") 2.270368909s ago: executing program 0 (id=1031): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, 0x0}, 0x20) r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) io_uring_enter(r1, 0x5bee, 0x4c69, 0x68, &(0x7f0000000040)={[0x4]}, 0x8) r2 = syz_io_uring_setup(0x7eff, &(0x7f0000000080)={0x0, 0xcc19, 0x10000, 0x1}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000000)) io_uring_enter(r2, 0x1c, 0xfffffffd, 0xd, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') pread64(r3, &(0x7f0000001480)=""/90, 0x5a, 0x0) 2.228720846s ago: executing program 0 (id=1032): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r2, &(0x7f00000000c0)=""/31, 0x1f) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0xffffffffffffff04) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000340)="34e8fa3460e88c2adaaeda229b0fad7c41d00dc17f71756d5b0c9869ec3169424f7992cf59dbea033dfab548cde9c717e1a912811f73e5fb60243840e196560908335e6b8f7def50460b83ddd548", 0x4e}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x880) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000200)={[{@barrier_val={'barrier', 0x3d, 0xaa0000}}], [{@smackfsroot={'smackfsroot', 0x3d, ',\'&$/:]'}}, {@obj_user={'obj_user', 0x3d, '[{'}}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) getegid() r6 = fsopen(&(0x7f0000000140)='exofs\x00', 0x0) fsmount(r6, 0x0, 0x4) 2.122169464s ago: executing program 1 (id=1033): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r4, 0x7, 0x0, 0x781, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000113, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@barrier}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x1) 1.962329581s ago: executing program 3 (id=1034): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r4, 0x7, 0x0, 0x781, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000113, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@barrier}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r10, &(0x7f0000000140)='2', 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) openat$cgroup_netprio_ifpriomap(r9, &(0x7f00000001c0), 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r10, 0x6611) socket(0x2, 0x80805, 0x0) fallocate(r5, 0x28, 0x8, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x1, 0x29b, &(0x7f0000000ac0)="$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") pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.360030182s ago: executing program 7 (id=1035): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000580)={&(0x7f00000003c0)=[{0x100000000, 0x0, 0xffffffffffff0000, 0x8000000000000001, 0x3}, {0x1, 0xdf, 0xfff, 0x7, 0x138}, {0xff, 0x4, 0x5, 0x1, 0x8}, {0x6129, 0xffff, 0x7ff, 0xa75, 0x8}, {0x1, 0xa5f0, 0x6fd9, 0x5000000000000, 0x1}, {0x5, 0x2, 0x6, 0x0, 0x8cd3}, {0x75, 0x4, 0x7, 0x0, 0x2}, {0x6, 0xb, 0x0, 0x8, 0x6}], 0x8, 0x28, 0x7, 0x4}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000b0200000000000000020000050000000000"], 0x0, 0x4a, 0x0, 0xa}, 0x28) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffb}, 0x204, 0x0, 0x10000, 0x0, 0x3, 0x80000001, 0x169f, 0x0, 0x81, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$kcm(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000380)={@empty}, 0x14) write(r4, &(0x7f0000000340)="0a000300", 0x4) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x90) connect$qrtr(r1, &(0x7f0000000040), 0xc) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000005580)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1000, @mcast1, 0xbf}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2b}}}, @dstopts={{0x18, 0x29, 0x37, {0x15}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x48}}], 0x1, 0x20040000) 249.396658ms ago: executing program 1 (id=1036): socket$inet6_icmp(0xa, 0x2, 0x3a) shmdt(0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa7bb0800450000280d00000000069078ac1414bbac14140b4e22400155743177465031", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010400090780000"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000140)="e0", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x9, 0xbfff) 235.949921ms ago: executing program 5 (id=1037): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0xfffffff7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_io_uring_setup(0x360, &(0x7f00000004c0)={0x0, 0x77d0, 0x1, 0x1, 0x2b6, 0x0, r2}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000018310000000000000000010018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181a0000", @ANYRES32=r2, @ANYBLOB="000000000000000018240000", @ANYRES32=r2, @ANYBLOB="000000000700000018f94307c0991100006cdd57bfe344a5e0ef7d0856ba29387891441589b7defe2f5f43a5c77ede5b19ff7b8b2ee5b8b0e081c7049b26c7f3d2f9f33c2e0a2366552cd63a3972295bc3bd7d5baf14d3a36c6b271728f1460da86527d2f92d75c60706588a4570a86ac93042567c434596ab753b0e0b0957dd928617726b6d23b10d8137e0499ddcc4f2c104cd7edd7ef151283e817ad0704b81d093c048496c416bd607e061b0b000fe7431668243d926d9dc2000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085100000ffffffff8500000088000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x8, &(0x7f0000000d00)=""/8, 0x1e00, 0x26, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000d40)={0x3, 0x3}, 0xffffff80, 0x10, &(0x7f0000000d80)={0x2, 0x9, 0x2, 0x10000000}, 0x10, 0x25a3a, 0xffffffffffffffff, 0x1, &(0x7f0000000e40)=[r2, 0xffffffffffffffff, r2, r2], &(0x7f0000000e80)=[{0x5, 0x5, 0xc, 0x4}], 0x10, 0x8}, 0x94) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8000000010001000fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020000010000580012800800010067f265004c00028008000600ac1414bb08001500ae1e0d000500166868e27b000400120008001400e900000004001200050008000800000105000800000000088014000600000008000500", @ANYRES32=0x0, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fea01001800000000000000180000001800000006000000040000000100000508000000010000000300000001000080002e7e612e00"], 0x0, 0x36, 0x0, 0x1, 0xd96b}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1000) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000680)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@data_err_ignore}, {@grpjquota, 0x2e}, {@dax}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f8, &(0x7f0000001340)="$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") quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$TCSBRKP(r6, 0x5425, 0x8) r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000040)="aefdda9d242003005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r9 = open(&(0x7f0000000080)='./file0\x00', 0x400002, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r9, 0x40082102, &(0x7f0000000180)=r10) 192.339028ms ago: executing program 0 (id=1038): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_clone3(&(0x7f00000006c0)={0x81000000, &(0x7f0000000340)=0xffffffffffffffff, 0x0, &(0x7f00000003c0), {0x41}, &(0x7f0000000400)=""/1, 0x1, &(0x7f00000004c0)=""/230, &(0x7f0000000680)=[r3, r3], 0x2, {r2}}, 0x58) ioctl$XFS_IOC_FSGROWFSRT(r5, 0x40105870, &(0x7f0000000740)={0x9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=1039): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) gettid() syz_open_dev$tty1(0xc, 0x4, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000580)='\x98\xa8\x00\x00\x00\xa5', 0x6e93ebbbcc0884f2, 0x40, &(0x7f0000000480)={0x0, 0x6, 0x7}) mq_timedreceive(r2, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x80005, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffbfff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000002100)=0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000585000/0x3000)=nil) socket$packet(0x11, 0x2, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') kernel console output (not intermixed with test programs): lbacks suppressed [ 200.077404][ T28] audit: type=1400 audit(1776087136.500:1715): avc: denied { sqpoll } for pid=5931 comm="syz.0.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 200.081270][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.095035][ T5932] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 200.120335][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.128170][ T28] audit: type=1400 audit(1776087136.500:1716): avc: denied { write } for pid=5929 comm="syz.3.569" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.166320][ T28] audit: type=1400 audit(1776087136.500:1717): avc: denied { ioctl } for pid=5929 comm="syz.3.569" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.197220][ T5932] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 200.315959][ T5925] EXT4-fs (loop5): 1 orphan inode deleted [ 200.328555][ T3748] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 200.353261][ T3748] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:9: Failed to release dquot type 1 [ 200.379368][ T5925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.396261][ T3748] loop5: lost filesystem error report for type 5 error -117 [ 200.507400][ T5925] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.807682][ T5944] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 200.815428][ T5944] netlink: 'syz.3.572': attribute type 2 has an invalid length. [ 200.824076][ T5944] netlink: 140 bytes leftover after parsing attributes in process `syz.3.572'. [ 200.824193][ T28] audit: type=1400 audit(1776087137.240:1718): avc: denied { setopt } for pid=5941 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.859082][ T5909] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 200.859424][ T5909] EXT4-fs: failed to create workqueue [ 200.888676][ T5909] EXT4-fs (loop1): mount failed [ 201.077064][ T28] audit: type=1400 audit(1776087137.500:1719): avc: denied { write } for pid=5952 comm="syz.3.575" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 201.082742][ T5954] netlink: 19 bytes leftover after parsing attributes in process `syz.3.575'. [ 201.286012][ T5960] hub 8-0:1.0: USB hub found [ 201.306365][ T5960] hub 8-0:1.0: 8 ports detected [ 201.366797][ T5960] netlink: 'syz.6.576': attribute type 10 has an invalid length. [ 201.412945][ T5960] veth1_vlan: left allmulticast mode [ 201.922148][ T5973] set_capacity_and_notify: 2 callbacks suppressed [ 201.922323][ T5973] loop3: detected capacity change from 0 to 1024 [ 202.027133][ T5973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.042320][ T5973] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.088337][ T5973] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.579: bg 0: block 112: padding at end of block bitmap is not set [ 202.129192][ T5973] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm syz.3.579: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.641208][ T5977] hub 8-0:1.0: USB hub found [ 202.645941][ T5977] hub 8-0:1.0: 8 ports detected [ 202.653606][ T5977] netlink: 'syz.0.581': attribute type 10 has an invalid length. [ 202.728841][ T5979] loop0: detected capacity change from 0 to 2048 [ 202.787825][ T5979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.973103][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.276201][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.339212][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.362287][ T28] audit: type=1400 audit(1776087139.780:1720): avc: denied { create } for pid=5982 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.391886][ T28] audit: type=1400 audit(1776087139.810:1721): avc: denied { write } for pid=5982 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.414499][ T28] audit: type=1326 audit(1776087139.810:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.0.583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f756d18c819 code=0x0 [ 203.443257][ T28] audit: type=1326 audit(1776087139.860:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9eb5c819 code=0x7ffc0000 [ 203.607200][ T5999] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.621935][ T5999] bond1: (slave lo): Enslaving as an active interface with an up link [ 203.632029][ T5999] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 203.672567][ T5995] loop1: detected capacity change from 0 to 256 [ 203.854642][ T6004] loop3: detected capacity change from 0 to 2048 [ 203.931059][ T6004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.981729][ T6004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.133501][ T6013] loop1: detected capacity change from 0 to 512 [ 204.140273][ T6013] EXT4-fs: quotafile must be on filesystem root [ 204.267775][ T4041] Bluetooth: hci0: Frame reassembly failed (-84) [ 204.421246][ T6027] loop3: detected capacity change from 0 to 1024 [ 204.433732][ T6027] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 204.442064][ T6027] System zones: 0-1, 3-36 [ 204.446957][ T6027] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.596: bad orphan inode 134217728 [ 204.457598][ T6027] loop3: lost filesystem error report for type 5 error -117 [ 204.460160][ T6027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.631876][ T6048] loop1: detected capacity change from 0 to 764 [ 204.656863][ T6048] iso9660: Unknown parameter '(' [ 205.052719][ T6050] loop6: detected capacity change from 0 to 2048 [ 205.075718][ T6050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.088707][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.365544][ T6062] loop6: detected capacity change from 0 to 128 [ 205.419085][ T6062] vfat: Unknown parameter '' [ 206.121232][ T6072] loop1: detected capacity change from 0 to 1764 [ 206.143034][ T6072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.610'. [ 206.152555][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 206.279578][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 206.286173][ T3623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 206.431392][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.350442][ T6062] loop6: detected capacity change from 0 to 4096 [ 207.407551][ T6032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.582007][ T6086] loop5: detected capacity change from 0 to 2048 [ 207.682227][ T6086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.724352][ T6086] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.012113][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.032565][ T6062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.225572][ T6099] loop5: detected capacity change from 0 to 1024 [ 208.234133][ T5045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.243477][ T6099] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 208.251722][ T6099] System zones: 0-1, 3-36 [ 208.266366][ T6099] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.620: bad orphan inode 134217728 [ 208.277136][ T6099] loop5: lost filesystem error report for type 5 error -117 [ 208.279143][ T6099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.464490][ T6121] loop6: detected capacity change from 0 to 2048 [ 208.479212][ T6121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.494858][ T6121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.779799][ T6124] loop0: detected capacity change from 0 to 1024 [ 208.895092][ T6124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 208.911647][ T6124] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.944227][ T6124] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.627: bg 0: block 112: padding at end of block bitmap is not set [ 208.991238][ T6124] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: comm syz.0.627: lblock 0 mapped to illegal pblock 0 (length 1) [ 209.603822][ T6134] FAULT_INJECTION: forcing a failure. [ 209.603822][ T6134] name failslab, interval 1, probability 0, space 0, times 0 [ 209.830051][ T6134] CPU: 1 UID: 0 PID: 6134 Comm: syz.3.631 Tainted: G W syzkaller #0 PREEMPT(full) [ 209.830094][ T6134] Tainted: [W]=WARN [ 209.830103][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 209.830145][ T6134] Call Trace: [ 209.830155][ T6134] [ 209.830164][ T6134] __dump_stack+0x1d/0x30 [ 209.830263][ T6134] dump_stack_lvl+0x95/0xd0 [ 209.830285][ T6134] dump_stack+0x15/0x1b [ 209.830309][ T6134] should_fail_ex+0x263/0x280 [ 209.830341][ T6134] ? create_io_worker+0x5c/0x360 [ 209.830408][ T6134] should_failslab+0x8c/0xb0 [ 209.830433][ T6134] __kmalloc_cache_noprof+0x5f/0x410 [ 209.830459][ T6134] create_io_worker+0x5c/0x360 [ 209.830560][ T6134] io_wq_enqueue+0x461/0x540 [ 209.830580][ T6134] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 209.830607][ T6134] io_queue_iowq+0x24e/0x350 [ 209.830648][ T6134] ? io_req_task_submit+0x61/0xa0 [ 209.830687][ T6134] ? __pfx_io_req_task_submit+0x10/0x10 [ 209.830726][ T6134] io_req_task_submit+0x69/0xa0 [ 209.830805][ T6134] io_handle_tw_list+0x1f5/0x230 [ 209.830830][ T6134] tctx_task_work_run+0x42/0x170 [ 209.830860][ T6134] tctx_task_work+0x3f/0x80 [ 209.830968][ T6134] task_work_run+0x130/0x1a0 [ 209.830996][ T6134] io_run_task_work+0x1fc/0x280 [ 209.831022][ T6134] io_cqring_wait+0x10e/0xe80 [ 209.831051][ T6134] ? io_queue_sqe_fallback+0x132/0x140 [ 209.831124][ T6134] ? io_submit_sqes+0x10c9/0x1230 [ 209.831259][ T6134] __se_sys_io_uring_enter+0x38e/0xf60 [ 209.831280][ T6134] ? __fget_files+0x184/0x1c0 [ 209.831305][ T6134] ? mutex_unlock+0x4e/0x90 [ 209.831326][ T6134] __x64_sys_io_uring_enter+0x78/0x90 [ 209.831419][ T6134] x64_sys_call+0x1e16/0x3020 [ 209.831451][ T6134] do_syscall_64+0x12c/0x370 [ 209.831483][ T6134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.831583][ T6134] RIP: 0033:0x7f57bd05c819 [ 209.831600][ T6134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.831618][ T6134] RSP: 002b:00007f57bbaaf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 209.831642][ T6134] RAX: ffffffffffffffda RBX: 00007f57bd2d5fa0 RCX: 00007f57bd05c819 [ 209.831725][ T6134] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000004 [ 209.831740][ T6134] RBP: 00007f57bbaaf090 R08: 0000000000000000 R09: 0000000000000000 [ 209.831756][ T6134] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 209.831797][ T6134] R13: 00007f57bd2d6038 R14: 00007f57bd2d5fa0 R15: 00007ffc1abe91f8 [ 209.831819][ T6134] [ 210.589183][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 210.597093][ T3623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.639647][ T6136] loop6: detected capacity change from 0 to 1024 [ 210.813408][ T6136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 210.827387][ T6136] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.857849][ T6136] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.629: bg 0: block 112: padding at end of block bitmap is not set [ 211.103668][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'. [ 211.115337][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 211.115362][ T28] audit: type=1400 audit(1776087147.520:1746): avc: denied { create } for pid=6137 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 211.206654][ T28] audit: type=1400 audit(1776087147.520:1747): avc: denied { write } for pid=6137 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 211.227309][ T6127] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: comm syz.6.629: lblock 0 mapped to illegal pblock 0 (length 1) [ 211.252352][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.272181][ T6141] bond2: entered promiscuous mode [ 211.281949][ T6141] bond2: entered allmulticast mode [ 211.297816][ T28] audit: type=1400 audit(1776087147.720:1748): avc: denied { write } for pid=6137 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 211.380532][ T6127] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.629: lblock 0 mapped to illegal pblock 0 (length 1) [ 211.404281][ T6127] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.629: lblock 0 mapped to illegal pblock 0 (length 1) [ 211.417956][ T6127] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.629: lblock 0 mapped to illegal pblock 0 (length 1) [ 211.431732][ T6127] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.629: lblock 0 mapped to illegal pblock 0 (length 1) [ 211.445151][ T6127] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #15: comm syz.6.629: lblock 0 mapped to illegal pblock 0 (length 1) [ 211.460795][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 211.601321][ T5045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 211.713537][ T6154] loop6: detected capacity change from 0 to 4096 [ 211.732383][ T6154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.753034][ T6158] loop5: detected capacity change from 0 to 128 [ 211.880228][ T6161] loop1: detected capacity change from 0 to 2048 [ 211.900603][ T6165] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: block 80: comm syz.6.637: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 211.921766][ T28] audit: type=1400 audit(1776087148.320:1749): avc: denied { remove_name } for pid=6152 comm="syz.6.637" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.955651][ T28] audit: type=1400 audit(1776087148.320:1750): avc: denied { rename } for pid=6152 comm="syz.6.637" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 211.984994][ T6165] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz.6.637: directory missing '..' [ 212.007717][ T6161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.025390][ T6161] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.052370][ T28] audit: type=1400 audit(1776087148.320:1751): avc: denied { rmdir } for pid=6152 comm="syz.6.637" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.132119][ T28] audit: type=1400 audit(1776087148.550:1752): avc: denied { mounton } for pid=6152 comm="syz.6.637" path="/proc/140/task" dev="proc" ino=12697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 212.184239][ T5045] EXT4-fs error (device loop6): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /41/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 212.241007][ T5045] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 212.271213][ T5045] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 212.295896][ T5045] EXT4-fs error (device loop6): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /41/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 212.379921][ T5045] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 212.453495][ T5045] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 212.470292][ T5045] EXT4-fs error (device loop6): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /41/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 212.702899][ T6173] loop1: detected capacity change from 0 to 1024 [ 212.853968][ T6173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 212.869199][ T6173] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.898574][ T6173] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.642: bg 0: block 112: padding at end of block bitmap is not set [ 212.936946][ T6173] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm syz.1.642: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.056634][ T5045] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 213.081262][ T6170] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.642: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.094833][ T6170] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.642: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.094859][ T5045] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 213.120472][ T6173] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.642: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.144986][ T6172] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.642: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.161709][ T6172] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.642: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.175907][ T6173] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.642: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.176494][ T5045] EXT4-fs error (device loop6): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /41/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 213.201153][ T6173] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.642: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.226124][ T6172] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.642: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.242222][ T5045] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 213.299576][ T5045] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 213.311333][ T5045] EXT4-fs error (device loop6): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /41/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 213.423490][ T5045] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 213.448522][ T5045] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 213.461302][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 213.477914][ T5045] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 213.556862][ T5045] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 213.576885][ T5045] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 214.204818][ T6190] loop1: detected capacity change from 0 to 256 [ 214.350090][ T6187] loop3: detected capacity change from 0 to 256 [ 214.558671][ T6190] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.720023][ T129] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.726673][ T5045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.766173][ T6197] xt_hashlimit: size too large, truncated to 1048576 [ 214.805466][ T129] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.883686][ T129] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.898406][ T6201] loop0: detected capacity change from 0 to 2048 [ 214.965050][ T6201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.974620][ T129] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.990611][ T6201] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.131486][ T6187] loop3: detected capacity change from 0 to 512 [ 215.158278][ T129] bridge_slave_1: left allmulticast mode [ 215.171271][ T28] audit: type=1400 audit(1776087151.590:1753): avc: denied { read } for pid=3038 comm="dhcpcd" name="n33" dev="tmpfs" ino=7374 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.203902][ T129] bridge_slave_1: left promiscuous mode [ 215.214840][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.224242][ T6187] EXT4-fs: quotafile must be on filesystem root [ 215.238717][ T28] audit: type=1400 audit(1776087151.590:1754): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=7374 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.266774][ T28] audit: type=1400 audit(1776087151.590:1755): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=7374 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.302162][ T129] bridge_slave_0: left allmulticast mode [ 215.321436][ T129] bridge_slave_0: left promiscuous mode [ 215.327552][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.491937][ T6226] loop1: detected capacity change from 0 to 256 [ 215.675730][ T129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.821472][ T6231] loop1: detected capacity change from 0 to 512 [ 215.849580][ T6231] EXT4-fs: quotafile must be on filesystem root [ 215.993099][ T6230] loop3: detected capacity change from 0 to 128 [ 216.038827][ T129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.072597][ T129] bond0 (unregistering): Released all slaves [ 216.087766][ T6224] netlink: 'syz.5.656': attribute type 4 has an invalid length. [ 216.107019][ T6224] netlink: 152 bytes leftover after parsing attributes in process `syz.5.656'. [ 216.383269][ T6224] .`: renamed from bond0 (while UP) [ 216.412102][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 216.412137][ T28] audit: type=1400 audit(1776087152.830:1757): avc: denied { create } for pid=6238 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.507489][ T28] audit: type=1400 audit(1776087152.830:1758): avc: denied { write } for pid=6238 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.link" dev="tmpfs" ino=7460 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.678972][ T28] audit: type=1400 audit(1776087152.830:1759): avc: denied { append } for pid=6238 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" dev="tmpfs" ino=7460 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.717093][ T129] hsr_slave_0: left promiscuous mode [ 216.724634][ T129] hsr_slave_1: left promiscuous mode [ 216.728678][ T28] audit: type=1400 audit(1776087152.960:1760): avc: denied { unlink } for pid=6258 comm="rm" name="resolv.conf.eth9.link" dev="tmpfs" ino=7460 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.733078][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.833928][ T129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.843037][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.850701][ T129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.877224][ T129] veth1_macvtap: left promiscuous mode [ 216.892505][ T129] veth0_macvtap: left promiscuous mode [ 216.898420][ T129] veth1_vlan: left promiscuous mode [ 216.903765][ T129] veth0_vlan: left promiscuous mode [ 216.998468][ T129] team0 (unregistering): Port device macvlan1 removed [ 217.033839][ T129] team0 (unregistering): Port device team_slave_1 removed [ 217.045196][ T129] team0 (unregistering): Port device team_slave_0 removed [ 217.128608][ T6266] xt_hashlimit: size too large, truncated to 1048576 [ 217.369580][ T6203] chnl_net:caif_netlink_parms(): no params data found [ 217.830169][ T6290] loop1: detected capacity change from 0 to 1024 [ 217.951365][ T6290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 217.965984][ T6290] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.999622][ T6290] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.666: bg 0: block 112: padding at end of block bitmap is not set [ 218.043488][ T6290] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm syz.1.666: lblock 0 mapped to illegal pblock 0 (length 1) [ 218.266118][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.534723][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.581307][ T6203] bridge_slave_0: entered allmulticast mode [ 218.624427][ T6203] bridge_slave_0: entered promiscuous mode [ 218.652898][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.695679][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.751276][ T6203] bridge_slave_1: entered allmulticast mode [ 218.784747][ T6203] bridge_slave_1: entered promiscuous mode [ 218.845518][ T6203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.899869][ T6203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.995966][ T6203] team0: Port device team_slave_0 added [ 219.023072][ T6203] team0: Port device team_slave_1 added [ 219.062151][ T28] audit: type=1400 audit(1776087155.470:1761): avc: denied { ioctl } for pid=6307 comm="syz.5.671" path="socket:[13893]" dev="sockfs" ino=13893 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.126292][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.156932][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.241537][ T6203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.274103][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.281563][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 219.284742][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.318419][ T6203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.391766][ T6203] hsr_slave_0: entered promiscuous mode [ 219.406987][ T6203] hsr_slave_1: entered promiscuous mode [ 219.434745][ T6334] loop1: detected capacity change from 0 to 1764 [ 219.488015][ T28] audit: type=1400 audit(1776087155.910:1762): avc: denied { mount } for pid=6333 comm="syz.1.673" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 219.522128][ T6330] loop5: detected capacity change from 0 to 256 [ 219.616355][ T28] audit: type=1400 audit(1776087156.030:1763): avc: denied { create } for pid=6347 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.670518][ T6203] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 219.677461][ T28] audit: type=1400 audit(1776087156.060:1764): avc: denied { write } for pid=6347 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.702152][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 219.733590][ T6203] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 219.748801][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 219.758203][ T6203] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 219.858635][ T6203] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 219.874991][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.677'. [ 219.884048][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.677'. [ 219.904845][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.677'. [ 219.975772][ T6370] loop5: detected capacity change from 0 to 512 [ 219.995035][ T6370] EXT4-fs: quotafile must be on filesystem root [ 220.025320][ T6203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.096868][ T6203] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.132140][ T6372] loop0: detected capacity change from 0 to 128 [ 220.152587][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.159709][ T3748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.180104][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.187237][ T3748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.223780][ T6377] loop1: detected capacity change from 0 to 164 [ 220.244997][ T6203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.257220][ T6377] ISOFS: unable to read i-node block [ 220.278395][ T6377] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 220.286360][ T6203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.429518][ T6203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.667428][ T6203] veth0_vlan: entered promiscuous mode [ 220.682361][ T6203] veth1_vlan: entered promiscuous mode [ 220.717687][ T6203] veth0_macvtap: entered promiscuous mode [ 220.731492][ T6203] veth1_macvtap: entered promiscuous mode [ 220.759075][ T6203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.771448][ T6203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.790418][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.806703][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.826841][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.835624][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.005730][ T6419] loop5: detected capacity change from 0 to 256 [ 221.026003][ T28] audit: type=1400 audit(1776087157.440:1765): avc: denied { create } for pid=6426 comm="syz.7.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 221.108824][ T28] audit: type=1400 audit(1776087157.530:1766): avc: denied { read } for pid=6426 comm="syz.7.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.579105][ T6467] loop5: detected capacity change from 0 to 512 [ 221.592229][ T6467] EXT4-fs: quotafile must be on filesystem root [ 222.102595][ T6483] loop3: detected capacity change from 0 to 1024 [ 222.238651][ T6483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 222.253876][ T6483] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.278881][ T6483] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.703: bg 0: block 112: padding at end of block bitmap is not set [ 222.325982][ T6483] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm syz.3.703: lblock 0 mapped to illegal pblock 0 (length 1) [ 222.983679][ T28] audit: type=1400 audit(1776087159.400:1767): avc: denied { create } for pid=6491 comm="syz.5.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.004384][ T6503] xt_hashlimit: size too large, truncated to 1048576 [ 223.020874][ T6490] loop1: detected capacity change from 0 to 128 [ 223.027586][ T6490] vfat: Unknown parameter '184467440737095516150177777777777777777777718446744073709551615ÿÿœù­%‰c˜ÙÞišuõ×¶ê¼Hý‰+MÃsu ½[Ú2&„«™¨H¿wûjW%÷•»±òßß(N‚öfŽÎúj…§ÌCKÓN‘M«ò0›á¿i™ØõÕgìù¨|hÔg¦‚Ë&.Mµr7ãÍøL…ßGI¤ïjgÜeV¶ÿJèõo†^@uï¢P *gH…lùu"å#' [ 223.086537][ T28] audit: type=1400 audit(1776087159.420:1768): avc: denied { setopt } for pid=6491 comm="syz.5.705" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.206275][ T28] audit: type=1400 audit(1776087159.550:1769): avc: denied { allowed } for pid=6505 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 223.230334][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.270885][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.312483][ T28] audit: type=1400 audit(1776087159.580:1770): avc: denied { ioctl } for pid=6472 comm="syz.1.702" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 223.394042][ T6501] loop7: detected capacity change from 0 to 256 [ 223.468835][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 223.540617][ T6501] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.587938][ T6517] loop3: detected capacity change from 0 to 256 [ 223.617174][ T28] audit: type=1326 audit(1776087160.040:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 223.647455][ T28] audit: type=1326 audit(1776087160.040:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 223.699543][ T28] audit: type=1400 audit(1776087160.030:1771): avc: denied { write } for pid=6510 comm="syz.0.709" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.727569][ T28] audit: type=1326 audit(1776087160.050:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 223.752272][ T28] audit: type=1326 audit(1776087160.050:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 223.776095][ T28] audit: type=1326 audit(1776087160.050:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 224.276696][ T6535] loop3: detected capacity change from 0 to 1024 [ 226.080060][ T6541] loop5: detected capacity change from 0 to 2048 [ 226.253695][ T6537] loop1: detected capacity change from 0 to 1024 [ 227.069042][ T6541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.109157][ T6535] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 228.062964][ T6537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 228.082877][ T6537] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.084913][ T6551] loop7: detected capacity change from 0 to 1764 [ 228.319196][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.892081][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 229.336053][ T6560] xt_hashlimit: size too large, truncated to 1048576 [ 230.053186][ T6565] loop3: detected capacity change from 0 to 1024 [ 230.157098][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.171973][ T6565] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.197393][ T6565] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.721: bg 0: block 112: padding at end of block bitmap is not set [ 230.239636][ T6565] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm syz.3.721: lblock 0 mapped to illegal pblock 0 (length 1) [ 230.909566][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 230.909585][ T28] audit: type=1400 audit(1776087167.330:1881): avc: denied { write } for pid=6557 comm="syz.5.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 230.962844][ T6579] loop7: detected capacity change from 0 to 2048 [ 231.022207][ T6579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.086793][ T6579] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.201216][ T6601] loop5: detected capacity change from 0 to 256 [ 231.218587][ T6601] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.466961][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 231.502722][ T28] audit: type=1400 audit(1776087167.920:1882): avc: denied { bind } for pid=6604 comm="syz.7.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 231.585794][ T28] audit: type=1400 audit(1776087167.920:1883): avc: denied { name_bind } for pid=6604 comm="syz.7.731" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 231.637492][ T28] audit: type=1400 audit(1776087167.920:1884): avc: denied { node_bind } for pid=6604 comm="syz.7.731" saddr=2001:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 231.730862][ T6616] loop1: detected capacity change from 0 to 1024 [ 231.751999][ T6616] EXT4-fs: test_dummy_encryption option not supported [ 231.827506][ T6619] loop7: detected capacity change from 0 to 1764 [ 233.122300][ T6625] loop1: detected capacity change from 0 to 512 [ 235.075071][ T6635] FAULT_INJECTION: forcing a failure. [ 235.075071][ T6635] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 235.096677][ T28] audit: type=1400 audit(1776087171.510:1885): avc: denied { bind } for pid=6602 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.119826][ T6635] CPU: 1 UID: 0 PID: 6635 Comm: syz.3.737 Tainted: G W syzkaller #0 PREEMPT(full) [ 235.119889][ T6635] Tainted: [W]=WARN [ 235.119896][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 235.119909][ T6635] Call Trace: [ 235.119916][ T6635] [ 235.119925][ T6635] __dump_stack+0x1d/0x30 [ 235.119956][ T6635] dump_stack_lvl+0x95/0xd0 [ 235.119983][ T6635] dump_stack+0x15/0x1b [ 235.120032][ T6635] should_fail_ex+0x263/0x280 [ 235.120059][ T6635] should_fail_alloc_page+0xf2/0x100 [ 235.120087][ T6635] __alloc_frozen_pages_noprof+0x108/0x360 [ 235.120156][ T6635] alloc_pages_mpol+0xb3/0x260 [ 235.120190][ T6635] alloc_pages_noprof+0x8f/0x140 [ 235.120274][ T6635] pte_alloc_one+0x1c/0xc0 [ 235.120316][ T6635] __pte_alloc+0x32/0x2a0 [ 235.120355][ T6635] handle_mm_fault+0x203a/0x3020 [ 235.120387][ T6635] ? mt_find+0x291/0x3d0 [ 235.120424][ T6635] ? lock_mm_and_find_vma+0x8b/0x440 [ 235.120517][ T6635] do_user_addr_fault+0x3fd/0x1050 [ 235.120555][ T6635] exc_page_fault+0x62/0xa0 [ 235.120643][ T6635] asm_exc_page_fault+0x26/0x30 [ 235.120668][ T6635] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 235.120779][ T6635] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 235.120800][ T6635] RSP: 0018:ffffc900001ebdf8 EFLAGS: 00050212 [ 235.120819][ T6635] RAX: ffff888102735e88 RBX: 0000000000000024 RCX: 0000000000000024 [ 235.120878][ T6635] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: ffffc900001ebe20 [ 235.120895][ T6635] RBP: 0000000000000024 R08: 0000000000000b1b R09: 0000000000000000 [ 235.120917][ T6635] R10: 0001c900001ebe20 R11: 0001c900001ebe43 R12: 0000000000000000 [ 235.120931][ T6635] R13: ffff8881027353c0 R14: ffffc900001ebe20 R15: 0000200000000d00 [ 235.120949][ T6635] _copy_from_user+0x6f/0xb0 [ 235.120982][ T6635] __sys_connect+0xd0/0x2a0 [ 235.121076][ T6635] __x64_sys_connect+0x3f/0x50 [ 235.121105][ T6635] x64_sys_call+0x2df0/0x3020 [ 235.121132][ T6635] do_syscall_64+0x12c/0x370 [ 235.121232][ T6635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.121254][ T6635] RIP: 0033:0x7f57bd05c819 [ 235.121272][ T6635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.121293][ T6635] RSP: 002b:00007f57bbaaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 235.121365][ T6635] RAX: ffffffffffffffda RBX: 00007f57bd2d5fa0 RCX: 00007f57bd05c819 [ 235.121379][ T6635] RDX: 0000000000000024 RSI: 0000200000000d00 RDI: 0000000000000003 [ 235.121395][ T6635] RBP: 00007f57bbaaf090 R08: 0000000000000000 R09: 0000000000000000 [ 235.121408][ T6635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.121421][ T6635] R13: 00007f57bd2d6038 R14: 00007f57bd2d5fa0 R15: 00007ffc1abe91f8 [ 235.121438][ T6635] [ 235.416319][ T28] audit: type=1400 audit(1776087171.540:1886): avc: denied { connect } for pid=6634 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 235.511798][ T6645] loop7: detected capacity change from 0 to 2048 [ 235.706972][ T2117] Bluetooth: hci0: Frame reassembly failed (-84) [ 236.192660][ T6665] loop1: detected capacity change from 0 to 1024 [ 236.377778][ T6666] loop3: detected capacity change from 0 to 1024 [ 236.557458][ T6645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.737590][ T6649] loop5: detected capacity change from 0 to 256 [ 237.584235][ T6649] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.596863][ T6645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.622811][ T6666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 237.637169][ T6666] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.660353][ T6666] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.741: bg 0: block 112: padding at end of block bitmap is not set [ 237.721868][ T3623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 237.764248][ T6665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 237.797248][ T6665] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.839233][ T6665] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.743: bg 0: block 112: padding at end of block bitmap is not set [ 237.872195][ T6665] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm syz.1.743: lblock 0 mapped to illegal pblock 0 (length 1) [ 238.054810][ T6660] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.743: lblock 0 mapped to illegal pblock 0 (length 1) [ 238.079747][ T6660] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.743: lblock 0 mapped to illegal pblock 0 (length 1) [ 238.107139][ T6665] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.743: lblock 0 mapped to illegal pblock 0 (length 1) [ 238.132375][ T6677] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.743: lblock 0 mapped to illegal pblock 0 (length 1) [ 238.145928][ T6677] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.743: lblock 0 mapped to illegal pblock 0 (length 1) [ 238.159584][ T6677] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.743: lblock 0 mapped to illegal pblock 0 (length 1) [ 238.173401][ T6665] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.743: lblock 0 mapped to illegal pblock 0 (length 1) [ 238.190184][ T6682] xt_hashlimit: size too large, truncated to 1048576 [ 238.260794][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 238.347546][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 238.453415][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 238.620038][ T28] audit: type=1400 audit(1776087175.040:1887): avc: denied { read } for pid=6712 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.657032][ T6710] loop7: detected capacity change from 0 to 1024 [ 238.665393][ T6710] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 238.673691][ T6710] System zones: 0-1, 3-36 [ 238.685696][ T6710] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.748: bad orphan inode 134217728 [ 238.696325][ T6710] loop7: lost filesystem error report for type 5 error -117 [ 238.696989][ T6710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.736137][ T28] audit: type=1400 audit(1776087175.140:1888): avc: denied { write } for pid=6712 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.789048][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 238.816936][ T6725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6725 comm=syz.1.753 [ 238.870657][ T129] Bluetooth: hci1: Frame reassembly failed (-84) [ 238.875885][ T6713] bond3: option lacp_active: invalid value (5) [ 238.942332][ T6736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.751'. [ 238.974891][ T6736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.751'. [ 239.026254][ T28] audit: type=1400 audit(1776087175.420:1889): avc: denied { ioctl } for pid=6724 comm="syz.1.753" path="socket:[15492]" dev="sockfs" ino=15492 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 239.036751][ T6713] bond3 (unregistering): Released all slaves [ 239.206454][ T6725] 0: reclassify loop, rule prio 0, protocol 700 [ 239.281705][ T2117] Bluetooth: hci2: Frame reassembly failed (-84) [ 239.447578][ T6749] loop3: detected capacity change from 0 to 1024 [ 239.459430][ T6749] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 239.467646][ T6749] System zones: 0-1, 3-36 [ 239.472888][ T6749] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.755: bad orphan inode 134217728 [ 239.483563][ T6749] loop3: lost filesystem error report for type 5 error -117 [ 239.484237][ T6749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.756911][ T28] audit: type=1400 audit(1776087176.180:1890): avc: denied { setopt } for pid=6754 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 240.088113][ T6758] loop5: detected capacity change from 0 to 1024 [ 240.198459][ T6758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 240.212895][ T6758] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.239455][ T6758] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.758: bg 0: block 112: padding at end of block bitmap is not set [ 240.264381][ T6758] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm syz.5.758: lblock 0 mapped to illegal pblock 0 (length 1) [ 240.286154][ T28] audit: type=1400 audit(1776087176.700:1891): avc: denied { read } for pid=6748 comm="syz.1.756" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 240.319136][ T6765] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.758: lblock 0 mapped to illegal pblock 0 (length 1) [ 240.334992][ T6765] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.758: lblock 0 mapped to illegal pblock 0 (length 1) [ 240.349353][ T6765] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.758: lblock 0 mapped to illegal pblock 0 (length 1) [ 240.363037][ T6765] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.758: lblock 0 mapped to illegal pblock 0 (length 1) [ 240.376674][ T6765] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.758: lblock 0 mapped to illegal pblock 0 (length 1) [ 240.395150][ T6756] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.758: lblock 0 mapped to illegal pblock 0 (length 1) [ 240.409009][ T6765] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.758: lblock 0 mapped to illegal pblock 0 (length 1) [ 240.423030][ T6756] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.758: lblock 0 mapped to illegal pblock 0 (length 1) [ 240.505695][ T28] audit: type=1400 audit(1776087176.700:1892): avc: denied { open } for pid=6748 comm="syz.1.756" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 240.539998][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 240.620160][ T6203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.647701][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 241.109654][ T6772] loop7: detected capacity change from 0 to 1024 [ 241.509389][ T6747] Bluetooth: hci1: command 0x1003 tx timeout [ 241.515449][ T6747] Bluetooth: hci2: command 0x1003 tx timeout [ 241.521501][ T3623] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 241.527652][ T6733] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 241.768493][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.813835][ T6772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 241.828428][ T6772] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.853095][ T6772] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.760: bg 0: block 112: padding at end of block bitmap is not set [ 243.794438][ T6203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 244.200013][ T6787] FAULT_INJECTION: forcing a failure. [ 244.200013][ T6787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.405736][ T6786] loop5: detected capacity change from 0 to 1024 [ 244.616806][ T6786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 244.631451][ T6786] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.671704][ T6786] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.761: bg 0: block 112: padding at end of block bitmap is not set [ 244.708398][ T6786] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm syz.5.761: lblock 0 mapped to illegal pblock 0 (length 1) [ 244.899679][ T3402] IPVS: starting estimator thread 0... [ 244.916292][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: syz.3.765 Tainted: G W syzkaller #0 PREEMPT(full) [ 244.916331][ T6787] Tainted: [W]=WARN [ 244.916340][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.916353][ T6787] Call Trace: [ 244.916360][ T6787] [ 244.916369][ T6787] __dump_stack+0x1d/0x30 [ 244.916442][ T6787] dump_stack_lvl+0x95/0xd0 [ 244.916467][ T6787] dump_stack+0x15/0x1b [ 244.916493][ T6787] should_fail_ex+0x263/0x280 [ 244.916526][ T6787] should_fail+0xb/0x20 [ 244.916574][ T6787] should_fail_usercopy+0x1a/0x20 [ 244.916601][ T6787] strncpy_from_user+0x27/0x250 [ 244.916622][ T6787] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 244.916723][ T6787] do_getname+0x59/0x1c0 [ 244.916752][ T6787] user_path_at+0x28/0x100 [ 244.916788][ T6787] __x64_sys_pivot_root+0x9f/0x110 [ 244.916853][ T6787] x64_sys_call+0x20a/0x3020 [ 244.916878][ T6787] do_syscall_64+0x12c/0x370 [ 244.916910][ T6787] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 244.916990][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.917024][ T6787] RIP: 0033:0x7f57bd05c819 [ 244.917044][ T6787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.917067][ T6787] RSP: 002b:00007f57bbaaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 244.917088][ T6787] RAX: ffffffffffffffda RBX: 00007f57bd2d5fa0 RCX: 00007f57bd05c819 [ 244.917165][ T6787] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00002000000000c0 [ 244.917178][ T6787] RBP: 00007f57bbaaf090 R08: 0000000000000000 R09: 0000000000000000 [ 244.917193][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.917207][ T6787] R13: 00007f57bd2d6038 R14: 00007f57bd2d5fa0 R15: 00007ffc1abe91f8 [ 244.917230][ T6787] [ 245.553224][ T6797] loop7: detected capacity change from 0 to 1024 [ 245.579934][ T129] Bluetooth: hci0: Frame reassembly failed (-84) [ 245.915134][ T6794] IPVS: using max 2736 ests per chain, 136800 per kthread [ 245.926861][ T6797] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 245.935067][ T6797] System zones: 0-1, 3-36 [ 245.941480][ T6797] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.764: bad orphan inode 134217728 [ 245.952080][ T6797] loop7: lost filesystem error report for type 5 error -117 [ 245.953192][ T6797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.977744][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'. [ 246.289128][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.437139][ T28] audit: type=1400 audit(1776087182.850:1893): avc: denied { create } for pid=6808 comm="syz.5.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 246.493884][ T28] audit: type=1400 audit(1776087182.880:1894): avc: denied { setopt } for pid=6808 comm="syz.5.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 246.515496][ T28] audit: type=1400 audit(1776087182.880:1895): avc: denied { ioctl } for pid=6808 comm="syz.5.767" path="socket:[15019]" dev="sockfs" ino=15019 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 246.678599][ T6815] loop3: detected capacity change from 0 to 1764 [ 246.935170][ T6816] loop5: detected capacity change from 0 to 1024 [ 247.038556][ T6816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 247.053933][ T6816] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.081740][ T6816] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.770: bg 0: block 112: padding at end of block bitmap is not set [ 247.125771][ T6816] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm syz.5.770: lblock 0 mapped to illegal pblock 0 (length 1) [ 247.415488][ T6816] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.770: lblock 0 mapped to illegal pblock 0 (length 1) [ 247.438334][ T6816] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.770: lblock 0 mapped to illegal pblock 0 (length 1) [ 247.455483][ T6816] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.770: lblock 0 mapped to illegal pblock 0 (length 1) [ 247.473128][ T6816] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.770: lblock 0 mapped to illegal pblock 0 (length 1) [ 247.493056][ T28] audit: type=1400 audit(1776087182.880:1896): avc: denied { bind } for pid=6808 comm="syz.5.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 247.496239][ T6733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 247.576327][ T6816] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.770: lblock 0 mapped to illegal pblock 0 (length 1) [ 247.801306][ T6816] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.770: lblock 0 mapped to illegal pblock 0 (length 1) [ 247.818356][ T6813] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.770: lblock 0 mapped to illegal pblock 0 (length 1) [ 248.316777][ T6813] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.770: lblock 0 mapped to illegal pblock 0 (length 1) [ 248.590680][ T6203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.842895][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 249.187134][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 249.210886][ T6834] loop1: detected capacity change from 0 to 1024 [ 249.263591][ T28] audit: type=1400 audit(1776087185.680:1897): avc: denied { ioctl } for pid=6835 comm="syz.3.778" path="socket:[15078]" dev="sockfs" ino=15078 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 249.309278][ T6834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 249.317469][ T6834] System zones: 0-1, 3-36 [ 249.323201][ T6834] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.773: bad orphan inode 134217728 [ 249.333762][ T6834] loop1: lost filesystem error report for type 5 error -117 [ 249.334337][ T6834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.427883][ T28] audit: type=1400 audit(1776087185.850:1898): avc: denied { accept } for pid=6835 comm="syz.3.778" lport=34676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 249.787604][ T6833] loop7: detected capacity change from 0 to 512 [ 249.813502][ T6845] xt_hashlimit: size too large, truncated to 1048576 [ 249.848354][ T6846] loop5: detected capacity change from 0 to 1764 [ 249.985619][ T6847] netlink: 'syz.0.779': attribute type 39 has an invalid length. [ 250.001880][ T6833] EXT4-fs (loop7): 1 orphan inode deleted [ 250.015274][ T6833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.040702][ T2117] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 250.074458][ T2117] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 250.118379][ T6833] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.669088][ T6203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.678474][ T6747] Bluetooth: hci0: command 0x1003 tx timeout [ 250.684511][ T6733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 250.746393][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.961084][ T28] audit: type=1400 audit(1776087187.380:1899): avc: denied { map } for pid=6865 comm="syz.7.785" path="socket:[15589]" dev="sockfs" ino=15589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 251.178333][ T28] audit: type=1400 audit(1776087187.600:1900): avc: denied { mount } for pid=6869 comm="syz.7.786" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 251.250578][ T28] audit: type=1400 audit(1776087187.600:1901): avc: denied { search } for pid=6869 comm="syz.7.786" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 251.527049][ T6880] loop5: detected capacity change from 0 to 256 [ 251.663510][ T6880] loop5: detected capacity change from 0 to 512 [ 251.688594][ T6880] EXT4-fs: quotafile must be on filesystem root [ 252.152744][ T129] Bluetooth: hci0: Frame reassembly failed (-84) [ 252.212064][ T6893] loop1: detected capacity change from 0 to 1024 [ 252.247065][ T6893] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 252.255309][ T6893] System zones: 0-1, 3-36 [ 252.265550][ T6893] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.792: bad orphan inode 134217728 [ 252.276271][ T6893] loop1: lost filesystem error report for type 5 error -117 [ 252.277436][ T6893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.855091][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 252.855111][ T28] audit: type=1400 audit(1776087189.270:1904): avc: denied { nlmsg_write } for pid=6903 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 252.924224][ T6906] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 253.619109][ T6915] loop3: detected capacity change from 0 to 1024 [ 253.655846][ T6897] loop5: detected capacity change from 0 to 512 [ 253.733677][ T6915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 253.746151][ T6915] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.765280][ T6915] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.799: bg 0: block 112: padding at end of block bitmap is not set [ 253.787899][ T6915] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm syz.3.799: lblock 0 mapped to illegal pblock 0 (length 1) [ 253.855544][ T6919] netlink: 248 bytes leftover after parsing attributes in process `syz.0.800'. [ 254.162375][ T6897] EXT4-fs (loop5): 1 orphan inode deleted [ 254.188908][ T6897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.203900][ T6733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 254.210205][ T6747] Bluetooth: hci0: command 0x1003 tx timeout [ 254.268174][ T6897] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.561155][ T30] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 254.571319][ T30] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:1: Failed to release dquot type 1 [ 254.602031][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.621595][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.858440][ T6940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.806'. [ 254.867565][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.806'. [ 254.877840][ T6940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.806'. [ 255.048732][ T6943] loop1: detected capacity change from 0 to 1764 [ 255.075713][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 255.560309][ T6949] futex_wake_op: syz.0.810 tries to shift op by 32; fix this program [ 255.785150][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 255.812133][ T6960] netlink: 'syz.3.807': attribute type 15 has an invalid length. [ 255.836652][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'. [ 256.079722][ T6964] netlink: 212 bytes leftover after parsing attributes in process `syz.5.814'. [ 257.524298][ T6976] loop1: detected capacity change from 0 to 1764 [ 257.603441][ T28] audit: type=1400 audit(1776087194.020:1905): avc: denied { connect } for pid=6977 comm="syz.3.819" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 257.625050][ T6978] xt_hashlimit: size too large, truncated to 1048576 [ 258.602366][ T6981] FAULT_INJECTION: forcing a failure. [ 258.602366][ T6981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.630990][ T6981] CPU: 1 UID: 0 PID: 6981 Comm: syz.7.820 Tainted: G W syzkaller #0 PREEMPT(full) [ 258.631045][ T6981] Tainted: [W]=WARN [ 258.631053][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 258.631121][ T6981] Call Trace: [ 258.631128][ T6981] [ 258.631135][ T6981] __dump_stack+0x1d/0x30 [ 258.631166][ T6981] dump_stack_lvl+0x95/0xd0 [ 258.631193][ T6981] dump_stack+0x15/0x1b [ 258.631232][ T6981] should_fail_ex+0x263/0x280 [ 258.631266][ T6981] should_fail+0xb/0x20 [ 258.631288][ T6981] should_fail_usercopy+0x1a/0x20 [ 258.631347][ T6981] _copy_from_user+0x1c/0xb0 [ 258.631445][ T6981] ___sys_sendmsg+0xc1/0x1e0 [ 258.631476][ T6981] __x64_sys_sendmsg+0xd4/0x160 [ 258.631555][ T6981] x64_sys_call+0x194c/0x3020 [ 258.631663][ T6981] do_syscall_64+0x12c/0x370 [ 258.631689][ T6981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.631712][ T6981] RIP: 0033:0x7f244a16c819 [ 258.631731][ T6981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.631753][ T6981] RSP: 002b:00007f2448bc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.631783][ T6981] RAX: ffffffffffffffda RBX: 00007f244a3e5fa0 RCX: 00007f244a16c819 [ 258.631844][ T6981] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 258.631859][ T6981] RBP: 00007f2448bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 258.631872][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.631887][ T6981] R13: 00007f244a3e6038 R14: 00007f244a3e5fa0 R15: 00007ffdc6736448 [ 258.631909][ T6981] [ 259.642240][ T6990] xt_ipcomp: unknown flags 1D [ 259.669059][ T6990] netlink: 124 bytes leftover after parsing attributes in process `syz.0.822'. [ 259.716717][ T28] audit: type=1400 audit(1776087196.140:1906): avc: denied { map } for pid=6993 comm="syz.5.825" path="socket:[15826]" dev="sockfs" ino=15826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 259.834844][ T28] audit: type=1400 audit(1776087196.180:1907): avc: denied { setattr } for pid=6984 comm="syz.0.822" name="" dev="pipefs" ino=16409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 260.026107][ T7003] loop3: detected capacity change from 0 to 1764 [ 260.952988][ T7005] loop1: detected capacity change from 0 to 1764 [ 262.682601][ T7012] loop7: detected capacity change from 0 to 512 [ 262.743878][ T7012] EXT4-fs (loop7): 1 orphan inode deleted [ 262.802256][ T7012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.903730][ T50] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 262.929668][ T50] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 1 [ 262.950032][ T7021] loop3: detected capacity change from 0 to 256 [ 262.956588][ T50] loop7: lost filesystem error report for type 5 error -117 [ 262.975802][ T7012] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.034492][ T7014] netlink: 'syz.0.830': attribute type 1 has an invalid length. [ 263.058998][ T28] audit: type=1400 audit(1776087199.480:1908): avc: denied { create } for pid=7008 comm="syz.5.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 263.106958][ T28] audit: type=1400 audit(1776087199.480:1909): avc: denied { bind } for pid=7008 comm="syz.5.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 263.130108][ T7019] loop1: detected capacity change from 0 to 256 [ 263.210690][ T7019] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.266854][ T28] audit: type=1400 audit(1776087199.690:1910): avc: denied { nlmsg_tty_audit } for pid=7013 comm="syz.0.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 263.855039][ T7047] loop5: detected capacity change from 0 to 1024 [ 263.886735][ T7046] netlink: 'syz.0.839': attribute type 10 has an invalid length. [ 263.942051][ T7050] netlink: 'syz.1.840': attribute type 36 has an invalid length. [ 263.957796][ T7050] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 263.967764][ T7050] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 264.029343][ T7050] loop1: detected capacity change from 0 to 2048 [ 264.036897][ T7050] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 264.137988][ T7047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 264.153111][ T7047] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.215020][ T7047] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.835: bg 0: block 112: padding at end of block bitmap is not set [ 264.267058][ T7047] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm syz.5.835: lblock 0 mapped to illegal pblock 0 (length 1) [ 265.878804][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 265.952406][ T28] audit: type=1400 audit(1776087202.370:1911): avc: denied { create } for pid=7053 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 265.983481][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 265.984441][ T28] audit: type=1400 audit(1776087202.390:1912): avc: denied { write } for pid=7053 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 266.113130][ T28] audit: type=1400 audit(1776087202.530:1913): avc: denied { name_connect } for pid=7053 comm="syz.1.842" dest=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 266.172679][ T7060] loop5: detected capacity change from 0 to 1024 [ 266.214657][ T7065] loop3: detected capacity change from 0 to 1764 [ 266.301169][ T7060] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 266.309447][ T7060] System zones: 0-1, 3-36 [ 266.316514][ T7060] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.841: bad orphan inode 134217728 [ 266.327227][ T7060] loop5: lost filesystem error report for type 5 error -117 [ 266.328549][ T7060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.137585][ T6733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 268.437920][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.498324][ T28] audit: type=1400 audit(1776087204.910:1914): avc: denied { create } for pid=7080 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.586283][ T28] audit: type=1400 audit(1776087204.920:1915): avc: denied { bind } for pid=7080 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.690936][ T7082] loop3: detected capacity change from 0 to 128 [ 268.718001][ T7084] netlink: 'syz.5.848': attribute type 39 has an invalid length. [ 268.853880][ T7082] vfat: Unknown parameter '' [ 268.916889][ T7087] syzkaller0: entered promiscuous mode [ 268.922510][ T7087] syzkaller0: entered allmulticast mode [ 269.017055][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 269.038861][ T7087] 0: reclassify loop, rule prio 0, protocol 800 [ 269.094094][ T7093] loop5: detected capacity change from 0 to 512 [ 269.208067][ T7093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.261367][ T7093] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.393021][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.613985][ T28] audit: type=1400 audit(1776087206.030:1916): avc: denied { bind } for pid=7101 comm="syz.5.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 269.708951][ T28] audit: type=1400 audit(1776087206.050:1917): avc: denied { accept } for pid=7101 comm="syz.5.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.767832][ T7082] loop3: detected capacity change from 0 to 4096 [ 269.853798][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 269.970385][ T7111] loop5: detected capacity change from 0 to 256 [ 269.995403][ T28] audit: type=1400 audit(1776087206.410:1918): avc: denied { mounton } for pid=7110 comm="syz.5.858" path="/147/file0" dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 270.250246][ T7082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.415890][ T7111] loop5: detected capacity change from 0 to 512 [ 270.470192][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.479460][ T7111] EXT4-fs: quotafile must be on filesystem root [ 270.617932][ T28] audit: type=1400 audit(1776087207.040:1919): avc: denied { read } for pid=7125 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 270.748938][ T6203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.082565][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 271.136406][ T28] audit: type=1400 audit(1776087207.500:1920): avc: denied { bind } for pid=7130 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 271.375010][ T7139] loop1: detected capacity change from 0 to 256 [ 271.422913][ T7139] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.700959][ T7140] loop7: detected capacity change from 0 to 512 [ 271.876962][ T6747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 272.101985][ T7153] FAULT_INJECTION: forcing a failure. [ 272.101985][ T7153] name failslab, interval 1, probability 0, space 0, times 0 [ 272.116685][ T7153] CPU: 0 UID: 0 PID: 7153 Comm: syz.3.872 Tainted: G W syzkaller #0 PREEMPT(full) [ 272.116725][ T7153] Tainted: [W]=WARN [ 272.116743][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 272.116756][ T7153] Call Trace: [ 272.116764][ T7153] [ 272.116773][ T7153] __dump_stack+0x1d/0x30 [ 272.116802][ T7153] dump_stack_lvl+0x95/0xd0 [ 272.116828][ T7153] dump_stack+0x15/0x1b [ 272.116877][ T7153] should_fail_ex+0x263/0x280 [ 272.116943][ T7153] should_failslab+0x8c/0xb0 [ 272.117002][ T7153] kmem_cache_alloc_noprof+0x66/0x400 [ 272.117024][ T7153] ? do_getname+0x2e/0x1c0 [ 272.117131][ T7153] do_getname+0x2e/0x1c0 [ 272.117153][ T7153] __se_sys_linkat+0x2f/0x1d0 [ 272.117175][ T7153] __x64_sys_linkat+0x67/0x80 [ 272.117246][ T7153] x64_sys_call+0x20e4/0x3020 [ 272.117349][ T7153] do_syscall_64+0x12c/0x370 [ 272.117374][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.117406][ T7153] RIP: 0033:0x7f57bd05c819 [ 272.117422][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.117438][ T7153] RSP: 002b:00007f57bbaaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 272.117532][ T7153] RAX: ffffffffffffffda RBX: 00007f57bd2d5fa0 RCX: 00007f57bd05c819 [ 272.117640][ T7153] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 272.117788][ T7153] RBP: 00007f57bbaaf090 R08: 0000000000000400 R09: 0000000000000000 [ 272.117800][ T7153] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 272.117812][ T7153] R13: 00007f57bd2d6038 R14: 00007f57bd2d5fa0 R15: 00007ffc1abe91f8 [ 272.117829][ T7153] [ 272.344566][ T28] audit: type=1326 audit(1776087208.760:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.7.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244a16c819 code=0x7ffc0000 [ 272.360264][ T7166] netlink: 'syz.7.877': attribute type 25 has an invalid length. [ 272.377041][ T7166] netlink: 'syz.7.877': attribute type 3 has an invalid length. [ 272.384855][ T7166] netlink: 132 bytes leftover after parsing attributes in process `syz.7.877'. [ 272.430243][ T7170] loop7: detected capacity change from 0 to 1024 [ 272.436964][ T28] audit: type=1326 audit(1776087208.760:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.7.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244a16c819 code=0x7ffc0000 [ 272.461249][ T7170] EXT4-fs: Ignoring removed bh option [ 272.467406][ T7170] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 272.478145][ T28] audit: type=1326 audit(1776087208.760:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.7.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244a16c819 code=0x7ffc0000 [ 272.506394][ T7170] EXT4-fs (loop7): orphan cleanup on readonly fs [ 272.556354][ T7170] EXT4-fs error (device loop7): ext4_quota_enable:7213: comm syz.7.878: Bad quota inum: 4294934528, type: 0 [ 272.581476][ T7170] loop7: lost filesystem error report for type 5 error -117 [ 272.581682][ T7170] EXT4-fs (loop7): Remounting filesystem read-only [ 272.589126][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 272.589157][ C0] EXT4-fs (loop7): initial error at time 1776087209: ext4_quota_enable:7213 [ 272.589185][ C0] EXT4-fs (loop7): last error at time 1776087209: ext4_quota_enable:7213 [ 272.640976][ T28] audit: type=1326 audit(1776087208.760:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.7.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f244a16c819 code=0x7ffc0000 [ 272.695101][ T28] audit: type=1326 audit(1776087208.760:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.7.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244a16c819 code=0x7ffc0000 [ 272.722957][ T7170] EXT4-fs warning (device loop7): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 272.745745][ T7170] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 272.753327][ T28] audit: type=1326 audit(1776087208.760:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.7.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244a16c819 code=0x7ffc0000 [ 272.778540][ T7170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 272.815591][ T28] audit: type=1326 audit(1776087208.760:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.7.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244a16c819 code=0x7ffc0000 [ 272.843398][ T28] audit: type=1326 audit(1776087208.760:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.7.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244a16c819 code=0x7ffc0000 [ 272.867020][ T28] audit: type=1326 audit(1776087208.760:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.7.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f244a16c819 code=0x7ffc0000 [ 273.076789][ T7181] loop5: detected capacity change from 0 to 1024 [ 273.167321][ T6203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.211986][ T7181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 273.227083][ T7181] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.249524][ T7181] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.880: bg 0: block 112: padding at end of block bitmap is not set [ 273.285179][ T7181] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm syz.5.880: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.387673][ T7176] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.880: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.401241][ T7176] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.880: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.425944][ T7181] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.880: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.446597][ T7179] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.880: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.460649][ T7181] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.880: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.476555][ T7179] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.880: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.489982][ T7179] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.880: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.503575][ T7179] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.880: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.569645][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 273.741822][ T7189] loop1: detected capacity change from 0 to 1024 [ 273.773651][ T7189] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 273.781884][ T7189] System zones: 0-1, 3-36 [ 273.808130][ T7189] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.882: bad orphan inode 134217728 [ 273.818795][ T7189] loop1: lost filesystem error report for type 5 error -117 [ 273.819382][ T7189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.847279][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 273.884389][ T7178] loop3: detected capacity change from 0 to 512 [ 273.982993][ T7197] dummy0: entered promiscuous mode [ 274.007690][ T7197] macsec1: entered allmulticast mode [ 274.026102][ T7197] dummy0: entered allmulticast mode [ 274.039999][ T7178] EXT4-fs (loop3): 1 orphan inode deleted [ 274.040244][ T7197] dummy0: left allmulticast mode [ 274.061312][ T261] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:6: Failed to release dquot type 1 [ 274.075623][ T261] loop3: lost filesystem error report for type 5 error -117 [ 274.076060][ T7197] dummy0: left promiscuous mode [ 274.097252][ T7178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.159685][ T7178] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.296401][ T129] Bluetooth: hci1: Frame reassembly failed (-84) [ 274.303325][ T2117] Bluetooth: hci1: Frame reassembly failed (-84) [ 274.770436][ T7227] loop7: detected capacity change from 0 to 1024 [ 275.676394][ T3623] Bluetooth: hci0: command 0x1003 tx timeout [ 275.682463][ T6733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 276.458450][ T6747] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 276.787098][ T7227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 276.804287][ T7227] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.872973][ T7227] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: comm syz.7.893: lblock 0 mapped to illegal pblock 0 (length 1) [ 277.116647][ T7227] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 277.129634][ T7227] EXT4-fs (loop7): This should not happen!! Data will be lost [ 277.129634][ T7227] [ 277.140917][ T7234] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.893: lblock 0 mapped to illegal pblock 0 (length 1) [ 277.203535][ T7184] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 277.238577][ T7223] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.893: lblock 0 mapped to illegal pblock 0 (length 1) [ 277.356614][ T7234] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.893: lblock 0 mapped to illegal pblock 0 (length 1) [ 277.486555][ T7234] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.893: lblock 0 mapped to illegal pblock 0 (length 1) [ 277.500678][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.510046][ T7234] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.893: lblock 0 mapped to illegal pblock 0 (length 1) [ 277.539314][ T7223] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.893: lblock 0 mapped to illegal pblock 0 (length 1) [ 277.553001][ T7234] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.893: lblock 0 mapped to illegal pblock 0 (length 1) [ 277.588891][ T7223] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.893: lblock 0 mapped to illegal pblock 0 (length 1) [ 277.896966][ T6203] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 277.927781][ T6203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 277.973774][ T7240] loop5: detected capacity change from 0 to 128 [ 278.026132][ T7240] vfat: Unknown parameter '' [ 278.103409][ T7257] FAULT_INJECTION: forcing a failure. [ 278.103409][ T7257] name failslab, interval 1, probability 0, space 0, times 0 [ 278.129478][ T261] Bluetooth: hci0: Frame reassembly failed (-84) [ 278.171694][ T7257] CPU: 1 UID: 0 PID: 7257 Comm: syz.1.903 Tainted: G W syzkaller #0 PREEMPT(full) [ 278.171731][ T7257] Tainted: [W]=WARN [ 278.171737][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 278.171769][ T7257] Call Trace: [ 278.171817][ T7257] [ 278.171826][ T7257] __dump_stack+0x1d/0x30 [ 278.171937][ T7257] dump_stack_lvl+0x95/0xd0 [ 278.171971][ T7257] dump_stack+0x15/0x1b [ 278.171998][ T7257] should_fail_ex+0x263/0x280 [ 278.172066][ T7257] ? sctp_add_bind_addr+0x71/0x1e0 [ 278.172091][ T7257] should_failslab+0x8c/0xb0 [ 278.172149][ T7257] __kmalloc_cache_noprof+0x5f/0x410 [ 278.172177][ T7257] sctp_add_bind_addr+0x71/0x1e0 [ 278.172202][ T7257] sctp_do_bind+0x427/0x4b0 [ 278.172235][ T7257] sctp_connect_new_asoc+0x153/0x3a0 [ 278.172325][ T7257] sctp_sendmsg+0xfff/0x1d60 [ 278.172400][ T7257] ? selinux_socket_sendmsg+0x192/0x1c0 [ 278.172435][ T7257] ? __pfx_sctp_sendmsg+0x10/0x10 [ 278.172463][ T7257] ? __pfx_inet_sendmsg+0x10/0x10 [ 278.172487][ T7257] inet_sendmsg+0xc5/0xd0 [ 278.172546][ T7257] __sys_sendto+0x3db/0x490 [ 278.172590][ T7257] __x64_sys_sendto+0x76/0x90 [ 278.172698][ T7257] x64_sys_call+0x2d35/0x3020 [ 278.172857][ T7257] do_syscall_64+0x12c/0x370 [ 278.172888][ T7257] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 278.172922][ T7257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.172943][ T7257] RIP: 0033:0x7fba9eb5c819 [ 278.172992][ T7257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.173017][ T7257] RSP: 002b:00007fba9d5b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 278.173106][ T7257] RAX: ffffffffffffffda RBX: 00007fba9edd5fa0 RCX: 00007fba9eb5c819 [ 278.173123][ T7257] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000005 [ 278.173137][ T7257] RBP: 00007fba9d5b7090 R08: 000020000005ffe4 R09: 000000000000001c [ 278.173150][ T7257] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 278.173179][ T7257] R13: 00007fba9edd6038 R14: 00007fba9edd5fa0 R15: 00007fffdbd30fe8 [ 278.173201][ T7257] [ 278.526981][ T7260] loop5: detected capacity change from 0 to 4096 [ 278.527666][ T7265] loop1: detected capacity change from 0 to 256 [ 278.551238][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 278.551313][ T28] audit: type=1326 audit(1776087214.970:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9eb5c819 code=0x7ffc0000 [ 278.589020][ T28] audit: type=1326 audit(1776087214.970:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9eb5c819 code=0x7ffc0000 [ 278.612797][ T28] audit: type=1326 audit(1776087214.970:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9eb5c819 code=0x7ffc0000 [ 278.638048][ T28] audit: type=1326 audit(1776087214.970:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fba9eb5c819 code=0x7ffc0000 [ 278.661784][ T28] audit: type=1326 audit(1776087215.000:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9eb5c819 code=0x7ffc0000 [ 278.685633][ T7260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.703961][ T28] audit: type=1326 audit(1776087215.000:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9eb5c819 code=0x7ffc0000 [ 278.728577][ T28] audit: type=1326 audit(1776087215.000:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9eb5c819 code=0x7ffc0000 [ 278.752093][ T28] audit: type=1326 audit(1776087215.000:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba9eb5c819 code=0x7ffc0000 [ 278.775896][ T28] audit: type=1326 audit(1776087215.000:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9eb5c819 code=0x7ffc0000 [ 278.799421][ T28] audit: type=1326 audit(1776087215.000:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9eb5c819 code=0x7ffc0000 [ 278.849730][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.943865][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.910'. [ 279.390378][ T7283] loop7: detected capacity change from 0 to 1024 [ 279.487788][ T7283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 279.503349][ T7283] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.531938][ T7283] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: comm syz.7.912: lblock 0 mapped to illegal pblock 0 (length 1) [ 279.573348][ T7283] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 279.587811][ T7283] EXT4-fs (loop7): This should not happen!! Data will be lost [ 279.587811][ T7283] [ 280.034699][ T7282] loop1: detected capacity change from 0 to 1024 [ 280.145198][ T7282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 280.159968][ T7282] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.191946][ T7282] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.913: bg 0: block 112: padding at end of block bitmap is not set [ 280.209151][ T6747] Bluetooth: hci0: command 0x1003 tx timeout [ 280.215251][ T6733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 280.277266][ T7282] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm syz.1.913: lblock 0 mapped to illegal pblock 0 (length 1) [ 280.498958][ T7282] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.913: lblock 0 mapped to illegal pblock 0 (length 1) [ 280.522466][ T7282] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.913: lblock 0 mapped to illegal pblock 0 (length 1) [ 280.523255][ T7286] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 280.542199][ T7282] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.913: lblock 0 mapped to illegal pblock 0 (length 1) [ 280.568341][ T7282] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.913: lblock 0 mapped to illegal pblock 0 (length 1) [ 280.583717][ T7282] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.913: lblock 0 mapped to illegal pblock 0 (length 1) [ 280.599664][ T7282] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.913: lblock 0 mapped to illegal pblock 0 (length 1) [ 280.617769][ T7282] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.913: lblock 0 mapped to illegal pblock 0 (length 1) [ 280.655315][ T7282] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.913: lblock 0 mapped to illegal pblock 0 (length 1) [ 281.021859][ T6203] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 281.072935][ T6203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 281.154855][ T7288] loop5: detected capacity change from 0 to 256 [ 281.206096][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 281.315278][ T7299] loop1: detected capacity change from 0 to 256 [ 281.366829][ T7299] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.447513][ T7302] loop7: detected capacity change from 0 to 1024 [ 281.569491][ T7302] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 281.581719][ T7302] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.594461][ T7302] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.916: bg 0: block 112: padding at end of block bitmap is not set [ 281.615743][ T7302] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: comm syz.7.916: lblock 0 mapped to illegal pblock 0 (length 1) [ 281.634891][ T7302] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.916: lblock 0 mapped to illegal pblock 0 (length 1) [ 281.651914][ T7302] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.916: lblock 0 mapped to illegal pblock 0 (length 1) [ 281.675466][ T7302] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.916: lblock 0 mapped to illegal pblock 0 (length 1) [ 281.689562][ T7302] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.916: lblock 0 mapped to illegal pblock 0 (length 1) [ 281.703005][ T7302] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.916: lblock 0 mapped to illegal pblock 0 (length 1) [ 281.716578][ T7302] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.916: lblock 0 mapped to illegal pblock 0 (length 1) [ 281.730314][ T7302] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.916: lblock 0 mapped to illegal pblock 0 (length 1) [ 281.744111][ T7302] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #15: comm syz.7.916: lblock 0 mapped to illegal pblock 0 (length 1) [ 281.872440][ T7308] syz_tun: entered promiscuous mode [ 281.886352][ T7308] macsec1: entered allmulticast mode [ 281.903505][ T7308] syz_tun: entered allmulticast mode [ 281.935514][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.948433][ T7308] syz_tun: left allmulticast mode [ 281.955155][ T7308] syz_tun: left promiscuous mode [ 282.061081][ T7288] loop5: detected capacity change from 0 to 512 [ 282.125651][ T7288] EXT4-fs: quotafile must be on filesystem root [ 282.134823][ T6203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 282.303183][ T2117] Bluetooth: hci0: Frame reassembly failed (-84) [ 282.364082][ T7327] loop1: detected capacity change from 0 to 1024 [ 282.387643][ T7327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 282.400765][ T7327] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.413003][ T7327] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm syz.1.927: lblock 0 mapped to illegal pblock 0 (length 1) [ 282.426800][ T7327] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 282.439371][ T7327] EXT4-fs (loop1): This should not happen!! Data will be lost [ 282.439371][ T7327] [ 282.462851][ T3313] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 282.474649][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 282.486542][ T7330] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 282.494989][ T7330] System zones: 0-1, 3-36 [ 282.500448][ T7330] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.926: bad orphan inode 134217728 [ 282.511260][ T7330] loop5: lost filesystem error report for type 5 error -117 [ 282.512368][ T7330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.151052][ T7342] set_capacity_and_notify: 3 callbacks suppressed [ 283.151558][ T7342] loop7: detected capacity change from 0 to 256 [ 283.294773][ T7342] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.958647][ T28] kauditd_printk_skb: 307 callbacks suppressed [ 283.958664][ T28] audit: type=1400 audit(1776087220.380:2267): avc: denied { setopt } for pid=7351 comm="syz.7.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 284.530854][ T6747] Bluetooth: hci0: command 0x1003 tx timeout [ 284.535971][ T7354] loop3: detected capacity change from 0 to 1024 [ 284.559898][ T6733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 284.724295][ T3601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.791947][ T7354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 284.804468][ T7354] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.817382][ T7354] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.934: bg 0: block 112: padding at end of block bitmap is not set [ 284.838669][ T7354] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm syz.3.934: lblock 0 mapped to illegal pblock 0 (length 1) [ 284.858904][ T7354] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.934: lblock 0 mapped to illegal pblock 0 (length 1) [ 284.873819][ T7354] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.934: lblock 0 mapped to illegal pblock 0 (length 1) [ 284.887440][ T7354] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.934: lblock 0 mapped to illegal pblock 0 (length 1) [ 284.900870][ T7354] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.934: lblock 0 mapped to illegal pblock 0 (length 1) [ 284.919414][ T7354] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.934: lblock 0 mapped to illegal pblock 0 (length 1) [ 284.935122][ T7349] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.934: lblock 0 mapped to illegal pblock 0 (length 1) [ 284.952413][ T7361] loop5: detected capacity change from 0 to 1024 [ 284.963396][ T7354] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.934: lblock 0 mapped to illegal pblock 0 (length 1) [ 284.978684][ T7349] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.934: lblock 0 mapped to illegal pblock 0 (length 1) [ 285.168667][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 285.208931][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 285.321260][ T7373] loop5: detected capacity change from 0 to 1764 [ 285.456150][ T7371] loop1: detected capacity change from 0 to 1024 [ 285.538127][ T7371] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 285.546609][ T7371] System zones: 0-1, 3-36 [ 285.552336][ T7371] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.941: bad orphan inode 134217728 [ 285.563128][ T7371] loop1: lost filesystem error report for type 5 error -117 [ 285.566356][ T7371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.853828][ T7375] loop3: detected capacity change from 0 to 256 [ 285.972667][ T28] audit: type=1326 audit(1776087222.390:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 286.103802][ T28] audit: type=1326 audit(1776087222.390:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 286.176822][ T28] audit: type=1326 audit(1776087222.390:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 286.243474][ T28] audit: type=1326 audit(1776087222.390:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 286.325256][ T28] audit: type=1326 audit(1776087222.390:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 286.400002][ T28] audit: type=1326 audit(1776087222.420:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 286.474694][ T28] audit: type=1326 audit(1776087222.420:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 286.551468][ T28] audit: type=1326 audit(1776087222.420:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 286.594448][ T7379] loop7: detected capacity change from 0 to 256 [ 286.622370][ T28] audit: type=1326 audit(1776087222.420:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57bd05c819 code=0x7ffc0000 [ 286.690922][ T7379] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 286.973049][ T7381] loop3: detected capacity change from 0 to 256 [ 287.266424][ T6747] Bluetooth: hci0: command 0x1003 tx timeout [ 287.272692][ T6733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 287.330310][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.354880][ T2117] Bluetooth: hci0: Frame reassembly failed (-84) [ 287.369944][ T7381] loop3: detected capacity change from 0 to 512 [ 287.875911][ T7391] loop7: detected capacity change from 0 to 1024 [ 288.013552][ T7392] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 288.021995][ T7392] System zones: 0-1, 3-36 [ 288.027674][ T7392] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.947: bad orphan inode 134217728 [ 288.038339][ T7392] loop1: lost filesystem error report for type 5 error -117 [ 288.040086][ T7392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.087534][ T7391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 288.102028][ T7391] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.126541][ T7391] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.946: bg 0: block 112: padding at end of block bitmap is not set [ 288.310105][ T7381] EXT4-fs: quotafile must be on filesystem root [ 289.114025][ T7400] set_capacity_and_notify: 1 callbacks suppressed [ 289.114044][ T7400] loop5: detected capacity change from 0 to 1764 [ 289.410479][ T6733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 289.505549][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.068935][ T6203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 290.407312][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.949'. [ 290.981367][ T7416] hub 8-0:1.0: USB hub found [ 290.986107][ T7416] hub 8-0:1.0: 8 ports detected [ 291.009475][ T7416] netlink: 'syz.3.953': attribute type 10 has an invalid length. [ 291.287818][ T7422] loop5: detected capacity change from 0 to 256 [ 291.336250][ T7422] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 291.422606][ T7428] loop3: detected capacity change from 0 to 512 [ 291.460362][ T7428] EXT4-fs (loop3): 1 truncate cleaned up [ 291.472229][ T7428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.536142][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.599880][ T7433] 9p: Bad value for 'rfdno' [ 291.657238][ T7439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7439 comm=syz.3.961 [ 291.919686][ T7448] loop1: detected capacity change from 0 to 1024 [ 291.967623][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 291.967641][ T28] audit: type=1400 audit(1776087228.390:2374): avc: denied { getopt } for pid=7461 comm="syz.5.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.971527][ T7448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 292.009959][ T7448] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.028444][ T7448] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.964: bg 0: block 112: padding at end of block bitmap is not set [ 292.054992][ T7448] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm syz.1.964: lblock 0 mapped to illegal pblock 0 (length 1) [ 292.126782][ T7443] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.964: lblock 0 mapped to illegal pblock 0 (length 1) [ 292.140472][ T7443] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.964: lblock 0 mapped to illegal pblock 0 (length 1) [ 292.154356][ T7448] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.964: lblock 0 mapped to illegal pblock 0 (length 1) [ 292.175534][ T7474] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.964: lblock 0 mapped to illegal pblock 0 (length 1) [ 292.189208][ T7474] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.964: lblock 0 mapped to illegal pblock 0 (length 1) [ 292.202755][ T7474] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.964: lblock 0 mapped to illegal pblock 0 (length 1) [ 292.216257][ T7474] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.964: lblock 0 mapped to illegal pblock 0 (length 1) [ 292.229993][ T7443] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.964: lblock 0 mapped to illegal pblock 0 (length 1) [ 292.574956][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 292.652922][ T7485] netlink: 'syz.1.978': attribute type 16 has an invalid length. [ 292.661020][ T7485] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.978'. [ 292.722799][ T7489] netlink: 212 bytes leftover after parsing attributes in process `syz.3.980'. [ 292.760347][ T7491] loop7: detected capacity change from 0 to 1024 [ 292.828426][ T7491] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.945491][ T6203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.163945][ T28] audit: type=1400 audit(1776087229.580:2375): avc: denied { lock } for pid=7514 comm="syz.0.990" path="socket:[17875]" dev="sockfs" ino=17875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 293.195480][ T7507] loop1: detected capacity change from 0 to 1024 [ 293.274013][ T7507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 293.291640][ T7507] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.312439][ T7507] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.988: bg 0: block 112: padding at end of block bitmap is not set [ 293.347341][ T7507] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm syz.1.988: lblock 0 mapped to illegal pblock 0 (length 1) [ 293.451115][ T7506] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.988: lblock 0 mapped to illegal pblock 0 (length 1) [ 293.464976][ T7506] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.988: lblock 0 mapped to illegal pblock 0 (length 1) [ 293.479049][ T7507] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.988: lblock 0 mapped to illegal pblock 0 (length 1) [ 293.496013][ T7513] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.988: lblock 0 mapped to illegal pblock 0 (length 1) [ 293.509765][ T7513] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.988: lblock 0 mapped to illegal pblock 0 (length 1) [ 293.523399][ T7513] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.988: lblock 0 mapped to illegal pblock 0 (length 1) [ 293.537057][ T7513] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.988: lblock 0 mapped to illegal pblock 0 (length 1) [ 293.552102][ T7506] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #15: comm syz.1.988: lblock 0 mapped to illegal pblock 0 (length 1) [ 293.739699][ T7505] loop3: detected capacity change from 0 to 512 [ 293.845648][ T7530] netlink: 212 bytes leftover after parsing attributes in process `syz.0.995'. [ 293.865871][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 293.900272][ T28] audit: type=1400 audit(1776087230.320:2376): avc: denied { getopt } for pid=7533 comm="syz.7.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 293.925263][ T7505] EXT4-fs (loop3): 1 orphan inode deleted [ 293.949385][ T7505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.949422][ T129] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 293.974886][ T7537] netlink: 'syz.7.997': attribute type 13 has an invalid length. [ 293.978412][ T7505] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.994051][ T129] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 294.001979][ T7538] loop1: detected capacity change from 0 to 256 [ 294.017463][ T7537] netlink: 'syz.7.997': attribute type 17 has an invalid length. [ 294.037112][ T7538] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.049402][ T7534] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.056609][ T7534] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.087443][ T28] audit: type=1400 audit(1776087230.510:2377): avc: denied { read } for pid=7533 comm="syz.7.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 294.122482][ T7534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.132638][ T7534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.204368][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.243072][ T7537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.252228][ T7537] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.274782][ T7537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.292632][ T36] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.312853][ T36] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.350279][ T36] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.368943][ T36] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.379432][ T7555] netlink: 'syz.1.1002': attribute type 10 has an invalid length. [ 294.393530][ T7555] veth0_vlan: entered allmulticast mode [ 294.499450][ T7555] veth0_vlan: left promiscuous mode [ 294.526088][ T7555] veth0_vlan: entered promiscuous mode [ 294.603185][ T7555] team0: Device veth0_vlan failed to register rx_handler [ 294.676955][ T7563] loop5: detected capacity change from 0 to 256 [ 294.723231][ T7563] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.926629][ T7555] syz.1.1002 (7555) used greatest stack depth: 8120 bytes left [ 294.944184][ T7572] loop3: detected capacity change from 0 to 512 [ 295.021322][ T7572] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 295.782285][ T7576] loop7: detected capacity change from 0 to 1764 [ 295.940363][ T7572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 295.979507][ T7572] System zones: 1-12 [ 296.107016][ T7572] EXT4-fs (loop3): 1 truncate cleaned up [ 296.118465][ T7572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.157882][ T7572] EXT4-fs warning (device loop3): ext4_group_extend:1861: can't shrink FS - resize aborted [ 297.390580][ T7585] loop1: detected capacity change from 0 to 1024 [ 297.840635][ T28] audit: type=1400 audit(1776087233.580:2378): avc: denied { append } for pid=7570 comm="syz.3.1008" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 298.600963][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.634461][ T7585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 298.649515][ T7585] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.682317][ T7585] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1009: bg 0: block 112: padding at end of block bitmap is not set [ 299.028892][ T7591] loop7: detected capacity change from 0 to 256 [ 299.081886][ T7591] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 299.143120][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 299.957111][ T7600] loop3: detected capacity change from 0 to 1024 [ 300.106599][ T7601] loop5: detected capacity change from 0 to 1764 [ 302.140349][ T7607] loop1: detected capacity change from 0 to 256 [ 302.547901][ T7600] EXT4-fs: error -4 creating inode table initialization thread [ 302.558229][ T7600] EXT4-fs (loop3): mount failed [ 303.826040][ T7617] loop7: detected capacity change from 0 to 1764 [ 304.296912][ T7621] capability: warning: `syz.1.1021' uses 32-bit capabilities (legacy support in use) [ 305.304878][ T7625] loop3: detected capacity change from 0 to 512 [ 305.591978][ T7625] EXT4-fs: Ignoring removed nobh option [ 305.734082][ T7627] loop5: detected capacity change from 0 to 1764 [ 306.339039][ T7625] EXT4-fs (loop3): 1 orphan inode deleted [ 306.586680][ T7625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.213595][ T7625] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.1023: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 307.480057][ T7628] loop1: detected capacity change from 0 to 128 [ 307.551664][ T28] audit: type=1400 audit(1776087243.890:2379): avc: denied { listen } for pid=7633 comm="syz.7.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 307.639359][ T7628] vfat: Unknown parameter '' [ 307.651979][ T7637] loop7: detected capacity change from 0 to 2048 [ 307.658788][ T7637] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 307.931189][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.448134][ T7647] loop3: detected capacity change from 0 to 1764 [ 309.791449][ T28] audit: type=1400 audit(1776087246.210:2380): avc: denied { mount } for pid=7653 comm="syz.0.1031" name="/" dev="hugetlbfs" ino=18558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 309.871824][ T28] audit: type=1326 audit(1776087246.290:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756d18c819 code=0x7ffc0000 [ 309.976697][ T28] audit: type=1326 audit(1776087246.320:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756d18c819 code=0x7ffc0000 [ 310.119139][ T28] audit: type=1326 audit(1776087246.320:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756d18c819 code=0x7ffc0000 [ 310.177842][ T28] audit: type=1326 audit(1776087246.320:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f756d18c819 code=0x7ffc0000 [ 310.458338][ T7663] loop1: detected capacity change from 0 to 1024 [ 310.535999][ T7663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 310.551277][ T7663] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.702176][ T28] audit: type=1326 audit(1776087246.320:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756d18c819 code=0x7ffc0000 [ 310.739617][ T28] audit: type=1326 audit(1776087246.320:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756d18c819 code=0x7ffc0000 [ 310.763682][ T28] audit: type=1326 audit(1776087246.320:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756d18c819 code=0x7ffc0000 [ 310.789170][ T28] audit: type=1326 audit(1776087246.320:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7655 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756d18c819 code=0x7ffc0000 [ 311.136075][ T7649] loop5: detected capacity change from 0 to 256 [ 311.340163][ T7649] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.842966][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 311.933647][ T2117] Bluetooth: hci0: Frame reassembly failed (-84) [ 312.085259][ T7683] xt_hashlimit: size too large, truncated to 1048576 [ 312.128951][ T7669] loop3: detected capacity change from 0 to 1024 [ 312.666366][ T7685] ================================================================== [ 312.674509][ T7685] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 312.681831][ T7685] [ 312.684163][ T7685] write to 0xffff88810d29c3d8 of 4 bytes by task 7681 on cpu 0: [ 312.691809][ T7685] touch_atime+0x1d7/0x330 [ 312.696244][ T7685] shmem_file_read_iter+0x477/0x540 [ 312.701478][ T7685] copy_splice_read+0x471/0x6c0 [ 312.706353][ T7685] splice_direct_to_actor+0x28f/0x670 [ 312.711919][ T7685] do_splice_direct+0x119/0x1a0 [ 312.716888][ T7685] do_sendfile+0x382/0x650 [ 312.721325][ T7685] __x64_sys_sendfile64+0x105/0x150 [ 312.726568][ T7685] x64_sys_call+0x2dc4/0x3020 [ 312.731271][ T7685] do_syscall_64+0x12c/0x370 [ 312.735877][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.741782][ T7685] [ 312.744137][ T7685] read to 0xffff88810d29c3d8 of 4 bytes by task 7685 on cpu 1: [ 312.751685][ T7685] atime_needs_update+0x25f/0x3e0 [ 312.756730][ T7685] touch_atime+0x4a/0x330 [ 312.761097][ T7685] shmem_file_read_iter+0x477/0x540 [ 312.766323][ T7685] copy_splice_read+0x471/0x6c0 [ 312.771194][ T7685] splice_direct_to_actor+0x28f/0x670 [ 312.776675][ T7685] do_splice_direct+0x119/0x1a0 [ 312.781574][ T7685] do_sendfile+0x382/0x650 [ 312.786014][ T7685] __x64_sys_sendfile64+0x105/0x150 [ 312.791237][ T7685] x64_sys_call+0x2dc4/0x3020 [ 312.795945][ T7685] do_syscall_64+0x12c/0x370 [ 312.800566][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.806650][ T7685] [ 312.808976][ T7685] value changed: 0x04d05c6f -> 0x0568f2ef [ 312.814705][ T7685] [ 312.817033][ T7685] Reported by Kernel Concurrency Sanitizer on: [ 312.823193][ T7685] CPU: 1 UID: 0 PID: 7685 Comm: syz.0.1038 Tainted: G W syzkaller #0 PREEMPT(full) [ 312.834074][ T7685] Tainted: [W]=WARN [ 312.837882][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 312.847957][ T7685] ================================================================== [ 313.157020][ T28] kauditd_printk_skb: 151 callbacks suppressed [ 313.157036][ T28] audit: type=1400 audit(1776087249.570:2540): avc: denied { module_request } for pid=7682 comm="syz.1.1039" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 314.016533][ T6747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 314.198273][ T7677] loop5: detected capacity change from 0 to 256 [ 314.268824][ T28] audit: type=1400 audit(1776087250.680:2541): avc: denied { mounton } for pid=7674 comm="syz.5.1037" path="/180/file0" dev="tmpfs" ino=1018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 314.305982][ T7669] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 314.452855][ T7677] 9p: Bad value for 'wfdno' [ 314.628199][ T7677] loop5: detected capacity change from 0 to 512 [ 314.644307][ T7677] EXT4-fs: quotafile must be on filesystem root [ 314.750529][ T28] audit: type=1400 audit(1776087251.170:2542): avc: denied { read write } for pid=7674 comm="syz.5.1037" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 314.775653][ T28] audit: type=1400 audit(1776087251.170:2543): avc: denied { open } for pid=7674 comm="syz.5.1037" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1