last executing test programs: 1m3.453455763s ago: executing program 1 (id=451): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0xe8, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@routing={0x32, 0x2, 0x0, 0x4, 0x0, [@private0]}, @hopopts={0x3c}, @fragment={0x6, 0x0, 0x9, 0x1, 0x0, 0x19, 0x76}, @fragment={0x32, 0x0, 0x80, 0x0, 0x0, 0x7, 0x64}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xd5, 0x4, 0x40, 0x1ff}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRESHEX, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000000000008000500", @ANYRESDEC=r4], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x4}, @func={0x5, 0x0, 0x0, 0xc, 0x1}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2}]}, {0x0, [0x0, 0x61, 0x0]}}, &(0x7f00000008c0)=""/183, 0x5d, 0xb7, 0x0, 0x7}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x3, '\x00', r4, r5, 0x5, 0x3, 0x2}, 0x50) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) syz_open_pts(0xffffffffffffffff, 0x40500) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x110) mount(0x0, 0x0, 0x0, 0x1214042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r9, 0x40082102, &(0x7f0000000080)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0xff9c, 0x5, 0x9}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000011c0)=@security={'security\x00', 0xe, 0x4, 0x528, 0xffffffff, 0x218, 0x0, 0x140, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x0, 0x0, 0xff000000], [0xff, 0xffffffff, 0xff000000, 0xff], 'ip_vti0\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x8b, 0x6, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x6, 0x0, [0x9, 0x4, 0x3, 0x8, 0x3, 0x101, 0x8bd, 0xe8, 0x57e3, 0x64, 0x6, 0x40, 0x4, 0x5, 0xff, 0x100], 0x9}}, @common=@hl={{0x28}, {0x1, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x4, 0x1}, {0x4, 0x2, 0x4}, 0x800, 0x5}}}, {{@uncond, 0x0, 0x210, 0x240, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x52], 0x7, 0x39}}, @common=@rt={{0x138}, {0x5, [0x7, 0x1ff], 0x1, 0x2, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @private1, @private0, @dev={0xfe, 0x80, '\x00', 0x14}, @dev={0xfe, 0x80, '\x00', 0x13}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0], 0x8}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x2}, {0x1}, 0x2, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) 1m3.173545656s ago: executing program 1 (id=452): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(0xffffffffffffffff, r1) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f00000008c0)=0x47) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000000100001040000000000005f0000000000", @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e31000000000000000000240012800b0001006970766c616e00001400028006000100000000000600020001000000"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1004, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x102270, 0xfffd, 0x1, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000000c0)=ANY=[], 0x4) 1m2.971055105s ago: executing program 1 (id=455): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002a00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8080011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000180)={r1, r2/1000+10000}, 0x10) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fchdir(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) pread64(r5, &(0x7f0000002240)=""/131, 0x83, 0x5b) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m2.852981051s ago: executing program 1 (id=457): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (rerun: 32) r0 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r0, &(0x7f0000000100)=""/210, 0xd2, 0x42, &(0x7f0000000240)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0x80) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0xfffffffb, 0x4) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x7000) (async, rerun: 64) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x14000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x18d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, 0xffffffffffffffff}, 0x4) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf98000000000000560800000000000085000000c8000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) recvmmsg(r4, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40010163, 0x0) (async) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008144}, 0x8000) (async) perf_event_open(0x0, 0x0, 0x4000000000, r3, 0xa) r8 = socket$kcm(0x10, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) (async, rerun: 32) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) (async, rerun: 32) socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) lsetxattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) lgetxattr(&(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0) 1m2.781862364s ago: executing program 1 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xa5c4, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r5, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x48005) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r7, 0x0, 0x0, 0x8080c61) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0x8, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) 1m2.703875557s ago: executing program 1 (id=459): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc0, 0x8}, 0x143, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000ac0)={0x3, 0x80, 0x8, 0x6, 0x3, 0x6, 0x0, 0x10, 0x10, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xf, 0x1, @perf_bp={&(0x7f0000000a80), 0x8}, 0x814, 0x8b, 0xb, 0x6, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x355c, 0x0, 0x9f8}) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x106900, 0x10) ptrace$getsig(0x4202, r1, 0xd968, &(0x7f00000003c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x9, 0xc64}, 0x10096, 0x0, 0x800000, 0x1, 0x5, 0x2, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x2000000, 0x4600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x4000000) 1m2.65062967s ago: executing program 32 (id=459): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc0, 0x8}, 0x143, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000ac0)={0x3, 0x80, 0x8, 0x6, 0x3, 0x6, 0x0, 0x10, 0x10, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xf, 0x1, @perf_bp={&(0x7f0000000a80), 0x8}, 0x814, 0x8b, 0xb, 0x6, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x355c, 0x0, 0x9f8}) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x106900, 0x10) ptrace$getsig(0x4202, r1, 0xd968, &(0x7f00000003c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x9, 0xc64}, 0x10096, 0x0, 0x800000, 0x1, 0x5, 0x2, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x2000000, 0x4600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x4000000) 31.009847115s ago: executing program 3 (id=597): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x90, 0x24}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 30.503924678s ago: executing program 3 (id=602): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 30.237693821s ago: executing program 3 (id=604): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0) sendfile(r4, r3, 0x0, 0x80004700) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 29.753920894s ago: executing program 3 (id=605): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000000000000070000004406fc5cad8c00001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141412"], 0x38}, 0x4000004) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="09000000010017", 0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x9) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000000000000070000004406fc5cad8c00001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141412"], 0x38}, 0x4000004) (async) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000000)="09000000010017", 0x7) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) 29.011022728s ago: executing program 3 (id=607): syz_clone(0x43408000, &(0x7f0000000040)="23a943e1379ded1070d2497a791de8bb3b95b700b4096b4037cb5f", 0x1b, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3}}]}, 0x30}}, 0x800) r5 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800204}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x78}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, r8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r5, 0x200000000000000) mprotect(&(0x7f000024d000/0x4000)=nil, 0x4000, 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x100, 0x3, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x68, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x77359400}}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000002200)={0x92c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffff1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PEERS={0x8c0, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8fea, @mcast2, 0x747}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffd}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010100}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a077c1c6e4681795b626db8620091c5a99a7e6d4b61843088fd6766eca9b5d81"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "92c4da81e55d7f94eea48088f2253899267b74ed482c4355a9953cc7f1b49763"}]}, {0x240, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x95}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010100}}, @WGPEER_A_ALLOWEDIPS={0x220, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}, {0x260, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x218, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x4}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2d4da1fd45f0b7d9ceec3b5425857d61889bcb6969b863f409ab0405bfed322f"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x9046545008921275}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x74, @remote}}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bca9c1486c43aeb3d7276fc0067428ae1271bde061c8f421ee1fab47e07b3fea"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8b385c78ce9682c975e344ea05779ccd91f713ad2a76034fad14734fd2a46515"}]}, {0x26c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x930, @mcast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ec15022bc9368e6348d04ce3d56bc78029f4cfc89cad29e7843e97536650c717"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1b021397eb6451d395320db1db8f0ba143b6cae39b6edd4c2a2f3e4090fb11f9"}, @WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x4}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8906523a64cd8bab1e3389fcc867a89ba61f8852d4a1758f67c45ff27a1ebf23"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1ff, @mcast1, 0x4}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x92c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000090) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078001c0a0300050200001300000000000002d58838068b910000005ed19f6c42077d9d41af77"], 0x4e) 27.578042926s ago: executing program 3 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xa0882, &(0x7f00000001c0)={@align=0x2, {0xa, 0x4, 0x7, 0xf80000000000}}, 0xf6, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c0002800500010000000000060003400003000024000280140001"], 0x88}}, 0x0) (fail_nth: 1) 27.577937436s ago: executing program 33 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xa0882, &(0x7f00000001c0)={@align=0x2, {0xa, 0x4, 0x7, 0xf80000000000}}, 0xf6, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c0002800500010000000000060003400003000024000280140001"], 0x88}}, 0x0) (fail_nth: 1) 11.27688256s ago: executing program 6 (id=659): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x7, 0x36e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12012, r0, 0x6300) 7.377296283s ago: executing program 6 (id=671): socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000001c0)={0xff7f, 0x8, 0x4, 0x8001, 0x7, "361089ea00"}) ioctl$TIOCSTI(r3, 0x5412, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x24004091) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f00000002c0)={0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x7, 0x17b0}}, './file0\x00'}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xfffffffffffffffd}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000006000000000000000004000000e0000002000000000000000100000000fe8000000000000000000000f8ffffffffffffff10000000020020002b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000040000000000000006000000000000000000000000000000feffffffffffffff00000000b96b6e000001000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xd, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0xb9}, 0x0, 0xd, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 6.451541427s ago: executing program 6 (id=682): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0xfffffd74) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") pselect6(0x40, &(0x7f00000000c0)={0x8, 0x9, 0x800, 0x7, 0xfffffffffffffff0, 0x7, 0x8, 0x1}, &(0x7f0000000100)={0x7fffffff, 0x2, 0x6, 0x0, 0x7, 0x3, 0x9, 0xaa9e}, &(0x7f0000000140)={0x1ff80, 0x5c, 0x0, 0x80000000, 0xff, 0xc6da, 0x3, 0xfe}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000340)={&(0x7f00000001c0)={[0x4]}, 0x8}) r7 = epoll_create(0x3ff) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0000000}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x100000a, 0x2012, r9, 0x0) read(r9, &(0x7f0000001400)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) 4.846452022s ago: executing program 4 (id=692): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) epoll_create1(0x80000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r1, 0x7fffffff, 0x12, 0x0, 0x0, @ib={0x1b, 0x8, 0x6, {"78c36cbe7e38dade0099fe4e9d908e9b"}, 0xffff, 0x1ff, 0xfffffffeffffffff}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118) 4.798785855s ago: executing program 5 (id=693): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x28902) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000ec0)={{0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x10000, 0x10}) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@errors_remount}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x49b, &(0x7f0000000c00)="$eJzs3M9rXNUeAPDvvfnR5vVH8vr63rO1amoRgj+SJq3ahRtFwUVFQRd1GZO0hE4baaLYUmwqUjeCFHQtLgX/AnciiroS3OrGlRSKdtMqCJF7594kM5lpGjvJxMznA5M5594zOed7f557ziQBdKzB7EcSsTMifoyI/mq2tsBg9e3WjYsTv9+4OJHEwsLLvyZ5uZs3Lk6URcvP7SgyQ2lE+m5SVFJr9vyF0+OVytS5Ij8yd+b1kdnzFx5788z4qalTU2fHjh07emT0ySfGHm9JnFlcN/e/PXNg3/OvXn1h4sTV1779LGvvzmL98jhaZTAL/LeFXP26h1pdWZvtWpZOutvYENakKyKy3dWTn//90RVLO68/nnunrY0D1lV2b9rWfPX8ArCFJdHuFgDtUd7os+ff8rVBXY9N4frT1QegLO5bxau6pjvSokxP3fNtKw1GxIn5Pz7OXrFO4xAAAMu9P/HR8Xi0Uf8vjf/l7z/nP3cXcygDEfHviNgTEf+JiL0R8d+IvOz/I+KeNdS9PVZODa3s/6TX7irAVWT9v6eKua3a/l/Z+4uBriK3K4+/Jzk5XZk6XGyToejZluVHb1PHF8/+8EGzdcv7f9krq7/sCxbtuNZdN0A3OT43nndKW+D65Yj93Y3iTxZnApKI2BcR+9f2q3eXiemHPz3QrNDq8d9GC+aZFj7JwpvP4p+PuvhLyfL5yekV85Mj26MydXikPCpW+u77Ky81q/+u4m+B61PV92X7v77IQLJ8vnZ27XVc+em9ps80S/H3NT/+k9rPTI7Ppb3JK/k8c2+x7K3xublzoxG9yfE8X7N8bOmzZb4snx3/Q4can/97is9k1d8bEdlBfF9E3B8RDxRtPxgRD0bEodvE/80zReJg8/gjbdP+vxwx2fD6t7jRB5LskFjc/2tPdJ3++vNm9d/Z9e9onhoqluTXv1U0ak52uahv4N1sOwAAAPinSPPvwCfp8GI6TYeHq9/h3xv/Siszs3OPnJx54+xk9bvyA9GTliNd/cV4aGW6MjWazBe/sTo+OlaMFZfjpUeKceMPu/ry/PDETGWyzbFDp9vR5PzP/NLV7tYB66yv4dKx3kZLXRFgq6mfR09rs5dejIYXA2AL8Pfa0LlWOf/TjWoHsPHc/6Fj9X3VYOGluryRP9ia3P+hczn/oUOlX7a7BUAbuf9DR/obf86/EYntm6MZNf8pYH59ttif1X9YEUtLNutOyRMRZSLdFO2RWHNi2x0VbutlCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGX+CgAA//9vU+a2") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000006c0001002abd7000ffdbdf250000ff7a", @ANYRES32=0x0, @ANYBLOB="914001fb0a05000014000300646d79300000000000000000000004003480"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000000140)=0x1000007, 0x2) r5 = open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0xb, 0x70bd26, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x1010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000005c0)={{r3, &(0x7f0000000440)='\x00', 0x620000, &(0x7f0000000480)={@_ha_fsid={[0xff, 0x5]}, {0x4a, 0x2, 0x2, 0x5}}, 0x8, &(0x7f00000004c0), &(0x7f0000000500)=0x8}, {[0x9, 0xfffffffd, 0x74, 0x3]}, 0xc9, 0x6e, &(0x7f0000000540)=""/110}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x31, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call, @alu={0x4, 0x1, 0x8, 0x5, 0xb, 0x0, 0xfffffffffffffffc}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000}, @jmp={0x5, 0x0, 0x6, 0x4, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @snprintf], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='GPL\x00', 0xfffffffb, 0xfa, &(0x7f0000000980)=""/250, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x80000001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x1, 0x5, 0xa, 0xb}, {0x5, 0x1, 0x2, 0x9}, {0x0, 0x1, 0x5, 0xb}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @jmp={0x5, 0x0, 0xd, 0x4, 0x6, 0x8, 0xffffffffffffffff}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, 0x1c, r9, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0x7fff, 0x200}, 0x10, 0x14660, r10, 0x6, 0x0, &(0x7f0000001180)=[{0x3, 0x4, 0xb, 0xe}, {0x2, 0x1, 0x3, 0xb}, {0x4, 0x4, 0xc, 0x9}, {0x3, 0x2, 0x9, 0x3}, {0x1, 0x4, 0x2, 0x6}, {0x4, 0x2, 0xb, 0x1}], 0x10, 0x6}, 0x94) sendmsg$can_raw(r5, &(0x7f0000001300)={&(0x7f0000000b80), 0x10, &(0x7f00000012c0)={&(0x7f0000000bc0)=@can={{0x2, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "e7f41009d0cdcfcb"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000001440)={&(0x7f0000001340)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14, &(0x7f0000001400)={&(0x7f0000001380)="48959dd6dc487bde4cbf0922d29aaabaaff857af8c0d5c05919245230aa9e862883458ce59e25bf88e2187012e60bf1c471db623c2356e9611b10110bcd986e156ec07593afb236923091b56f9ca29bfc6d888dcc297aec667823d7f6a0464eedb3f532f7b613c853f483cafb3bb2b81f7f9ede31ac95f254ebbb46db89dee", 0x7f}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_x25_SIOCADDRT(r11, 0x890b, 0x0) 4.602101394s ago: executing program 4 (id=697): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f831c7960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211a37d1adf9a6357f23e5870392a811d81d78f283de0ebe4", @ANYRESDEC, @ANYRESHEX=0x0], 0x1, 0x2c8, &(0x7f00000006c0)="$eJzs3MFqE18Ux/Hzb9omTWmTP4igoB50o5uhjQ+gQVoQA0ptRF0IUzvRkDEpM6ESEZuNuPU5ikt3gvoC3Ygb9+6KILjpQhzpzKSdtGmbtmkS2+8H2rmTc3/c2yQtJ6GT1ftvn5UKrlEwqzKQUBkQqcuaSHp9FPovPA7442GJqsuV0V/fzt198PBWNpebmlGdzs5ezajq+IWPz1++u/i5Onrv/fiHuKykH63+zHxfGV45s/pn9mnR1aKr5UpVTZ2rVKrmnG3pfNEtGap3bMt0LS2WXctpqhfsysJCTc3y/FhywbFcV81yTUtWTasVrTo1NZ+YxbIahqFjSTnZBtuYk1+emTGzO5a9WEd3hCM30upGx8nWWxfzy13YEwAA6DO79/9Br79T/7/ZHe6n/z+9d/8vEu3/E+Ei9P8dUG8626P/x7HgOFkzGf7+NqP/BwAAAAAAAAAAAAAAAAAAAADgX7DmeSnP81Lrx/ASYf88LiKJ4BJw/7zX+8TRiD7+XuRr4/EPz7fErq1/G+rNltFBkQv3EiL2m8X8Yj44BvVsQYpiiyUTkpLf/vMhFIynb+amJtSXlk/2UphfWszHJN7IN6Rb5c//PxnktTk/JMno+hlJyanW62da5ofl8qVI3pCUfHksFbFl3n9eb+ZfTareuJ3bkh/x5wEAAAAAcBwYumHb63e/7k9IyPZ6kI+8P+B53tJu7w9seX09KGfb+YhKAAAAAABwaG7tRcm0bcs5wCAuIoeId37geSK930ZM+uPeaB5cF5E+2Ea3BgkRCW7Rg8R/bMTbSnltzBkM/72uP+6fvQe9/ssEAAAAoNM2m/59hL6+PsIdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABw8rT7eWCN+dtKjcIu8chysa7/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAf+RsAAP//HloVfQ==") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x3}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x4}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="795ef9000000000000007e0000000c009900e26a19cd988373130001886c91000014000000f8c939"], 0x20}}, 0x4000054) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc2842, 0x1) close(r5) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000180), 0x27094, &(0x7f0000000a40)=ANY=[@ANYRES64=r1, @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYBLOB='trans=fd,rfdno=', @ANYRES16=r7, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES8=r5, @ANYRESHEX=r1]) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r10) sendmsg$NLBL_CALIPSO_C_REMOVE(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000f0", @ANYRES16=r11, @ANYBLOB="01002abd7000fcdbdf25020000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) 4.389729924s ago: executing program 5 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xa5c4, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r5, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x48005) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r7, 0x0, 0x0, 0x8080c61) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0x8, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) 4.126800766s ago: executing program 6 (id=700): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x6, 0x3e713eab, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ce3621f500000000e0ffffffffffffff000000000000000000000000bb470d384639902cf06ecf2ac14ccde4c1206800645f41bf224dfed8854cf2a79f4a99ab3121586e1babd610"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd4}], 0x1}, 0x4896) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@random="0500fe3d91b5", @random="0010000200", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x9, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x3, 0x28, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.974017563s ago: executing program 2 (id=702): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0xcb, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.908610566s ago: executing program 2 (id=703): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f0000000180)={[{@user_xattr}]}, 0x1, 0x4cb, &(0x7f0000000b80)="$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") r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89900) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) recvmmsg(r1, 0x0, 0xb, 0x60, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffc, 0x7, 0x2000, 0xffff}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x50001a00, &(0x7f0000000300)="8790a69fbb86e7ff8ae4128504a07d4ca4d1eb4ce3149570426203325fdffcd7b091fd01a48eadf0627956317e1539989291a1ef4f504c43c94e9015a471be609acfd9ee7f6b5c18896e5daeea6ecdf445832cbb5e3c0d3968fa4bba54a106e000aa5ce57f8760086393252895d037e8c844c170397e11b90212bdd0e6b736fda56a2d42fc60043642ee25d8", 0x8c, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) r3 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x10, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x5, 0x0, 0x8, 0x4ac, 0x8, 0x0, 0x0, 0x0, 0x6}, r2, 0xa, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000200)='2', 0x1, 0xe7c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x1, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20008820}, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_audit(0x10, 0x3, 0x9) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0)=[0x8, 0x80000001], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60301) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x40, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r9, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r8], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 3.514739815s ago: executing program 4 (id=704): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x87}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) sendto$packet(r3, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xfff2}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0x8, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x6, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x2, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x200100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xd6f0, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000504000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r8 = socket$inet6(0x10, 0x2, 0x20001400) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r9, 0x89f9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) ioctl$XFS_IOC_SET_RESBLKS(r8, 0xc0105872, &(0x7f0000000180)={0x2, 0xfffffffffffff800}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25021f00", @ANYRES32=r10, @ANYBLOB="0800040064010104080008000001000008000200e0000002080001040a0101020800090003000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 3.442042008s ago: executing program 0 (id=705): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, 0x0, 0x0) 3.283951226s ago: executing program 5 (id=706): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0x0, 0x7}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x4}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.785463969s ago: executing program 5 (id=707): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x9f, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_key={0x8f, 0x8, 0x2380, 0x0, "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"}]}, 0x4f8}, 0x1, 0x7}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0xe4, 0x20, 0x301, 0x0, 0x0, "", [@nested={0xd1, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc3"]}]}, 0xe4}], 0x1}, 0xc0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x5, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000003100)=0x15, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40800) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x20000023896) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x4001) 2.711899702s ago: executing program 0 (id=708): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1004, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x102270, 0xfffd, 0x1, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)=ANY=[], 0x4) 2.711729002s ago: executing program 4 (id=709): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x7ec, &(0x7f0000000c40)="$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") open(&(0x7f0000000000)='./bus\x00', 0x101002, 0x83) (fail_nth: 1) 2.284108832s ago: executing program 4 (id=710): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd70000000000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.193962707s ago: executing program 4 (id=711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES8=r1], 0x80}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34ca0000061ffcb89db6b4ba7b2958660bebbeadd2fcf1567286f3258cd7b89fce310d3dded69579a8201cf43d2bc652c7865b89ca8ded027a90cb08dd523ebcb6a45ea22b694b9120773e4a46394f32fda1171f21264a4350c6b114c654fe75d4f30f63b32104068398af5c428b2e16725493785d8ee1e11dc5b414619d2435c1a7dd3cbea993cec2e347f309a10c8a5b590ddbcba3d022f281c7fb8f72464cc278b4d8fee331c8c1d6ce6084530ba91bd46b", @ANYRES16=r1, @ANYBLOB="04062cbd7000fbdbdf25570000000600950000000000060095000300000006009500090000000600950000080000"], 0x34}, 0x1, 0x0, 0x0, 0x20004044}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x106200, 0x1000, 0x20da, 0x2, 0xa, 0x20008, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000001380)={[{@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0x3, 0x44a, &(0x7f0000001440)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") chdir(&(0x7f0000000400)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x14, 0x1c, 0x1, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000f00)=0x1000001, 0x4) sendmmsg$inet(r4, &(0x7f00000037c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000040)={0x600000, 0x200000, 0x0, 0x0, 0x400000}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x101000) ioctl$BLKROGET(r10, 0x125e, &(0x7f00000003c0)) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r6, 0x0, 0x0) getpgid(0x0) 2.152749889s ago: executing program 0 (id=712): socket$l2tp6(0xa, 0x2, 0x73) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$kcm(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000a80)="86", 0x1}], 0x1, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) connect(r0, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80) 2.152081169s ago: executing program 2 (id=713): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x9, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) setreuid(0xffffffffffffffff, 0xee01) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x200) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x1d, 0x8, "41b005214f9aa27dc27bddc8170c98a4ba1bf53e4e1c3ef459e5d49cd71ac2b3d9b6b729df49632f22124640bd96d442fd88105f7178baad5e65d4ddc66a787c", "3248953339ff3b3842ebce3152c6cb544d10beb840cf4aaf7254b73f55cd39bd", [0xfffffffffffffeff, 0x3]}) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) fsmount(r2, 0x1, 0x6) 2.091264991s ago: executing program 0 (id=714): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$kcm(0x1e, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) 2.089414712s ago: executing program 6 (id=715): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$watch_queue(r0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r4 = dup(r3) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000080)={{0x0, 0x8007}, {0xeb1, 0x800b}, 0x10000004, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0xc0d8) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYRES32=r6], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) writev(r7, &(0x7f0000002040)=[{&(0x7f00000000c0)="d8864995afca209e97953dfa6ff71a7308eb5f4b0b52807167e54aaf2c5a5de0056073268361fe356cb4e1a0421d977f25f72bc02569140ae990990d46c8529079b1f858fa0a5f8e28d45ae94d18ea27e71cb505bdad347d0b3dc60d86be301843c440091f7109085478f72a85358dc8f0bc8c3b52bc33f92e7549bef2cc02f0b0753808a724ef9ab7896e836a95fa7a4326167438870fd49a2a989c6c52a887d63458f8c44d251c948ca556577d243cb8f36615998e09ecc8ec0fa726", 0xbd}, {&(0x7f0000000240)="2a2991da1db6fdc61372235b8f2b580bf87bcbfcbedc48e4b836c69a1db96e92907e0dca1657af111572988c6a3001479ffbeb6081eb942f2330109172600980c80f00ab942a756b9d", 0x49}, {&(0x7f0000000300)="ac468e7d2955352d5b0bbe2c27", 0xd}, {&(0x7f00000003c0)="ae54c5f8b9ebab85c9b8b5c168f5c84ea6b25d02089b3771eba0cd94d7c19b9053a4760ce674f0636d7192b4ed0c4a86328bfa6af661889a9a23fd91c669b398cecf80696dcedb84133dd194ddef398a8368658c689159", 0x57}, {&(0x7f0000000ac0)="cdc04baca747e8f2fc2ec62b461d924a2885656d9b18363ad1a4f84161fbea4a72757abdfa038c2d691f397a07cafdc37d129fd659bbfdf06bf260408077332b1934fc9fcb6b3c0cf7510e0a97bd034b988d18162463a03cf23e65ff9532b2fd5d5e8525b201159d32be72dfd9d12a", 0x6f}, {&(0x7f0000000bc0)="67e9779e0b280c417a3f18c5be5df62958446002473931235d9ce7db72dfd84d77e30132729d85773551ad6c1430ffad1311f696dda656ea59ae676a304941e2115a9dbe842dde7f6b29507317a229cc83a0e663445fba4f0a5b37372c8b2191666063627f16f75fc1fdbd96d10ae9520e85a9341bf85750afb5f944ac", 0x7d}, {&(0x7f0000000d40)="28c19c0f24447712541d61cb5ac407b09183bf8f83ff85a2b7228fee1703f77d6a8d8149d734e6461330b31ad70a16c52df25709e95e67aeb8bfb00ace0ef8ae877615ace116baa4ad68b40e43334bf5135610c65c73eeae2e7c4ae2a2f8f237b2b42b8f4b182fc2a729e919923d5b", 0x6f}, {&(0x7f0000000e40)="fa05d3e8940eb3d782924afee0e7d2694e4b1c63ff0abc4451efcbb52b3304df026e0744725307271c692ff4998c3dbf14f3ffd10c0e68cd66fe190938fe7c842bdc8bc1d1fcf506085720c4a97782031dc589371e943ef8497ee6e3302ba3b4ff32b6c81926ccbd5ae1d618f5eb7a2075c9586dcd729e05e996305742ca218c88333158a5134f2ec947b8e3ad4dd96c374b0a0ecc178d592babb71113a697665c41bdb4267ffd9a4f42e768ae703c08a8f710359862d609d58a10", 0xbb}], 0x8) setreuid(0xee00, 0x0) getpeername$packet(r1, 0x0, 0x0) r8 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c80)={r11, r9, 0x25, 0x0, @val=@tcx={@void, @value=r11}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000000e00)=ANY=[], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x5e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80020420}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delqdisc={0x40, 0x25, 0x0, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x2, 0xfff3}, {0x9, 0xd}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0xe}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4c}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") socket$netlink(0x10, 0x3, 0x4) 2.053591924s ago: executing program 0 (id=716): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x800000, 0x0, 0x4, 0x3, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0xaea5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xd3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x87}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x850}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x400122a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRESHEX=r4], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103901) 1.991897986s ago: executing program 2 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xa5c4, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r5, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x48005) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r7, 0x0, 0x0, 0x8080c61) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0x8, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) 1.908809331s ago: executing program 5 (id=718): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.811962265s ago: executing program 0 (id=719): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x3, 0x8, 0x7}, 0x10, 0x23c6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000240)=ANY=[@ANYBLOB="12011003020000202505a1a44000010203d40902630002019d10040904000001020d0000052406000105240002000d240f010700000000e06e0c0606241a09002207240a80f706ff0905810310008003010904010000020d00000904010102"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(0x0, 0x8000, 0x600) ioctl$HDIO_GETGEO(r3, 0x301, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) syz_io_uring_setup(0x12e, &(0x7f0000000180)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000610a680000000000060000000000000095001b0000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 1.746010498s ago: executing program 6 (id=720): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x3, 0x8, 0x7}, 0x10, 0x23c6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000240)=ANY=[@ANYBLOB="12011003020000202505a1a44000010203d40902630002019d10040904000001020d0000052406000105240002000d240f010700000000e06e0c0606241a09002207240a80f706ff0905810310008003010904010000020d00000904010102"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(0x0, 0x8000, 0x600) ioctl$HDIO_GETGEO(r3, 0x301, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) syz_io_uring_setup(0x12e, &(0x7f0000000180)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000610a680000000000060000000000000095001b0000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 1.634630413s ago: executing program 5 (id=721): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd70000000000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 994.267113ms ago: executing program 2 (id=722): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000240)) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000040), 0x0, 0xfffffffffffffffa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40881) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}]}}]}, 0x40}}, 0x0) 0s ago: executing program 2 (id=723): syz_emit_ethernet(0x82, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000100)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@commit={'commit', 0x3d, 0x82f7}}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x1, 0x456, &(0x7f0000000d80)="$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") r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000780)={&(0x7f00000003c0), 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b25b2d19ab1f48b453a2332b4ea876c1ea42a17d8013a956868ef0945bdd61c9b97a0b0bce59ef80434867059901d4489e284a2dd6b8690bb6a499fee5a4420a4f5257944e2a487e4a116787e015382cc90185355800c782e3150fab27841e5619b01a3f4d9471e3fe8c21300909000000e925407b4ab46b0c18657c6bbe8baa1ef92557636d809e04335e680f3d4b3cb872695e8f8481e3f7c314bcbe4043acc03ba1b26575e83930eeec774f2cc8e1eae89655c51ea14cec8d53957775da6491a1d795f21252eeaabc79c20d9ed9bdb4", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x810) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmmsg$sock(r1, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@hci={0x1d, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="024468f75872dcc35c4a865167ce141180f86d6d2d2b667592a3c33936463143e7bb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86995e3ae7dbd8b6bc88af335ebe083ced9a2b1f3b847103b7af298aabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25000000000000", 0x7e}, {&(0x7f0000000bc0)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d94173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x200000c1) write$UHID_INPUT(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0}, 0x400, 0xde0b, 0x3, 0x5, 0x7, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$hidraw(0x0, 0x0, 0xbb42) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = getpid() r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}, 0x10000001}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}]}, {0x10, 0x6, "ec76e8811fef81a61817cac8"}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r6, &(0x7f0000000140)='timers\x00') syz_emit_ethernet(0x56, &(0x7f0000000540)={@multicast, @broadcast, @void, {@canfd={0xd, {{0x4, 0x0, 0x0, 0x1}, 0x26, 0x2, 0x0, 0x0, "8116995f0004d21f7b2c286028244fac2be98239aaaa257dce5aa353065e44917377f4619d5e18ed129ef17148502e322ceff8e5382415000f2da629d805eaf6"}}}}, 0x0) pread64(r5, 0x0, 0x0, 0x7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) kernel console output (not intermixed with test programs): tected capacity change from 0 to 512 [ 140.827084][ T4842] syz.4.356: attempt to access beyond end of device [ 140.827084][ T4842] loop4: rw=1, sector=6136, nr_sectors = 4824 limit=512 [ 140.861353][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.891574][ T4840] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.357: Failed to acquire dquot type 0 [ 140.942613][ T4840] loop0: lost filesystem error report for type 5 error -117 [ 140.943725][ T4840] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 140.965644][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 140.965670][ C1] EXT4-fs (loop0): initial error at time 1781981428: ext4_acquire_dquot:7041 [ 140.965720][ C1] EXT4-fs (loop0): last error at time 1781981428: ext4_acquire_dquot:7041 [ 141.003080][ T4840] EXT4-fs (loop0): 1 truncate cleaned up [ 141.009438][ T4840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.035630][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.064163][ T28] kauditd_printk_skb: 301 callbacks suppressed [ 141.064180][ T28] audit: type=1400 audit(1781981428.349:2447): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 141.071438][ T4846] 9p: Bad value for 'wfdno' [ 141.093710][ T28] audit: type=1400 audit(1781981428.349:2448): avc: denied { create } for pid=4845 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.128038][ T28] audit: type=1400 audit(1781981428.349:2449): avc: denied { mounton } for pid=4845 comm="syz.3.358" path="/72/file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 141.151251][ T28] audit: type=1400 audit(1781981428.399:2450): avc: denied { create } for pid=4845 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.174987][ T4841] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.353: bg 0: block 169: padding at end of block bitmap is not set [ 141.194281][ T28] audit: type=1400 audit(1781981428.479:2451): avc: denied { connect } for pid=4845 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.243115][ T28] audit: type=1400 audit(1781981428.479:2452): avc: denied { read write } for pid=4848 comm="syz.1.360" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.273798][ T4853] loop1: detected capacity change from 0 to 256 [ 141.294868][ T4841] loop2: lost filesystem error report for type 5 error -117 [ 141.297068][ T4841] Quota error (device loop2): write_blk: dquota write failed [ 141.298381][ T28] audit: type=1400 audit(1781981428.479:2453): avc: denied { open } for pid=4848 comm="syz.1.360" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.304469][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 141.311906][ T28] audit: type=1400 audit(1781981428.509:2454): avc: denied { create } for pid=4851 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.335550][ C1] EXT4-fs (loop2): initial error at time 1781981428: ext4_validate_block_bitmap:441 [ 141.335590][ C1] EXT4-fs (loop2): last error at time 1781981428: ext4_validate_block_bitmap:441 [ 141.411147][ T4841] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 141.427312][ T4855] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.361: inode has both inline data and extents flags [ 141.453198][ T4855] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.454691][ T4855] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.361: couldn't read orphan inode 15 (err -117) [ 141.463915][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 141.463940][ C1] EXT4-fs (loop0): initial error at time 1781981428: ext4_orphan_get:1399: inode 15 [ 141.463977][ C1] EXT4-fs (loop0): last error at time 1781981428: ext4_orphan_get:1399: inode 15 [ 141.482606][ T4841] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.353: Failed to acquire dquot type 0 [ 141.512475][ T4841] loop2: lost filesystem error report for type 5 error -117 [ 141.513529][ T4841] EXT4-fs (loop2): 1 truncate cleaned up [ 141.514192][ T4855] loop0: lost filesystem error report for type 5 error -117 [ 141.521816][ T4841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.533299][ T405] kworker/u8:6: attempt to access beyond end of device [ 141.533299][ T405] loop4: rw=1, sector=10960, nr_sectors = 5504 limit=512 [ 141.563172][ T4855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.568978][ T4841] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.785434][ T4855] netlink: 'syz.0.361': attribute type 14 has an invalid length. [ 141.794343][ T4855] __nla_validate_parse: 1 callbacks suppressed [ 141.794507][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 141.847126][ T4863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.855968][ T4863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.070519][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.611853][ T4877] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.657704][ T4875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.762275][ T4877] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.819992][ T4875] EXT4-fs (loop3): shut down requested (0) [ 142.946639][ T4880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.013150][ T4880] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.043289][ T4885] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 143.224829][ T4885] FAT-fs (loop4): Filesystem has been set read-only [ 143.263682][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.408053][ T4877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 143.424513][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.523960][ T4877] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 143.858988][ T4888] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.959960][ T4888] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.165769][ T4896] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 144.182328][ T4896] FAT-fs (loop4): Filesystem has been set read-only [ 144.231821][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'. [ 144.276266][ T4896] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 145.244427][ T4898] ipvlan2: entered promiscuous mode [ 145.249852][ T4898] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 145.262556][ T4898] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 145.273266][ T4898] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 146.318724][ T4904] 9p: Bad value for 'wfdno' [ 146.371657][ T4909] set_capacity_and_notify: 5 callbacks suppressed [ 146.371686][ T4909] loop4: detected capacity change from 0 to 512 [ 146.423136][ T4909] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.378: inode has both inline data and extents flags [ 146.447988][ T4909] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.452549][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 146.468222][ C0] EXT4-fs (loop4): initial error at time 1781981433: ext4_orphan_get:1399: inode 15 [ 146.477686][ C0] EXT4-fs (loop4): last error at time 1781981433: ext4_orphan_get:1399: inode 15 [ 146.505502][ T4909] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.378: couldn't read orphan inode 15 (err -117) [ 146.517588][ T4909] loop4: lost filesystem error report for type 5 error -117 [ 146.518291][ T4909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.606999][ T4913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.615724][ T4913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.864489][ T4915] netlink: 'syz.4.378': attribute type 13 has an invalid length. [ 146.969929][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 147.131058][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.484512][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 147.484606][ T28] audit: type=1400 audit(1781981434.769:2465): avc: denied { ioctl } for pid=4923 comm="syz.3.382" path="socket:[9381]" dev="sockfs" ino=9381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.536344][ T4921] loop0: detected capacity change from 0 to 4096 [ 147.658000][ T4921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.674467][ T28] audit: type=1400 audit(1781981434.939:2466): avc: denied { create } for pid=4925 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.866942][ T28] audit: type=1400 audit(1781981435.029:2467): avc: denied { write } for pid=4918 comm="syz.0.381" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.109098][ T4927] process '' launched './file0' with NULL argv: empty string added [ 148.146655][ T28] audit: type=1400 audit(1781981435.039:2468): avc: denied { write } for pid=4918 comm="syz.0.381" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.380202][ T28] audit: type=1400 audit(1781981435.059:2469): avc: denied { create } for pid=4918 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.657845][ T28] audit: type=1400 audit(1781981435.119:2470): avc: denied { setcurrent } for pid=4918 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 148.692765][ T28] audit: type=1401 audit(1781981435.129:2472): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 148.709773][ T28] audit: type=1400 audit(1781981435.129:2471): avc: denied { name_bind } for pid=4925 comm="syz.4.380" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 148.764766][ T28] audit: type=1400 audit(1781981435.179:2473): avc: denied { read } for pid=4918 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.785877][ T28] audit: type=1400 audit(1781981435.279:2474): avc: denied { create } for pid=4932 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 148.927696][ T4926] loop4: detected capacity change from 0 to 764 [ 148.984268][ T4926] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 149.153421][ T4942] loop4: detected capacity change from 0 to 128 [ 149.182803][ T4942] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.218852][ T4942] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.371262][ T4943] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 149.392584][ T4943] FAT-fs (loop4): Filesystem has been set read-only [ 149.402819][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 149.416470][ T4943] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 149.441571][ T4943] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 150.397347][ T4952] FAULT_INJECTION: forcing a failure. [ 150.397347][ T4952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.479676][ T4952] CPU: 0 UID: 0 PID: 4952 Comm: syz.1.389 Not tainted syzkaller #0 PREEMPT(lazy) [ 150.479715][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.479732][ T4952] Call Trace: [ 150.479806][ T4952] [ 150.479815][ T4952] __dump_stack+0x1d/0x30 [ 150.479844][ T4952] dump_stack_lvl+0x95/0xd0 [ 150.479870][ T4952] dump_stack+0x15/0x1b [ 150.479889][ T4952] should_fail_ex+0x25e/0x270 [ 150.479916][ T4952] should_fail+0xb/0x20 [ 150.480020][ T4952] should_fail_usercopy+0x1a/0x20 [ 150.480104][ T4952] _copy_to_user+0x20/0xa0 [ 150.480198][ T4952] simple_read_from_buffer+0xb5/0x130 [ 150.480231][ T4952] proc_fail_nth_read+0x10e/0x150 [ 150.480259][ T4952] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.480285][ T4952] vfs_read+0x18e/0x7c0 [ 150.480326][ T4952] ? __rcu_read_unlock+0x4e/0x70 [ 150.480433][ T4952] ? __fget_files+0x184/0x1c0 [ 150.480472][ T4952] ? mutex_lock+0x57/0x90 [ 150.480561][ T4952] ksys_read+0xdc/0x1a0 [ 150.480599][ T4952] __x64_sys_read+0x40/0x50 [ 150.480660][ T4952] x64_sys_call+0x2886/0x3020 [ 150.480690][ T4952] do_syscall_64+0x136/0x3c0 [ 150.480720][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.480824][ T4952] RIP: 0033:0x7f450f74d68e [ 150.480845][ T4952] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.480905][ T4952] RSP: 002b:00007f450e1defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.480932][ T4952] RAX: ffffffffffffffda RBX: 00007f450e1df6c0 RCX: 00007f450f74d68e [ 150.480950][ T4952] RDX: 000000000000000f RSI: 00007f450e1df0a0 RDI: 0000000000000004 [ 150.480968][ T4952] RBP: 00007f450e1df090 R08: 0000000000000000 R09: 0000000000000000 [ 150.480985][ T4952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.481002][ T4952] R13: 00007f450fa06038 R14: 00007f450fa05fa0 R15: 00007fff38780168 [ 150.481040][ T4952] [ 150.737668][ T4956] 9p: Bad value for 'wfdno' [ 150.764911][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.820286][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.873675][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 150.892748][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 150.989105][ T4977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4977 comm=syz.0.394 [ 151.036197][ T4976] bond0: entered promiscuous mode [ 151.039726][ T4981] loop4: detected capacity change from 0 to 128 [ 151.057662][ T4976] bond_slave_0: entered promiscuous mode [ 151.070769][ T4981] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.088587][ T4976] bond_slave_1: entered promiscuous mode [ 151.103442][ T4976] batadv0: entered promiscuous mode [ 151.120955][ T4981] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.226550][ T4988] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 151.235441][ T4988] FAT-fs (loop4): Filesystem has been set read-only [ 151.250451][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 151.308767][ T4986] loop2: detected capacity change from 0 to 128 [ 151.468375][ T4992] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 151.693051][ T4994] 9p: Bad value for 'wfdno' [ 152.043741][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 152.104343][ T5008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.408'. [ 152.156865][ T5013] loop2: detected capacity change from 0 to 128 [ 152.164126][ T5013] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.191144][ T5015] loop4: detected capacity change from 0 to 512 [ 152.201599][ T5013] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.212381][ T5015] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 152.270605][ T5016] 9p: Bad value for 'rfdno' [ 152.278809][ T5016] Invalid argument reading file caps for ./file0 [ 152.299380][ T5016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.410'. [ 152.364671][ T5013] FAT-fs (loop2): error, invalid access to FAT (entry 0x09000000) [ 152.400115][ T5013] FAT-fs (loop2): Filesystem has been set read-only [ 152.416465][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 152.473896][ T5013] FAT-fs (loop2): error, invalid access to FAT (entry 0x09000000) [ 152.503918][ T5024] 9p: Bad value for 'wfdno' [ 152.660627][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 152.660645][ T28] audit: type=1400 audit(1781981439.939:2506): avc: denied { mmap_zero } for pid=5028 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 152.692416][ T28] audit: type=1400 audit(1781981439.969:2507): avc: denied { mount } for pid=5028 comm="syz.3.415" name="/" dev="autofs" ino=9560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 152.785432][ T28] audit: type=1400 audit(1781981440.069:2508): avc: denied { read write } for pid=5028 comm="syz.3.415" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 152.824596][ T28] audit: type=1400 audit(1781981440.069:2509): avc: denied { open } for pid=5028 comm="syz.3.415" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 153.249114][ T5041] loop4: detected capacity change from 0 to 1024 [ 153.306665][ T5041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.409984][ T5041] EXT4-fs (loop4): shut down requested (0) [ 153.427804][ T28] audit: type=1400 audit(1781981440.689:2510): avc: denied { write } for pid=5039 comm="syz.4.419" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.475679][ T5049] loop0: detected capacity change from 0 to 128 [ 153.625547][ T5048] syz.0.421: attempt to access beyond end of device [ 153.625547][ T5048] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 153.681805][ T28] audit: type=1400 audit(1781981440.909:2511): avc: denied { cpu } for pid=5048 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 153.719610][ T28] audit: type=1400 audit(1781981440.999:2512): avc: denied { create } for pid=5052 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.750426][ T28] audit: type=1400 audit(1781981441.029:2513): avc: denied { read } for pid=5052 comm="syz.3.422" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.771135][ T28] audit: type=1400 audit(1781981441.029:2514): avc: denied { bind } for pid=5052 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.988393][ T5059] 9p: Bad value for 'wfdno' [ 154.018963][ T5060] loop2: detected capacity change from 0 to 1024 [ 154.026562][ T5060] EXT4-fs: Ignoring removed nobh option [ 154.032352][ T5060] EXT4-fs: Ignoring removed i_version option [ 154.056411][ T5060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.091248][ T28] audit: type=1400 audit(1781981441.349:2515): avc: denied { write } for pid=5054 comm="syz.2.423" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.829266][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.922287][ T5065] loop3: detected capacity change from 0 to 512 [ 155.104732][ T5069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.427'. [ 156.206546][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.730933][ T5083] 9p: Bad value for 'wfdno' [ 156.736238][ T5084] loop3: detected capacity change from 0 to 128 [ 156.759367][ T5084] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.035594][ T5084] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.259133][ T5084] FAT-fs (loop3): error, invalid access to FAT (entry 0x09000000) [ 157.288137][ T5084] FAT-fs (loop3): Filesystem has been set read-only [ 157.321035][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 157.358486][ T5084] FAT-fs (loop3): error, invalid access to FAT (entry 0x09000000) [ 157.621378][ T5084] FAT-fs (loop3): error, invalid access to FAT (entry 0x09000000) [ 157.678338][ T5097] loop2: detected capacity change from 0 to 1024 [ 157.715226][ T5101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'. [ 157.806917][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 157.806990][ T28] audit: type=1400 audit(1781981445.069:2523): avc: denied { watch watch_reads } for pid=5102 comm="syz.1.437" path="/95/file0" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 157.858350][ T5104] loop0: detected capacity change from 0 to 256 [ 157.941346][ T28] audit: type=1400 audit(1781981445.149:2524): avc: denied { setopt } for pid=5102 comm="syz.1.437" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.975196][ T5106] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 157.988725][ T5097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.995103][ T5106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 158.039367][ T5109] 9p: Bad value for 'wfdno' [ 158.051984][ T5097] EXT4-fs (loop2): shut down requested (0) [ 158.058396][ T28] audit: type=1400 audit(1781981445.329:2525): avc: denied { write } for pid=5096 comm="syz.2.435" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.114226][ T28] audit: type=1400 audit(1781981445.389:2526): avc: denied { bind } for pid=5100 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.169997][ T28] audit: type=1400 audit(1781981445.429:2527): avc: denied { listen } for pid=5100 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.198105][ T5101] netlink: 68 bytes leftover after parsing attributes in process `syz.0.436'. [ 158.200334][ T5106] loop1: detected capacity change from 0 to 1024 [ 158.225152][ T28] audit: type=1400 audit(1781981445.439:2528): avc: denied { bind } for pid=5100 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.230276][ T5106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.281585][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 158.337806][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.392183][ T5106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.409934][ T5106] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.630794][ T28] audit: type=1400 audit(1781981445.849:2529): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 159.820702][ T28] audit: type=1400 audit(1781981445.869:2530): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.848779][ T5107] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 159.960500][ T5119] netlink: 27 bytes leftover after parsing attributes in process `syz.2.439'. [ 159.985664][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.010378][ T28] audit: type=1400 audit(1781981445.869:2531): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.054968][ T28] audit: type=1400 audit(1781981445.869:2532): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.112754][ T5136] loop2: detected capacity change from 0 to 512 [ 160.128044][ T5136] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.201730][ T5136] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.446: bad orphan inode 131083 [ 160.230028][ T5136] loop2: lost filesystem error report for type 5 error -117 [ 160.230751][ T5136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.617474][ T5147] 9p: Bad value for 'wfdno' [ 160.628547][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.696716][ T5151] netlink: 56 bytes leftover after parsing attributes in process `syz.1.451'. [ 160.744214][ T5154] loop2: detected capacity change from 0 to 1024 [ 160.767104][ T5154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.776971][ T5151] loop1: detected capacity change from 0 to 512 [ 160.790187][ T5151] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.806573][ T5154] EXT4-fs (loop2): shut down requested (0) [ 160.839341][ T5151] EXT4-fs (loop1): 1 truncate cleaned up [ 160.867296][ T5151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.955731][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.006548][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.415962][ T5175] netlink: 48 bytes leftover after parsing attributes in process `syz.2.456'. [ 161.429957][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.505340][ T5181] netlink: 68 bytes leftover after parsing attributes in process `syz.0.461'. [ 161.533461][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.584771][ T5190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'. [ 161.615542][ T5194] loop2: detected capacity change from 0 to 512 [ 161.638003][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.650662][ T5194] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.464: Failed to acquire dquot type 1 [ 161.664159][ T5194] loop2: lost filesystem error report for type 5 error -117 [ 161.666864][ T5194] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.464: bg 0: block 495: padding at end of block bitmap is not set [ 161.674338][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 161.674361][ C1] EXT4-fs (loop2): initial error at time 1781981448: ext4_acquire_dquot:7041 [ 161.674395][ C1] EXT4-fs (loop2): last error at time 1781981448: ext4_acquire_dquot:7041 [ 161.713636][ T5194] loop2: lost filesystem error report for type 5 error -117 [ 161.714566][ T5200] loop0: detected capacity change from 0 to 512 [ 161.722949][ T5194] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 161.739285][ T5200] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 161.749474][ T5194] loop2: lost filesystem error report for type 5 error -117 [ 161.753061][ T5194] EXT4-fs (loop2): 1 truncate cleaned up [ 161.769275][ T5200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 161.769665][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.790883][ T5200] System zones: 1-12 [ 161.796015][ T5194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.809262][ T5194] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.819770][ T5200] EXT4-fs (loop0): 1 truncate cleaned up [ 161.826079][ T5200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.904271][ T30] bridge_slave_1: left allmulticast mode [ 161.912403][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.914721][ T30] bridge_slave_1: left promiscuous mode [ 161.927258][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.952365][ T30] bridge_slave_0: left allmulticast mode [ 161.968820][ T30] bridge_slave_0: left promiscuous mode [ 161.991158][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.161694][ T5220] loop4: detected capacity change from 0 to 1024 [ 162.169133][ T5220] EXT4-fs: Ignoring removed bh option [ 162.252887][ T5220] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 162.600750][ T5220] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 162.634622][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.647747][ T5220] EXT4-fs error (device loop4): ext4_get_journal_inode:5900: inode #32: comm syz.4.467: iget: special inode unallocated [ 162.683047][ T5220] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 162.683862][ T5220] EXT4-fs (loop4): no journal found [ 162.693144][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 162.693171][ C1] EXT4-fs (loop4): initial error at time 1781981449: ext4_get_journal_inode:5900: inode 32 [ 162.693216][ C1] EXT4-fs (loop4): last error at time 1781981449: ext4_get_journal_inode:5900: inode 32 [ 162.814340][ T28] kauditd_printk_skb: 198 callbacks suppressed [ 162.814373][ T28] audit: type=1400 audit(1781981450.089:2729): avc: denied { write } for pid=5221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.912362][ T28] audit: type=1400 audit(1781981450.089:2730): avc: denied { add_name } for pid=5221 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.943030][ T28] audit: type=1400 audit(1781981450.089:2731): avc: denied { create } for pid=5221 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.965717][ T28] audit: type=1400 audit(1781981450.089:2732): avc: denied { write } for pid=5221 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3900 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.993860][ T28] audit: type=1400 audit(1781981450.089:2733): avc: denied { append } for pid=5221 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3900 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.018425][ T28] audit: type=1400 audit(1781981450.179:2734): avc: denied { write } for pid=5235 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.040701][ T28] audit: type=1400 audit(1781981450.179:2735): avc: denied { remove_name } for pid=5235 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3900 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.064431][ T28] audit: type=1400 audit(1781981450.179:2736): avc: denied { unlink } for pid=5235 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3900 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.108072][ T30] hsr_slave_0: left promiscuous mode [ 163.144641][ T28] audit: type=1400 audit(1781981450.429:2737): avc: denied { create } for pid=5239 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.166000][ T5238] loop2: detected capacity change from 0 to 512 [ 163.177638][ T5240] 9p: Bad value for 'wfdno' [ 163.191964][ T30] hsr_slave_1: left promiscuous mode [ 163.231669][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.247558][ T5238] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.471: inode has both inline data and extents flags [ 163.277433][ T28] audit: type=1400 audit(1781981450.459:2738): avc: denied { mounton } for pid=5239 comm="syz.0.470" path="/89/file0" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 163.300783][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.309917][ T5238] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.310087][ T5238] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.471: couldn't read orphan inode 15 (err -117) [ 163.319299][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 163.319335][ C1] EXT4-fs (loop2): initial error at time 1781981450: ext4_orphan_get:1399: inode 15 [ 163.319376][ C1] EXT4-fs (loop2): last error at time 1781981450: ext4_orphan_get:1399: inode 15 [ 163.358471][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.366115][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.373767][ T5238] loop2: lost filesystem error report for type 5 error -117 [ 163.377660][ T5238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.398085][ T30] veth1_macvtap: left promiscuous mode [ 163.403957][ T30] veth0_macvtap: left promiscuous mode [ 163.409744][ T30] veth1_vlan: left promiscuous mode [ 163.415392][ T30] veth0_vlan: left promiscuous mode [ 163.530720][ T5248] netlink: 'syz.2.471': attribute type 13 has an invalid length. [ 163.547475][ T30] team0 (unregistering): Port device team_slave_1 removed [ 163.567558][ T30] team0 (unregistering): Port device team_slave_0 removed [ 163.576441][ T5248] __nla_validate_parse: 2 callbacks suppressed [ 163.576457][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 163.648195][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 163.661728][ T5248] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 163.789057][ T5250] batman_adv: batadv0: Adding interface: dummy0 [ 163.801610][ T5250] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.830463][ T5250] batman_adv: batadv0: Interface activated: dummy0 [ 163.843228][ T5254] batadv0: mtu less than device minimum [ 163.849624][ T5254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.860650][ T5254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.871778][ T5254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.882710][ T5254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.893660][ T5254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.904633][ T5254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.915617][ T5254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.926777][ T5254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.937926][ T5254] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.295774][ T5268] loop0: detected capacity change from 0 to 256 [ 164.330548][ T5268] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.490689][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.572328][ T5264] batman_adv: batadv0: Interface deactivated: dummy0 [ 164.694452][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.793858][ T5275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 164.824300][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.981769][ T5182] bridge_slave_0: entered allmulticast mode [ 164.989030][ T5182] bridge_slave_0: entered promiscuous mode [ 165.004109][ T30] IPVS: stop unused estimator thread 0... [ 165.010620][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.018100][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.025658][ T5182] bridge_slave_1: entered allmulticast mode [ 165.033171][ T5182] bridge_slave_1: entered promiscuous mode [ 165.061296][ T5182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.073545][ T5182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.103371][ T5182] team0: Port device team_slave_0 added [ 165.110379][ T5182] team0: Port device team_slave_1 added [ 165.181807][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.201174][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.260438][ T5182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.292855][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 165.311551][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.326680][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.727219][ T5182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.150378][ T5182] hsr_slave_0: entered promiscuous mode [ 166.157443][ T5182] hsr_slave_1: entered promiscuous mode [ 166.353736][ T5301] netlink: 64 bytes leftover after parsing attributes in process `syz.0.482'. [ 166.395475][ T5308] 9p: Bad value for 'wfdno' [ 166.554483][ T5182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.564758][ T5182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.583322][ T5182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.035749][ T5182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.066883][ T5330] loop0: detected capacity change from 0 to 128 [ 167.089808][ T5182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.175363][ T5330] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.198698][ T5182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.223962][ T5182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.235261][ T5330] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.303069][ T5182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.329422][ T5328] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.487: No space for directory leaf checksum. Please run e2fsck -D. [ 167.374323][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 167.404163][ T5328] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.487: Directory block failed checksum [ 167.469973][ T5330] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.487: No space for directory leaf checksum. Please run e2fsck -D. [ 167.659219][ T5330] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.487: checksumming directory block 0 [ 167.677173][ T5182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.734619][ T5182] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.778136][ T405] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.785302][ T405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.798837][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.816534][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.823681][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.938045][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 167.938064][ T28] audit: type=1400 audit(1781981455.219:2838): avc: denied { write } for pid=5346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.047622][ T28] audit: type=1400 audit(1781981455.329:2839): avc: denied { write } for pid=5367 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.154685][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 168.263019][ T5370] loop3: detected capacity change from 0 to 512 [ 168.365043][ T5370] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.489: bg 0: block 169: padding at end of block bitmap is not set [ 168.402082][ T5182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.503291][ T5370] loop3: lost filesystem error report for type 5 error -117 [ 168.508986][ T5370] Quota error (device loop3): write_blk: dquota write failed [ 168.516491][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 168.516513][ C0] EXT4-fs (loop3): initial error at time 1781981455: ext4_validate_block_bitmap:441 [ 168.516535][ C0] EXT4-fs (loop3): last error at time 1781981455: ext4_validate_block_bitmap:441 [ 168.575195][ T5391] loop0: detected capacity change from 0 to 1024 [ 168.606417][ T5370] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 168.624626][ T5391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.637128][ T5370] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.489: Failed to acquire dquot type 0 [ 168.649330][ T5370] loop3: lost filesystem error report for type 5 error -117 [ 168.651505][ T5391] EXT4-fs (loop0): shut down requested (0) [ 168.664879][ T28] audit: type=1400 audit(1781981455.929:2840): avc: denied { write } for pid=5390 comm="syz.0.491" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.701150][ T5370] EXT4-fs (loop3): 1 truncate cleaned up [ 168.713002][ T28] audit: type=1400 audit(1781981455.929:2841): avc: denied { read append open } for pid=5390 comm="syz.0.491" path=2F39342F66696C65302F66696C65302F233138202864656C6574656429 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 168.729436][ T5400] 9p: Bad value for 'wfdno' [ 168.741714][ T28] audit: type=1400 audit(1781981455.949:2842): avc: denied { read } for pid=2962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 168.766272][ T5370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.769747][ T28] audit: type=1400 audit(1781981455.949:2843): avc: denied { search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.802539][ T28] audit: type=1400 audit(1781981455.949:2844): avc: denied { append } for pid=2962 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 168.830964][ T28] audit: type=1400 audit(1781981455.949:2845): avc: denied { open } for pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 168.862348][ T5370] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.916049][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.928236][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 168.968982][ T5417] loop0: detected capacity change from 0 to 128 [ 168.988180][ T5417] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.028759][ T5182] veth0_vlan: entered promiscuous mode [ 169.039871][ T5417] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.049589][ T5182] veth1_vlan: entered promiscuous mode [ 169.087731][ T5182] veth0_macvtap: entered promiscuous mode [ 169.113684][ T5182] veth1_macvtap: entered promiscuous mode [ 169.146661][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.166526][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.200312][ T3549] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.213613][ T3549] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.235332][ T5417] FAT-fs (loop0): error, invalid access to FAT (entry 0x09000000) [ 169.243860][ T3549] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.261926][ T5417] FAT-fs (loop0): Filesystem has been set read-only [ 169.271122][ T3549] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.289276][ T5427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 169.331599][ T5417] FAT-fs (loop0): error, invalid access to FAT (entry 0x09000000) [ 169.440577][ T5432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=282 sclass=netlink_route_socket pid=5432 comm=syz.4.502 [ 169.476045][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 169.503932][ T5432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5432 comm=syz.4.502 [ 169.566703][ T5439] loop2: detected capacity change from 0 to 512 [ 169.644233][ T5442] xt_hashlimit: size too large, truncated to 1048576 [ 169.697883][ T5445] netlink: 36 bytes leftover after parsing attributes in process `syz.5.507'. [ 170.073984][ T5447] xt_hashlimit: size too large, truncated to 1048576 [ 170.840944][ T5459] loop4: detected capacity change from 0 to 128 [ 170.857858][ T5459] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.911367][ T5459] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.920461][ T5463] loop0: detected capacity change from 0 to 512 [ 170.932049][ T5463] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.512: inode has both inline data and extents flags [ 171.006180][ T5463] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.006467][ T5463] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.512: couldn't read orphan inode 15 (err -117) [ 171.015892][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 171.015924][ C1] EXT4-fs (loop0): initial error at time 1781981458: ext4_orphan_get:1399: inode 15 [ 171.015956][ C1] EXT4-fs (loop0): last error at time 1781981458: ext4_orphan_get:1399: inode 15 [ 171.118151][ T5459] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 171.126726][ T5459] FAT-fs (loop4): Filesystem has been set read-only [ 171.137752][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 171.144360][ T5463] loop0: lost filesystem error report for type 5 error -117 [ 171.167597][ T5469] loop2: detected capacity change from 0 to 164 [ 171.182117][ T5463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.201510][ T5459] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 171.217463][ T5469] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 171.227763][ T5469] FAULT_INJECTION: forcing a failure. [ 171.227763][ T5469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.241014][ T5469] CPU: 0 UID: 0 PID: 5469 Comm: syz.2.513 Not tainted syzkaller #0 PREEMPT(lazy) [ 171.241049][ T5469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.241063][ T5469] Call Trace: [ 171.241070][ T5469] [ 171.241118][ T5469] __dump_stack+0x1d/0x30 [ 171.241219][ T5469] dump_stack_lvl+0x95/0xd0 [ 171.241240][ T5469] dump_stack+0x15/0x1b [ 171.241259][ T5469] should_fail_ex+0x25e/0x270 [ 171.241398][ T5469] should_fail+0xb/0x20 [ 171.241430][ T5469] should_fail_usercopy+0x1a/0x20 [ 171.241537][ T5469] _copy_from_user+0x1c/0xb0 [ 171.241575][ T5469] restore_altstack+0x4b/0x300 [ 171.241641][ T5469] ? __set_current_blocked+0x284/0x2e0 [ 171.241760][ T5469] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 171.241863][ T5469] ? arch_do_signal_or_restart+0x2f3/0x480 [ 171.241944][ T5469] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 171.241970][ T5469] ? ksys_write+0x194/0x1a0 [ 171.242035][ T5469] ? __rcu_read_unlock+0x4e/0x70 [ 171.242132][ T5469] x64_sys_call+0x2823/0x3020 [ 171.242156][ T5469] do_syscall_64+0x136/0x3c0 [ 171.242183][ T5469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.242261][ T5469] RIP: 0033:0x7ff1000ee1d9 [ 171.242286][ T5469] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 171.242308][ T5469] RSP: 002b:00007ff0feba6a40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 171.242340][ T5469] RAX: ffffffffffffffda RBX: 00007ff0feba76c0 RCX: 00007ff1000ee1d9 [ 171.242357][ T5469] RDX: 00007ff0feba6a40 RSI: 00007ff0feba6b70 RDI: 0000000000000021 [ 171.242453][ T5469] RBP: 00007ff0feba7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.242466][ T5469] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 171.242575][ T5469] R13: 00007ff1003c6038 R14: 00007ff1003c5fa0 R15: 00007ffd7f5d2be8 [ 171.242603][ T5469] [ 171.483475][ T5470] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 171.581342][ T5466] loop5: detected capacity change from 0 to 4096 [ 171.614871][ T5473] netlink: 'syz.0.512': attribute type 12 has an invalid length. [ 171.649659][ T5473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 171.708082][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.913814][ T5485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.922560][ T5485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.108102][ T5494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=5494 comm=syz.0.521 [ 173.700600][ T5499] loop4: detected capacity change from 0 to 512 [ 173.826336][ T5499] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.523: inode has both inline data and extents flags [ 173.840179][ T5499] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 173.840506][ T5499] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.523: couldn't read orphan inode 15 (err -117) [ 173.849795][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 173.849813][ C0] EXT4-fs (loop4): initial error at time 1781984039: ext4_orphan_get:1399: inode 15 [ 173.849868][ C0] EXT4-fs (loop4): last error at time 1781984039: ext4_orphan_get:1399: inode 15 [ 174.080319][ T5499] loop4: lost filesystem error report for type 5 error -117 [ 174.128229][ T5499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.646323][ T5499] netlink: 'syz.4.523': attribute type 14 has an invalid length. [ 174.697308][ T5517] netlink: 72 bytes leftover after parsing attributes in process `syz.0.525'. [ 174.709943][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 174.790744][ T5499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.834337][ T5521] loop5: detected capacity change from 0 to 512 [ 174.867799][ T5521] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.527: inode has both inline data and extents flags [ 174.887652][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.897270][ T5521] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.899989][ T5521] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.527: couldn't read orphan inode 15 (err -117) [ 174.909288][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 174.909312][ C0] EXT4-fs (loop5): initial error at time 1781984040: ext4_orphan_get:1399: inode 15 [ 174.909361][ C0] EXT4-fs (loop5): last error at time 1781984040: ext4_orphan_get:1399: inode 15 [ 174.946785][ T5521] loop5: lost filesystem error report for type 5 error -117 [ 174.950297][ T5521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.198581][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 176.198597][ T28] audit: type=1400 audit(1781984041.479:2880): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 176.284999][ T5533] netlink: 'syz.5.527': attribute type 12 has an invalid length. [ 176.297541][ T5533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.527'. [ 176.386921][ T28] audit: type=1400 audit(1781984041.669:2881): avc: denied { read } for pid=5536 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.427907][ T5182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.440570][ T5540] netlink: 52 bytes leftover after parsing attributes in process `syz.0.531'. [ 176.464840][ T5539] netlink: 52 bytes leftover after parsing attributes in process `syz.0.531'. [ 176.474897][ T28] audit: type=1400 audit(1781984041.759:2882): avc: denied { remount } for pid=5538 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.506926][ T5542] netlink: 44 bytes leftover after parsing attributes in process `syz.5.532'. [ 176.516900][ T5542] netlink: 43 bytes leftover after parsing attributes in process `syz.5.532'. [ 176.528902][ T5542] netlink: 'syz.5.532': attribute type 6 has an invalid length. [ 176.536891][ T3505] IPVS: starting estimator thread 0... [ 176.542792][ T5542] netlink: 'syz.5.532': attribute type 5 has an invalid length. [ 176.571198][ T5542] netlink: 43 bytes leftover after parsing attributes in process `syz.5.532'. [ 176.611275][ T28] audit: type=1400 audit(1781984041.889:2883): avc: denied { create } for pid=5545 comm="syz.4.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.632745][ T5547] IPVS: using max 2256 ests per chain, 112800 per kthread [ 176.671764][ T28] audit: type=1400 audit(1781984041.889:2884): avc: denied { setopt } for pid=5545 comm="syz.4.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.713845][ T28] audit: type=1400 audit(1781984041.889:2885): avc: denied { read } for pid=5543 comm="syz.2.533" dev="nsfs" ino=4026532748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 176.762113][ T28] audit: type=1400 audit(1781984041.889:2886): avc: denied { open } for pid=5543 comm="syz.2.533" path="net:[4026532748]" dev="nsfs" ino=4026532748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 176.801381][ T28] audit: type=1400 audit(1781984041.889:2887): avc: denied { create } for pid=5543 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.822916][ T28] audit: type=1400 audit(1781984041.889:2888): avc: denied { bpf } for pid=5545 comm="syz.4.534" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.844065][ T28] audit: type=1400 audit(1781984041.889:2889): avc: denied { setopt } for pid=5543 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.868915][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.705516][ T5566] loop2: detected capacity change from 0 to 512 [ 177.713017][ T5567] loop3: detected capacity change from 0 to 512 [ 178.394141][ T5559] loop5: detected capacity change from 0 to 512 [ 178.404016][ T5559] EXT4-fs: dax option not supported [ 178.516499][ T5572] loop5: detected capacity change from 0 to 512 [ 178.523112][ T5572] msdos: Unknown parameter 'uif' [ 178.591909][ T5567] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.538: inode has both inline data and extents flags [ 178.608644][ T5566] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.540: inode has both inline data and extents flags [ 178.667244][ T5567] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.667405][ T5567] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.538: couldn't read orphan inode 15 (err -117) [ 178.676890][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 178.676912][ C1] EXT4-fs (loop3): initial error at time 1781984043: ext4_orphan_get:1399: inode 15 [ 178.676937][ C1] EXT4-fs (loop3): last error at time 1781984043: ext4_orphan_get:1399: inode 15 [ 178.719323][ T5566] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.721647][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 178.737285][ C0] EXT4-fs (loop2): initial error at time 1781984044: ext4_orphan_get:1399: inode 15 [ 178.746727][ C0] EXT4-fs (loop2): last error at time 1781984044: ext4_orphan_get:1399: inode 15 [ 178.758632][ T5567] loop3: lost filesystem error report for type 5 error -117 [ 178.768416][ T5566] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.540: couldn't read orphan inode 15 (err -117) [ 178.787858][ T5566] loop2: lost filesystem error report for type 5 error -117 [ 178.788853][ T5567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.809697][ T5566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.856756][ T5578] loop5: detected capacity change from 0 to 512 [ 178.930981][ T5578] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.542: inode has both inline data and extents flags [ 178.969614][ T5578] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.971156][ T5578] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.542: couldn't read orphan inode 15 (err -117) [ 178.980408][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 178.980443][ C0] EXT4-fs (loop5): initial error at time 1781984044: ext4_orphan_get:1399: inode 15 [ 178.980497][ C0] EXT4-fs (loop5): last error at time 1781984044: ext4_orphan_get:1399: inode 15 [ 179.018468][ T5578] loop5: lost filesystem error report for type 5 error -117 [ 179.273562][ T5591] netlink: 'syz.3.538': attribute type 14 has an invalid length. [ 179.310958][ T5566] netlink: 'syz.2.540': attribute type 14 has an invalid length. [ 179.367529][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 179.446542][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 179.535727][ T5566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.591247][ T5578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.609183][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.649069][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.811277][ T5609] netlink: 'syz.5.542': attribute type 12 has an invalid length. [ 179.830356][ T5609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'. [ 180.325660][ T5623] loop0: detected capacity change from 0 to 512 [ 180.363537][ T5623] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.544: inode has both inline data and extents flags [ 180.383613][ T5182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.398017][ T5623] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.398283][ T5623] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.544: couldn't read orphan inode 15 (err -117) [ 180.407518][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 180.407543][ C0] EXT4-fs (loop0): initial error at time 1781984045: ext4_orphan_get:1399: inode 15 [ 180.407579][ C0] EXT4-fs (loop0): last error at time 1781984045: ext4_orphan_get:1399: inode 15 [ 180.445380][ T5623] loop0: lost filesystem error report for type 5 error -117 [ 180.446150][ T5623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.531135][ T5623] netlink: 'syz.0.544': attribute type 13 has an invalid length. [ 180.540715][ T5623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 180.550591][ T5623] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 180.604630][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.932894][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 181.932970][ T28] audit: type=1400 audit(1781984046.400:2990): avc: denied { write } for pid=5664 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 182.145863][ T5682] loop5: detected capacity change from 0 to 512 [ 182.488596][ T5684] loop2: detected capacity change from 0 to 256 [ 182.537193][ T5684] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.876278][ T5682] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.557: bg 0: block 169: padding at end of block bitmap is not set [ 182.899941][ T5682] loop5: lost filesystem error report for type 5 error -117 [ 182.900914][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 182.901712][ T28] audit: type=1400 audit(1781984046.410:2991): avc: denied { create } for pid=5664 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.908249][ C0] EXT4-fs (loop5): initial error at time 1781984048: ext4_validate_block_bitmap:441 [ 182.908300][ C0] EXT4-fs (loop5): last error at time 1781984048: ext4_validate_block_bitmap:441 [ 182.970446][ T5682] Quota error (device loop5): write_blk: dquota write failed [ 182.978933][ T5682] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 182.990458][ T5682] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.557: Failed to acquire dquot type 0 [ 183.002867][ T5682] loop5: lost filesystem error report for type 5 error -117 [ 183.023307][ T5682] EXT4-fs (loop5): 1 truncate cleaned up [ 183.038132][ T5682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.056515][ T5682] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.111746][ T28] audit: type=1400 audit(1781984046.420:2992): avc: denied { write } for pid=5664 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.248226][ T28] audit: type=1400 audit(1781984046.430:2993): avc: denied { read } for pid=5664 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.350071][ T28] audit: type=1400 audit(1781984046.440:2994): avc: denied { setopt } for pid=5664 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.441415][ T5681] FAULT_INJECTION: forcing a failure. [ 183.441415][ T5681] name failslab, interval 1, probability 0, space 0, times 0 [ 183.460183][ T28] audit: type=1400 audit(1781984046.440:2995): avc: denied { bind } for pid=5664 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.514719][ T5681] CPU: 1 UID: 0 PID: 5681 Comm: syz.0.561 Not tainted syzkaller #0 PREEMPT(lazy) [ 183.514808][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.514824][ T5681] Call Trace: [ 183.514833][ T5681] [ 183.514844][ T5681] __dump_stack+0x1d/0x30 [ 183.514875][ T5681] dump_stack_lvl+0x95/0xd0 [ 183.514917][ T5681] dump_stack+0x15/0x1b [ 183.515016][ T5681] should_fail_ex+0x25e/0x270 [ 183.515044][ T5681] should_failslab+0x8c/0xb0 [ 183.515135][ T5681] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 183.515161][ T5681] ? __d_alloc+0x34/0x320 [ 183.515195][ T5681] __d_alloc+0x34/0x320 [ 183.515223][ T5681] d_alloc_parallel+0x4f/0xcd0 [ 183.515302][ T5681] ? __rcu_read_unlock+0x4e/0x70 [ 183.515362][ T5681] ? __d_lookup+0x30c/0x340 [ 183.515492][ T5681] ? lookup_noperm_common+0x1c2/0x2a0 [ 183.515529][ T5681] ? d_lookup+0xb2/0xd0 [ 183.515568][ T5681] proc_fill_cache+0x146/0x220 [ 183.515641][ T5681] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 183.515668][ T5681] proc_map_files_readdir+0x50e/0x680 [ 183.515704][ T5681] iterate_dir+0x109/0x2f0 [ 183.515729][ T5681] __se_sys_getdents+0xd2/0x220 [ 183.515820][ T5681] ? __pfx_filldir+0x10/0x10 [ 183.515849][ T5681] __x64_sys_getdents+0x43/0x50 [ 183.515873][ T5681] x64_sys_call+0xea8/0x3020 [ 183.515980][ T5681] do_syscall_64+0x136/0x3c0 [ 183.516008][ T5681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.516081][ T5681] RIP: 0033:0x7f0f258bce59 [ 183.516098][ T5681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.516118][ T5681] RSP: 002b:00007f0f2430f028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 183.516150][ T5681] RAX: ffffffffffffffda RBX: 00007f0f25b35fa0 RCX: 00007f0f258bce59 [ 183.516169][ T5681] RDX: 000000000000100a RSI: 0000200000000dc0 RDI: 0000000000000004 [ 183.516184][ T5681] RBP: 00007f0f2430f090 R08: 0000000000000000 R09: 0000000000000000 [ 183.516197][ T5681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.516209][ T5681] R13: 00007f0f25b36038 R14: 00007f0f25b35fa0 R15: 00007ffe8bd874a8 [ 183.516229][ T5681] [ 183.747290][ T28] audit: type=1400 audit(1781984046.440:2996): avc: denied { name_bind } for pid=5664 comm="syz.5.557" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 183.812941][ T28] audit: type=1400 audit(1781984046.440:2997): avc: denied { node_bind } for pid=5664 comm="syz.5.557" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 184.197954][ T5182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.324802][ T5716] netdevsim netdevsim5: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 184.346818][ T5711] loop2: detected capacity change from 0 to 164 [ 184.362970][ T5716] netlink: 10 bytes leftover after parsing attributes in process `syz.5.565'. [ 184.399276][ T3505] IPVS: starting estimator thread 0... [ 184.413481][ T5711] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 184.490810][ T5720] IPVS: using max 1728 ests per chain, 86400 per kthread [ 184.610660][ T5704] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20002 [ 184.710897][ T5733] syzkaller0: entered promiscuous mode [ 184.726092][ T5733] syzkaller0: entered allmulticast mode [ 185.086486][ T5743] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 185.086486][ T5743] program syz.0.571 not setting count and/or reply_len properly [ 185.138124][ T5738] loop4: detected capacity change from 0 to 1024 [ 185.212507][ T5747] loop0: detected capacity change from 0 to 512 [ 185.215981][ T5738] EXT4-fs: Ignoring removed orlov option [ 185.239261][ T5747] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.573: inode has both inline data and extents flags [ 185.257771][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.263470][ T5747] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.264997][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.280526][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 185.287728][ C0] EXT4-fs (loop0): initial error at time 1781984050: ext4_orphan_get:1399: inode 15 [ 185.291040][ T5747] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.573: couldn't read orphan inode 15 (err -117) [ 185.297249][ C0] EXT4-fs (loop0): last error at time 1781984050: ext4_orphan_get:1399: inode 15 [ 185.417397][ T5747] loop0: lost filesystem error report for type 5 error -117 [ 185.423907][ T5747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.482970][ T5738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.593142][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.614647][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.701262][ T5757] netlink: 'syz.0.573': attribute type 12 has an invalid length. [ 185.761367][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 185.771096][ T5760] netlink: 'syz.4.569': attribute type 3 has an invalid length. [ 185.800522][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 185.927949][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.092610][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.272108][ T5778] loop2: detected capacity change from 0 to 512 [ 186.312607][ T5778] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.574: bg 0: block 169: padding at end of block bitmap is not set [ 186.326884][ T5778] loop2: lost filesystem error report for type 5 error -117 [ 186.327533][ T5778] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.574: Failed to acquire dquot type 0 [ 186.334933][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 186.334956][ C0] EXT4-fs (loop2): initial error at time 1781984051: ext4_validate_block_bitmap:441 [ 186.335015][ C0] EXT4-fs (loop2): last error at time 1781984051: ext4_validate_block_bitmap:441 [ 186.371383][ T5778] loop2: lost filesystem error report for type 5 error -117 [ 186.401795][ T5778] EXT4-fs (loop2): 1 truncate cleaned up [ 186.415326][ T5778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.427843][ T5778] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.956677][ T28] kauditd_printk_skb: 221 callbacks suppressed [ 186.956699][ T28] audit: type=1400 audit(1781984052.241:3217): avc: denied { write } for pid=5774 comm="syz.5.577" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.992843][ T28] audit: type=1400 audit(1781984052.251:3218): avc: denied { read } for pid=5788 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.042574][ T28] audit: type=1400 audit(1781984052.251:3219): avc: denied { open } for pid=5788 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.132885][ T5791] loop5: detected capacity change from 0 to 512 [ 187.135837][ T28] audit: type=1400 audit(1781984052.421:3220): avc: denied { create } for pid=5797 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.160749][ T5791] EXT4-fs: Ignoring removed bh option [ 187.203110][ T5791] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.577: corrupted xattr block 95: invalid header [ 187.239453][ T5791] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 187.239780][ T5791] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.577: bg 0: block 7: invalid block bitmap [ 187.249040][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 187.249078][ C0] EXT4-fs (loop5): initial error at time 1781984052: ext4_expand_extra_isize_ea:2810: inode 11 [ 187.249112][ C0] EXT4-fs (loop5): last error at time 1781984052: ext4_expand_extra_isize_ea:2810: inode 11 [ 187.289223][ T5791] loop5: lost filesystem error report for type 5 error -117 [ 187.289314][ T28] audit: type=1400 audit(1781984052.461:3221): avc: denied { write } for pid=5784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.319760][ T5791] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 187.328598][ T5791] loop5: lost filesystem error report for type 5 error -117 [ 187.328676][ T28] audit: type=1400 audit(1781984052.461:3222): avc: denied { add_name } for pid=5784 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.358768][ T5791] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.577: corrupted xattr block 95: invalid header [ 187.372241][ T5791] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 187.373867][ T5791] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 187.413298][ T5791] EXT4-fs (loop5): 1 orphan inode deleted [ 187.433396][ T5791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.462553][ T28] audit: type=1400 audit(1781984052.461:3223): avc: denied { create } for pid=5784 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.595485][ T28] audit: type=1400 audit(1781984052.461:3224): avc: denied { write } for pid=5784 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=4757 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.622050][ T28] audit: type=1400 audit(1781984052.461:3225): avc: denied { append } for pid=5784 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=4757 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.682538][ T28] audit: type=1400 audit(1781984052.701:3226): avc: denied { write } for pid=5803 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.765246][ T5816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.773940][ T5816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.945840][ T5815] loop4: detected capacity change from 0 to 512 [ 188.080664][ T5815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.254569][ T5815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.374384][ T5815] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.687581][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.363050][ T5822] netlink: 27 bytes leftover after parsing attributes in process `syz.4.583'. [ 189.663464][ T5826] loop4: detected capacity change from 0 to 512 [ 189.680511][ T5182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.710512][ T5828] loop5: detected capacity change from 0 to 128 [ 189.749091][ T5826] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.584: inode has both inline data and extents flags [ 189.869150][ T5826] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 189.869802][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 189.885504][ C1] EXT4-fs (loop4): initial error at time 1781984055: ext4_orphan_get:1399: inode 15 [ 189.894961][ C1] EXT4-fs (loop4): last error at time 1781984055: ext4_orphan_get:1399: inode 15 [ 189.922011][ T5826] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.584: couldn't read orphan inode 15 (err -117) [ 189.946534][ T5826] loop4: lost filesystem error report for type 5 error -117 [ 189.948237][ T5826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.122534][ T5832] netlink: 'syz.4.584': attribute type 13 has an invalid length. [ 190.168049][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 190.211645][ T5832] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 190.273918][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.628640][ T5845] loop4: detected capacity change from 0 to 256 [ 190.656526][ T5845] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.568870][ T5851] binfmt_misc: register: failed to install interpreter file ./bus [ 192.620711][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 192.620728][ T28] audit: type=1400 audit(1781984057.842:3329): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 192.735884][ T28] audit: type=1400 audit(1781984057.852:3330): avc: denied { create } for pid=5850 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.805494][ T28] audit: type=1400 audit(1781984057.882:3331): avc: denied { bind } for pid=5850 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.824963][ T28] audit: type=1400 audit(1781984057.882:3332): avc: denied { write } for pid=5850 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.844621][ T28] audit: type=1400 audit(1781984057.882:3333): avc: denied { create } for pid=5852 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.864469][ T28] audit: type=1400 audit(1781984057.882:3334): avc: denied { ioctl } for pid=5852 comm="syz.3.592" path="socket:[12951]" dev="sockfs" ino=12951 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.897674][ T28] audit: type=1400 audit(1781984057.892:3335): avc: denied { create } for pid=5852 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.922427][ T5855] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 192.933996][ T28] audit: type=1400 audit(1781984057.892:3336): avc: denied { ioctl } for pid=5852 comm="syz.3.592" path="socket:[12953]" dev="sockfs" ino=12953 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.964411][ T5869] loop5: detected capacity change from 0 to 128 [ 192.977322][ T5866] netlink: 27 bytes leftover after parsing attributes in process `syz.0.594'. [ 192.987923][ T28] audit: type=1400 audit(1781984057.892:3337): avc: denied { map_create } for pid=5852 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 192.994547][ T5869] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.029703][ T28] audit: type=1400 audit(1781984057.952:3338): avc: denied { write } for pid=5852 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.096488][ T5869] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.178874][ T5874] bridge0: port 3(gretap0) entered disabled state [ 193.237048][ T5882] FAT-fs (loop5): error, invalid access to FAT (entry 0x09000000) [ 193.247362][ T5877] netlink: 'syz.0.598': attribute type 10 has an invalid length. [ 193.263423][ T5882] FAT-fs (loop5): Filesystem has been set read-only [ 193.284447][ T5874] bridge0: port 4(team0) entered disabled state [ 193.290956][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.298215][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.310228][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.595'. [ 193.331914][ T5880] FAT-fs (loop5): error, invalid access to FAT (entry 0x09000000) [ 193.342050][ T5880] FAT-fs (loop5): error, invalid access to FAT (entry 0x09000000) [ 193.381725][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.393538][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.446330][ T5877] vxcan0: entered promiscuous mode [ 193.457570][ T5877] team0: Device vxcan0 is of different type [ 193.474007][ T68] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.483307][ T68] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.508243][ T68] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.536520][ T5886] loop0: detected capacity change from 0 to 512 [ 193.543316][ T68] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.593487][ T5886] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.600: inode has both inline data and extents flags [ 193.648118][ T5886] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.648449][ T5886] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.600: couldn't read orphan inode 15 (err -117) [ 193.657681][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 193.657704][ C1] EXT4-fs (loop0): initial error at time 1781984058: ext4_orphan_get:1399: inode 15 [ 193.657734][ C1] EXT4-fs (loop0): last error at time 1781984058: ext4_orphan_get:1399: inode 15 [ 193.718200][ T5886] loop0: lost filesystem error report for type 5 error -117 [ 193.730710][ T5886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.960201][ T5902] netlink: 'syz.0.600': attribute type 13 has an invalid length. [ 193.968727][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 194.032701][ T5904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.041471][ T5904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.434631][ T5902] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 194.548361][ T5907] loop3: detected capacity change from 0 to 512 [ 194.562502][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.645905][ T5907] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.759901][ T5907] EXT4-fs (loop3): 1 truncate cleaned up [ 194.788117][ T5907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.115966][ T3300] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 195.169995][ T3300] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 195.182356][ T3300] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 195.238444][ T5918] loop0: detected capacity change from 0 to 1024 [ 195.397001][ T5918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.806373][ T5918] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 195.813102][ T5918] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 195.985661][ T5918] vhci_hcd vhci_hcd.0: Device attached [ 196.052040][ T5929] vhci_hcd: connection closed [ 196.066512][ T36] vhci_hcd vhci_hcd.0: stop threads [ 196.111266][ T36] vhci_hcd vhci_hcd.0: release socket [ 196.116780][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 196.166990][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.206468][ T5936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.608'. [ 196.230956][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'. [ 196.370802][ T5939] netlink: 27 bytes leftover after parsing attributes in process `syz.2.609'. [ 196.391129][ T5908] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.450678][ T5942] loop2: detected capacity change from 0 to 128 [ 196.461873][ T5942] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.477288][ T5942] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.605169][ T5953] FAT-fs (loop2): error, invalid access to FAT (entry 0x09000000) [ 196.629020][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.635011][ T5953] FAT-fs (loop2): Filesystem has been set read-only [ 196.730456][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 196.773241][ T5953] FAT-fs (loop2): error, invalid access to FAT (entry 0x09000000) [ 196.806934][ T5953] FAT-fs (loop2): error, invalid access to FAT (entry 0x09000000) [ 196.873598][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.881033][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.935828][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.947538][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.000851][ T3417] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.012021][ T3417] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.098942][ T3417] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.108176][ T3417] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.375724][ T5978] loop2: detected capacity change from 0 to 256 [ 197.533595][ T68] team0: left allmulticast mode [ 197.539153][ T68] team_slave_0: left allmulticast mode [ 197.545954][ T5984] xt_hashlimit: size too large, truncated to 1048576 [ 197.564573][ T68] team_slave_1: left allmulticast mode [ 197.580926][ T68] team0: left promiscuous mode [ 197.587719][ T68] team_slave_0: left promiscuous mode [ 197.593728][ T68] team_slave_1: left promiscuous mode [ 197.599888][ T68] gretap1: left promiscuous mode [ 197.605110][ T68] bridge0: port 4(team0) entered disabled state [ 197.613695][ T68] gretap0: left allmulticast mode [ 197.622278][ T68] gretap0: left promiscuous mode [ 197.631998][ T68] bridge0: port 3(gretap0) entered disabled state [ 197.645792][ T68] bridge_slave_1: left allmulticast mode [ 197.651701][ T68] bridge_slave_1: left promiscuous mode [ 197.657437][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.666326][ T68] bridge_slave_0: left allmulticast mode [ 197.676317][ T68] bridge_slave_0: left promiscuous mode [ 197.700301][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.782149][ T68] team0: Port device gretap1 removed [ 197.858758][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.869349][ T28] kauditd_printk_skb: 279 callbacks suppressed [ 197.869368][ T28] audit: type=1400 audit(1781984063.133:3618): avc: denied { create } for pid=5989 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 197.899000][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.908490][ T68] bond0 (unregistering): Released all slaves [ 197.920024][ T68] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 197.943801][ T68] bond1 (unregistering): Released all slaves [ 197.963290][ T5986] IPVS: Error connecting to the multicast addr [ 198.000031][ T28] audit: type=1400 audit(1781984063.273:3619): avc: denied { create } for pid=5992 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.089482][ T28] audit: type=1400 audit(1781984063.303:3620): avc: denied { name_bind } for pid=5996 comm="syz.0.621" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 198.129918][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.139281][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.150199][ T28] audit: type=1400 audit(1781984063.303:3621): avc: denied { node_bind } for pid=5996 comm="syz.0.621" saddr=100.1.1.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 198.322208][ T28] audit: type=1400 audit(1781984063.363:3622): avc: denied { read write } for pid=5992 comm="syz.2.620" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 198.433213][ T6012] loop5: detected capacity change from 0 to 256 [ 199.319264][ T28] audit: type=1400 audit(1781984063.363:3623): avc: denied { open } for pid=5992 comm="syz.2.620" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 199.343285][ T28] audit: type=1400 audit(1781984063.663:3624): avc: denied { create } for pid=6004 comm="syz.5.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.509230][ T6013] loop0: detected capacity change from 0 to 256 [ 200.628837][ T6012] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.493197][ T28] audit: type=1400 audit(1781984066.444:3625): avc: denied { write } for pid=5997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.577433][ T6013] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.868537][ T68] team0 (unregistering): Port device team_slave_1 removed [ 201.873424][ T28] audit: type=1400 audit(1781984066.484:3626): avc: denied { write } for pid=6019 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.909827][ T68] team0 (unregistering): Port device team_slave_0 removed [ 202.042891][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 202.062262][ T28] audit: type=1400 audit(1781984067.344:3627): avc: denied { read write } for pid=6029 comm="syz.5.625" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 202.189464][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.211106][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.218883][ T5955] bridge_slave_0: entered allmulticast mode [ 202.225624][ T5955] bridge_slave_0: entered promiscuous mode [ 202.232970][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.240504][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.248026][ T5955] bridge_slave_1: entered allmulticast mode [ 202.254716][ T5955] bridge_slave_1: entered promiscuous mode [ 202.274199][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.301412][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.389104][ T6040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.398068][ T6040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.589837][ T5955] team0: Port device team_slave_0 added [ 202.819527][ T5955] team0: Port device team_slave_1 added [ 203.149632][ T6051] loop0: detected capacity change from 0 to 4096 [ 203.175609][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 203.175626][ T28] audit: type=1326 audit(1781984068.184:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.0.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f258bce59 code=0x7ffc0000 [ 203.230510][ T6051] EXT4-fs (loop0): Invalid log cluster size: 33554438 [ 203.447651][ T28] audit: type=1326 audit(1781984068.184:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.0.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f258bcbc2 code=0x7ffc0000 [ 203.787993][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.910515][ T28] audit: type=1326 audit(1781984068.184:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.0.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0f258bcc57 code=0x7ffc0000 [ 204.044045][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.076219][ T28] audit: type=1326 audit(1781984068.184:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.0.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0f25879b51 code=0x7ffc0000 [ 204.277250][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.417838][ T28] audit: type=1326 audit(1781984068.184:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.0.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0f258bdc49 code=0x7ffc0000 [ 204.489351][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.500669][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.533289][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.555768][ T28] audit: type=1326 audit(1781984068.184:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.0.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0f25879bbb code=0x7ffc0000 [ 204.615074][ T28] audit: type=1326 audit(1781984068.184:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.0.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f258bce59 code=0x7ffc0000 [ 204.928418][ T28] audit: type=1326 audit(1781984068.184:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.0.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f258bce59 code=0x7ffc0000 [ 205.008430][ T28] audit: type=1326 audit(1781984068.184:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.0.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0f258792ac code=0x7ffc0000 [ 205.073142][ T28] audit: type=1326 audit(1781984068.184:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.0.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0f2587930e code=0x7ffc0000 [ 205.353741][ T5955] hsr_slave_0: entered promiscuous mode [ 205.359920][ T5955] hsr_slave_1: entered promiscuous mode [ 205.365854][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 205.371827][ T5955] Cannot create hsr debugfs directory [ 205.499124][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 205.543577][ T6066] xt_hashlimit: size too large, truncated to 1048576 [ 205.624003][ T6073] FAULT_INJECTION: forcing a failure. [ 205.624003][ T6073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.690817][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: syz.2.633 Not tainted syzkaller #0 PREEMPT(lazy) [ 205.690876][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 205.690889][ T6073] Call Trace: [ 205.690895][ T6073] [ 205.690903][ T6073] __dump_stack+0x1d/0x30 [ 205.690932][ T6073] dump_stack_lvl+0x95/0xd0 [ 205.690956][ T6073] dump_stack+0x15/0x1b [ 205.690987][ T6073] should_fail_ex+0x25e/0x270 [ 205.691018][ T6073] should_fail+0xb/0x20 [ 205.691049][ T6073] should_fail_usercopy+0x1a/0x20 [ 205.691182][ T6073] _copy_from_user+0x1c/0xb0 [ 205.691216][ T6073] __se_sys_setitimer+0x5c/0x360 [ 205.691240][ T6073] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 205.691288][ T6073] __x64_sys_setitimer+0x43/0x50 [ 205.691338][ T6073] x64_sys_call+0x2dda/0x3020 [ 205.691370][ T6073] do_syscall_64+0x136/0x3c0 [ 205.691404][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.691433][ T6073] RIP: 0033:0x7ff10014ce59 [ 205.691489][ T6073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.691514][ T6073] RSP: 002b:00007ff0feba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000026 [ 205.691539][ T6073] RAX: ffffffffffffffda RBX: 00007ff1003c5fa0 RCX: 00007ff10014ce59 [ 205.691557][ T6073] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000001 [ 205.691575][ T6073] RBP: 00007ff0feba7090 R08: 0000000000000000 R09: 0000000000000000 [ 205.691641][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.691670][ T6073] R13: 00007ff1003c6038 R14: 00007ff1003c5fa0 R15: 00007ffd7f5d2be8 [ 205.691690][ T6073] [ 206.125002][ T6098] new mount options do not match the existing superblock, will be ignored [ 206.229888][ T5955] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 206.264086][ T5955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.277780][ T5955] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 206.296634][ T5955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.315595][ T5955] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 206.326757][ T5955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.336063][ T5955] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 206.347634][ T5955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 206.410295][ T6109] loop5: detected capacity change from 0 to 256 [ 207.336899][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 207.358776][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.370803][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.734268][ T6117] loop4: detected capacity change from 0 to 256 [ 208.325681][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.332850][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.457434][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.464649][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.474091][ T6121] loop2: detected capacity change from 0 to 128 [ 208.484790][ T6121] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.508334][ T6109] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.328874][ T6121] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 209.487986][ T6117] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.622689][ T28] kauditd_printk_skb: 176 callbacks suppressed [ 209.622705][ T28] audit: type=1400 audit(1781984074.905:3883): avc: denied { mmap_zero } for pid=6092 comm="syz.5.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 209.805175][ T6125] FAT-fs (loop2): error, invalid access to FAT (entry 0x09000000) [ 209.813226][ T6125] FAT-fs (loop2): Filesystem has been set read-only [ 209.823161][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 209.840375][ T6125] FAT-fs (loop2): error, invalid access to FAT (entry 0x09000000) [ 209.869787][ T6125] FAT-fs (loop2): error, invalid access to FAT (entry 0x09000000) [ 210.129141][ T28] audit: type=1400 audit(1781984075.415:3884): avc: denied { write } for pid=6122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.140248][ T6142] netlink: 'syz.5.644': attribute type 2 has an invalid length. [ 210.210332][ T28] audit: type=1400 audit(1781984075.495:3885): avc: denied { write } for pid=6147 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.289527][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 210.297710][ T28] audit: type=1400 audit(1781984075.585:3886): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 210.322087][ T6156] loop4: detected capacity change from 0 to 512 [ 210.357382][ T6160] xt_hashlimit: size too large, truncated to 1048576 [ 210.370529][ T28] audit: type=1400 audit(1781984075.585:3887): avc: denied { read } for pid=6151 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.394124][ T6156] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.646: inode has both inline data and extents flags [ 210.407460][ T6156] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 210.407608][ T28] audit: type=1400 audit(1781984075.585:3888): avc: denied { write } for pid=6151 comm="syz.5.645" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 210.416800][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 210.416826][ C0] EXT4-fs (loop4): initial error at time 1781984075: ext4_orphan_get:1399: inode 15 [ 210.416863][ C0] EXT4-fs (loop4): last error at time 1781984075: ext4_orphan_get:1399: inode 15 [ 210.436405][ T6156] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.646: couldn't read orphan inode 15 (err -117) [ 210.487246][ T6166] netlink: 'syz.5.648': attribute type 11 has an invalid length. [ 210.508459][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.515311][ T6166] netlink: 36 bytes leftover after parsing attributes in process `syz.5.648'. [ 210.581770][ T6156] loop4: lost filesystem error report for type 5 error -117 [ 210.582336][ T6156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.614774][ T28] audit: type=1400 audit(1781984075.895:3889): avc: denied { bind } for pid=6135 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.667436][ T28] audit: type=1400 audit(1781984075.895:3890): avc: denied { name_bind } for pid=6135 comm="syz.2.643" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 210.734546][ T28] audit: type=1400 audit(1781984075.895:3891): avc: denied { node_bind } for pid=6135 comm="syz.2.643" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 210.792353][ T6181] netlink: 'syz.4.646': attribute type 13 has an invalid length. [ 210.808960][ T28] audit: type=1400 audit(1781984075.925:3892): avc: denied { mount } for pid=6155 comm="syz.4.646" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 210.845160][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 210.865789][ T6181] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 210.924314][ T5955] veth0_vlan: entered promiscuous mode [ 210.934534][ T5955] veth1_vlan: entered promiscuous mode [ 210.953655][ T5955] veth0_macvtap: entered promiscuous mode [ 210.961451][ T5955] veth1_macvtap: entered promiscuous mode [ 210.984517][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.024392][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.024848][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.057492][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.067383][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.099870][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.263160][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.415619][ T6205] loop4: detected capacity change from 0 to 256 [ 211.473107][ T6205] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.821472][ T6225] loop6: detected capacity change from 0 to 128 [ 215.534799][ T6237] xt_hashlimit: size too large, truncated to 1048576 [ 215.639782][ T6240] loop2: detected capacity change from 0 to 512 [ 215.669330][ T6240] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.745620][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 215.745639][ T28] audit: type=1326 audit(1781984081.016:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.665" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3382dcce59 code=0x7ffc0000 [ 215.786713][ T6243] loop4: detected capacity change from 0 to 512 [ 215.817515][ T6243] EXT4-fs: inline encryption not supported [ 215.849537][ T6243] EXT4-fs: Ignoring removed oldalloc option [ 215.901843][ T6243] EXT4-fs (loop4): 1 truncate cleaned up [ 215.921320][ T28] audit: type=1326 audit(1781984081.016:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.665" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3382dcce59 code=0x7ffc0000 [ 215.955514][ T6243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.972026][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.666'. [ 216.013644][ T28] audit: type=1326 audit(1781984081.026:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.665" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3382dcce59 code=0x7ffc0000 [ 216.113582][ T6254] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 216.140320][ T6254] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.160011][ T28] audit: type=1326 audit(1781984081.026:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.665" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3382dcce59 code=0x7ffc0000 [ 216.199995][ T6254] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 216.225573][ T6254] audit: backlog limit exceeded [ 216.269912][ T28] audit: type=1326 audit(1781984081.026:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.665" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3382dcce59 code=0x7ffc0000 [ 216.306698][ T6259] loop2: detected capacity change from 0 to 128 [ 216.341318][ T6259] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.405031][ T6259] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 216.424642][ T28] audit: type=1326 audit(1781984081.026:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.665" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3382dcce59 code=0x7ffc0000 [ 216.516913][ T28] audit: type=1326 audit(1781984081.026:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.665" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3382dcce59 code=0x7ffc0000 [ 216.608875][ T6263] FAT-fs (loop2): error, invalid access to FAT (entry 0x09000000) [ 216.616873][ T6263] FAT-fs (loop2): Filesystem has been set read-only [ 216.679927][ T6263] FAT-fs (loop2): error, invalid access to FAT (entry 0x09000000) [ 216.837210][ T6269] loop0: detected capacity change from 0 to 128 [ 216.861773][ T6269] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.951946][ T6269] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 216.961965][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.023010][ T6273] loop4: detected capacity change from 0 to 128 [ 217.043780][ T6273] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.058418][ T6273] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.070821][ T6273] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.674: No space for directory leaf checksum. Please run e2fsck -D. [ 217.090381][ T6269] FAT-fs (loop0): error, invalid access to FAT (entry 0x09000000) [ 217.096022][ T6273] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.674: Directory block failed checksum [ 217.100447][ T6269] FAT-fs (loop0): Filesystem has been set read-only [ 217.119978][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 217.130397][ T6273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.148757][ T6269] FAT-fs (loop0): error, invalid access to FAT (entry 0x09000000) [ 217.319855][ T6281] SELinux: policydb table sizes (-983040,-1) do not match mine (8,7) [ 217.335059][ T6281] SELinux: failed to load policy [ 217.352363][ T3294] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.447923][ T6287] loop2: detected capacity change from 0 to 1024 [ 217.451435][ T6288] loop4: detected capacity change from 0 to 128 [ 217.461499][ T6287] EXT4-fs: Ignoring removed orlov option [ 217.480279][ T6288] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 217.505425][ T6287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.508141][ T6288] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 217.532901][ T6287] EXT4-fs (loop2): shut down requested (1) [ 217.555469][ T6287] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 217.564371][ T6287] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 217.589874][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.766855][ T6301] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 217.775143][ T6301] FAT-fs (loop4): Filesystem has been set read-only [ 217.840450][ T6301] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 218.001818][ T6308] loop6: detected capacity change from 0 to 256 [ 218.032307][ T6308] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.850991][ T6301] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 219.107846][ T6314] loop2: detected capacity change from 0 to 1024 [ 219.152861][ T6314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.242167][ T6314] EXT4-fs (loop2): shut down requested (0) [ 219.341627][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.365766][ T6332] loop5: detected capacity change from 0 to 512 [ 219.406807][ T6332] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.693: ea_inode with extended attributes [ 219.456862][ T6332] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 219.457028][ T6332] EXT4-fs (loop5): Remounting filesystem read-only [ 219.466242][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 219.466274][ C0] EXT4-fs (loop5): initial error at time 1781984084: ext4_xattr_inode_iget:441: inode 11 [ 219.466312][ C0] EXT4-fs (loop5): last error at time 1781984084: ext4_xattr_inode_iget:441: inode 11 [ 219.529744][ T6338] loop4: detected capacity change from 0 to 128 [ 219.541732][ T6338] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.575110][ T6338] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 219.594724][ T6332] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -30) [ 219.635930][ T6332] EXT4-fs (loop5): 1 orphan inode deleted [ 219.643689][ T6332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.658926][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.693'. [ 219.683559][ T5182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.704850][ T6338] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 219.720265][ T6338] FAT-fs (loop4): Filesystem has been set read-only [ 219.745581][ T6338] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 219.771208][ T6338] FAT-fs (loop4): error, invalid access to FAT (entry 0x09000000) [ 219.839326][ T6344] loop0: detected capacity change from 0 to 128 [ 220.260902][ T6360] loop2: detected capacity change from 0 to 512 [ 220.279393][ T6354] SELinux: policydb string does not match my string SE Linux [ 220.322578][ T6354] SELinux: failed to load policy [ 220.345768][ T6360] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.703: inode has both inline data and extents flags [ 220.372129][ T6360] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.372292][ T6360] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.703: couldn't read orphan inode 15 (err -117) [ 220.381561][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 220.381586][ C1] EXT4-fs (loop2): initial error at time 1781984085: ext4_orphan_get:1399: inode 15 [ 220.381623][ C1] EXT4-fs (loop2): last error at time 1781984085: ext4_orphan_get:1399: inode 15 [ 220.916936][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 220.916972][ T28] audit: type=1400 audit(1781984086.207:4018): avc: denied { ioctl } for pid=6363 comm="syz.4.704" path="socket:[14642]" dev="sockfs" ino=14642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.087065][ T6360] loop2: lost filesystem error report for type 5 error -117 [ 221.087818][ T6360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.346888][ T28] audit: type=1326 audit(1781984086.637:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781883ce59 code=0x7ffc0000 [ 221.375845][ T28] audit: type=1326 audit(1781984086.667:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781883ce59 code=0x7ffc0000 [ 221.412014][ T28] audit: type=1326 audit(1781984086.667:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f781883ce59 code=0x7ffc0000 [ 221.440543][ T6388] loop4: detected capacity change from 0 to 764 [ 221.441886][ T6378] netlink: 'syz.2.703': attribute type 13 has an invalid length. [ 221.460937][ T6389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=512 sclass=netlink_tcpdiag_socket pid=6389 comm=syz.5.707 [ 221.473788][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 221.484034][ T6388] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 221.498797][ T28] audit: type=1326 audit(1781984086.667:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781883ce59 code=0x7ffc0000 [ 221.524646][ T6378] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 221.535203][ T6388] FAULT_INJECTION: forcing a failure. [ 221.535203][ T6388] name failslab, interval 1, probability 0, space 0, times 0 [ 221.550653][ T28] audit: type=1326 audit(1781984086.667:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781883ce59 code=0x7ffc0000 [ 221.584136][ T6388] CPU: 1 UID: 0 PID: 6388 Comm: syz.4.709 Not tainted syzkaller #0 PREEMPT(lazy) [ 221.584250][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.584266][ T6388] Call Trace: [ 221.584275][ T6388] [ 221.584285][ T6388] __dump_stack+0x1d/0x30 [ 221.584315][ T6388] dump_stack_lvl+0x95/0xd0 [ 221.584340][ T6388] dump_stack+0x15/0x1b [ 221.584433][ T6388] should_fail_ex+0x25e/0x270 [ 221.584467][ T6388] should_failslab+0x8c/0xb0 [ 221.584493][ T6388] kmem_cache_alloc_noprof+0x66/0x3f0 [ 221.584520][ T6388] ? do_getname+0x2e/0x1c0 [ 221.584576][ T6388] do_getname+0x2e/0x1c0 [ 221.584606][ T6388] getname_flags+0x1d/0x30 [ 221.584635][ T6388] do_sys_openat2+0x6c/0x130 [ 221.584675][ T6388] __x64_sys_open+0xe6/0x110 [ 221.584713][ T6388] x64_sys_call+0x14b9/0x3020 [ 221.584745][ T6388] do_syscall_64+0x136/0x3c0 [ 221.584809][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.584840][ T6388] RIP: 0033:0x7f3382dcce59 [ 221.584862][ T6388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.584887][ T6388] RSP: 002b:00007f338181f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 221.584914][ T6388] RAX: ffffffffffffffda RBX: 00007f3383045fa0 RCX: 00007f3382dcce59 [ 221.584954][ T6388] RDX: 0000000000000083 RSI: 0000000000101002 RDI: 0000200000000000 [ 221.584972][ T6388] RBP: 00007f338181f090 R08: 0000000000000000 R09: 0000000000000000 [ 221.584990][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.585007][ T6388] R13: 00007f3383046038 R14: 00007f3383045fa0 R15: 00007fffa9635498 [ 221.585035][ T6388] [ 221.760113][ T28] audit: type=1326 audit(1781984086.667:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f781883ce59 code=0x7ffc0000 [ 221.790713][ T28] audit: type=1326 audit(1781984086.667:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781883ce59 code=0x7ffc0000 [ 221.829339][ T28] audit: type=1326 audit(1781984086.667:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781883ce59 code=0x7ffc0000 [ 221.887115][ T28] audit: type=1326 audit(1781984086.667:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.5.707" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f781883ce59 code=0x7ffc0000 [ 221.964345][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.990905][ T6413] loop4: detected capacity change from 0 to 512 [ 222.014748][ T6413] EXT4-fs: Ignoring removed oldalloc option [ 222.032865][ T6413] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.711: corrupted in-inode xattr: invalid ea_ino [ 222.071507][ T6413] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 222.073327][ T6413] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.711: couldn't read orphan inode 15 (err -117) [ 222.082785][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 222.082810][ C1] EXT4-fs (loop4): initial error at time 1781984087: ext4_iget_extra_inode:5180: inode 15 [ 222.082846][ C1] EXT4-fs (loop4): last error at time 1781984087: ext4_iget_extra_inode:5180: inode 15 [ 222.117355][ T6425] qrtr: Invalid version 216 [ 222.121520][ T6413] loop4: lost filesystem error report for type 5 error -117 [ 222.136874][ T6413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.181680][ T6425] loop6: detected capacity change from 0 to 512 [ 222.212005][ T6425] EXT4-fs warning (device loop6): read_mmp_block:110: Error -74 while reading MMP block 17 [ 222.277931][ T6413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=6413 comm=syz.4.711 [ 222.462180][ T6413] can0: slcan on ttyS3. [ 222.492339][ T6439] netlink: 72 bytes leftover after parsing attributes in process `syz.5.721'. [ 223.065805][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.074391][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.101838][ T6412] can0 (unregistered): slcan off ttyS3. [ 224.132301][ T6455] loop2: detected capacity change from 0 to 512 [ 224.165117][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.174570][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.454682][ T36] ================================================================== [ 224.462845][ T36] BUG: KCSAN: data-race in touch_atime / touch_atime [ 224.469586][ T36] [ 224.471937][ T36] write to 0xffff88811b9e6190 of 4 bytes by task 49 on cpu 0: [ 224.479424][ T36] touch_atime+0x1cb/0x300 [ 224.483885][ T36] shmem_file_read_iter+0x3ed/0x4b0 [ 224.489125][ T36] lo_rw_aio+0x6a9/0x760 [ 224.493412][ T36] loop_process_work+0x567/0xac0 [ 224.498381][ T36] loop_rootcg_workfn+0x22/0x30 [ 224.503266][ T36] process_scheduled_works+0x4d4/0x9a0 [ 224.508770][ T36] worker_thread+0x569/0x750 [ 224.513394][ T36] kthread+0x221/0x270 [ 224.517495][ T36] ret_from_fork+0x146/0x330 [ 224.522122][ T36] ret_from_fork_asm+0x1a/0x30 [ 224.526919][ T36] [ 224.529293][ T36] read to 0xffff88811b9e6190 of 4 bytes by task 36 on cpu 1: [ 224.536780][ T36] touch_atime+0x162/0x300 [ 224.541229][ T36] shmem_file_read_iter+0x3ed/0x4b0 [ 224.546477][ T36] lo_rw_aio+0x6a9/0x760 [ 224.550757][ T36] loop_process_work+0x567/0xac0 [ 224.555730][ T36] loop_workfn+0x31/0x40 [ 224.560010][ T36] process_scheduled_works+0x4d4/0x9a0 [ 224.565514][ T36] worker_thread+0x569/0x750 [ 224.570183][ T36] kthread+0x221/0x270 [ 224.574285][ T36] ret_from_fork+0x146/0x330 [ 224.578923][ T36] ret_from_fork_asm+0x1a/0x30 [ 224.583721][ T36] [ 224.586075][ T36] value changed: 0x2bffd0c3 -> 0x2c986e02 [ 224.591821][ T36] [ 224.594164][ T36] Reported by Kernel Concurrency Sanitizer on: [ 224.600345][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(lazy) [ 224.610104][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.620202][ T36] Workqueue: loop2 loop_workfn [ 224.625003][ T36] ================================================================== [ 225.589662][ T6455] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 225.598083][ T6455] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 225.661310][ T6463] netlink: 'syz.2.723': attribute type 13 has an invalid length. [ 225.669254][ T6463] netlink: 'syz.2.723': attribute type 12 has an invalid length. [ 225.679616][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.479911][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 226.479939][ T28] audit: type=1400 audit(1781984091.768:4044): avc: denied { write } for pid=6448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.610250][ T28] audit: type=1400 audit(1781984091.898:4045): avc: denied { write } for pid=6467 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.907235][ T28] audit: type=1400 audit(1781984092.188:4046): avc: denied { write } for pid=6470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.979704][ T28] audit: type=1400 audit(1781984092.268:4047): avc: denied { write } for pid=6481 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.219948][ T28] audit: type=1400 audit(1781984092.508:4048): avc: denied { write } for pid=6484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.295330][ T28] audit: type=1400 audit(1781984092.588:4049): avc: denied { write } for pid=6495 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1