last executing test programs: 2m48.333430365s ago: executing program 0 (id=1): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, 0x30}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000005c0)='./file0\x00', 0x181d49b, 0x0, 0x40, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000001440)=""/4096, 0x1000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') sendfile(r5, r6, 0x0, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r8 = io_uring_setup(0x129d, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0xfffffffc, 0x35c}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="700000001e005f5b25bd7000fcde000000000000000004d500002b00fe8000000000000000000000000000bb02000000fb3400000c0015005a07350008000000240009"], 0x70}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) io_uring_enter(r8, 0x4206, 0x6931, 0x13, 0x0, 0x0) 2m45.441559279s ago: executing program 0 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x200008c0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90324fc600b000240", 0x18}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x20000084) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x0) close(r1) lsm_get_self_attr(0x68, &(0x7f0000000140)={0x0, 0x0, 0xc6, 0xa6, ""/166}, &(0x7f0000000280)=0xc6, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r4, 0x0, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000880)="580000001400192340834b80040d8c5602a647623eff5bab4e250200000058006f543bc2945f640094f96a0325010ebc806200000014008000f0fffeffe84d3ac561fff5dd0000001000020004000800000000000000000036813d0f3eb5dc602b4acca0ca1db6d57f64d1ac0db62bae2dccc0aed4639e3ce2bb652cd3295ee3ec02d4f23d1791e1f90cbc2744971e6c3a1a360cadcdd3fe80ef68e14dfe1e525a", 0xa1}], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) 2m44.185527393s ago: executing program 0 (id=18): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x3c}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d410000000", 0x24) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0213000902"], 0x10}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x103, 0x0, 0x0, 0x0, 0x42, @local}, 0x10) keyctl$chown(0x4, r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x42040400) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB='filter\x00'/16], &(0x7f0000004480)=0x2f) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) 2m41.286906507s ago: executing program 0 (id=24): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x8000000000000001, 0xfffffffffffffffc, 0xfffffffffffffffb, 0x1, 0x7fff, 0xb9}) chmod(&(0x7f0000000040)='.\x00', 0x35e) setreuid(0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x2000200002, 0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000000)='net/kcm\x00') 2m41.04953421s ago: executing program 0 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 2m39.856545584s ago: executing program 0 (id=32): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10004, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r2) syz_open_dev$evdev(&(0x7f0000000940), 0x2, 0x109400) r3 = timerfd_create(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000080, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="b36f02", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "000000ffff000000010100"}) r4 = syz_open_pts(r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x7, 0x191) semtimedop(r5, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) r6 = io_uring_setup(0x6e71, &(0x7f0000000040)={0x0, 0x800000, 0x400, 0x4, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, &(0x7f0000000300)={0x0}, 0x1) semop(r5, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) tkill(r7, 0x2) wait4(r7, 0x0, 0x0, 0x0) semctl$IPC_RMID(r5, 0x0, 0x0) r8 = dup3(r4, r0, 0x80000) read$watch_queue(r8, &(0x7f0000000340)=""/133, 0x85) setresuid(0xee00, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0x8001) 2m39.804312635s ago: executing program 32 (id=32): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10004, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r2) syz_open_dev$evdev(&(0x7f0000000940), 0x2, 0x109400) r3 = timerfd_create(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000080, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="b36f02", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "000000ffff000000010100"}) r4 = syz_open_pts(r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x7, 0x191) semtimedop(r5, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) r6 = io_uring_setup(0x6e71, &(0x7f0000000040)={0x0, 0x800000, 0x400, 0x4, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, &(0x7f0000000300)={0x0}, 0x1) semop(r5, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) tkill(r7, 0x2) wait4(r7, 0x0, 0x0, 0x0) semctl$IPC_RMID(r5, 0x0, 0x0) r8 = dup3(r4, r0, 0x80000) read$watch_queue(r8, &(0x7f0000000340)=""/133, 0x85) setresuid(0xee00, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0x8001) 2m8.31690153s ago: executing program 1 (id=132): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x9, 0x200f60e}, 0x9092, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000600, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0xcc05, 0x0, 0x0, 0x0, 0x55e, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2m8.250350701s ago: executing program 1 (id=134): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, 0x30}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000005c0)='./file0\x00', 0x181d49b, 0x0, 0x40, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000001440)=""/4096, 0x1000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') sendfile(r5, r6, 0x0, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r8 = io_uring_setup(0x129d, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0xfffffffc, 0x35c}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="700000001e005f5b25bd7000fcde000000000000000004d500002b00fe8000000000000000000000000000bb02000000fb3400000c0015005a07350008000000240009"], 0x70}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) io_uring_enter(r8, 0x4206, 0x6931, 0x13, 0x0, 0x0) 2m6.58110864s ago: executing program 1 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0x7, 0x2) unshare(0x2040600) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0", 0x1b}, {&(0x7f0000000240)="d29edb52e9bc960d8858f5476408b13775dd38ec094aa3", 0x17}, {&(0x7f0000000480)="d91197e00f747fc820d9e533", 0xc}], 0x3) syz_open_dev$ptys(0xc, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xf, r5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x1c6}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000034c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100001002cbd70002000190000000000", @ANYRES32=0x0, @ANYBLOB="13019757c0200000140003006e657464657673696d300000000000000500110004000000d4001680d0000180a4000c8014000100"], 0x110}, 0x1, 0x0, 0x0, 0x24008041}, 0x20000010) 2m5.75560838s ago: executing program 1 (id=143): getpgid(0xffffffffffffffff) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000007b00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 2m5.393414474s ago: executing program 1 (id=149): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) add_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000001000)={'syz', 0x1}, &(0x7f0000001000)="2e98", 0x2, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46f6a89e3da7c562, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)={0x2c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4d0950e45681200}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) renameat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in=@remote}}, {{@in6=@private2}, 0x0, @in=@local}}, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) 2m5.212812186s ago: executing program 1 (id=151): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x2, 0x9, 0x1c, @mcast1, @remote, 0x7, 0x10, 0x101, 0x61}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @generic={0x5, 0x6, 0x4, 0x7ff, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x4f, 0xce, &(0x7f00000000c0)=""/206, 0x41000, 0x4, '\x00', r0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x0, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r2], 0x0, 0x10, 0x4}, 0x94) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000500)) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x257}, [@ldst={0x2, 0x3, 0x5, 0x1, 0xa, 0xfffffffffffffffc}]}, &(0x7f0000000580)='GPL\x00', 0x1a8, 0x2c, &(0x7f00000005c0)=""/44, 0x41000, 0x10, '\x00', r0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x8, 0x5, 0xf74}, 0x10, 0x2429, 0xffffffffffffffff, 0x5, &(0x7f0000000680)=[r1, r1, r2], &(0x7f00000006c0)=[{0x3, 0x2, 0x1, 0x1}, {0x0, 0x2, 0xb, 0x7}, {0x3, 0x1, 0x1, 0x8}, {0x1, 0x2, 0x8}, {0x3, 0x3, 0x7, 0xc}], 0x10, 0x6}, 0x94) readv(r2, &(0x7f0000000900)=[{&(0x7f0000000800)=""/253, 0xfd}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@cgroup=r1, 0x35, 0x1, 0xffff, &(0x7f0000000940)=[0x0], 0x1, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@ifindex=r0, r1, 0xb, 0x0, r5, @void, @value=r1, @void, @void, r7}, 0x20) r8 = accept4$inet6(r1, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000b00)=0x1c, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000b40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x0, 0x0, 0xd, 0x5, 0xfff9}, 0x20) sendmsg$inet(r1, &(0x7f0000000e00)={&(0x7f0000000b80)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="5fe5ab877818d210c15cf676c2aff83f794bc7350e3db19f1f5c6abe9d8d168ec19b88b5af0504bc6091ea42928cd182e925379eb36e1b6d841691450a91b25523dc4ab2124b00f97e5e75e30c39a20477ff74fe1987b0a4c1c02ecb47a624b16fc854de8dc1f1e05243294162cd890dec9b4bae218a4ee918c7a3e3c8e0edccbf058e8cdc753a3de1100e67a7e546d3f8c35a9bc317f74168c22b8ca46646c8f4cf0e6190fcf8834487506f855aa1e7d0b7a4240767c5981d", 0xb9}, {&(0x7f0000000c80)="99e3909d2e7a5968ad43b61e5f5592801c8c41638cedcb6f31b87d18007e785a51fd8f9b46e6a4fd5c4d5f21aaf60340c34e4cb5291cc2b53bfc2f9909e5d164eb64888b418c505834e5c10d6bb8b7979cbe0da555acfd995ac4771dd83a0985ae43794ed36370cc1b6485430f270c73d428342900b411bfe607178d3f7599899b6b6a3c79485de7a16c752c65b5f7e914042ee2172d54542115db862446a061f1b1a1c4c494847ab8", 0xa9}], 0x2, &(0x7f0000000d80)=[@ip_retopts={{0x40, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0xd1, [@empty, @empty, @loopback, @broadcast, @rand_addr=0x64010102, @multicast2, @remote, @loopback]}, @end, @timestamp={0x44, 0xc, 0x1e, 0x0, 0x0, [0xd4ed, 0xffff056e]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @broadcast, @broadcast}}}], 0x60}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000e40)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@x25={0x805, {0x3, 0x7, 0xf3, "9d91625dffcf85f0689239f40dbf1308d206183acee850effe2d096bf65db9e423abfba9129fbe34e617d09e162220e07bc05afaf2d296b47dd9c0a677c3768880b45f85673b38a95fa005278132195daaee7c4b6532b22518550e5c2cd253ead1d64a2b2929896f5defd33f22d1a39d9537d284be8dc7c2b5cc6df4259de31abc6310eaf01a108cc992b869b5d80fff3a46dbb33fe2e26e60"}}}}, &(0x7f0000000f00)={0x1, 0x3, [0x43b, 0xb5c, 0x977, 0x3f1]}) syz_io_uring_setup(0x2969, &(0x7f0000000f40)={0x0, 0xbd11, 0x1000, 0x1, 0x8a, 0x0, r1}, &(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xf0, r9, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9c5d7fbf6123af923ebf7742eee2d2b1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="64482c291c9e6d3dc9018f4f74db54523ef636b8244fbc3a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="954c8e895a3532f6df29133ac55c0f91"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3dadc5001c720e6f10dd4097f42d47c5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="33917ccf919eb91c20483e9ad88b3574"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5b40d4bfadeaad68013210c3d95ca1e6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3c96cca80c94447e1aa145a96a93b9a5"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="82d594d2706a5a6d715be3c4689c4875a3f991052cb71f1b48baa1bf10f24db3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8a6a0ae19ba444094bec54b484e8cee0"}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000001280)=0x1, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000012c0)=r1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000001300)=@ccm_128={{0x304}, "58a100f00ec5716d", "0c7970c622aa0bef5ad5438f66af4a3c", "bb150a99", "5c1beb2d8172f83e"}, 0x28) ioctl$BTRFS_IOC_SNAP_DESTROY(r8, 0x5000940f, &(0x7f0000001340)={{r10}, "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"}) r11 = memfd_create(&(0x7f0000002340)='GPL\x00', 0x1) ioctl$NILFS_IOCTL_GET_SUINFO(r11, 0x80186e84, &(0x7f00000023c0)={&(0x7f0000002380)=[{0x52, 0x0, 0x2}, {0x6, 0xae0, 0x1}, {0x0, 0x0, 0x2}, {0x8001, 0x8985}], 0x4, 0x10, 0x1, 0xe8}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002400)={'macvlan0\x00'}) ioctl$LOOP_SET_FD(r1, 0x4c00, r6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000002440), &(0x7f0000002480)=0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002600)={@ifindex=r4, r1, 0x36, 0x20}, 0x20) 1m49.794734285s ago: executing program 33 (id=151): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x2, 0x9, 0x1c, @mcast1, @remote, 0x7, 0x10, 0x101, 0x61}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @generic={0x5, 0x6, 0x4, 0x7ff, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x4f, 0xce, &(0x7f00000000c0)=""/206, 0x41000, 0x4, '\x00', r0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x0, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r2], 0x0, 0x10, 0x4}, 0x94) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000500)) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x257}, [@ldst={0x2, 0x3, 0x5, 0x1, 0xa, 0xfffffffffffffffc}]}, &(0x7f0000000580)='GPL\x00', 0x1a8, 0x2c, &(0x7f00000005c0)=""/44, 0x41000, 0x10, '\x00', r0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x8, 0x5, 0xf74}, 0x10, 0x2429, 0xffffffffffffffff, 0x5, &(0x7f0000000680)=[r1, r1, r2], &(0x7f00000006c0)=[{0x3, 0x2, 0x1, 0x1}, {0x0, 0x2, 0xb, 0x7}, {0x3, 0x1, 0x1, 0x8}, {0x1, 0x2, 0x8}, {0x3, 0x3, 0x7, 0xc}], 0x10, 0x6}, 0x94) readv(r2, &(0x7f0000000900)=[{&(0x7f0000000800)=""/253, 0xfd}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@cgroup=r1, 0x35, 0x1, 0xffff, &(0x7f0000000940)=[0x0], 0x1, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@ifindex=r0, r1, 0xb, 0x0, r5, @void, @value=r1, @void, @void, r7}, 0x20) r8 = accept4$inet6(r1, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000b00)=0x1c, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000b40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x0, 0x0, 0xd, 0x5, 0xfff9}, 0x20) sendmsg$inet(r1, &(0x7f0000000e00)={&(0x7f0000000b80)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="5fe5ab877818d210c15cf676c2aff83f794bc7350e3db19f1f5c6abe9d8d168ec19b88b5af0504bc6091ea42928cd182e925379eb36e1b6d841691450a91b25523dc4ab2124b00f97e5e75e30c39a20477ff74fe1987b0a4c1c02ecb47a624b16fc854de8dc1f1e05243294162cd890dec9b4bae218a4ee918c7a3e3c8e0edccbf058e8cdc753a3de1100e67a7e546d3f8c35a9bc317f74168c22b8ca46646c8f4cf0e6190fcf8834487506f855aa1e7d0b7a4240767c5981d", 0xb9}, {&(0x7f0000000c80)="99e3909d2e7a5968ad43b61e5f5592801c8c41638cedcb6f31b87d18007e785a51fd8f9b46e6a4fd5c4d5f21aaf60340c34e4cb5291cc2b53bfc2f9909e5d164eb64888b418c505834e5c10d6bb8b7979cbe0da555acfd995ac4771dd83a0985ae43794ed36370cc1b6485430f270c73d428342900b411bfe607178d3f7599899b6b6a3c79485de7a16c752c65b5f7e914042ee2172d54542115db862446a061f1b1a1c4c494847ab8", 0xa9}], 0x2, &(0x7f0000000d80)=[@ip_retopts={{0x40, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0xd1, [@empty, @empty, @loopback, @broadcast, @rand_addr=0x64010102, @multicast2, @remote, @loopback]}, @end, @timestamp={0x44, 0xc, 0x1e, 0x0, 0x0, [0xd4ed, 0xffff056e]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @broadcast, @broadcast}}}], 0x60}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000e40)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@x25={0x805, {0x3, 0x7, 0xf3, "9d91625dffcf85f0689239f40dbf1308d206183acee850effe2d096bf65db9e423abfba9129fbe34e617d09e162220e07bc05afaf2d296b47dd9c0a677c3768880b45f85673b38a95fa005278132195daaee7c4b6532b22518550e5c2cd253ead1d64a2b2929896f5defd33f22d1a39d9537d284be8dc7c2b5cc6df4259de31abc6310eaf01a108cc992b869b5d80fff3a46dbb33fe2e26e60"}}}}, &(0x7f0000000f00)={0x1, 0x3, [0x43b, 0xb5c, 0x977, 0x3f1]}) syz_io_uring_setup(0x2969, &(0x7f0000000f40)={0x0, 0xbd11, 0x1000, 0x1, 0x8a, 0x0, r1}, &(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xf0, r9, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9c5d7fbf6123af923ebf7742eee2d2b1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="64482c291c9e6d3dc9018f4f74db54523ef636b8244fbc3a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="954c8e895a3532f6df29133ac55c0f91"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3dadc5001c720e6f10dd4097f42d47c5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="33917ccf919eb91c20483e9ad88b3574"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5b40d4bfadeaad68013210c3d95ca1e6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3c96cca80c94447e1aa145a96a93b9a5"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="82d594d2706a5a6d715be3c4689c4875a3f991052cb71f1b48baa1bf10f24db3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8a6a0ae19ba444094bec54b484e8cee0"}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000001280)=0x1, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000012c0)=r1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000001300)=@ccm_128={{0x304}, "58a100f00ec5716d", "0c7970c622aa0bef5ad5438f66af4a3c", "bb150a99", "5c1beb2d8172f83e"}, 0x28) ioctl$BTRFS_IOC_SNAP_DESTROY(r8, 0x5000940f, &(0x7f0000001340)={{r10}, "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"}) r11 = memfd_create(&(0x7f0000002340)='GPL\x00', 0x1) ioctl$NILFS_IOCTL_GET_SUINFO(r11, 0x80186e84, &(0x7f00000023c0)={&(0x7f0000002380)=[{0x52, 0x0, 0x2}, {0x6, 0xae0, 0x1}, {0x0, 0x0, 0x2}, {0x8001, 0x8985}], 0x4, 0x10, 0x1, 0xe8}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002400)={'macvlan0\x00'}) ioctl$LOOP_SET_FD(r1, 0x4c00, r6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000002440), &(0x7f0000002480)=0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002600)={@ifindex=r4, r1, 0x36, 0x20}, 0x20) 1m45.792646801s ago: executing program 5 (id=243): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000b40)=0x228a, 0x4) 1m45.635700223s ago: executing program 5 (id=244): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:N-N']) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x40000000) getdents64(r0, &(0x7f0000000040)=""/225, 0xe1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:N-N']) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) (async) fcntl$notify(r1, 0x402, 0x40000000) (async) getdents64(r0, &(0x7f0000000040)=""/225, 0xe1) (async) 1m45.375649516s ago: executing program 5 (id=247): socket$kcm(0x10, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xdc560000) r1 = getpid() r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000880)={[{@grpid}, {@dioread_nolock}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x128, 0x1170, 0x1170, 0x128, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x9}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2f0044, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000001c0)={'#! ', './cgroup', [{}, {0x20, '/dev/loop'}, {0x20, 'memory.events\x00'}, {}], 0xa, "027508000000000000000cfa"}, 0x33) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x10042, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x9302, 0x0, 0x3, 0x0, 0x80000000b4c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 1m44.359046408s ago: executing program 5 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x106, 0x6}}, 0x20) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x7ff}, 0x8386}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004000000041b000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r1, &(0x7f0000000240), 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 1m44.115124461s ago: executing program 5 (id=255): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$eJzs3c9vHGf5APBn1nbiuFWStvn2W6K2nqQkdVvjrG2aYPUAjnftbLG9yHakRBya0jgoiqHQgtRWSKQS4oCoQAJx4VZx4lSpF3pBvcENLnBAQv0XKk7hZDSzu/bau+u1Xcd208/H2t358cz7PvNj581OducNPl9WT2wYW13NH7scv/rHfciYQ+xy6ZP3P3gve7x7N45ET7yY/CmiPyLSiN6IeCKib6q0UJ3rUtCdiBsR8XFEEhFHo/a6LTci+VU8vD7+cSS/z+rt6Mh2S6abVb7QDvr4AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwyiZKhWLo8mRqMxfvZbWRKQtpkoL1SRWV1vnNJap+Sjv9Tv56BcPdak3Iske0d/f6Or7iVPrsx+PiPRsPFkbezLvkDz6452HHj/50mO9hcbynbL5TI52KLYnWjbMm2+/c+fVlZXlN3ZYRf9ucztkZsrzlcVqZW5yppxWFqvpxMWLxQtXphfT6cpsefH64lJ5Lp1aKE8uVRfSoann0tGJifG0PHK9enV+pjQyW25MvPSVsWLxYvryyLfKkwuL1fkLL48sTl2pzM5W5mfymGx2FnMpOxC/WVlKl8qTc2l66/bK8vimnFp2UxY02m1NsqCxbkFjxbGx0dGxsdF3671nr024+OLEi5eKxd7iJtEScZ8OWg6XY5138/04jcOuFGrtf8RsVGI+rsa1SNv+TUUpFqIacx3m1zXa/3MXylvW29z+11v53qbZp7Ons/F0fbS/Q/vfIZf9+3sz3o534k68GiuxEsvxxoFn1PqX7ZEO84591rJnohzzUYnFqEYl5mIyn5LWp6QxERfjYhTjlbgSg7EYaUxHJWajHItxPRZjKcr5ETUVC1GOyViKaixEGkMxFc9FGqMxERMxHmmUYySuRzWuxnzMRCkm81Juxe18u49vkeNa0Oh2gsa2CGppzHfc/pdb/w3JF8zen8Rhl1br7f+R7qFDU/uREAAAALDnvvTXOH7q0b/8OyKJp/Lr8tOV2XLxoNMCAAAA9lASScST2VNfNvpUJD7/AwAAwIMmyX9jl0TEQAzWhhq/hHIRAAAAAB4Q+e16no5kcH2Cz/8AAADwgFm7x37tSsDaPXav9TSmdr0LfzLcuP1verP2erMeUS9iYLoyWx6Zqs6+NBrn87sM5L80aCmtJyLpy39+8HycqUWdGYi72evAeolZnf1Z1OjIS6PxfJytr8jQM9nLM0NtIsdqkc/WIp9tjuyJDZHjWSQAPOjObtEe1+6x3739fz6GaxHDp/Mmv/d0mza4qGUFgMNirY+d/9a7NGvT/tcjnu7U/n91i8//WcSjcWuw9pWCkXgtXo+VuBnDUf/GwWC7Uhu9EdS+hjDcdDUgt+lqwED9Kwt/v1SI4ZbrAf1r69ocuxxjMVy/InCsPr9+7SBZi00aOYzXAnruww4AgANwdst2eHvt/3CXz/8DvlIIAIfKWg/22x3IFtp2cG3goNcRANhIKw0AAAAAAAAAAAAAAAAAAAAAAAAAAAB7b1s38P/b+YiVleWInXYWsIOBk5un9O8kw60HCnF/cm4z0Hv/q9hqoGfnvTNsc+AfXWO+HjsuOdvHB7OhDHQbOOATEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsiiehpN71wNH8pRsSF/c7pfrp70AnslXR3iyX34l68Fcf3Oh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC+6+v3/C1F7fag2KXoLEeci4kZEfPugc9xL9w46gQPzvfy56f7/hYi+WE2it7bbI+mbKi1U57LdnxzN5n/y/gfvZY/uZbf2qpB3H1HY1LlEvYamKX0bl3okX2qgtPzmnR+9/oO0dDk/MC8vTc+W5mYWvrEe+HjyYa0LhOZuEBr5/uTcn3/dNPlIvfIPszVtb3O903m9pdZ6/7/d0h3q3YbbK8tjWU1L5WtLP/7+7beaZj0aZyKeGYoY2ljTd7NHh5rObN6eGyWfJj9Pjsfv4ka+/7Otkawm2S46ka//sVu3V5ZHXnt95eZaTj/dkNPJGIyImxH9289pMD+ftJUfdYW+rNZiHpQ9nepS3paaShztsF0fyQ+ZgR2tQ9p5HXL5du94cDUyGm+b0W9++Fic3/GePr/1nm4v+TT5V3Il/hk/a+r/o5Dt/3PR9t3Zpog8sulIaZ63YQsUapH5mo81z3hlc5lbbDj23C/jO/G1tf1faDr/1/fV/pyPmmps/76I2Pn74g8nWlqUdXmLdGpTi1Q/+7RdoH8tz1O1qA55/l+8ENF7ekdnlBe6nFH2/v1fr+/uUPwn7ur/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPySiJ520wsR5yLiZEScyMbTiNXNMXd3UV9hINlNmntmNzkfZklv26lNK7pxjZN7cS/eiuP7kBoAAAAAAAAA++By6ZP3P3gve+T/H98TXy7U56QRvRFxMvlt31RpoTrXpaC+iBuN/9Lv31kON7Knh9fHP87Gnuiy0MF+fQAAPtf+FwAA//822GxX") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 1m43.696187256s ago: executing program 5 (id=257): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40005) recvmmsg$unix(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000640)=""/99, 0x63}, {&(0x7f0000000700)=""/277, 0x115}, {&(0x7f0000003100)=""/4080, 0xff0}, {&(0x7f0000001b00)=""/169, 0xa9}], 0x4}}], 0x1, 0x0, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x88}}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 1m43.695956146s ago: executing program 34 (id=257): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40005) recvmmsg$unix(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000640)=""/99, 0x63}, {&(0x7f0000000700)=""/277, 0x115}, {&(0x7f0000003100)=""/4080, 0xff0}, {&(0x7f0000001b00)=""/169, 0xa9}], 0x4}}], 0x1, 0x0, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x88}}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 1m38.156021691s ago: executing program 3 (id=273): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1m35.788973348s ago: executing program 3 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 1m35.419833312s ago: executing program 3 (id=279): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd9a1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x10, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000001c0)={r3, &(0x7f00000000c0)='\x00', 0x40, &(0x7f0000000100)={@align=0x1, {0x3, 0x0, 0x27a5, 0x6}}, 0x7ff, &(0x7f0000000140), &(0x7f0000000180)=0x2d}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x66, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08061cdc030ec08000000006ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r5, 0x402, 0x8000001d) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000240)={0x2, 'ip_vti0\x00', {0xb911}, 0x6}) 1m34.432976454s ago: executing program 3 (id=283): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, 0x0, 0x2d, 0x1d, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[0x4], &(0x7f0000000100)=[0x0], 0x8, 0x1, 0x0, r1}}, 0x40) r2 = socket(0x200000000000011, 0x2, 0xd) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x40000, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r3, 0x89e1, &(0x7f0000001080)) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x300000, &(0x7f0000000240)={[{@gid={'gid', 0x3d, r6}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) syz_emit_ethernet(0x86, &(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRESHEX=r5], 0x0) 1m34.166844977s ago: executing program 3 (id=289): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) 1m31.512707207s ago: executing program 3 (id=294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m30.920083095s ago: executing program 35 (id=294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.01837483s ago: executing program 2 (id=585): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000003c0)={0x5, 0x9, 0x800, 0x0, 0x15}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000001c0)=ANY=[], 0x200002e6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 42.318319439s ago: executing program 2 (id=605): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f80004000000000000005000000000000000000080008000100000000ff", 0x24) (async) socket(0x10, 0x803, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000090000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000f2ff0000000000000000000000000000000300bf0000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) socket(0x10, 0x803, 0x0) (async, rerun: 64) socket(0x10, 0x803, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) 42.26225328s ago: executing program 2 (id=608): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x81}, 0x6025, 0x4003, 0x4, 0x0, 0x80000000, 0x2, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f00000004c0)=""/144, 0x90, 0x0, &(0x7f0000000580)=""/22, 0x16}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@sha1={0x1, "220709d6b9234d2ab998206522089986546633a2"}, 0x15, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x8, 0xfed, 0x4, 0x41001, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x400, 0x3, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="63dced8e46dc3f0a00000000b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(r5) socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2010000, &(0x7f0000000940)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '[^'}}, {@euid_lt}, {@obj_role}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x10000}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x61, 0x66, 0x38, 0x34, 0x64, 0x30, 0x34], 0x2d, [0x32, 0x62, 0x62, 0x34], 0x2d, [0x36, 0x64, 0x39, 0x63], 0x2d, [0x0, 0x65, 0x0, 0x37], 0x2d, [0x65, 0x39, 0x38, 0x38, 0x35, 0x66, 0x34, 0x65]}}}, {@pcr={'pcr', 0x3d, 0x10}}, {@appraise}]}, 0x1, 0x42a, &(0x7f0000000500)="$eJzs3E2IVeUfB/DfOTNX/47j/44RTUWglGgRXvVeq622aNHGhSD0IjTk9QWvTngnShPKAhEiooUkCDEto0UuWhQRRJsIatGiIJKEahGGFdKi3cS955zxomcWjTMenT4fOHOf89w753seDhyeB875BfCftTYitkXEUEQ0IqKe96f5Fq9kW+93x1vn9ve2JGZmdv6RRBIR7da5/cWxkvxzZf5v/4uI27Yl8ejwtbndo8cOTnQ67SP5/qapQ89t6h49tvHAoYl97X3tw62tDzebWx9qPbJwYz0//mo0m9tqH2xYe+rrT9/4rne+o/l3g+NYSMkcndsXI6xCtYF2UnK9ufm8dfrNT6o+BwDgxkvzuf9wf/5fj6HIJm8Xzj99uR4vj1R9fgAAAMD1m5kZyj8BAACApSux9gcAAIAlrngOoN06t7/YbtSzBysfiLi0PSLGsvzi/eLs2+H++8ORv1taW4T8ey8swkH/he7j1eZ/s6va/NXvV5s//UO1+c+srzb/l5+qzV+3ptr805MRn23PCiBce/9L+zUPCssiYnle02DFAuWv+fzK/e/4Nfe/dPb+NxQR1/Mi1qnpiyfL+scfi7h0IuLu4bL8ZDY/yWs6zNfGb0/sLutffSli5t2I9VGeHwP5c9eH2LT3QKe9Oftbnt966cl6Wf+OL7Lxj8yRP5b/bmigTsR8nBnZ/dGqkv5djSz//vvKr/+dA+P/f16bY2we+Wvv6uwo61//epa/Z47xD17/1fPILUz/1v25rP/DrddxUABg3tL+3CZJG7PtNG00svne7TGSdia7Uw/unXz+8J5sDjQWtbSYamXzkVrS29+Sz02K/eZV+618DnGqvqK/33h2srOn6sEDAADAEjca8eNTr308vvKq9f+v9Wz9DwAAANz6euv/e6bfOdtr/1X6dCQAAABwq+ut/y+f/P3LsP4HAACAJcv6HwAAAJa+Yv0/Okf9v1UDtfs25/WHv6rXlhe1/gAAAICbX2/9n37/xIXu0WMHJzqd9hENDQ2N2UbVdygAAGChXZn0V30mAAAAwOJJLyYR0ds21NeN3rHmvfHBb5clf/erAyyLiBfO7nz7xYmpqSNbev1/zvZPncn7m1WNAQAAABhUrNOLdTwAAAAAAAAAAAAAAHDzuxHlxKseIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvnnwAAAP//UuGYiQ==") 41.736772166s ago: executing program 2 (id=611): socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe, 0x4}, {0xc, 0xfff3}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r5, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() (async) gettid() socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x38, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x10004000) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r11) getsockname$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (async) getsockname$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) 39.939011797s ago: executing program 2 (id=625): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) add_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000001000)={'syz', 0x1}, &(0x7f0000001000)="2e98", 0x2, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46f6a89e3da7c562, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)={0x2c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4d0950e45681200}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) renameat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in=@remote}}, {{@in6=@private2}, 0x0, @in=@local}}, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) 39.861564968s ago: executing program 2 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x25]}}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) (async, rerun: 64) getpid() (rerun: 64) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x8080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) (async, rerun: 64) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000080)={0x9, 0x2, 0x3c}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0xa6ff, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000140001032dbd7000fcdbdf250b"], 0x1c}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) copy_file_range(r5, 0x0, r5, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 24.747743203s ago: executing program 36 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x25]}}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) (async, rerun: 64) getpid() (rerun: 64) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x8080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) (async, rerun: 64) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000080)={0x9, 0x2, 0x3c}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0xa6ff, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000140001032dbd7000fcdbdf250b"], 0x1c}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) copy_file_range(r5, 0x0, r5, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 14.357738164s ago: executing program 7 (id=775): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd7a, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x56e60cb920c3db7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(0x0, 0x26) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x20, 0x1, 0x9fff, r4, 0x0, 0xffffff40, 0x1}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r6, &(0x7f00000033c0)=ANY=[], 0x107c) io_cancel(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x3, r3, &(0x7f0000000080)="29a4e6f46fff23369eba691f9c99299f97405d55efb225a3f03592b70f5d9a5003fb7c69b28ecdec96d0206d1d4073e708822e07a3c7bc2ee57a17c1a4636ffb87b47c4510bde8beae92f732f06c85720f5deabb7cccaf2111152b809c0c90f982010e58f10dda75ee2aea17ef08d7e598eed0d8c41f387770218cf00dfe57ec80848f4be168a147878e5ba5bce9c49d0e5e5d2939bd91ae7d6fc2655df31580fe745fd49fae5fabd9aabc826a40735b4445ee6510c399a04f5730a54a492b4c8279c91e58d93f828ab4f852dab6c01b31bec4df6bc0c844c6a83002b2630aef4dc7d31ef3e4bd2039a2f0299781", 0xee, 0x5, 0x0, 0x2, r6}, &(0x7f0000000340)) 11.517776937s ago: executing program 7 (id=782): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x4, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) io_setup(0x97e5ad60, &(0x7f0000000200)) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x27356216f27e5621) fsopen(&(0x7f0000000140)='securityfs\x00', 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) read(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x80c1) r2 = semget$private(0x0, 0x6, 0x0) semctl$SETALL(r2, 0x0, 0x11, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x8, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r4}, 0xc) semctl$GETPID(r2, 0x1, 0xb, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000540), 0x1, 0x7a1, &(0x7f0000000f80)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]}) 11.19665261s ago: executing program 7 (id=788): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 9.426290031s ago: executing program 9 (id=802): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x81502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x411f04f2, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x2, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc2dc}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0xfffffffe) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4048084}, 0x811) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES8, @ANYBLOB="97d1a30eb35bef3532dc6228a0049f2468399f79663fc91de9d8d8bb1f60a3711993eaee33d3614a9c3858a83169604675f51c82469e9d00b2edc43b571ef6245eaa80a121db00ad7956aee19f677db529a883bf145a2ab0d89c9085edcee4c5cae78ef2b072b81f7e59b681deed39e658fb61e25a25c847c6d6f83d9ef6fa83633a78a1947d063d928f9b429859eb28a0c815f873bcf4367775cbbb82b3f843fe9c4f30a99618c2fd9af5d23542dedd4fdc10"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180), 0x4) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x88, 0x0, &(0x7f0000000900)="b44c80630562443108347301af47fa0ff9b11fe7d5fe008c6392009c5bbd04080000000000000fae7a6a53200386ce51dec4a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240ca1fce3ee804892565862580967cecce07a590ce64bd320eb14a5d5bb2cc093b26e40b4662d2b522e223c4689bc3c3682840266c724f5f02ed46df", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x401) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) r6 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x8000000000006, &(0x7f0000441000/0x2000)=nil, 0x7) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x400004d) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x800, 0x188) read$hidraw(r7, &(0x7f0000000080)=""/157, 0x9d) listen(0xffffffffffffffff, 0x100101) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r8, 0x89f5, &(0x7f0000000000)) accept(0xffffffffffffffff, 0x0, 0x0) 8.776798128s ago: executing program 9 (id=807): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$eJzs3c9vHGf5APBn1nbiuFWStvn2W6K2nqQkdVvjrG2aYPUAjnftbLG9yHakRBya0jgoiqHQgtRWSKQS4oCoQAJx4VZx4lSpF3pBvcENLnBAQv0XKk7hZDSzu/bau+u1Xcd208/H2t358cz7PvNj581OducNPl9WT2wYW13NH7scv/rHfciYQ+xy6ZP3P3gve7x7N45ET7yY/CmiPyLSiN6IeCKib6q0UJ3rUtCdiBsR8XFEEhFHo/a6LTci+VU8vD7+cSS/z+rt6Mh2S6abVb7QDvr4AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwyiZKhWLo8mRqMxfvZbWRKQtpkoL1SRWV1vnNJap+Sjv9Tv56BcPdak3Iske0d/f6Or7iVPrsx+PiPRsPFkbezLvkDz6452HHj/50mO9hcbynbL5TI52KLYnWjbMm2+/c+fVlZXlN3ZYRf9ucztkZsrzlcVqZW5yppxWFqvpxMWLxQtXphfT6cpsefH64lJ5Lp1aKE8uVRfSoann0tGJifG0PHK9enV+pjQyW25MvPSVsWLxYvryyLfKkwuL1fkLL48sTl2pzM5W5mfymGx2FnMpOxC/WVlKl8qTc2l66/bK8vimnFp2UxY02m1NsqCxbkFjxbGx0dGxsdF3671nr024+OLEi5eKxd7iJtEScZ8OWg6XY5138/04jcOuFGrtf8RsVGI+rsa1SNv+TUUpFqIacx3m1zXa/3MXylvW29z+11v53qbZp7Ons/F0fbS/Q/vfIZf9+3sz3o534k68GiuxEsvxxoFn1PqX7ZEO84591rJnohzzUYnFqEYl5mIyn5LWp6QxERfjYhTjlbgSg7EYaUxHJWajHItxPRZjKcr5ETUVC1GOyViKaixEGkMxFc9FGqMxERMxHmmUYySuRzWuxnzMRCkm81Juxe18u49vkeNa0Oh2gsa2CGppzHfc/pdb/w3JF8zen8Rhl1br7f+R7qFDU/uREAAAALDnvvTXOH7q0b/8OyKJp/Lr8tOV2XLxoNMCAAAA9lASScST2VNfNvpUJD7/AwAAwIMmyX9jl0TEQAzWhhq/hHIRAAAAAB4Q+e16no5kcH2Cz/8AAADwgFm7x37tSsDaPXav9TSmdr0LfzLcuP1verP2erMeUS9iYLoyWx6Zqs6+NBrn87sM5L80aCmtJyLpy39+8HycqUWdGYi72evAeolZnf1Z1OjIS6PxfJytr8jQM9nLM0NtIsdqkc/WIp9tjuyJDZHjWSQAPOjObtEe1+6x3739fz6GaxHDp/Mmv/d0mza4qGUFgMNirY+d/9a7NGvT/tcjnu7U/n91i8//WcSjcWuw9pWCkXgtXo+VuBnDUf/GwWC7Uhu9EdS+hjDcdDUgt+lqwED9Kwt/v1SI4ZbrAf1r69ocuxxjMVy/InCsPr9+7SBZi00aOYzXAnruww4AgANwdst2eHvt/3CXz/8DvlIIAIfKWg/22x3IFtp2cG3goNcRANhIKw0AAAAAAAAAAAAAAAAAAAAAAAAAAAB7b1s38P/b+YiVleWInXYWsIOBk5un9O8kw60HCnF/cm4z0Hv/q9hqoGfnvTNsc+AfXWO+HjsuOdvHB7OhDHQbOOATEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsiiehpN71wNH8pRsSF/c7pfrp70AnslXR3iyX34l68Fcf3Oh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC+6+v3/C1F7fag2KXoLEeci4kZEfPugc9xL9w46gQPzvfy56f7/hYi+WE2it7bbI+mbKi1U57LdnxzN5n/y/gfvZY/uZbf2qpB3H1HY1LlEvYamKX0bl3okX2qgtPzmnR+9/oO0dDk/MC8vTc+W5mYWvrEe+HjyYa0LhOZuEBr5/uTcn3/dNPlIvfIPszVtb3O903m9pdZ6/7/d0h3q3YbbK8tjWU1L5WtLP/7+7beaZj0aZyKeGYoY2ljTd7NHh5rObN6eGyWfJj9Pjsfv4ka+/7Otkawm2S46ka//sVu3V5ZHXnt95eZaTj/dkNPJGIyImxH9289pMD+ftJUfdYW+rNZiHpQ9nepS3paaShztsF0fyQ+ZgR2tQ9p5HXL5du94cDUyGm+b0W9++Fic3/GePr/1nm4v+TT5V3Il/hk/a+r/o5Dt/3PR9t3Zpog8sulIaZ63YQsUapH5mo81z3hlc5lbbDj23C/jO/G1tf1faDr/1/fV/pyPmmps/76I2Pn74g8nWlqUdXmLdGpTi1Q/+7RdoH8tz1O1qA55/l+8ENF7ekdnlBe6nFH2/v1fr+/uUPwn7ur/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPySiJ520wsR5yLiZEScyMbTiNXNMXd3UV9hINlNmntmNzkfZklv26lNK7pxjZN7cS/eiuP7kBoAAAAAAAAA++By6ZP3P3gve+T/H98TXy7U56QRvRFxMvlt31RpoTrXpaC+iBuN/9Lv31kON7Knh9fHP87Gnuiy0MF+fQAAPtf+FwAA//822GxX") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 6.725945592s ago: executing program 4 (id=814): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setpriority(0x0, 0x0, 0x8) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0x2}, {0x4, 0xe}}}, 0x24}}, 0x0) r6 = socket(0x1d, 0x2, 0x6) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r7) wait4(r7, 0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) close(r6) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r10, r1, 0x0, 0x558410e9) r11 = openat(r10, &(0x7f0000000180)='./file1/file0\x00', 0x4040, 0x12c) ioctl$EXT4_IOC_SWAP_BOOT(r11, 0x6611) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80010, r0, 0x0) 5.548844626s ago: executing program 8 (id=819): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x88, 0x94, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) socket$kcm(0x2, 0x1, 0x84) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r4, 0x84, 0x25, 0x0, 0x0) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) 4.050308433s ago: executing program 8 (id=821): syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x60801) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000900)={0x6, 0x0, 0x6, 0x4, 0xe0, 0x8, 0x1}, 0xc) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x640, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa45, 0x2, @perf_config_ext={0x8, 0x400}, 0x1000, 0x400000, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x7ff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, &(0x7f0000000780), &(0x7f00000007c0)=r3}, 0x20) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, 0x0) r4 = open(0x0, 0x336643af0c40d313, 0x2) pwritev2(r4, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) socket$netlink(0x10, 0x3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r6, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x3, {}, 0x0, 0x40ca, 0x4}, @ib={0x1b, 0x3, 0x0, {"00000000000000000000000000000001"}, 0x3, 0xfffffffffffffffa, 0xfffffffffffffff7}}}, 0x118) lseek(0xffffffffffffffff, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000000000002000002e0000002"], 0x110) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000140)="c8cf638b0c94b7712fa9e8747791a95c57b604376f02c69ad336f345ebb57333b0ffce143c6b51cb0eba1fbaf35f99f7b8d409c7675a7d8bcde31b08028a4de2047c4e96c19ee263dbaa3b4ef277390b33456bbc9933d5ab06259af58e9a3af50a6fb5f1707c1353eb14c2f5ec33cf849624b0e38ff09904fd090562d9a6327d44d1635dd3bedb6c4b42b08fdd71bba80be5289327fb11e8b69c1dd6c05dbe9d3d620cb1dedc96a7ffbd403e6d47eed46a51bfcf77d2e17ef6c27ec39be397e72f0a4b7f2f098a45ee59d96a09e1814c", 0xd0}, {&(0x7f0000000240)="dde7d75e52a4cc2ae4da37a420f34e8eaa039ab4e71e2744db0f26d5c7a8c1e8f77972a3d5e1a11a9c34a3120eea1d5519024c7e734ddcf4e0a79c70d479a30cb7e7ce34432d249af83499682bde9a3542c6e829b98095e12da4262569cbea9921c9f0d5a5d1f127c4c524be", 0x6c}, {&(0x7f00000002c0)="c85a84aa9bd95a450d0cc2b8c8dc1f602bcbbd20289b13846ac211ffc6d4e0bb95ddc8ca35318d727b70bc4688c7414aa28d007d73eece19fd76298f3e803dd37005be2e0b9820fbdd62d6377b01846205251fe4edae4524e607fe374833def8b37618bfc1d6d9584f165c5e7cd9ea14593c8c0a0db36c82d40b2eecc67c9be0bf3f52940dc77fbc38593fbf99116b9914168d5b0f01a2c60ed0c5d59d9a7a5864479b4fd448f0d104324a616e2aa0feb942b2ad6a80d28f459b086643297cc2541821be99e0344c427d82f369148ac345f52ad0810eea33adb87894ecab7d441bfe0a48fb919c4e7ed407a2d9f8d5ae", 0xf0}, {0x0}, {&(0x7f0000000400)="f204e08f65086881b76726307a38c6105fdef9514881a8eed4f0d5c286f655469ad8603bbad87b3c04dfed2419807ed2f9c6c30248c8588073d97f38427c784ab54da9ed6bc8fc734eddb0975486489f05cab89f5df9c82f78c13efd715ca04cc44e30eb980bd1841f1200713cdee3cef7e7d569c75a435256eb42817ea87fa2ec8c43ac378be40da7c58f08feac8cadb0981e4955693e12cdb3e2f73bad7a3c91cbea023d8fa2b30fdd6019db991ed54275feb4157067c39eb69af9e05d28e92103d6699a9f5dc732590babc2cc466359e157fd57e150489cb87f077a78342f3f8530bc", 0xe4}, {&(0x7f0000000500)="5102e0318107ace3dfe0f9b7f18f5e57", 0x10}], 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1, 0x8}, {0x0, 0x9}, {0xb, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4940}, 0x20004011) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)) 3.997269344s ago: executing program 7 (id=823): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x4, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) io_setup(0x97e5ad60, &(0x7f0000000200)) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x27356216f27e5621) fsopen(&(0x7f0000000140)='securityfs\x00', 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) read(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x80c1) r2 = semget$private(0x0, 0x6, 0x0) semctl$SETALL(r2, 0x0, 0x11, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x8, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r4}, 0xc) semctl$GETPID(r2, 0x1, 0xb, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]}) 3.836754606s ago: executing program 7 (id=824): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xb, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x61}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x6a0080, 0x21) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_ethernet(0x5c, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x1947, 0x42}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x121c, &(0x7f00000020c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000140)='./bus\x00', 0x40042, 0x40) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x790b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000540)={{r6}, "9582fafdd1305594ae8dd58ad47fb9227b0c5616aee39d7d4c70ef6c44d5ef5ef7ffb3916d4a073b0071ce81abb6cc630e4b7f1d1d1083bbee2097a7a10b4c479d7da53757353c058b11edb684f553d3bf94097905d6585bf675ec1bbf079297b85970ce8ef7acddf2927480cc68ce7905616b2dfa5ba381c396059b18dde3e0068899b6dd06feb1650572f6b6174743f2040783df929344cad403f6fe7aafe495a2ce781031fe823fda5724496997dc0e369a5d5abab796f6d0b81621aaff163828e0c24875e6489072f2583e36614d202916e527118723916f0e85b2a3add81b05c185fd8dbd8ed9a7fcb120f5da82b3fea13c43c5b57af39e51a2242ef5805f15b8f51146fb089204932c3d8c4a9762937902504382f96f3776450c4ae60c406bc9c6de9a9e101925b989635fe06fca0b58226f82b51f6342b34a990d2be6181ad7be86cc384e48997720d012dc4878eb056c4c0cce5c5252a6331108f39c89e715cbc564bd7adf4d01874ec4501beaea0a467739e37ed5b72daf6317953123b2e2bc902dbf8eea83b8c8fc829e9a261fd34f44c02da3fe0bc66f5acfdd3788d45a52b4aba9d72adc9aa7c67d292dac366152d0f885db7c3dd2fb5480256e82b21449c2dec9fb0c94713a62872396cc05df0257001eaf54315e6e66b2d625a0251d74744ab63056079108e29c1043248e706e1efe133e3f1af6980a29430d12e97a598b96161e07ec90bd8bbced586eaef5d9029661fd92dd9734d8556e67993efc08ef401678e6a84199ee16ed92ca5a7586328add7fb1b7408d57e194f3d1376d31ecb2e2aebddcf95c297b8875fc403bb0ff4008a79ff0e6485c5f2b72ca72e8d69da2a17ce927dc7bb2cb2b6fa8dffdc4ae62e109ebceba465c3e23481b9e7b77917f74e3efa439d966307aa47da2d0ffcc14e9adae812b59d448c93c17cc562b8580c5b8b5ecc14a65aea29dcc924e60280c07a04c17f75aae5915e2871c05f04a7cd5786ef1bd9f6422f92ad0eedf0fa565608d921130891746682a1f66bbbc0955b183b5c7281586adf5c929a7a9fd06088f80055afd8f829180a5e5f207819f1d815218963e3f02a2055244ac46d513432c0defc003b2678bd225814f713e4fe9dff16f8536d56a3aa38e91af2423197663a8e8f42df43c9bef08978bdf7313ef19b626ae696183326347f27374b0f7a12cd54d0f7e1d8b1ffbe78ab4354cf7fa489aac321d23d4a7f78e064475391a1f9c11b4606de9c698d76cdb72a6dc5f4d73fa2fa4581ea53daeed5373c1ebf9479ed826a3eed2e6911793bf546156cc0462314725a1fb6bb09142281d38a33853dc180b5c20d253594a2b84e25d13c4e686e6ed4e9f461efe75ffcd91637c292dfaab2f9ba021b6fa541dddb2ab703c64f34b104ad92c0cb6e08e49f2b5ff7d36f9b08f7b3782e464e57e9e84fa5da8b0dfba5c9f01c40cacbf2cdc4744d77925f8fd8feb9193c02810880559f608b4dc3e38a160fa66398b229f2a6151c83e6d993323cdf49c87405f43b4af23996ed0a7b9af79fc0f904cde139708fafd72262d58d11d46738ac73f75306cccff460ec034c2decd0ada78776a96808e38e258f7db784366f679430f90cd024d6479309782b9f6f95bffb32aa1c650f8d8663ccd25b27031b0ff3a318025c0a5ad9ddcf65cb41fff184d6e0613d3fa056096d4ac01212d6efe5b97235cb510f4d646d9d0c640e7d8d29d7fc9f30b82a60c76a6f071b5a895fc854147909d4909f4fb9e11ea5068740651319ed1bfadb278842612a2cd3ca3ad75d6f2f85aa01e3b7f43efae9d51c69c308602b110ece52369af512cd154f9af1d218e4649e1378e544f9d66ef4d8af6b5ba53e077e4689b6e1569d14ad2ea12aca2b54105e51e5a1ef0f14efb4be27b497d0a88ea5dac2aa2fd51ac14ac097fa111f2c4069f899a1af37946ee105d4916901984217742e043731baff4c6903595ac9df9b907bede22c14a6760af19d0301cd1a040f12667dbddd88076e7ea36f6eebcc22da5c40cc780f3f4d31bd1b4e2628223f399719c4fcab1436b323d8a37495691c80946fc5bdf6f59343f5142a652252aa02b4a0ef5e2ea8526add19e6b75eba465b15e055ae9a11f160ec63b39332f9a045f34033c9a76378d3f3b5b9868c45d2520047e7de75759c86e380f5e07181a169343568f5c5bfa0bbd2419f57bb286946effa909ef963f7a709a18ae93215cd8ac5e61bc4ffbcd02906f40f009d731932255a50062607a1b23fff7c88d30fe34bbe59b9117a081c932cdc7df2ffca80de5ba55db82b8ae4b1571152b603dce0c4a7603c013f1093180a31d7126191edd1780f7bc82acbd10ef2ccac0b74cc85b0bd0fd4bbbf56d35554ba1118f5f8550648b9537829787f973f77b83d50153cb27a33633f5d8c5111a8f5b7b22d8b390bf99b8aa0ffe7322383d1703afb4ec125642285553bae79c9b35ca85b5e3f22ced8fc33f8d64a37c2009d1519616b1f45e89c542270f538f47bec6756bb3545baa0cd2df32f62b578c5788c99f7c98572b819b532ae97987366d93a68263ce2b0b698a2f5f239be2e38fc298bf6ebd083a7b7650fa614be70f6c1f59f524bfa5e2a15a00cd394b367797c0718edb97de469bdacb12042db6bfd174cdba858b9e52f665de80c63dd290cefe4de2e10d94f20823042dae890245c48f37baa687af44d9cb525e7ae057bb7659d8c407900345b3ee0c2653f68ffb01d86d76f952ad7966eeed3d0af0b917d0951e1c184ae2fc8f2d93892eab3402f2988c769a07f255c2be2aac3cc7d66e63a5ec95a6f92ad3a0dc2cc6bef23ab36dd2c4a0a96ef4d03464ea9fba1b97b56c66e6575623e453546ba0170ddb8b665700bf0d584457b96a5145361be26f60fca129f78fa6eecd475b9d9176615e94178ed21f3044a19d27dd7ac2831db9d87914e6cbac03f975195f6c19e54949b381fb378363d46e6740d660f119775aae4aa6538990281edae5ddf47704c68a71d22f2935ec01b8e3c418c1236ccc9cefcf2f7ce5d59c1fe2a885c13a7ad1fbf7a9c479ff68757b949c12139b6c29fa9d5d722258167f330da6951a4d2c7d70c6fc6663aff59bb359ebb3506ca16f1a8ef2c9669e752d0d9215f7058dbed42386deb0c41bc425309d516aaf4b377ac0a5181df8ca44a652695882d21bb66d47798cd5cc05b48411abca5d5ed883cee2667e2e8a10690479c4cd8020e00def70e2577df546dda6876fe88ced389f074e82e1dad5c161246cfbef9d461dfb2dfcfebc78c301ab1f668785f26a9b05989a9bac1b3e870c429be3c67c3035aa20b8eea2ffc9c9bed8f1893958ecd1bd616a5284d2914e355832f82c82fd6f45a9bf1875c01206ddecd32aadc510eaa25c53e1fa9ccea5ce432c397e1842aa9df3030a8276b1dfb400a7896dd8e5e4d65cb48bb94283e7bd71b0f70aec0c75e6533967bdb7684617bb61d467a663539962f407876ef53e46d4e14e33b7c5559a582feb03bf84ec29148004f8f377cccb9164f1852c92a528591838c056975ed43ac085354fd89f51f4ea2c35abe04dfc0d29bed36499d495b8cac499d683b2cf13c9e33feba48363167ddfb2bbbe2ad0c6074177759a0e91c0a3169d7b151ce3d409411a6e516fc954792eb9194a83e5d19b60a4a80e6afbd6f20664b2b8298e3f4b086d70bce7f50013d048b11ceb5141d62455895620eca22b45f4da70f9ac48c8c15344e0e9928c119d4971b91951b40abbb99eb8a1acccb91a864a57874c00f06b70cdbbfeea6fe15317f9dac6c856cb7c1e68415ee3ad76c1e8d9f1ca2e1f103586f1c5e7bc2bd8f0cd6ade26ec4102830e1040f86f359647b25c1d681a23d4c737b1a4e13fffb8a667f4da32223647fe1b7fa5598849f6298ab92df19dc6880db6fe2cfb1aa3edb44bd4f10487cfd81df857a8ee1e850291c24ff80cca6cd4262536148f704811b577ea432521e9a1bbaca58919b171a992d6b8487cfff34de6f13c915e33c15df5814dc74d96a37a225f123895161cbed1b08c3500f12d4b283571adc2ee0c81bd64c38a3cf770a5c937f88125eb6ec4e150689129dbc2242da24ad033c7741114d1e1120f01facaaa9c2806420efe87003a908fb4464eb3c6347da063c113533f0cf1e65c1fe79b9c86ae54c7418553a8d0482e85e681446e7be8320036d436b019d4aaaf2c99729508173ffb3fef240473cada23d0ab59774420161ee44260430dc346bfc46e05cf63055772256c3836beaa9f78252541ca74cd5f595a2fd263016f9e034e5252414f3ae6e96cca9bf8a05849d857c03695d5609dbfaa7f5a6a3725a3916fbf745c941b755b645197456d3d3fdd7d50d5a47a3191b32d3175a1864d84140e63e5d21384e2b9b84cf91e4c19ab9c885629af7237b28a8a0149f37c91d9310e1aeb1e8cce45437bb8d11b93e875594fc153e5b5db7be43b694e779c0f9361efe3039ca33c5961f36b8aae8fe7fdf6e30b3be518ed98d096872d411a84137486e1ae586f42e89b39b41ab7f1c41a749c6bef090d429649c855569b59ec3380c6bca59af8d2081ea2621a2b8b8ace57f8f45ac5d9e901d287518c6d762ce42bd8da671316fcc2c3ea9e5ce68e644a92c0b4d9769c1f0441e107bf502f997067cef1a25f32b62b4206d1f0bb3df33acd235e88d8331522a21545bb68627f7f3619594444a515590df540c60cc6548ebeb54487ab0d38fdb55a1cf8ff3a486f6214c54ff024208a19fc245a005bb43f22db96719cd03f7ffd5da50045f23d1d336b607421061a26d00f8d920c42759ea49ee3411155a15eb58b8d6e4806d60d9643f07c008a3ef52c55e5fc242fe58b92553dc9f5d8349b8c2251600cfc573494995e2d9bf85183afec5459dece4f8504a1d10ae3c91c04d6a8bb717e7a7c0012e5423526018e6782b88d37a704ea150f42eae948e4c806cf93b476ec0d9e99cf51c29ef7eee02b0fd10f52c6fe05e12a7a8ca19b91b66083d73dde69d874c169795b516025f1e746c735b090985e1e57e813601e4764b662173d810a90e8a2676696f490ef73116192394a2e333ca24fe273d18965bc333e4f5584d3cf0d14522cba13eab165aa23219352b7a9d9c09587568fc4be8379e549cf885c6ffab88e742dd8c1d6b629ecc7f89da19d3c1675f4a2f54981a4d9d04f69f7c931e6070e63133fd52ccafcc30723d2db8646b48be71895f7321cf1235ecb878272b4fa9af63b0fdd79baed53d81c6fac26a7f3bdebc30d9fd2aadb0eb03647d670a880931f8df096b20e5f7f8f79d60566f0d650d33927ea027c73a3eb0604d4b6984c05f246878c853d2af93b1e6306d30b947dda8da8b6e587b0c297ff516c4b117a670c28e410dd79529938f1f5d02df2e85dd569655ea2bb3baf9b1dd00a7cccdee5148ead58f0508358c431680c955e3f9a5bc15bcd7af14598b31ea7c15b17687b2a4987e785277f1edcac3c123819a0d4070630b00ab5a68b2ae0e382501a408e862ab5c27ae9c580b63a8ac64faac7dcecfc050bd7f9593e32836000201c732fcf39e79b5fdab1cf111676be1ec0a4bd52ebbe4d0d297f56df00220c23f5a8c9503709b918bc35ee48b9cbe237b1d6d53067d7e01cf8b74af9d96162ea43db5e1d60e413b9f87aeb9b42428a4c0f4c1e76609e453811c4eb0cfdc2dcdc74871940503ab229f8a9c989e82b33b9422ba242bc3b5fc021ca4c4a9b2a5f5d089f2ddb0828a00868369d17f0dd1fbcd0161b3916"}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee0, 0x9, 0x7ffd, 0x90, "99000100000000060000000000008000"}) syz_emit_ethernet(0x9a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) 3.45512025s ago: executing program 4 (id=826): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070ca00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r8}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102270, 0x10000, 0x8, 0x1, 0xa, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = io_uring_setup(0x7c84, &(0x7f0000000100)={0x0, 0x1e78, 0x40, 0x2, 0x80002c7}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f00000003c0), 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r9, 0x19, &(0x7f0000000240)={0x7, 0xfffffff7, 0xfbe4}, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0xffffffff, 0x0, 0x0}) 3.380897411s ago: executing program 8 (id=827): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getrandom(0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) unshare(0x6020400) timer_create(0x3, 0x0, &(0x7f0000000300)) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x60000600) syz_emit_ethernet(0x0, 0x0, 0x0) 3.084288515s ago: executing program 8 (id=828): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="a1ab00000000020000003200000008000300", @ANYRES32=0x0, @ANYBLOB="6d1c12531ca07a51b4c1d5608b2387933d94854b6cdd9b8d066774da4f0396753a894dd2aa8ab966da5bbbea5dad418707ed56a6240076868f7c961caab407be504a27e14c80f00723390da37f83c438a749b3dcea3476c135c678012c4620564a84197d3070c3afbba39062a31ec8a5331c0000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000050) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x3003, 0x0, 0x0, 0x4, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r1, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}]}, 0x14, 0x1) fchown(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8, 0x7, 0x0, 0x55a}) close(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0xff03, 0x260, 0xffffffff, 0x130, 0x130, 0x98, 0x98, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0xff, 'ipvlan1\x00', 'sit0\x00', {}, {}, 0x62, 0x1c6a0dc5b9630812, 0x30}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'macsec0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x3, 0x300) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syslog(0x2, &(0x7f0000002800)=""/116, 0x74) 2.865848217s ago: executing program 9 (id=829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) open$dir(0x0, 0x2, 0x190) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000a80)={r2, 0x0, "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"}, &(0x7f0000000180)=0xfebd) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x8000001}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x20020004) 2.630991529s ago: executing program 8 (id=832): r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x8, 0x80, 0x1, 0x0, 0x0, 0x808, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x100012, 0x7, 0xf98c, 0x1, 0x5, 0x8, 0x3, 0x0, 0x8001, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) 2.486583062s ago: executing program 8 (id=834): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x4, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) io_setup(0x97e5ad60, &(0x7f0000000200)) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x27356216f27e5621) fsopen(&(0x7f0000000140)='securityfs\x00', 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) read(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x80c1) r2 = semget$private(0x0, 0x6, 0x0) semctl$SETALL(r2, 0x0, 0x11, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x8, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r4}, 0xc) semctl$GETPID(r2, 0x1, 0xb, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000540), 0x1, 0x7a1, &(0x7f0000000f80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]}) 2.312804113s ago: executing program 9 (id=835): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getrandom(0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) unshare(0x6020400) timer_create(0x3, 0x0, &(0x7f0000000300)) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x60000600) syz_emit_ethernet(0x0, 0x0, 0x0) 2.312503344s ago: executing program 4 (id=836): bpf$MAP_CREATE(0x30000, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) 2.278985013s ago: executing program 4 (id=837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010a050000007c000000000000000006090001"], 0x20}, 0x1, 0x0, 0x0, 0x24041840}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x8000000000000001, 0x4}, 0x5110, 0x0, 0x3, 0x5, 0x1, 0x9}, 0x0, 0x1, r5, 0xa) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x922bac8576bdadce) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x6, &(0x7f0000019040)=r7, 0x4) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001) pwritev2(r8, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}], 0x3, 0x200, 0x4, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060301000000000000000000000000140007800800114000000000050015000c00000005000100060000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574000000090002"], 0x64}}, 0x20004800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.206905065s ago: executing program 4 (id=838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f00000000c0)={0x0, r0, 0xffffffffffffffff, 0x3, 0x800, '\x00', {0x3, 0x9, 0x9, 0x3, 0xb, 0x80000001, 0x40, 0x2, {0x100000000, 0x5}, {0x5, 0x800}, {0xfffffffffffffff3, 0x1}, 0x6, 0xfff, 0xb6c3, 0x7fffffff, 0xffffffdd, 0x0, 0x4, 0xff, 0x7f, 0x2, '\x00', 0x9, 0x2, 0xed9, 0x9}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000078000000030a01020000000000000000010000000900030073797a32000000004c000480080002400000000008000140000000051400030076657468315f6d6163767461700000000800014000000004080002400ba5bfd01400030076657468315f766972745f77696669000900010073797a31"], 0x120}}, 0x0) 2.108831295s ago: executing program 4 (id=839): syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) unshare(0x28000600) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x80002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dbd, 0x4, @perf_bp={0x0, 0x2}, 0x100101, 0x2, 0xeffffffe, 0x6, 0xfffffffffffffffd, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x7, 0x491, 0x0, 0x10000000, 0x0, 0x400984, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x100) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@remote}, &(0x7f00000001c0)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000400)=ANY=[], 0x0, 0x53, 0x0, 0x1}, 0x28) 1.956471817s ago: executing program 9 (id=840): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) 1.568808522s ago: executing program 6 (id=842): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x40939e, 0x20, 0x3, 0x35}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) r3 = syz_io_uring_setup(0xb57, &(0x7f00000000c0)={0x0, 0x2617, 0x800, 0x3, 0x23c, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7082000000000007b8af8ff00000000bfa200000000000000b704000000f4ffff84000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0307600300ccec9e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010025bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="8411000000000000200012c11f0001006d61637365630000100002800c0001000100000000000000"], 0x40}}, 0x20008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0xe, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x44050}, 0x8090) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x13c, r10, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x13c}}, 0x20000805) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = io_uring_setup(0x758a, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x213}) close_range(r11, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000540)={&(0x7f0000001000)={[{&(0x7f0000000200), 0x0, 0x3}, {&(0x7f0000000240)="20d73ce495480bb04e26b60f7241e78b4582838388284be3da6ab0afcccb0ef4f3d0d7464aa53c3fe31edacfe54f42c11561a8dad2f2b29fa0c137b68a2b85eb433e75107a9d1f6f69c982c296a566e400e88751dd44bbb129af0baa5852b495b302630f7eeb5be471f5e20145f9347b5dd36ee359c127e683898905d9b8aeb52aaa2ea3eab2efc976d54efd18e8c82f8fc246fe383b032a9ad02c83f9a9223e2e0a33dd245bbadba7072d0d0b7396321cdf3dac36231bfe4b91439438dc4f2bb474d9a51d2e581130851f6579844e87ce29648221a900ed8abaa2f585a39342401f15a2dd8c6014c8645ffb3b77b423", 0xf0}, {&(0x7f0000000340)="8627f73e39436e89ef872df9eeaf19b4aff4dead66465da434c82b172af263f2763e69e4024b278c5c78d28a0c710e169ed95fd98024085192661070792481bef0129004cfce22b4145c49004d0d2334079f0dfa8ae220eeea0b22c03a", 0x5d, 0x3}, {&(0x7f00000003c0)="abd4beb35b91576882ecac5598e4f193c19c7a3413682c11dc7eb91564a8fe4359eaacf3b8de4449dd0eb8a102c7d597beca022a52a8f706a4fa11b1acd869e1e75a2da65c703fc4b01a0d50587e87a1ca0646a6c51686cce8b8a6f53d1b162a56cdc61bf53b72972d5e24d993420bae737a03f49fd47d314838e2c07476fcef6fcf10a78c47443d0dfa59c10b5a85974b2145f3c056", 0x96}, {&(0x7f0000000480)="7db35e37fbd2ebf585800423d48cd60cc209f2880223c386f053a8586a591068207dbed990", 0x25, 0x2}, {&(0x7f00000004c0)="1238cdd115eb0f888348905245dfb4e9fe154b5920dc948d37c162527b9fceeb11904ae62793ae5353b137097a03f82acea16bcbebdd9874ee74199bc83eb51a2f5de7fe3e6bc21831b977638dd8c16b07e61f70524c4aebab63085826bd5feb33bd9fa6577e05819499e427ee0a140d", 0x70, 0x3}]}, 0x6}, 0x1) r12 = socket(0x1, 0x803, 0x0) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f0000000340)=0xa, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000580)={0x0, 0x10000, 0x400, 0x125, 0x3b, 0x1, 0x0, 0xfffffff7, {0x0, @in6={{0xa, 0x4e23, 0x5, @private0}}, 0x8, 0x6, 0x0, 0x7, 0x8}}, &(0x7f0000000640)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000000700)={r13, 0x7f}, 0x8) 1.266530195s ago: executing program 6 (id=843): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80840, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) gettid() (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000040000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc07e, 0xc000, 0x8, 0xc1}) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffc) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x4ffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x50) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000200)=[0x2, 0x7fffffff], 0x2) 1.087486578s ago: executing program 6 (id=844): r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x8, 0x80, 0x1, 0x0, 0x0, 0x808, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x100012, 0x7, 0xf98c, 0x1, 0x5, 0x8, 0x3, 0x0, 0x8001, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) 1.024960088s ago: executing program 6 (id=845): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x2000000, 0x48b, &(0x7f0000000040)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 956.845669ms ago: executing program 6 (id=846): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x12ac, &(0x7f0000002000)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) eventfd2(0x9, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c77, &(0x7f0000000040)={0x0, 0xc8a0, 0x1c008, 0x8, 0x333}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, 0x0, 0x89901) time(0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x9, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) (async) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 816.488101ms ago: executing program 7 (id=847): unshare(0x2a020600) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000680)={&(0x7f0000000000)={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2c}}}], 0x30}, 0x20000000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x9, 0x40]) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) r2 = memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) fchmod(r2, 0x1fe) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x0, 0x0, &(0x7f00000001c0)={0xc29, 0xfcd, 0x4, 0x0, 0x7, 0x4, 0x2126, 0x4}, &(0x7f0000000200)={0x6, 0x7, 0x0, 0x4, 0x3, 0x6, 0x7ff, 0x100000001}, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x7fffffff]}, 0x8}) r3 = semget(0x2, 0x3, 0x288) semtimedop(r3, &(0x7f0000000340), 0x0, &(0x7f0000000380)={0x77359400}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x9, 0x10000]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 697.565382ms ago: executing program 6 (id=848): socket$kcm(0x10, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xdc560000) r1 = getpid() r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030"], 0xa0}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000880)={[{@grpid}, {@dioread_nolock}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x128, 0x1170, 0x1170, 0x128, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x9}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2f0044, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000001c0)={'#! ', './cgroup', [{}, {0x20, '/dev/loop'}, {0x20, 'memory.events\x00'}, {}], 0xa, "027508000000000000000cfa"}, 0x33) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x10042, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x9302, 0x0, 0x3, 0x0, 0x80000000b4c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 0s ago: executing program 9 (id=849): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) kernel console output (not intermixed with test programs): 129.096962][ T5588] EXT4-fs error (device loop8): ext4_append:88: inode #2: comm syz.8.395: mark_inode_dirty error [ 129.117447][ T5595] loop7: detected capacity change from 0 to 164 [ 129.143724][ T5588] EXT4-fs error (device loop8) in ext4_append:100: Corrupt filesystem [ 129.155816][ T5588] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.395: corrupted inode contents [ 129.179084][ T5588] EXT4-fs error (device loop8): add_dirent_to_buf:2151: inode #2: comm syz.8.395: mark_inode_dirty error [ 129.194548][ T5595] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 129.306446][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.8.395'. [ 129.473915][ T5618] tmpfs: Bad value for 'mpol' [ 129.776870][ T5618] loop6: detected capacity change from 0 to 512 [ 129.823658][ T5631] 9p: Bad value for 'rfdno' [ 130.227458][ T5618] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.403: iget: bad i_size value: 38620345925642 [ 130.333080][ T5618] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.338167][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 130.338219][ C1] EXT4-fs (loop6): initial error at time 1777947998: ext4_orphan_get:1397: inode 15 [ 130.338398][ C1] EXT4-fs (loop6): last error at time 1777947998: ext4_orphan_get:1397: inode 15 [ 130.357558][ T5618] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.403: couldn't read orphan inode 15 (err -117) [ 130.357677][ T5618] loop6: lost filesystem error report for type 5 error -117 [ 130.384259][ T5618] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.578822][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 130.765998][ T5644] loop7: detected capacity change from 0 to 128 [ 130.789988][ T5644] msdos: Unknown parameter 'os1xfloppy' [ 130.802265][ T5646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.413'. [ 130.866504][ T5646] loop6: detected capacity change from 0 to 512 [ 130.898031][ T5646] EXT4-fs (loop6): 1 orphan inode deleted [ 130.910164][ T5646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.012520][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 131.012537][ T28] audit: type=1400 audit(1777947998.810:831): avc: denied { setopt } for pid=5645 comm="syz.6.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.041555][ T5654] netlink: 64 bytes leftover after parsing attributes in process `syz.6.413'. [ 131.429460][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.505416][ T5588] Set syz1 is full, maxelem 65536 reached [ 131.542808][ T5019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.570563][ T28] audit: type=1400 audit(1777947999.370:832): avc: denied { create } for pid=5668 comm="syz.6.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 131.614152][ T5673] capability: warning: `syz.6.416' uses 32-bit capabilities (legacy support in use) [ 131.632311][ T28] audit: type=1400 audit(1777947999.370:833): avc: denied { ioctl } for pid=5668 comm="syz.6.416" path="socket:[11929]" dev="sockfs" ino=11929 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 131.673703][ T28] audit: type=1400 audit(1777947999.400:834): avc: denied { sqpoll } for pid=5668 comm="syz.6.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 131.790761][ T5683] loop8: detected capacity change from 0 to 1764 [ 131.911203][ T5682] loop4: detected capacity change from 0 to 512 [ 133.140029][ T5682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.152607][ T5682] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.301722][ T28] audit: type=1400 audit(1777948001.100:835): avc: denied { write } for pid=5666 comm="syz.4.418" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.375635][ T5702] FAULT_INJECTION: forcing a failure. [ 133.375635][ T5702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.395967][ T5702] CPU: 1 UID: 0 PID: 5702 Comm: syz.2.422 Tainted: G W syzkaller #0 PREEMPT(full) [ 133.396062][ T5702] Tainted: [W]=WARN [ 133.396070][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.396091][ T5702] Call Trace: [ 133.396098][ T5702] [ 133.396107][ T5702] __dump_stack+0x1d/0x30 [ 133.396172][ T5702] dump_stack_lvl+0x95/0xd0 [ 133.396196][ T5702] dump_stack+0x15/0x1b [ 133.396216][ T5702] should_fail_ex+0x263/0x280 [ 133.396257][ T5702] should_fail+0xb/0x20 [ 133.396282][ T5702] should_fail_usercopy+0x1a/0x20 [ 133.396313][ T5702] _copy_to_user+0x20/0xa0 [ 133.396344][ T5702] simple_read_from_buffer+0xb5/0x130 [ 133.396427][ T5702] proc_fail_nth_read+0x10e/0x150 [ 133.396511][ T5702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.396539][ T5702] vfs_read+0x1ab/0x7f0 [ 133.396626][ T5702] ? __rcu_read_unlock+0x4e/0x70 [ 133.396647][ T5702] ? __fget_files+0x184/0x1c0 [ 133.396724][ T5702] ? mutex_lock+0x57/0x90 [ 133.396830][ T5702] ksys_read+0xdc/0x1a0 [ 133.396859][ T5702] __x64_sys_read+0x40/0x50 [ 133.396886][ T5702] x64_sys_call+0x2886/0x3020 [ 133.396948][ T5702] do_syscall_64+0x12c/0x3b0 [ 133.396973][ T5702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.396999][ T5702] RIP: 0033:0x7f5eea1dd60e [ 133.397016][ T5702] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.397101][ T5702] RSP: 002b:00007f5ee8c2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.397122][ T5702] RAX: ffffffffffffffda RBX: 00007f5ee8c2d6c0 RCX: 00007f5eea1dd60e [ 133.397136][ T5702] RDX: 000000000000000f RSI: 00007f5ee8c2d0a0 RDI: 0000000000000008 [ 133.397149][ T5702] RBP: 00007f5ee8c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 133.397162][ T5702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.397174][ T5702] R13: 00007f5eea496218 R14: 00007f5eea496180 R15: 00007ffecf444f48 [ 133.397273][ T5702] [ 133.410014][ T5699] loop7: detected capacity change from 0 to 2048 [ 133.554212][ T5709] loop2: detected capacity change from 0 to 2048 [ 133.604105][ T28] audit: type=1400 audit(1777948001.330:836): avc: denied { bind } for pid=5703 comm="syz.8.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.639254][ T5710] netlink: 'syz.7.424': attribute type 10 has an invalid length. [ 133.677109][ T5707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.427'. [ 133.692673][ T5709] loop2: p2 p3 p7 [ 133.694787][ T5710] syz_tun: entered promiscuous mode [ 133.702488][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.703254][ T5710] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 133.768056][ T5710] netlink: 28 bytes leftover after parsing attributes in process `syz.7.424'. [ 133.787427][ T5716] netlink: 'syz.2.428': attribute type 10 has an invalid length. [ 133.817793][ T5699] loop7: p2 p3 p7 [ 133.858278][ T5716] syz_tun: entered allmulticast mode [ 133.880155][ T2982] loop7: p2 p3 p7 [ 133.903730][ T5716] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 134.055834][ T5709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.172311][ T5734] loop8: detected capacity change from 0 to 512 [ 134.183681][ T5716] bond1: (slave macvlan2): Error -22 calling dev_set_mtu [ 134.739739][ T28] audit: type=1400 audit(1777948002.290:837): avc: denied { write } for pid=5730 comm="syz.6.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.765128][ T5734] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.777947][ T5734] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.086520][ T28] audit: type=1400 audit(1777948002.600:838): avc: denied { write } for pid=5724 comm="syz.8.433" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.115811][ T3951] udevd[3951]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 135.194085][ T5745] loop7: detected capacity change from 0 to 1764 [ 135.464943][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 135.485208][ T4606] udevd[4606]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 135.578819][ T5019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.628532][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 135.786026][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 135.799947][ T3951] udevd[3951]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 136.788108][ T5758] tmpfs: Bad value for 'mpol' [ 136.831652][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 136.981643][ T5765] tmpfs: Bad value for 'mpol' [ 137.167522][ T5758] loop8: detected capacity change from 0 to 512 [ 137.260634][ T5780] loop7: detected capacity change from 0 to 512 [ 137.385100][ T5780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.397885][ T5780] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.421483][ T5758] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.439: iget: bad i_size value: 38620345925642 [ 137.455774][ T28] audit: type=1400 audit(1777948005.250:839): avc: denied { write } for pid=5766 comm="syz.7.441" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.618752][ T5758] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.621032][ T5758] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.439: couldn't read orphan inode 15 (err -117) [ 137.630564][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 137.630632][ C0] EXT4-fs (loop8): initial error at time 1777948005: ext4_orphan_get:1397: inode 15 [ 137.630732][ C0] EXT4-fs (loop8): last error at time 1777948005: ext4_orphan_get:1397: inode 15 [ 137.688161][ T28] audit: type=1400 audit(1777948005.470:840): avc: denied { write } for pid=5746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.711694][ T5758] loop8: lost filesystem error report for type 5 error -117 [ 137.739663][ T5758] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.769668][ T28] audit: type=1400 audit(1777948005.570:841): avc: denied { write } for pid=5787 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.814126][ T5765] loop6: detected capacity change from 0 to 512 [ 137.824751][ T28] audit: type=1400 audit(1777948005.620:842): avc: denied { write } for pid=5791 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 137.874796][ T5795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'. [ 137.919576][ T5765] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.442: iget: bad i_size value: 38620345925642 [ 137.941045][ T4745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.942269][ T5765] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.952980][ T5765] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.442: couldn't read orphan inode 15 (err -117) [ 137.962533][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 137.962599][ C1] EXT4-fs (loop6): initial error at time 1777948005: ext4_orphan_get:1397: inode 15 [ 137.962698][ C1] EXT4-fs (loop6): last error at time 1777948005: ext4_orphan_get:1397: inode 15 [ 138.013961][ T5765] loop6: lost filesystem error report for type 5 error -117 [ 138.024960][ T5019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 138.050156][ T28] audit: type=1400 audit(1777948005.840:843): avc: denied { write } for pid=5794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.050479][ T5765] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.109634][ T28] audit: type=1400 audit(1777948005.910:844): avc: denied { write } for pid=5814 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.278471][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 138.374350][ T5808] loop4: detected capacity change from 0 to 164 [ 138.458344][ T5829] loop8: detected capacity change from 0 to 512 [ 138.525227][ T5829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.538296][ T5829] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.577049][ T28] audit: type=1400 audit(1777948006.370:845): avc: denied { write } for pid=5822 comm="syz.8.450" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.694289][ T5808] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 139.002288][ T5837] loop7: detected capacity change from 0 to 1764 [ 139.174058][ T5019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.224778][ T5845] 9p: Bad value for 'rfdno' [ 140.044125][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 140.218353][ T28] audit: type=1400 audit(1777948007.870:846): avc: denied { mount } for pid=5838 comm="syz.6.454" name="/" dev="ramfs" ino=12917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 141.083999][ T5869] syzkaller0: entered promiscuous mode [ 141.102674][ T5869] syzkaller0: entered allmulticast mode [ 141.311548][ T5879] tmpfs: Bad value for 'mpol' [ 141.324243][ T28] audit: type=1400 audit(1777948009.110:847): avc: denied { read } for pid=5880 comm="syz.2.463" name="file0" dev="tmpfs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.383651][ T5882] loop2: detected capacity change from 0 to 1764 [ 141.411123][ T5890] loop6: detected capacity change from 0 to 512 [ 141.419567][ T5882] iso9660: Unknown parameter 'de' [ 141.486201][ T5892] 9p: Bad value for 'rfdno' [ 141.563716][ T5882] loop2: detected capacity change from 0 to 1024 [ 141.587174][ T5893] loop4: detected capacity change from 0 to 512 [ 141.624645][ T5882] ext4: Unknown parameter 'fowner' [ 141.636229][ T5890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.649537][ T28] audit: type=1400 audit(1777948009.410:848): avc: denied { write } for pid=5857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.748653][ T5893] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.462: iget: bad i_size value: 38620345925642 [ 141.815476][ T5890] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.931742][ T5893] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.932301][ T5893] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.462: couldn't read orphan inode 15 (err -117) [ 141.941575][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 141.941595][ C1] EXT4-fs (loop4): initial error at time 1777948009: ext4_orphan_get:1397: inode 15 [ 141.941645][ C1] EXT4-fs (loop4): last error at time 1777948009: ext4_orphan_get:1397: inode 15 [ 142.045024][ T5890] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.464: corrupted inode contents [ 142.156878][ T5890] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #2: comm syz.6.464: mark_inode_dirty error [ 142.206132][ T5890] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.464: corrupted inode contents [ 142.253856][ T5890] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.464: mark_inode_dirty error [ 142.271141][ T5893] loop4: lost filesystem error report for type 5 error -117 [ 142.271676][ T5893] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.324596][ T5890] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.464: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 142.324596][ T5890] [ 142.430787][ T5890] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.464: corrupted inode contents [ 142.453747][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 142.494314][ T5890] EXT4-fs error (device loop6): ext4_append:88: inode #2: comm syz.6.464: mark_inode_dirty error [ 142.514219][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 142.514236][ T28] audit: type=1400 audit(1777948010.310:853): avc: denied { write } for pid=5920 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.584346][ T5890] EXT4-fs error (device loop6) in ext4_append:100: Corrupt filesystem [ 142.620042][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.464'. [ 142.663520][ T28] audit: type=1400 audit(1777948010.460:854): avc: denied { write } for pid=5889 comm="syz.6.464" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.691323][ T5921] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.464: corrupted inode contents [ 142.734905][ T5921] EXT4-fs error (device loop6): add_dirent_to_buf:2151: inode #2: comm syz.6.464: mark_inode_dirty error [ 143.262911][ T5929] loop8: detected capacity change from 0 to 512 [ 143.418635][ T5929] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.458074][ T5929] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.527128][ T5936] loop4: detected capacity change from 0 to 512 [ 143.814201][ T28] audit: type=1400 audit(1777948011.610:855): avc: denied { write } for pid=5928 comm="syz.8.467" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.856731][ T5938] loop2: detected capacity change from 0 to 1764 [ 143.882066][ T5929] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.467: corrupted inode contents [ 144.013503][ T5936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.026218][ T5936] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.072570][ T5929] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #2: comm syz.8.467: mark_inode_dirty error [ 144.113875][ T28] audit: type=1400 audit(1777948011.890:856): avc: denied { write } for pid=5930 comm="syz.4.466" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.137053][ T5929] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.467: corrupted inode contents [ 144.173279][ T5929] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.467: mark_inode_dirty error [ 144.201158][ T5929] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #2: comm syz.8.467: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 144.201158][ T5929] [ 144.205089][ T28] audit: type=1400 audit(1777948012.000:857): avc: denied { write } for pid=5928 comm="syz.8.467" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.244019][ T5929] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.467: corrupted inode contents [ 144.270234][ T5929] EXT4-fs error (device loop8): ext4_append:88: inode #2: comm syz.8.467: mark_inode_dirty error [ 144.338914][ T5929] EXT4-fs error (device loop8) in ext4_append:100: Corrupt filesystem [ 144.359059][ T5942] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.467: corrupted inode contents [ 144.371202][ T28] audit: type=1400 audit(1777948012.160:858): avc: denied { write } for pid=5928 comm="syz.8.467" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.403187][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.420414][ T5942] EXT4-fs error (device loop8): add_dirent_to_buf:2151: inode #2: comm syz.8.467: mark_inode_dirty error [ 144.467410][ T28] audit: type=1400 audit(1777948012.260:859): avc: denied { listen } for pid=5943 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.499190][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.8.467'. [ 144.561118][ T5949] loop4: detected capacity change from 0 to 512 [ 144.653604][ T5949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.686368][ T5949] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.755167][ T5954] loop2: detected capacity change from 0 to 512 [ 144.842416][ T5949] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.471: corrupted inode contents [ 144.893711][ T28] audit: type=1400 audit(1777948012.630:860): avc: denied { write } for pid=5948 comm="syz.4.471" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.935958][ T5954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.948807][ T5954] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.022974][ T5923] Set syz1 is full, maxelem 65536 reached [ 145.101459][ T5949] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #2: comm syz.4.471: mark_inode_dirty error [ 145.203258][ T28] audit: type=1400 audit(1777948012.780:861): avc: denied { write } for pid=5945 comm="syz.2.470" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.262375][ T5949] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.471: corrupted inode contents [ 145.276769][ T5949] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.471: mark_inode_dirty error [ 145.277275][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.304079][ T5949] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.471: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 145.304079][ T5949] [ 145.324598][ T28] audit: type=1400 audit(1777948013.100:862): avc: denied { write } for pid=5948 comm="syz.4.471" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.346375][ T5949] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.471: corrupted inode contents [ 145.368409][ T5949] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.471: mark_inode_dirty error [ 145.398253][ T5949] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 145.417365][ T5958] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.471: corrupted inode contents [ 145.432641][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.456074][ T5019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.492704][ T5963] FAULT_INJECTION: forcing a failure. [ 145.492704][ T5963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.521862][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.472'. [ 145.533855][ T5958] EXT4-fs error (device loop4): add_dirent_to_buf:2151: inode #2: comm syz.4.471: mark_inode_dirty error [ 145.552021][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: syz.2.473 Tainted: G W syzkaller #0 PREEMPT(full) [ 145.552162][ T5963] Tainted: [W]=WARN [ 145.552169][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.552190][ T5963] Call Trace: [ 145.552198][ T5963] [ 145.552207][ T5963] __dump_stack+0x1d/0x30 [ 145.552232][ T5963] dump_stack_lvl+0x95/0xd0 [ 145.552296][ T5963] dump_stack+0x15/0x1b [ 145.552319][ T5963] should_fail_ex+0x263/0x280 [ 145.552353][ T5963] should_fail+0xb/0x20 [ 145.552425][ T5963] should_fail_usercopy+0x1a/0x20 [ 145.552497][ T5963] _copy_from_user+0x1c/0xb0 [ 145.552533][ T5963] __sys_bpf+0x183/0x7e0 [ 145.552677][ T5963] __x64_sys_bpf+0x41/0x50 [ 145.552712][ T5963] x64_sys_call+0x10cb/0x3020 [ 145.552777][ T5963] do_syscall_64+0x12c/0x3b0 [ 145.552853][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.552926][ T5963] RIP: 0033:0x7f5eea21cdd9 [ 145.552945][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.552966][ T5963] RSP: 002b:00007f5ee8c6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.552989][ T5963] RAX: ffffffffffffffda RBX: 00007f5eea495fa0 RCX: 00007f5eea21cdd9 [ 145.553005][ T5963] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000002 [ 145.553042][ T5963] RBP: 00007f5ee8c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.553057][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.553072][ T5963] R13: 00007f5eea496038 R14: 00007f5eea495fa0 R15: 00007ffecf444f48 [ 145.553105][ T5963] [ 145.555224][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 145.831404][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.906857][ T5974] tmpfs: Bad value for 'mpol' [ 146.033333][ T5983] 9p: Bad value for 'rfdno' [ 146.153986][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.7.480'. [ 146.174149][ T5985] loop6: detected capacity change from 0 to 128 [ 146.522775][ T5991] loop4: detected capacity change from 0 to 256 [ 146.721028][ T5974] loop8: detected capacity change from 0 to 512 [ 146.757331][ T5974] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.476: iget: bad i_size value: 38620345925642 [ 146.788344][ T5974] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.790028][ T5974] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.476: couldn't read orphan inode 15 (err -117) [ 146.799387][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 146.799453][ C1] EXT4-fs (loop8): initial error at time 1777948014: ext4_orphan_get:1397: inode 15 [ 146.799583][ C1] EXT4-fs (loop8): last error at time 1777948014: ext4_orphan_get:1397: inode 15 [ 146.990688][ T5974] loop8: lost filesystem error report for type 5 error -117 [ 146.994532][ T5974] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.291286][ T5997] loop7: detected capacity change from 0 to 512 [ 147.844806][ T5997] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.857775][ T5997] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.970806][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 147.970824][ T28] audit: type=1400 audit(1777948015.770:867): avc: denied { write } for pid=5993 comm="syz.7.482" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.972714][ T5019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 148.015455][ T6008] loop2: detected capacity change from 0 to 512 [ 148.022657][ T6008] ext2: Bad value for 'journal_dev' [ 148.082330][ T6010] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 148.120676][ T28] audit: type=1400 audit(1777948015.880:868): avc: denied { relabelfrom } for pid=5999 comm="syz.2.484" name="NETLINK" dev="sockfs" ino=13117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.549585][ T28] audit: type=1400 audit(1777948015.890:869): avc: denied { relabelto } for pid=5999 comm="syz.2.484" name="NETLINK" dev="sockfs" ino=13117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:pam_exec_t:s0" [ 148.761606][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 148.893325][ T4745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.036661][ T6034] loop8: detected capacity change from 0 to 512 [ 149.043510][ T6034] ext2: Bad value for 'journal_dev' [ 149.294498][ T6032] loop6: detected capacity change from 0 to 1024 [ 149.348719][ T6033] loop2: detected capacity change from 0 to 1764 [ 149.365132][ T6032] EXT4-fs: Ignoring removed bh option [ 149.420191][ T6032] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.464517][ T6032] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 149.541454][ T6032] System zones: 0-1, 3-12 [ 149.547079][ T6032] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 1: comm syz.6.492: lblock 1 mapped to illegal pblock 1 (length 1) [ 149.581216][ T28] audit: type=1400 audit(1777948017.380:870): avc: denied { bind } for pid=6043 comm="syz.4.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.608522][ T6032] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 149.608640][ T6032] EXT4-fs (loop6): Remounting filesystem read-only [ 149.619498][ T28] audit: type=1400 audit(1777948017.400:871): avc: denied { setopt } for pid=6043 comm="syz.4.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.624766][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 149.651463][ C0] EXT4-fs (loop6): initial error at time 1777948017: ext4_map_blocks:833: inode 3: block 1 [ 149.661524][ C0] EXT4-fs (loop6): last error at time 1777948017: ext4_map_blocks:833: inode 3: block 1 [ 149.712164][ T6032] Quota error (device loop6): write_blk: dquota write failed [ 149.728318][ T6032] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 149.728398][ T6032] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 149.728465][ T6032] EXT4-fs (loop6): 1 orphan inode deleted [ 149.728955][ T6032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.817428][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.895262][ T6050] tmpfs: Bad value for 'mpol' [ 149.992039][ T6053] loop8: detected capacity change from 0 to 2048 [ 150.024065][ T6053] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.052866][ T6048] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 150.136886][ T5019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.221963][ T28] audit: type=1326 audit(1777948018.020:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.7.502" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ed4fcdd9 code=0x7ffc0000 [ 150.272865][ T28] audit: type=1326 audit(1777948018.020:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6064 comm="syz.7.502" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ed4fcdd9 code=0x7ffc0000 [ 150.331649][ T6068] loop7: detected capacity change from 0 to 128 [ 150.359058][ T6068] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.376005][ T6050] loop6: detected capacity change from 0 to 512 [ 150.389993][ T6068] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 150.454694][ T6050] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.495: iget: bad i_size value: 38620345925642 [ 150.495881][ T6050] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.498453][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 150.516405][ C1] EXT4-fs (loop6): initial error at time 1777948018: ext4_orphan_get:1397: inode 15 [ 150.527883][ C1] EXT4-fs (loop6): last error at time 1777948018: ext4_orphan_get:1397: inode 15 [ 150.548607][ T6050] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.495: couldn't read orphan inode 15 (err -117) [ 150.578330][ T6050] loop6: lost filesystem error report for type 5 error -117 [ 150.579085][ T4745] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.612082][ T6050] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.672261][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.504'. [ 150.753214][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 150.881881][ T6063] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.161519][ T6084] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 151.188020][ T6063] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.501: Invalid block bitmap block 0 in block_group 0 [ 151.224607][ T6063] loop8: lost filesystem error report for type 5 error -117 [ 151.238141][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 151.252103][ C0] EXT4-fs (loop8): initial error at time 1777948019: ext4_read_block_bitmap_nowait:483 [ 151.261848][ C0] EXT4-fs (loop8): last error at time 1777948019: ext4_read_block_bitmap_nowait:483 [ 151.289141][ T6063] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.501: Failed to acquire dquot type 0 [ 151.302725][ T6063] loop8: lost filesystem error report for type 5 error -117 [ 151.356187][ T6095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.365024][ T6063] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.501: Freeing blocks not in datazone - block = 0, count = 4096 [ 151.392495][ T6063] loop8: lost filesystem error report for type 5 error -117 [ 151.456873][ T6063] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.501: Invalid inode bitmap blk 0 in block_group 0 [ 151.498567][ T6063] loop8: lost filesystem error report for type 5 error -117 [ 151.576313][ T6084] EXT4-fs (loop6): 1 truncate cleaned up [ 151.612998][ T6063] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 151.627602][ T6090] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 151.676624][ T6063] loop8: lost filesystem error report for type 5 error -117 [ 151.697741][ T6063] EXT4-fs (loop8): 1 orphan inode deleted [ 151.754171][ T6084] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.850376][ T6063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.866360][ T310] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 151.901841][ T310] loop8: lost filesystem error report for type 5 error -117 [ 151.913003][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.064786][ T6063] syz.8.501 (6063) used greatest stack depth: 7552 bytes left [ 152.093955][ T5019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.123121][ T5990] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:11: Failed to release dquot type 0 [ 152.228630][ T6107] set_capacity_and_notify: 3 callbacks suppressed [ 152.228649][ T6107] loop4: detected capacity change from 0 to 512 [ 152.282780][ T6107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.295508][ T6107] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.399791][ T6109] loop7: detected capacity change from 0 to 512 [ 152.478048][ T6109] EXT4-fs (loop7): 1 orphan inode deleted [ 152.515485][ T6109] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.623651][ T6109] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.689113][ T5990] loop8: lost filesystem error report for type 5 error -117 [ 152.700313][ T5990] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:11: Failed to release dquot type 1 [ 152.733790][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.776358][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.8.516'. [ 152.946228][ T6109] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 13: comm syz.7.517: bad entry in directory: inode out of bounds - offset=24, inode=4294836237, rec_len=16, size=4096 fake=0 [ 153.033440][ T6122] loop6: detected capacity change from 0 to 512 [ 153.135320][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.198693][ T6122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.211497][ T6122] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.253412][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 153.253466][ T28] audit: type=1400 audit(1777948021.050:889): avc: denied { write } for pid=6118 comm="syz.6.518" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.709809][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.867059][ T6142] xt_hashlimit: size too large, truncated to 1048576 [ 154.026538][ T4745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.049225][ T310] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 154.069491][ T310] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 154.081513][ T310] loop7: lost filesystem error report for type 5 error -117 [ 154.101710][ T6147] syzkaller0: entered promiscuous mode [ 154.133693][ T6147] syzkaller0: entered allmulticast mode [ 154.152937][ T6149] netlink: 14 bytes leftover after parsing attributes in process `syz.7.527'. [ 154.196590][ T28] audit: type=1326 audit(1777948021.990:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.7.527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ed4fcdd9 code=0x7ffc0000 [ 154.257244][ T28] audit: type=1326 audit(1777948021.990:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.7.527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ed4fcdd9 code=0x7ffc0000 [ 154.313190][ T28] audit: type=1326 audit(1777948021.990:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.7.527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ed4fcdd9 code=0x7ffc0000 [ 154.367838][ T6153] loop7: detected capacity change from 0 to 512 [ 154.384437][ T28] audit: type=1326 audit(1777948021.990:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.7.527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44ed4fcdd9 code=0x7ffc0000 [ 154.411928][ T28] audit: type=1326 audit(1777948021.990:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.7.527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ed4fcdd9 code=0x7ffc0000 [ 154.441173][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 154.448941][ T28] audit: type=1326 audit(1777948022.000:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.7.527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ed4fcdd9 code=0x7ffc0000 [ 154.478331][ T28] audit: type=1326 audit(1777948022.000:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.7.527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ed4fcdd9 code=0x7ffc0000 [ 154.503839][ T28] audit: type=1326 audit(1777948022.000:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.7.527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f44ed4fcdd9 code=0x7ffc0000 [ 154.514135][ T6160] veth1_to_bond: entered allmulticast mode [ 154.584862][ T6153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.619457][ T6160] loop8: detected capacity change from 0 to 512 [ 154.651750][ T6160] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -13 [ 154.652132][ T6140] loop6: detected capacity change from 0 to 2048 [ 154.672495][ T6153] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.697452][ T6160] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.532: corrupted in-inode xattr: e_value size too large [ 154.711565][ T6160] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 154.711907][ T6160] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.532: couldn't read orphan inode 15 (err -117) [ 154.721604][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 154.721640][ C0] EXT4-fs (loop8): initial error at time 1777948022: ext4_iget_extra_inode:5128: inode 15 [ 154.721676][ C0] EXT4-fs (loop8): last error at time 1777948022: ext4_iget_extra_inode:5128: inode 15 [ 154.760577][ T6160] loop8: lost filesystem error report for type 5 error -117 [ 154.761951][ T6160] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.812200][ T6160] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 154.825069][ T6172] loop4: detected capacity change from 0 to 2048 [ 154.834579][ T6172] ext4: Unknown parameter 'nouser_xattr' [ 155.016200][ T6159] veth1_to_bond: left allmulticast mode [ 155.024425][ T6140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.063800][ T4745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.187423][ T5019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.239802][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.578503][ T6189] netlink: 24 bytes leftover after parsing attributes in process `syz.8.541'. [ 155.721210][ T6201] netlink: 52 bytes leftover after parsing attributes in process `syz.6.543'. [ 155.775387][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 155.873502][ T6218] loop6: detected capacity change from 0 to 512 [ 155.882887][ T6218] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.920631][ T6218] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 155.932545][ T6218] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 155.950725][ T6218] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 155.961500][ T6218] System zones: 0-2, 18-18, 34-35 [ 155.967882][ T6218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.010935][ T6224] loop7: detected capacity change from 0 to 1024 [ 156.027672][ T6218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.047717][ T6227] tmpfs: Bad value for 'mpol' [ 156.073126][ T6224] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 156.092340][ T6224] System zones: 0-1, 3-8 [ 156.108837][ T6224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 156.138246][ T6224] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.258258][ T6238] xt_hashlimit: size too large, truncated to 1048576 [ 156.284519][ T6227] loop8: detected capacity change from 0 to 512 [ 156.314636][ T6227] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.553: iget: bad i_size value: 38620345925642 [ 156.339953][ T6227] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.358138][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 156.373820][ C0] EXT4-fs (loop8): initial error at time 1777948024: ext4_orphan_get:1397: inode 15 [ 156.383258][ C0] EXT4-fs (loop8): last error at time 1777948024: ext4_orphan_get:1397: inode 15 [ 156.472909][ T6227] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.553: couldn't read orphan inode 15 (err -117) [ 156.504556][ T6227] loop8: lost filesystem error report for type 5 error -117 [ 156.568471][ T6227] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.054192][ T5019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 158.168814][ T36] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 158.237450][ T6229] loop2: detected capacity change from 0 to 2048 [ 158.337352][ T36] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 158.375654][ T36] EXT4-fs (loop7): This should not happen!! Data will be lost [ 158.375654][ T36] [ 158.419708][ T4745] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 158.438639][ T6285] loop8: detected capacity change from 0 to 512 [ 158.472684][ T6285] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.509663][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 158.509719][ T28] audit: type=1400 audit(1777948026.310:1030): avc: denied { write } for pid=6273 comm="syz.8.567" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.853162][ T6229] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 158.906725][ T6295] tmpfs: Bad value for 'mpol' [ 159.156934][ T6295] loop7: detected capacity change from 0 to 512 [ 159.248273][ T6295] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.568: iget: bad i_size value: 38620345925642 [ 159.264941][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.576'. [ 159.284754][ T6295] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 159.285466][ T6295] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.568: couldn't read orphan inode 15 (err -117) [ 159.294918][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 159.295000][ C1] EXT4-fs (loop7): initial error at time 1777948027: ext4_orphan_get:1397: inode 15 [ 159.295133][ C1] EXT4-fs (loop7): last error at time 1777948027: ext4_orphan_get:1397: inode 15 [ 159.382690][ T6308] loop2: detected capacity change from 0 to 1764 [ 159.424053][ T6295] loop7: lost filesystem error report for type 5 error -117 [ 161.110506][ T6334] 9p: Bad value for 'rfdno' [ 161.425882][ T6338] syzkaller0: entered promiscuous mode [ 161.431704][ T6338] syzkaller0: entered allmulticast mode [ 161.439026][ T28] audit: type=1400 audit(1777948029.240:1031): avc: denied { relabelfrom } for pid=6337 comm="syz.8.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 161.466133][ T28] audit: type=1400 audit(1777948029.260:1032): avc: denied { relabelto } for pid=6337 comm="syz.8.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 161.926641][ T6347] loop6: detected capacity change from 0 to 512 [ 161.949621][ T6348] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 161.956341][ T6348] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 162.039865][ T6347] EXT4-fs warning (device loop6): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop6. [ 162.068428][ T6354] loop8: detected capacity change from 0 to 512 [ 162.089635][ T6348] vhci_hcd vhci_hcd.0: Device attached [ 162.166758][ T6354] EXT4-fs: Ignoring removed orlov option [ 162.186945][ T6354] EXT4-fs: test_dummy_encryption option not supported [ 162.201860][ T6358] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 162.226390][ T28] audit: type=1400 audit(1777948030.020:1033): avc: denied { ioctl } for pid=6353 comm="syz.8.592" path="socket:[14766]" dev="sockfs" ino=14766 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 162.286876][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 162.342833][ T28] audit: type=1400 audit(1777948030.100:1034): avc: denied { create } for pid=6367 comm="syz.8.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.393295][ T6370] netlink: 'syz.8.595': attribute type 4 has an invalid length. [ 162.427416][ T28] audit: type=1400 audit(1777948030.180:1035): avc: denied { append } for pid=6369 comm="syz.8.595" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 162.463620][ T6370] netlink: 'syz.8.595': attribute type 4 has an invalid length. [ 162.562958][ T6370] loop8: detected capacity change from 0 to 256 [ 162.568962][ T6349] vhci_hcd: connection closed [ 162.570180][ T12] vhci_hcd vhci_hcd.6: stop threads [ 162.573465][ T6370] msdos: Bad value for 'uid' [ 162.584828][ T12] vhci_hcd vhci_hcd.6: release socket [ 162.586646][ T6370] msdos: Bad value for 'uid' [ 162.597636][ T6374] netlink: 20 bytes leftover after parsing attributes in process `syz.7.597'. [ 162.607554][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 162.674481][ T28] audit: type=1400 audit(1777948030.470:1036): avc: denied { read append } for pid=6369 comm="syz.8.595" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.725986][ T28] audit: type=1400 audit(1777948030.470:1037): avc: denied { open } for pid=6369 comm="syz.8.595" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.754926][ T28] audit: type=1400 audit(1777948030.490:1038): avc: denied { ioctl } for pid=6369 comm="syz.8.595" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.819672][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.601'. [ 162.904966][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 163.072089][ T6406] netlink: 'syz.2.608': attribute type 33 has an invalid length. [ 163.080032][ T6406] netlink: 152 bytes leftover after parsing attributes in process `syz.2.608'. [ 163.100856][ T6406] loop2: detected capacity change from 0 to 512 [ 163.114135][ T6406] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 163.250228][ T6414] 9p: Bad value for 'rfdno' [ 163.461759][ T28] audit: type=1400 audit(1777948031.260:1039): avc: denied { connect } for pid=6415 comm="syz.4.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.658056][ T6421] Cannot find add_set index 0 as target [ 163.764195][ T28] audit: type=1400 audit(1777948031.280:1040): avc: denied { ioctl } for pid=6415 comm="syz.4.610" path="socket:[13977]" dev="sockfs" ino=13977 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.902061][ T6429] xt_hashlimit: size too large, truncated to 1048576 [ 163.952751][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.6.616'. [ 164.031049][ T28] audit: type=1400 audit(1777948031.830:1041): avc: denied { ioctl } for pid=6434 comm="syz.6.617" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14032 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.068968][ T6439] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 164.120332][ T28] audit: type=1400 audit(1777948031.890:1042): avc: denied { relabelto } for pid=6437 comm="syz.7.618" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:fonts_t:s0" [ 164.345480][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.620'. [ 164.357284][ T28] audit: type=1400 audit(1777948031.890:1043): avc: denied { associate } for pid=6437 comm="syz.7.618" name="random" dev="devtmpfs" ino=7 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fonts_t:s0" [ 164.868537][ T28] audit: type=1400 audit(1777948031.980:1044): avc: denied { unmount } for pid=4745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 165.098549][ T28] audit: type=1400 audit(1777948032.750:1045): avc: denied { mount } for pid=6451 comm="syz.8.621" name="/" dev="hugetlbfs" ino=14070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 165.196223][ T28] audit: type=1400 audit(1777948032.840:1046): avc: denied { open } for pid=6445 comm="syz.6.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 165.229161][ T28] audit: type=1400 audit(1777948032.840:1047): avc: denied { kernel } for pid=6445 comm="syz.6.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 165.292691][ T6465] netlink: 16 bytes leftover after parsing attributes in process `syz.6.627'. [ 165.305593][ T28] audit: type=1400 audit(1777948033.110:1048): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 165.378066][ T6462] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20002 [ 165.437237][ T28] audit: type=1400 audit(1777948033.230:1049): avc: denied { create } for pid=6471 comm="syz.8.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.481458][ T6470] loop6: detected capacity change from 0 to 1764 [ 165.751485][ T6477] loop8: detected capacity change from 0 to 512 [ 165.781884][ T6477] EXT4-fs mount: 7 callbacks suppressed [ 165.781905][ T6477] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.800324][ T6477] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.077601][ T6483] loop4: detected capacity change from 0 to 512 [ 166.797224][ T6483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.809925][ T6483] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.895831][ T6488] loop6: detected capacity change from 0 to 512 [ 166.962782][ T5019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.972122][ T6488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.989289][ T6488] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.126784][ T6501] loop7: detected capacity change from 0 to 512 [ 167.139141][ T6501] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.165119][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.185576][ T6501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36626 sclass=netlink_route_socket pid=6501 comm=syz.7.637 [ 167.246155][ T4745] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 167.401620][ T6515] loop4: detected capacity change from 0 to 512 [ 167.408972][ T6515] ext2: Bad value for 'journal_dev' [ 167.438971][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.622128][ T6518] loop7: detected capacity change from 0 to 512 [ 167.751730][ T6518] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.797726][ T6518] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.858867][ T6518] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.642: corrupted inode contents [ 167.894156][ T6518] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #2: comm syz.7.642: mark_inode_dirty error [ 167.907573][ T6518] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.642: corrupted inode contents [ 167.924490][ T6518] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.642: mark_inode_dirty error [ 167.959099][ T6518] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #2: comm syz.7.642: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 167.959099][ T6518] [ 168.005975][ T6518] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.642: corrupted inode contents [ 168.018446][ T6518] EXT4-fs error (device loop7): ext4_append:88: inode #2: comm syz.7.642: mark_inode_dirty error [ 168.038307][ T6518] EXT4-fs error (device loop7) in ext4_append:100: Corrupt filesystem [ 168.084540][ T6527] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.642: corrupted inode contents [ 168.205305][ T6527] EXT4-fs error (device loop7): add_dirent_to_buf:2151: inode #2: comm syz.7.642: mark_inode_dirty error [ 168.314019][ T6542] loop4: detected capacity change from 0 to 512 [ 168.506704][ T6542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.519644][ T6542] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.987961][ T6551] loop8: detected capacity change from 0 to 128 [ 169.010887][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 169.010905][ T28] audit: type=1400 audit(1777948036.810:1067): avc: denied { remount } for pid=6548 comm="syz.8.649" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 169.066057][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.310981][ T6553] loop4: detected capacity change from 0 to 164 [ 169.438519][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.6.652'. [ 169.452154][ T6553] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 170.215747][ T6518] Set syz1 is full, maxelem 65536 reached [ 170.246599][ T4745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.405766][ T6583] process 'syz.7.661' launched './file1' with NULL argv: empty string added [ 170.442015][ T28] audit: type=1400 audit(1777948038.240:1068): avc: denied { execute_no_trans } for pid=6582 comm="syz.7.661" path="/81/file1" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.525779][ T6590] netlink: 16 bytes leftover after parsing attributes in process `syz.6.663'. [ 170.622834][ T6596] set_capacity_and_notify: 1 callbacks suppressed [ 170.622913][ T6596] loop4: detected capacity change from 0 to 1764 [ 171.751552][ T6620] loop8: detected capacity change from 0 to 256 [ 171.874646][ T6620] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.030666][ T6622] loop8: detected capacity change from 0 to 256 [ 172.051377][ T6622] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.241740][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.6.678'. [ 172.280632][ T6633] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.680'. [ 172.304375][ T6629] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6629 comm=syz.4.679 [ 172.326092][ T6635] loop8: detected capacity change from 0 to 256 [ 172.346816][ T6635] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.429686][ T6643] loop8: detected capacity change from 0 to 256 [ 172.429744][ T6637] loop7: detected capacity change from 0 to 256 [ 172.444927][ T6643] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.445686][ T6637] vfat: Unexpected value for 'flush' [ 172.464581][ T6643] FAULT_INJECTION: forcing a failure. [ 172.464581][ T6643] name failslab, interval 1, probability 0, space 0, times 0 [ 172.479919][ T6643] CPU: 1 UID: 0 PID: 6643 Comm: syz.8.683 Tainted: G W syzkaller #0 PREEMPT(full) [ 172.480018][ T6643] Tainted: [W]=WARN [ 172.480025][ T6643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 172.480040][ T6643] Call Trace: [ 172.480048][ T6643] [ 172.480058][ T6643] __dump_stack+0x1d/0x30 [ 172.480088][ T6643] dump_stack_lvl+0x95/0xd0 [ 172.480113][ T6643] dump_stack+0x15/0x1b [ 172.480206][ T6643] should_fail_ex+0x263/0x280 [ 172.480239][ T6643] should_failslab+0x8c/0xb0 [ 172.480276][ T6643] kmem_cache_alloc_noprof+0x66/0x3f0 [ 172.480384][ T6643] ? do_getname+0x2e/0x1c0 [ 172.480479][ T6643] do_getname+0x2e/0x1c0 [ 172.480501][ T6643] getname_flags+0x1d/0x30 [ 172.480522][ T6643] do_sys_openat2+0x60/0x130 [ 172.480592][ T6643] __x64_sys_open+0xe6/0x110 [ 172.480620][ T6643] x64_sys_call+0x14b9/0x3020 [ 172.480708][ T6643] do_syscall_64+0x12c/0x3b0 [ 172.480740][ T6643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.480765][ T6643] RIP: 0033:0x7ff6f6cccdd9 [ 172.480783][ T6643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.480934][ T6643] RSP: 002b:00007ff6f571f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 172.480955][ T6643] RAX: ffffffffffffffda RBX: 00007ff6f6f45fa0 RCX: 00007ff6f6cccdd9 [ 172.480969][ T6643] RDX: 0000000000000010 RSI: 0000000000024040 RDI: 0000200000000100 [ 172.481011][ T6643] RBP: 00007ff6f571f090 R08: 0000000000000000 R09: 0000000000000000 [ 172.481026][ T6643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.481041][ T6643] R13: 00007ff6f6f46038 R14: 00007ff6f6f45fa0 R15: 00007ffc19bce2d8 [ 172.481060][ T6643] [ 172.655019][ T6637] loop7: detected capacity change from 0 to 512 [ 172.661701][ T6637] EXT4-fs: Ignoring removed oldalloc option [ 172.670438][ T6637] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 172.699803][ T6637] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #11: comm syz.7.682: corrupted in-inode xattr: invalid ea_ino [ 172.713262][ T6637] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 172.713569][ T6637] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.682: couldn't read orphan inode 11 (err -117) [ 172.723009][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 172.723043][ C0] EXT4-fs (loop7): initial error at time 1777948040: ext4_iget_extra_inode:5128: inode 11 [ 172.723072][ C0] EXT4-fs (loop7): last error at time 1777948040: ext4_iget_extra_inode:5128: inode 11 [ 172.761934][ T6637] loop7: lost filesystem error report for type 5 error -117 [ 172.767168][ T6637] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.796641][ T28] audit: type=1400 audit(1777948040.590:1069): avc: denied { write } for pid=6636 comm="syz.7.682" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 172.824523][ T28] audit: type=1400 audit(1777948040.590:1070): avc: denied { write } for pid=6636 comm="syz.7.682" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.860081][ T4745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.879410][ T6649] bond1: option arp_all_targets: invalid value (262144) [ 172.899761][ T6649] bond1 (unregistering): Released all slaves [ 173.236186][ T6668] FAULT_INJECTION: forcing a failure. [ 173.236186][ T6668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.275694][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.8.691 Tainted: G W syzkaller #0 PREEMPT(full) [ 173.275736][ T6668] Tainted: [W]=WARN [ 173.275745][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.275796][ T6668] Call Trace: [ 173.275804][ T6668] [ 173.275813][ T6668] __dump_stack+0x1d/0x30 [ 173.275844][ T6668] dump_stack_lvl+0x95/0xd0 [ 173.275865][ T6668] dump_stack+0x15/0x1b [ 173.275909][ T6668] should_fail_ex+0x263/0x280 [ 173.275940][ T6668] should_fail+0xb/0x20 [ 173.275971][ T6668] should_fail_usercopy+0x1a/0x20 [ 173.276002][ T6668] _copy_from_user+0x1c/0xb0 [ 173.276053][ T6668] ___sys_sendmsg+0xc1/0x1e0 [ 173.276081][ T6668] ? path_openat+0x1b01/0x2050 [ 173.276127][ T6668] __sys_sendmmsg+0x185/0x320 [ 173.276225][ T6668] __x64_sys_sendmmsg+0x57/0x70 [ 173.276256][ T6668] x64_sys_call+0x27aa/0x3020 [ 173.276307][ T6668] do_syscall_64+0x12c/0x3b0 [ 173.276335][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.276396][ T6668] RIP: 0033:0x7ff6f6cccdd9 [ 173.276414][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.276433][ T6668] RSP: 002b:00007ff6f571f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 173.276459][ T6668] RAX: ffffffffffffffda RBX: 00007ff6f6f45fa0 RCX: 00007ff6f6cccdd9 [ 173.276529][ T6668] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000003 [ 173.276623][ T6668] RBP: 00007ff6f571f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.276639][ T6668] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.276656][ T6668] R13: 00007ff6f6f46038 R14: 00007ff6f6f45fa0 R15: 00007ffc19bce2d8 [ 173.276680][ T6668] [ 173.502672][ T6672] loop7: detected capacity change from 0 to 1764 [ 173.532743][ T6678] loop6: detected capacity change from 0 to 164 [ 173.556741][ T28] audit: type=1400 audit(1777948041.350:1071): avc: denied { sys_module } for pid=6675 comm="syz.4.694" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 173.589367][ T6678] iso9660: Bad value for 'map' [ 173.780575][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.696'. [ 174.097478][ T6695] syzkaller0: entered promiscuous mode [ 174.109613][ T6695] syzkaller0: entered allmulticast mode [ 174.245130][ T6697] netlink: 16 bytes leftover after parsing attributes in process `syz.6.700'. [ 174.275169][ T6688] loop4: detected capacity change from 0 to 512 [ 174.388938][ T6688] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.697: inode has both inline data and extents flags [ 174.408691][ T6688] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.415359][ T6688] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.697: couldn't read orphan inode 15 (err -117) [ 174.426042][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 174.426344][ C1] EXT4-fs (loop4): initial error at time 1777948042: ext4_orphan_get:1397: inode 15 [ 174.426613][ C1] EXT4-fs (loop4): last error at time 1777948042: ext4_orphan_get:1397: inode 15 [ 174.475643][ T6688] loop4: lost filesystem error report for type 5 error -117 [ 174.499680][ T6688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.543369][ T28] audit: type=1400 audit(1777948042.330:1072): avc: denied { write } for pid=6687 comm="syz.4.697" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.643497][ T28] audit: type=1400 audit(1777948042.440:1073): avc: denied { create } for pid=6710 comm="syz.8.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 174.682331][ T28] audit: type=1400 audit(1777948042.470:1074): avc: denied { write } for pid=6687 comm="syz.4.697" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.792826][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.911849][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 174.944332][ T6716] netlink: 32 bytes leftover after parsing attributes in process `syz.4.707'. [ 174.971346][ T6716] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.999618][ T6711] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.050221][ T6711] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.063186][ T6696] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 175.098276][ T6720] FAULT_INJECTION: forcing a failure. [ 175.098276][ T6720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.112812][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: syz.6.708 Tainted: G W syzkaller #0 PREEMPT(full) [ 175.112948][ T6720] Tainted: [W]=WARN [ 175.112956][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.113019][ T6720] Call Trace: [ 175.113026][ T6720] [ 175.113036][ T6720] __dump_stack+0x1d/0x30 [ 175.113066][ T6720] dump_stack_lvl+0x95/0xd0 [ 175.113091][ T6720] dump_stack+0x15/0x1b [ 175.113171][ T6720] should_fail_ex+0x263/0x280 [ 175.113282][ T6720] should_fail+0xb/0x20 [ 175.113310][ T6720] should_fail_usercopy+0x1a/0x20 [ 175.113354][ T6720] _copy_from_user+0x1c/0xb0 [ 175.113466][ T6720] __se_sys_io_uring_register+0x114/0x1330 [ 175.113498][ T6720] ? mutex_unlock+0x4e/0x90 [ 175.113538][ T6720] __x64_sys_io_uring_register+0x55/0x70 [ 175.113570][ T6720] x64_sys_call+0x2be0/0x3020 [ 175.113660][ T6720] do_syscall_64+0x12c/0x3b0 [ 175.113689][ T6720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.113715][ T6720] RIP: 0033:0x7fc61067cdd9 [ 175.113733][ T6720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.113753][ T6720] RSP: 002b:00007fc60f0d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 175.113848][ T6720] RAX: ffffffffffffffda RBX: 00007fc6108f5fa0 RCX: 00007fc61067cdd9 [ 175.113925][ T6720] RDX: 0000200000000000 RSI: 000000000000001f RDI: ffffffffffffffff [ 175.113950][ T6720] RBP: 00007fc60f0d7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.113964][ T6720] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 175.113978][ T6720] R13: 00007fc6108f6038 R14: 00007fc6108f5fa0 R15: 00007ffd92d32778 [ 175.114017][ T6720] [ 175.360204][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.709'. [ 175.404651][ T6711] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.705: corrupted xattr block 33: invalid ea_ino [ 175.423393][ T6711] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 175.447331][ T6711] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.705: corrupted xattr block 33: invalid ea_ino [ 175.448204][ T28] audit: type=1400 audit(1777948043.240:1075): avc: denied { getopt } for pid=6710 comm="syz.8.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 175.502071][ T6711] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 175.541795][ T6711] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.705: corrupted xattr block 33: invalid ea_ino [ 175.543165][ T28] audit: type=1400 audit(1777948043.340:1076): avc: denied { setattr } for pid=6710 comm="syz.8.705" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.628506][ T6730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.712'. [ 175.651805][ T5019] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.804427][ T6743] set_capacity_and_notify: 2 callbacks suppressed [ 175.804447][ T6743] loop6: detected capacity change from 0 to 512 [ 175.848516][ T6743] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.718: inode has both inline data and extents flags [ 175.874612][ T6743] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.878157][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 175.893830][ C1] EXT4-fs (loop6): initial error at time 1777948043: ext4_orphan_get:1397: inode 15 [ 175.903524][ C1] EXT4-fs (loop6): last error at time 1777948043: ext4_orphan_get:1397: inode 15 [ 175.915895][ T6743] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.718: couldn't read orphan inode 15 (err -117) [ 175.927940][ T6747] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8271 sclass=netlink_xfrm_socket pid=6747 comm=syz.8.717 [ 175.962749][ T6743] loop6: lost filesystem error report for type 5 error -117 [ 175.963481][ T6743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.013595][ T6747] loop8: detected capacity change from 0 to 1024 [ 176.080690][ T6747] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.246674][ T28] audit: type=1400 audit(1777948044.040:1077): avc: denied { write } for pid=6748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.352852][ T28] audit: type=1400 audit(1777948044.150:1078): avc: denied { write } for pid=6767 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.535210][ T6765] loop4: detected capacity change from 0 to 8192 [ 176.631589][ T6765] loop4: p1 < > p2 p4 < p5 > [ 176.634335][ T28] audit: type=1400 audit(1777948044.430:1079): avc: denied { write } for pid=6771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.650294][ T6765] loop4: partition table partially beyond EOD, truncated [ 176.754711][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.765549][ T28] audit: type=1400 audit(1777948044.550:1080): avc: denied { write } for pid=6783 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.781876][ T6765] loop4: p1 start 134217728 is beyond EOD, truncated [ 176.932757][ T6765] loop4: p2 size 591360 extends beyond EOD, truncated [ 176.938435][ T28] audit: type=1400 audit(1777948044.730:1081): avc: denied { listen } for pid=6789 comm="syz.8.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 176.972516][ T6765] loop4: p5 size 591360 extends beyond EOD, truncated [ 177.305033][ T6793] loop6: detected capacity change from 0 to 1024 [ 177.385843][ T6793] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 177.398185][ T6793] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 177.411367][ T6793] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: comm syz.6.720: inode #1: comm syz.6.720: iget: illegal inode # [ 177.426151][ T6793] loop6: lost filesystem error report for type 5 error -117 [ 177.428211][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 177.444272][ C1] EXT4-fs (loop6): initial error at time 1777948045: ext4_get_journal_inode:5896 [ 177.455112][ C1] EXT4-fs (loop6): last error at time 1777948045: ext4_get_journal_inode:5896 [ 177.468335][ T6793] EXT4-fs (loop6): no journal found [ 177.475289][ T6793] EXT4-fs (loop6): can't get journal size [ 177.507588][ T6793] EXT4-fs (loop6): failed to initialize system zone (-22) [ 177.516398][ T6793] EXT4-fs (loop6): mount failed [ 178.412344][ T6800] FAULT_INJECTION: forcing a failure. [ 178.412344][ T6800] name failslab, interval 1, probability 0, space 0, times 0 [ 178.497789][ T6800] CPU: 1 UID: 0 PID: 6800 Comm: syz.8.722 Tainted: G W syzkaller #0 PREEMPT(full) [ 178.497907][ T6800] Tainted: [W]=WARN [ 178.497915][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.497929][ T6800] Call Trace: [ 178.497938][ T6800] [ 178.497947][ T6800] __dump_stack+0x1d/0x30 [ 178.497973][ T6800] dump_stack_lvl+0x95/0xd0 [ 178.497994][ T6800] dump_stack+0x15/0x1b [ 178.498013][ T6800] should_fail_ex+0x263/0x280 [ 178.498105][ T6800] should_failslab+0x8c/0xb0 [ 178.498140][ T6800] __kvmalloc_node_noprof+0x155/0x640 [ 178.498207][ T6800] ? __pfx_net_ctl_permissions+0x10/0x10 [ 178.498227][ T6800] ? proc_sys_call_handler+0x247/0x4a0 [ 178.498329][ T6800] proc_sys_call_handler+0x247/0x4a0 [ 178.498367][ T6800] ? __pfx_proc_sys_write+0x10/0x10 [ 178.498407][ T6800] proc_sys_write+0x22/0x30 [ 178.498440][ T6800] vfs_write+0x5a6/0x9f0 [ 178.498549][ T6800] ksys_write+0xdc/0x1a0 [ 178.498577][ T6800] __x64_sys_write+0x40/0x50 [ 178.498611][ T6800] x64_sys_call+0x27e1/0x3020 [ 178.498640][ T6800] do_syscall_64+0x12c/0x3b0 [ 178.498710][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.498733][ T6800] RIP: 0033:0x7ff6f6cccdd9 [ 178.498753][ T6800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.498776][ T6800] RSP: 002b:00007ff6f571f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.498857][ T6800] RAX: ffffffffffffffda RBX: 00007ff6f6f45fa0 RCX: 00007ff6f6cccdd9 [ 178.498939][ T6800] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 178.498955][ T6800] RBP: 00007ff6f571f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.498969][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.498982][ T6800] R13: 00007ff6f6f46038 R14: 00007ff6f6f45fa0 R15: 00007ffc19bce2d8 [ 178.499000][ T6800] [ 178.909106][ T4606] udevd[4606]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 178.918657][ T3951] udevd[3951]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 178.921434][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 178.960548][ T6804] loop6: detected capacity change from 0 to 512 [ 178.991479][ T6804] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.724: iget: bad i_size value: 38620345925642 [ 179.053106][ T6804] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.053419][ T6804] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.724: couldn't read orphan inode 15 (err -117) [ 179.062729][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 179.062752][ C0] EXT4-fs (loop6): initial error at time 1777948046: ext4_orphan_get:1397: inode 15 [ 179.062779][ C0] EXT4-fs (loop6): last error at time 1777948046: ext4_orphan_get:1397: inode 15 [ 179.111237][ T6809] netlink: 60 bytes leftover after parsing attributes in process `syz.8.725'. [ 179.157920][ T6804] loop6: lost filesystem error report for type 5 error -117 [ 179.158863][ T6804] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.168261][ T6811] loop7: detected capacity change from 0 to 512 [ 179.211049][ T6811] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.726: iget: bad i_size value: 38620345925642 [ 179.231186][ T6811] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.232626][ T6811] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.726: couldn't read orphan inode 15 (err -117) [ 179.248153][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 179.260143][ C1] EXT4-fs (loop7): initial error at time 1777948047: ext4_orphan_get:1397: inode 15 [ 179.266796][ T6815] loop4: detected capacity change from 0 to 512 [ 179.269717][ C1] EXT4-fs (loop7): last error at time 1777948047: ext4_orphan_get:1397: inode 15 [ 179.298202][ T6811] loop7: lost filesystem error report for type 5 error -117 [ 179.320630][ T6804] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.724: bg 0: block 5: invalid block bitmap [ 179.331589][ T6811] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.353536][ T6815] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.727: iget: bad i_size value: 38620345925642 [ 179.370496][ T6815] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.370860][ T6815] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.727: couldn't read orphan inode 15 (err -117) [ 179.380090][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 179.380120][ C1] EXT4-fs (loop4): initial error at time 1777948047: ext4_orphan_get:1397: inode 15 [ 179.380223][ C1] EXT4-fs (loop4): last error at time 1777948047: ext4_orphan_get:1397: inode 15 [ 179.423201][ T6804] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 179.424553][ T6811] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.726: bg 0: block 5: invalid block bitmap [ 179.449746][ T6811] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 179.462283][ T6804] EXT4-fs (loop6): This should not happen!! Data will be lost [ 179.462283][ T6804] [ 179.462336][ T6815] loop4: lost filesystem error report for type 5 error -117 [ 179.473943][ T6804] EXT4-fs (loop6): Total free blocks count 0 [ 179.477922][ T6811] EXT4-fs (loop7): This should not happen!! Data will be lost [ 179.477922][ T6811] [ 179.499799][ T6804] EXT4-fs (loop6): Free/Dirty block details [ 179.501743][ T6811] EXT4-fs (loop7): Total free blocks count 0 [ 179.513491][ T6804] EXT4-fs (loop6): free_blocks=0 [ 179.516092][ T6811] EXT4-fs (loop7): Free/Dirty block details [ 179.524692][ T6804] EXT4-fs (loop6): dirty_blocks=2 [ 179.525025][ T6815] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.529838][ T6804] EXT4-fs (loop6): Block reservation details [ 179.543243][ T6811] EXT4-fs (loop7): free_blocks=0 [ 179.556333][ T6815] FAULT_INJECTION: forcing a failure. [ 179.556333][ T6815] name failslab, interval 1, probability 0, space 0, times 0 [ 179.568182][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 179.568203][ T28] audit: type=1400 audit(1777948047.350:1086): avc: denied { write } for pid=6814 comm="syz.4.727" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.589347][ T6815] CPU: 1 UID: 0 PID: 6815 Comm: syz.4.727 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.589390][ T6815] Tainted: [W]=WARN [ 179.589397][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.589410][ T6815] Call Trace: [ 179.589417][ T6815] [ 179.589426][ T6815] __dump_stack+0x1d/0x30 [ 179.589451][ T6815] dump_stack_lvl+0x95/0xd0 [ 179.589475][ T6815] dump_stack+0x15/0x1b [ 179.589532][ T6815] should_fail_ex+0x263/0x280 [ 179.589562][ T6815] ? __iomap_dio_rw+0x197/0x1480 [ 179.589586][ T6815] should_failslab+0x8c/0xb0 [ 179.589619][ T6815] __kmalloc_cache_noprof+0x5f/0x400 [ 179.589723][ T6815] __iomap_dio_rw+0x197/0x1480 [ 179.589757][ T6815] iomap_dio_rw+0x40/0x90 [ 179.589781][ T6815] ext4_file_write_iter+0xcaa/0xfa0 [ 179.589896][ T6815] ? ext4_file_write_iter+0x5b1/0xfa0 [ 179.589981][ T6815] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 179.590015][ T6815] vfs_write+0x5a6/0x9f0 [ 179.590109][ T6815] ksys_write+0xdc/0x1a0 [ 179.590147][ T6815] __x64_sys_write+0x40/0x50 [ 179.590177][ T6815] x64_sys_call+0x27e1/0x3020 [ 179.590245][ T6815] do_syscall_64+0x12c/0x3b0 [ 179.590273][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.590338][ T6815] RIP: 0033:0x7fc06065cdd9 [ 179.590360][ T6815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.590380][ T6815] RSP: 002b:00007fc05f0af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.590426][ T6815] RAX: ffffffffffffffda RBX: 00007fc0608d5fa0 RCX: 00007fc06065cdd9 [ 179.590510][ T6815] RDX: 0000000000000079 RSI: 0000200000000080 RDI: 0000000000000006 [ 179.590524][ T6815] RBP: 00007fc05f0af090 R08: 0000000000000000 R09: 0000000000000000 [ 179.590538][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.590551][ T6815] R13: 00007fc0608d6038 R14: 00007fc0608d5fa0 R15: 00007ffdb67d82a8 [ 179.590571][ T6815] [ 179.602254][ T6811] EXT4-fs (loop7): dirty_blocks=2 [ 179.800217][ T30] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 179.801007][ T6804] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 179.812942][ T6811] EXT4-fs (loop7): Block reservation details [ 179.833209][ T6811] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 179.839558][ T30] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 179.844807][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 179.852641][ T30] EXT4-fs (loop4): This should not happen!! Data will be lost [ 179.852641][ T30] [ 179.880117][ T30] EXT4-fs (loop4): Total free blocks count 0 [ 179.886756][ T30] EXT4-fs (loop4): Free/Dirty block details [ 179.891603][ T4561] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 179.893374][ T30] EXT4-fs (loop4): free_blocks=0 [ 179.911089][ T30] EXT4-fs (loop4): dirty_blocks=1 [ 179.925808][ T30] EXT4-fs (loop4): Block reservation details [ 179.926033][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 179.932348][ T30] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 179.953417][ T6828] FAULT_INJECTION: forcing a failure. [ 179.953417][ T6828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.980790][ T6828] CPU: 1 UID: 0 PID: 6828 Comm: syz.8.733 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.980837][ T6828] Tainted: [W]=WARN [ 179.980844][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.980890][ T6828] Call Trace: [ 179.980898][ T6828] [ 179.980907][ T6828] __dump_stack+0x1d/0x30 [ 179.980933][ T6828] dump_stack_lvl+0x95/0xd0 [ 179.980955][ T6828] dump_stack+0x15/0x1b [ 179.980975][ T6828] should_fail_ex+0x263/0x280 [ 179.981027][ T6828] should_fail+0xb/0x20 [ 179.981052][ T6828] should_fail_usercopy+0x1a/0x20 [ 179.981088][ T6828] _copy_from_user+0x1c/0xb0 [ 179.981133][ T6828] ___sys_sendmsg+0xc1/0x1e0 [ 179.981167][ T6828] __x64_sys_sendmsg+0xd4/0x160 [ 179.981197][ T6828] x64_sys_call+0x194c/0x3020 [ 179.981222][ T6828] do_syscall_64+0x12c/0x3b0 [ 179.981250][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.981331][ T6828] RIP: 0033:0x7ff6f6cccdd9 [ 179.981379][ T6828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.981399][ T6828] RSP: 002b:00007ff6f571f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.981421][ T6828] RAX: ffffffffffffffda RBX: 00007ff6f6f45fa0 RCX: 00007ff6f6cccdd9 [ 179.981436][ T6828] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 179.981449][ T6828] RBP: 00007ff6f571f090 R08: 0000000000000000 R09: 0000000000000000 [ 179.981462][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.981497][ T6828] R13: 00007ff6f6f46038 R14: 00007ff6f6f45fa0 R15: 00007ffc19bce2d8 [ 179.981516][ T6828] [ 179.985702][ T3305] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 180.018864][ T4745] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 180.173562][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 180.326200][ T6838] loop6: detected capacity change from 0 to 512 [ 180.352081][ T6838] ext4: Bad value for 'journal_dev' [ 180.524124][ T6853] loop4: detected capacity change from 0 to 1024 [ 180.532995][ T3304] bond0: (slave syz_tun): Releasing backup interface [ 180.540647][ T6853] EXT4-fs: Ignoring removed orlov option [ 180.581556][ T3304] syz_tun (unregistering): left allmulticast mode [ 180.593826][ T6860] netlink: 16 bytes leftover after parsing attributes in process `syz.8.742'. [ 180.688079][ T6853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.704304][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.898429][ T28] audit: type=1400 audit(1777948048.680:1087): avc: denied { write } for pid=6852 comm="syz.4.740" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.971523][ T28] audit: type=1400 audit(1777948048.680:1088): avc: denied { write } for pid=6852 comm="syz.4.740" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.061132][ T28] audit: type=1400 audit(1777948048.680:1089): avc: denied { rename } for pid=6852 comm="syz.4.740" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.142196][ T28] audit: type=1400 audit(1777948048.680:1090): avc: denied { unlink } for pid=6852 comm="syz.4.740" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.217221][ T6853] netlink: 168 bytes leftover after parsing attributes in process `syz.4.740'. [ 181.285646][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.345992][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.435681][ T6884] loop7: detected capacity change from 0 to 256 [ 181.507357][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.519376][ T6884] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 181.531362][ T6862] Failed to initialize the IGMP autojoin socket (err -2) [ 181.532120][ T6884] FAT-fs (loop7): Filesystem has been set read-only [ 181.588520][ T6892] loop4: detected capacity change from 0 to 1024 [ 181.614159][ T6884] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 181.634825][ T6892] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 181.657762][ T6884] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 181.679181][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.689987][ T6892] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 181.710416][ T6894] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 181.739413][ T6892] EXT4-fs (loop4): invalid journal inode [ 181.796343][ T6892] EXT4-fs (loop4): can't get journal size [ 182.744390][ T6894] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 183.139446][ T6892] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.750: blocks 3-3 from inode overlap system zone [ 183.310898][ T6892] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 183.311167][ T6892] EXT4-fs (loop4): failed to initialize system zone (-117) [ 183.320322][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 183.320341][ C0] EXT4-fs (loop4): initial error at time 1777948051: ext4_protect_reserved_inode:182: inode 2 [ 183.320390][ C0] EXT4-fs (loop4): last error at time 1777948051: ext4_protect_reserved_inode:182: inode 2 [ 183.527625][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.560875][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.584663][ T28] audit: type=1400 audit(1777948051.370:1091): avc: denied { write } for pid=6903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.618065][ T6862] bridge_slave_0: entered allmulticast mode [ 183.643092][ T6862] bridge_slave_0: entered promiscuous mode [ 183.667763][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.707597][ T28] audit: type=1400 audit(1777948051.500:1092): avc: denied { write } for pid=6917 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.793201][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.967496][ T6892] EXT4-fs (loop4): mount failed [ 183.976898][ T6862] bridge_slave_1: entered allmulticast mode [ 183.983999][ T6862] bridge_slave_1: entered promiscuous mode [ 183.993987][ T30] bridge_slave_1: left allmulticast mode [ 183.999787][ T30] bridge_slave_1: left promiscuous mode [ 184.967867][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.089705][ T6931] loop6: detected capacity change from 0 to 512 [ 185.188806][ T6931] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 185.203764][ T6931] EXT4-fs (loop6): mount failed [ 185.961270][ T30] bridge_slave_0: left allmulticast mode [ 186.181293][ T30] bridge_slave_0: left promiscuous mode [ 186.200090][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.309368][ T28] audit: type=1400 audit(1777948054.110:1093): avc: denied { create } for pid=6936 comm="syz.7.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.386137][ T6939] loop7: detected capacity change from 0 to 128 [ 186.429252][ T6939] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.473353][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.493065][ T6939] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.518890][ T30] bond_slave_0: left allmulticast mode [ 186.542894][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.568071][ T28] audit: type=1400 audit(1777948054.360:1094): avc: denied { write } for pid=6936 comm="syz.7.756" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.601273][ T30] bond_slave_1: left allmulticast mode [ 186.609921][ T30] bond0 (unregistering): Released all slaves [ 186.628261][ T30] bond1 (unregistering): Released all slaves [ 186.632960][ T6939] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 186.652671][ T28] audit: type=1400 audit(1777948054.450:1095): avc: denied { read } for pid=6936 comm="syz.7.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.680035][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.694306][ T4745] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.756445][ T6945] Failed to initialize the IGMP autojoin socket (err -2) [ 186.768501][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.781081][ T30] hsr_slave_0: left promiscuous mode [ 186.788321][ T30] hsr_slave_1: left promiscuous mode [ 186.791436][ T28] audit: type=1400 audit(1777948054.590:1096): avc: denied { write } for pid=6950 comm="syz.6.759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 186.797927][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.824582][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.841577][ T28] audit: type=1400 audit(1777948054.630:1097): avc: denied { map } for pid=6950 comm="syz.6.759" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.870848][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.886312][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.908682][ T28] audit: type=1400 audit(1777948054.660:1098): avc: denied { create } for pid=6954 comm="syz.8.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 186.941622][ T30] veth1_macvtap: left promiscuous mode [ 186.954054][ T30] veth0_macvtap: left promiscuous mode [ 186.961095][ T28] audit: type=1400 audit(1777948054.690:1099): avc: denied { sys_admin } for pid=6954 comm="syz.8.761" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 186.983176][ T30] veth1_vlan: left promiscuous mode [ 186.988641][ T30] veth0_vlan: left promiscuous mode [ 187.134940][ T30] team0 (unregistering): Port device team_slave_1 removed [ 187.155830][ T30] team0 (unregistering): Port device team_slave_0 removed [ 188.299894][ T6862] team0: Port device team_slave_0 added [ 188.367771][ T6970] loop4: detected capacity change from 0 to 512 [ 188.378947][ T6862] team0: Port device team_slave_1 added [ 188.404229][ T6970] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.538539][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.575268][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.622912][ T6972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36626 sclass=netlink_route_socket pid=6972 comm=syz.4.764 [ 188.669593][ T6862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.714450][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.745552][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.825641][ T6862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.974469][ T6862] hsr_slave_0: entered promiscuous mode [ 188.995851][ T6862] hsr_slave_1: entered promiscuous mode [ 189.015090][ T6862] debugfs: 'hsr0' already exists in 'hsr' [ 189.032902][ T6862] Cannot create hsr debugfs directory [ 189.128235][ T3305] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 189.197608][ T55] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.313499][ T6987] loop6: detected capacity change from 0 to 256 [ 189.350243][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.768'. [ 189.573830][ T6862] netdevsim netdevsim9 netdevsim0: renamed from eth21 [ 189.595116][ T6862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.621921][ T6862] netdevsim netdevsim9 netdevsim1: renamed from eth22 [ 189.641305][ T6862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.659845][ T6862] netdevsim netdevsim9 netdevsim2: renamed from eth23 [ 189.683444][ T6862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.701968][ T6862] netdevsim netdevsim9 netdevsim3: renamed from eth24 [ 189.747281][ T6862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.770235][ T6981] loop4: detected capacity change from 0 to 2048 [ 189.956275][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.015883][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.050062][ T2145] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.057302][ T2145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.089003][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.096222][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.109825][ T7014] loop7: detected capacity change from 0 to 128 [ 190.129922][ T6981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.142130][ T28] audit: type=1400 audit(1777948057.930:1100): avc: denied { write } for pid=6997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.223950][ T7017] syz.7.771: attempt to access beyond end of device [ 190.223950][ T7017] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 190.239776][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.258862][ T28] audit: type=1400 audit(1777948058.050:1101): avc: denied { write } for pid=7018 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.262701][ T7020] netlink: 16 bytes leftover after parsing attributes in process `syz.6.772'. [ 190.292827][ T7017] syz.7.771: attempt to access beyond end of device [ 190.292827][ T7017] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 190.358806][ T7017] syz.7.771: attempt to access beyond end of device [ 190.358806][ T7017] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 190.379438][ T7017] syz.7.771: attempt to access beyond end of device [ 190.379438][ T7017] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 190.396387][ T7017] syz.7.771: attempt to access beyond end of device [ 190.396387][ T7017] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 190.421899][ T7017] syz.7.771: attempt to access beyond end of device [ 190.421899][ T7017] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 190.435924][ T7017] syz.7.771: attempt to access beyond end of device [ 190.435924][ T7017] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 190.465128][ T7017] syz.7.771: attempt to access beyond end of device [ 190.465128][ T7017] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 190.488328][ T7017] syz.7.771: attempt to access beyond end of device [ 190.488328][ T7017] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 190.614515][ T7017] syz.7.771: attempt to access beyond end of device [ 190.614515][ T7017] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 191.236859][ T6979] Bluetooth: hci0: command 0x1003 tx timeout [ 191.268280][ T3527] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 193.234053][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.709940][ T7076] loop6: detected capacity change from 0 to 256 [ 193.791829][ T310] tipc: Subscription rejected, illegal request [ 193.798476][ T7074] loop7: detected capacity change from 0 to 2048 [ 193.799375][ T28] audit: type=1400 audit(1777948061.590:1102): avc: denied { connect } for pid=7081 comm="syz.8.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.843413][ T7074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.857334][ T6862] veth0_vlan: entered promiscuous mode [ 193.879183][ T6862] veth1_vlan: entered promiscuous mode [ 193.924995][ T7095] loop4: detected capacity change from 0 to 128 [ 193.952675][ T4745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.958998][ T6862] veth0_macvtap: entered promiscuous mode [ 193.966735][ T6862] veth1_macvtap: entered promiscuous mode [ 194.054683][ T28] audit: type=1400 audit(1777948061.840:1103): avc: denied { create } for pid=7103 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 194.123848][ T7106] netlink: 'syz.4.790': attribute type 2 has an invalid length. [ 194.144854][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.175854][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.198773][ T6862] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 194.227337][ T6862] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 194.251313][ T6862] wireguard: wg0: Could not create IPv4 socket [ 194.259029][ T6862] wireguard: wg1: Could not create IPv4 socket [ 194.266184][ T6862] wireguard: wg2: Could not create IPv4 socket [ 194.293248][ T7110] Failed to initialize the IGMP autojoin socket (err -2) [ 194.301902][ T28] audit: type=1400 audit(1777948062.090:1104): avc: denied { mount } for pid=6862 comm="syz-executor" name="/" dev="gadgetfs" ino=4983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 194.389823][ T7114] loop7: detected capacity change from 0 to 1764 [ 194.879505][ T7117] netlink: 36 bytes leftover after parsing attributes in process `syz.9.738'. [ 194.954261][ T28] audit: type=1400 audit(1777948062.750:1105): avc: denied { bind } for pid=7122 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.305183][ T7142] loop6: detected capacity change from 0 to 512 [ 195.347906][ T7142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.429618][ T7142] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.455388][ T7151] FAULT_INJECTION: forcing a failure. [ 195.455388][ T7151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.513857][ T7151] CPU: 1 UID: 0 PID: 7151 Comm: syz.9.799 Tainted: G W syzkaller #0 PREEMPT(full) [ 195.513898][ T7151] Tainted: [W]=WARN [ 195.513907][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.513922][ T7151] Call Trace: [ 195.513930][ T7151] [ 195.513939][ T7151] __dump_stack+0x1d/0x30 [ 195.514011][ T7151] dump_stack_lvl+0x95/0xd0 [ 195.514037][ T7151] dump_stack+0x15/0x1b [ 195.514061][ T7151] should_fail_ex+0x263/0x280 [ 195.514094][ T7151] should_fail+0xb/0x20 [ 195.514187][ T7151] should_fail_usercopy+0x1a/0x20 [ 195.514222][ T7151] _copy_from_user+0x1c/0xb0 [ 195.514338][ T7151] __sys_bpf+0x183/0x7e0 [ 195.514377][ T7151] __x64_sys_bpf+0x41/0x50 [ 195.514451][ T7151] x64_sys_call+0x10cb/0x3020 [ 195.514481][ T7151] do_syscall_64+0x12c/0x3b0 [ 195.514596][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.514624][ T7151] RIP: 0033:0x7f854c2acdd9 [ 195.514643][ T7151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.514667][ T7151] RSP: 002b:00007f854ad07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.514701][ T7151] RAX: ffffffffffffffda RBX: 00007f854c525fa0 RCX: 00007f854c2acdd9 [ 195.514770][ T7151] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 195.514787][ T7151] RBP: 00007f854ad07090 R08: 0000000000000000 R09: 0000000000000000 [ 195.514803][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.514818][ T7151] R13: 00007f854c526038 R14: 00007f854c525fa0 R15: 00007ffcf0fbd458 [ 195.514840][ T7151] [ 195.704494][ T7154] netlink: 'syz.8.800': attribute type 13 has an invalid length. [ 195.737176][ T7154] netlink: 'syz.8.800': attribute type 17 has an invalid length. [ 195.793156][ T28] audit: type=1400 audit(1777948063.590:1106): avc: denied { append } for pid=7160 comm="syz.9.802" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 195.882957][ T28] audit: type=1400 audit(1777948063.630:1107): avc: denied { write } for pid=7124 comm="syz.6.794" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.996141][ T28] audit: type=1400 audit(1777948063.790:1108): avc: denied { write } for pid=7155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.094233][ T28] audit: type=1400 audit(1777948063.890:1109): avc: denied { write } for pid=7177 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.218688][ T7181] loop4: detected capacity change from 0 to 512 [ 196.244981][ T7181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.266214][ T7181] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 196.280707][ T7181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 196.298571][ T7181] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 196.387545][ T7181] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 196.669063][ T7181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.946909][ T7195] loop9: detected capacity change from 0 to 1764 [ 197.096273][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.492043][ T7207] loop4: detected capacity change from 0 to 512 [ 197.647876][ T7207] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 197.788377][ T28] audit: type=1400 audit(1777948065.560:1110): avc: denied { write } for pid=7204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.015782][ T7207] EXT4-fs (loop4): 1 truncate cleaned up [ 198.026130][ T28] audit: type=1400 audit(1777948065.820:1111): avc: denied { write } for pid=7221 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.036181][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.084342][ T7207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.356141][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.495785][ T7251] loop4: detected capacity change from 0 to 512 [ 198.538776][ T7251] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 198.562777][ T7252] netlink: 168 bytes leftover after parsing attributes in process `syz.6.815'. [ 198.587834][ T7251] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.814: bg 0: block 104: invalid block bitmap [ 198.647990][ T7251] loop4: lost filesystem error report for type 5 error -117 [ 198.648127][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 198.661948][ C0] EXT4-fs (loop4): initial error at time 1777948066: ext4_validate_block_bitmap:432 [ 198.671424][ C0] EXT4-fs (loop4): last error at time 1777948066: ext4_validate_block_bitmap:432 [ 198.768301][ T7251] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 198.771492][ T7275] netlink: 'syz.6.818': attribute type 2 has an invalid length. [ 198.788714][ T7251] loop4: lost filesystem error report for type 5 error -117 [ 198.791907][ T7251] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.814: invalid indirect mapped block 1 (level 1) [ 198.824647][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 198.824661][ T28] audit: type=1400 audit(1777948066.620:1117): avc: denied { write } for pid=7277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.834565][ T7275] netlink: 'syz.6.818': attribute type 8 has an invalid length. [ 198.868163][ T7251] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 198.868509][ T7251] EXT4-fs (loop4): 1 truncate cleaned up [ 198.903652][ T7275] netlink: 132 bytes leftover after parsing attributes in process `syz.6.818'. [ 198.918488][ T7251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.971200][ T28] audit: type=1400 audit(1777948066.770:1118): avc: denied { write } for pid=7249 comm="syz.4.814" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.999366][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 199.061252][ T28] audit: type=1400 audit(1777948066.860:1119): avc: denied { ioctl } for pid=7249 comm="syz.4.814" path="socket:[17146]" dev="sockfs" ino=17146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.069604][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 199.195229][ T7281] loop6: detected capacity change from 0 to 128 [ 199.268257][ T28] audit: type=1400 audit(1777948067.060:1120): avc: denied { write } for pid=7282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.342673][ T28] audit: type=1400 audit(1777948067.120:1121): avc: denied { write } for pid=7296 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.399652][ T28] audit: type=1400 audit(1777948067.140:1122): avc: denied { map } for pid=7249 comm="syz.4.814" path="pipe:[1633]" dev="pipefs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 199.465499][ T28] audit: type=1400 audit(1777948067.140:1123): avc: denied { execute } for pid=7249 comm="syz.4.814" path="pipe:[1633]" dev="pipefs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 199.487621][ T7275] bio_check_eod: 27 callbacks suppressed [ 199.487642][ T7275] syz.6.818: attempt to access beyond end of device [ 199.487642][ T7275] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 199.566287][ T7275] syz.6.818: attempt to access beyond end of device [ 199.566287][ T7275] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 199.606157][ T7275] syz.6.818: attempt to access beyond end of device [ 199.606157][ T7275] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 199.640651][ T7281] syz.6.818: attempt to access beyond end of device [ 199.640651][ T7281] loop6: rw=0, sector=150, nr_sectors = 1 limit=128 [ 199.668350][ T7275] syz.6.818: attempt to access beyond end of device [ 199.668350][ T7275] loop6: rw=0, sector=145, nr_sectors = 1 limit=128 [ 199.715482][ T7275] Buffer I/O error on dev loop6, logical block 145, async page read [ 199.757771][ T7275] syz.6.818: attempt to access beyond end of device [ 199.757771][ T7275] loop6: rw=0, sector=146, nr_sectors = 1 limit=128 [ 199.783077][ T28] audit: type=1400 audit(1777948067.570:1124): avc: denied { write } for pid=7300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.798205][ T7275] Buffer I/O error on dev loop6, logical block 146, async page read [ 199.988608][ T7275] syz.6.818: attempt to access beyond end of device [ 199.988608][ T7275] loop6: rw=0, sector=147, nr_sectors = 1 limit=128 [ 200.044634][ T28] audit: type=1400 audit(1777948067.810:1125): avc: denied { write } for pid=7315 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.244456][ T7275] Buffer I/O error on dev loop6, logical block 147, async page read [ 200.355685][ T7275] syz.6.818: attempt to access beyond end of device [ 200.355685][ T7275] loop6: rw=0, sector=148, nr_sectors = 1 limit=128 [ 200.368917][ T7275] Buffer I/O error on dev loop6, logical block 148, async page read [ 200.387339][ T7275] syz.6.818: attempt to access beyond end of device [ 200.387339][ T7275] loop6: rw=0, sector=149, nr_sectors = 1 limit=128 [ 200.400569][ T7275] Buffer I/O error on dev loop6, logical block 149, async page read [ 200.408633][ T7275] syz.6.818: attempt to access beyond end of device [ 200.408633][ T7275] loop6: rw=0, sector=150, nr_sectors = 1 limit=128 [ 200.421866][ T7275] Buffer I/O error on dev loop6, logical block 150, async page read [ 200.430076][ T7275] Buffer I/O error on dev loop6, logical block 151, async page read [ 200.438347][ T7275] Buffer I/O error on dev loop6, logical block 152, async page read [ 200.566419][ T28] audit: type=1400 audit(1777948068.360:1126): avc: denied { write } for pid=7319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.209603][ T7366] loop6: detected capacity change from 0 to 2048 [ 201.244935][ T7366] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000802) [ 201.385656][ T7374] loop7: detected capacity change from 0 to 8192 [ 201.866604][ T7403] netlink: 36 bytes leftover after parsing attributes in process `syz.6.825'. [ 201.894181][ T7406] Failed to initialize the IGMP autojoin socket (err -2) [ 202.074043][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.489739][ T7424] netlink: 'syz.4.826': attribute type 13 has an invalid length. [ 202.517381][ T7424] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.826'. [ 202.568293][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 202.577204][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.826'. [ 202.600957][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 202.636748][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.826'. [ 202.655930][ T7424] netlink: 'syz.4.826': attribute type 6 has an invalid length. [ 202.989130][ T7475] Failed to initialize the IGMP autojoin socket (err -2) [ 203.069007][ T7484] netlink: 'syz.4.839': attribute type 16 has an invalid length. [ 203.216411][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.223795][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.364584][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.399312][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.533414][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.564855][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.604985][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.647340][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.673008][ T7507] veth1_macvtap: left promiscuous mode [ 203.728228][ T7507] macsec0: entered promiscuous mode [ 203.748177][ T7512] loop9: detected capacity change from 0 to 1764 [ 204.281721][ T7524] loop6: detected capacity change from 0 to 8192 [ 204.632600][ T7530] loop6: detected capacity change from 0 to 512 [ 204.660116][ T7530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.672736][ T7530] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.743823][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 204.743842][ T28] audit: type=1400 audit(1777948072.530:1143): avc: denied { write } for pid=7529 comm="syz.6.848" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.789359][ T28] audit: type=1400 audit(1777948072.580:1144): avc: denied { write } for pid=7508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.841250][ T28] audit: type=1400 audit(1777948072.620:1145): avc: denied { write } for pid=7545 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.966346][ T28] audit: type=1400 audit(1777948072.760:1146): avc: denied { write } for pid=7548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.015623][ T28] audit: type=1400 audit(1777948072.810:1147): avc: denied { write } for pid=7559 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.161303][ T28] audit: type=1400 audit(1777948072.960:1148): avc: denied { write } for pid=7562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.188300][ T6862] ================================================================== [ 205.196617][ T6862] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 205.204357][ T6862] [ 205.206686][ T6862] read-write to 0xffff888237d277a0 of 8 bytes by task 7572 on cpu 1: [ 205.214757][ T6862] find_get_block_common+0x459/0x870 [ 205.220075][ T6862] bdev_getblk+0x4d/0x3f0 [ 205.224426][ T6862] __ext4_get_inode_loc+0x303/0x930 [ 205.229669][ T6862] ext4_get_inode_loc+0x66/0xe0 [ 205.234705][ T6862] ext4_xattr_ibody_get+0x92/0x2d0 [ 205.239836][ T6862] ext4_xattr_get+0xdc/0x470 [ 205.244445][ T6862] ext4_xattr_security_get+0x32/0x40 [ 205.249754][ T6862] __vfs_getxattr+0x2ad/0x2c0 [ 205.254454][ T6862] get_vfs_caps_from_disk+0x9e/0x360 [ 205.259754][ T6862] cap_bprm_creds_from_file+0x1a2/0xcf0 [ 205.265315][ T6862] security_bprm_creds_from_file+0x3c/0x70 [ 205.271137][ T6862] begin_new_exec+0x1f6/0x1250 [ 205.275917][ T6862] load_elf_binary+0x62b/0x1a20 [ 205.280804][ T6862] bprm_execve+0x476/0x990 [ 205.285290][ T6862] do_execveat_common+0x6b7/0x720 [ 205.290345][ T6862] __x64_sys_execve+0x5f/0x80 [ 205.295064][ T6862] x64_sys_call+0x2752/0x3020 [ 205.299808][ T6862] do_syscall_64+0x12c/0x3b0 [ 205.304505][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.310422][ T6862] [ 205.312837][ T6862] read to 0xffff888237d277a0 of 8 bytes by task 6862 on cpu 0: [ 205.320413][ T6862] has_bh_in_lru+0x35/0x1f0 [ 205.324937][ T6862] smp_call_function_many_cond+0x2a7/0xb70 [ 205.330759][ T6862] on_each_cpu_cond_mask+0x3c/0x80 [ 205.335887][ T6862] invalidate_bh_lrus+0x2a/0x30 [ 205.340757][ T6862] blkdev_flush_mapping+0x94/0x1a0 [ 205.345884][ T6862] bdev_release+0x2bf/0x3d0 [ 205.350465][ T6862] blkdev_release+0x15/0x20 [ 205.355075][ T6862] __fput+0x29b/0x630 [ 205.359066][ T6862] ____fput+0x1c/0x30 [ 205.363146][ T6862] task_work_run+0x130/0x1a0 [ 205.367748][ T6862] exit_to_user_mode_loop+0x1f4/0x6f0 [ 205.373298][ T6862] do_syscall_64+0x232/0x3b0 [ 205.377923][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.383847][ T6862] [ 205.386174][ T6862] value changed: 0x0000000000000000 -> 0xffff8881007202d8 [ 205.393281][ T6862] [ 205.395610][ T6862] Reported by Kernel Concurrency Sanitizer on: [ 205.401900][ T6862] CPU: 0 UID: 0 PID: 6862 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 205.412940][ T6862] Tainted: [W]=WARN [ 205.416834][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.426901][ T6862] ================================================================== [ 205.472914][ T28] audit: type=1400 audit(1777948073.270:1149): avc: denied { write } for pid=7575 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.594238][ T28] audit: type=1400 audit(1777948073.390:1150): avc: denied { write } for pid=7578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.636445][ T28] audit: type=1400 audit(1777948073.430:1151): avc: denied { write } for pid=7589 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.660827][ T4561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.751808][ T28] audit: type=1400 audit(1777948073.550:1152): avc: denied { write } for pid=7592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1