last executing test programs: 3m58.987205424s ago: executing program 3 (id=471): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x42, 0xa, 0x9, 0x0, 0x10}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r3}, 0x94) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000790000000000000002000400850000002900000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='7', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x101, 0x0, &(0x7f0000000480)="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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m58.036006336s ago: executing program 3 (id=478): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r1, &(0x7f0000000680), 0x0}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) setns(0xc9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000040)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x200400, 0x0) 3m55.940377035s ago: executing program 3 (id=496): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x10020) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x3e, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 3m55.863604607s ago: executing program 3 (id=498): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000f80)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x9}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='{', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x2, @private0, 0x1}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000280)="fa5129c158", 0x5}], 0x1}}], 0x2, 0x5) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x128, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x104, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000000000000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000040)=0x84) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="ba035b12daf364ef17bbaad34f85a0aaaaaaaaaaaaaa8aaaaaaabb86dd600a8435001406fffe8000400000bbfe8000000000000000000000000000aa6d854100004e2200000000000000003c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x80, 0x7, 0x1000, 0x0, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x66, 0x0, 0x10, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@noop, @end, @end]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x3f, r8}) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@bsdgroups}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0x1, 0x4a3, &(0x7f0000000e00)="$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") socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x180, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xf2c}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r11, &(0x7f0000000000)='7', 0x1) inotify_add_watch(r10, &(0x7f00000003c0)='.\x00', 0x5db) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080003000100000008000500", @ANYRES32=r12, @ANYBLOB="5cc312b3a9d9c80b6ecedf713c0b05000000000000004eeaaf9641ed3f7e7204e34c1e760f216cd0bb8fb594249adbc2863baff29e3d3a1355cac6238937ddd9c94d56ae4c090f8d30ce97def9272602f7ee13fccb4374b766d4e8314442b9e64971d5b96cccf049a76560ccb255bcf5c69ae84b3fb0a689f8baf118b37cea685ab4d84cfad5a407935ccfe4d623550b68f09df7bb651f0085256cd0ff650f06da70f304e7c186dcf85ba50b017d9de6a6f2252c1908619fb853b660929a9e6b"], 0x44}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) 3m55.536903244s ago: executing program 3 (id=502): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x2, {0x2, 0xff, 0x6}, 0xfe}, 0x18) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x2, {0x2, 0xf0, 0x1}, 0x2}, 0x18) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c00078018000180"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m55.158162473s ago: executing program 3 (id=507): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) socket$kcm(0x11, 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10000d, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f00000001c0)={0xe562, 0xfffff000, 0x4, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x40000, 0x0, 0x0, 0x41000}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./mnt\x00', 0x0, 0x4018, r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="ffffff7f00000000000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000200"/27], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20008040) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x20}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40000, &(0x7f00000000c0)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 3m55.053492656s ago: executing program 32 (id=507): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) socket$kcm(0x11, 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10000d, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f00000001c0)={0xe562, 0xfffff000, 0x4, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x40000, 0x0, 0x0, 0x41000}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./mnt\x00', 0x0, 0x4018, r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="ffffff7f00000000000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000200"/27], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20008040) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x20}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40000, &(0x7f00000000c0)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 3m45.91802889s ago: executing program 1 (id=587): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0xfffe, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) read(0xffffffffffffffff, &(0x7f0000000500), 0x64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000029a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2d, 0x2, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="14ca4a003060", @ANYRES64=r7], 0xb2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) 3m45.553754038s ago: executing program 1 (id=590): futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x1500001f) 3m45.553054768s ago: executing program 1 (id=592): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00'}) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001a40)="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", 0x559, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r1}, &(0x7f0000000840)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x8001) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000440)={[{@jqfmt_vfsv1}, {@nodelalloc}, {@grpquota}, {@usrjquota}]}, 0x1, 0x516, &(0x7f00000005c0)="$eJzs3c9vI1cdAPDveNeJd5M2aekBELRLW1jQap3E20ZVD1BOCKFKiB5B2obEG0Wx4yh2ShP2kJ65IlGJExw48Adwrjhw54LgxqUckPgRgRokDoNmPEm9WXsTmsRO489HGs1782bn+95a857nOfYLYGzdioi9iJiIiLcjYqY4nhRbvNHdsvM+2n+4fLD/cDmJNH3rH0lenh2Lnn+TmSquWYmI730r4ofJ43HbO7vrS41GfavIz3Wam3Ptnd27a82l1fpqfaNWW1xYnH/t3qu1c2vrC82JIvXFD3+/97UfZ9WaLo70tuM8dZtePoqTuR4R37mIYCNwrWjPxKgrwidSiohnI+LF/P6fiWv5qwkAXGVpOhPpTG8eALjqSvkcWFKqFnMB01EqVasRU5HEc3Gz1Gi1O3cetLY3VrpzZbNRLj1Ya9Tni7nC2SgnWX4hT3+crx3L34uIZyLip5M38nx1udVYGeUbHwAYY1PHxv9/T3bHfwDgiquMugIAwNAZ/wFg/Bj/AWD8GP8BYPx0x/8bo64GADBEnv8BYPwY/wFgrHz3zTezLT0ofv965Z2d7fXWO3dX6u31anN7ubrc2tqsrrZaq/lv9jRPul6j1dpceCW23539+ma7M9fe2b3fbG1vdO7nv+t9v17Oz9obQssAgEGeeeGDPyXZiPz6jXyLnrUcyiOtGXDRSqOuADAy10ZdAWBk/s/VviwOBlfIGZ7xTQ/AFdFnid5HVPp9QShN0/TiqgRcsNufM/8P46pn/t9fAcOYMf8P48uEPoyvNE1Ou+Z/nPZEAOByM8cPDPj8/9li/+viw4EfrBw/4/2Tr+07BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxVh+v/Vot1OqajVKpWI56KiNkoJw/WGvX5iHg6Iv44WZ7M8gsjrjMAcFalvybF+l+3Z16efqTo+amj5ERE/Ojnb/3s3aVOZ+sPERPJPycPj3feL47Xhl97AOBkh+N0vu95kP9o/+Hy4TbM+vztmxFR6cY/2J+Ig6P41+N6vq9EOSJu/isp8l1Jz9zFWey9FxGf7df+JKbzOZDuyqfH42exnxpq/NIj8Ut5WXef/V985hzqAuPmg6z/eaPf/VeKW/m+//1fyXuosyv6v+xSywd5H/hx/MP+79qA/u/WaWO88rtvd1M3Hi97L+Lz1yMOYx/09D+H8ZMB8V8+Zfw/f+H5FweVpb+IuB394/fGmus0N+faO7t315pLq/XV+kattriwOP/avVdrc/kc9Vx3NEj7DAp/f/3O04PiZ+2/OSB+5YT2f/mU7f/lf9/+/peeEP+rL/WLX4rnnhA/ezL/yinjL938TWVQWRZ/ZUD7T3r975widjY+ffiX3ceWDQcARqe9s7u+1GjUtz6tiV/9ttuQJ5yTvVe5DFWVOHMiLvFL+Y1hxZqI/kU/eal7KxwrStNPFGtQj3Ees27AZXB000fEf0ZdGQAAAAAAAAAAAAAAoK9hfGNp1G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vpfAAAA//9BBsyD") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) symlink(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00') sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4000800) 3m45.299276934s ago: executing program 1 (id=596): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x404}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x404}, 0xe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_buf(r2, 0x0, 0x2e, 0x0, 0x801) (async) setsockopt$inet_buf(r2, 0x0, 0x2e, 0x0, 0x801) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) (async) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xfffd, @empty, 0xfffffffe}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xfffd, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000001040), 0x4) listen(r0, 0xfff) 3m45.04567615s ago: executing program 1 (id=598): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x404}, 0xe) listen(r0, 0xfff) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0xce96, 0x2082) r3 = fcntl$dupfd(r1, 0x406, r2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee00}}, './file0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000002c0)={0x0, 0x8a, 0x4, 0x40000000, 0x8c, "00090000000000000000000cadf100004000"}) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4002, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r8 = syz_open_pts(r6, 0x141401) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r5, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000801, r4, &(0x7f00000000c0)={0x100000000, 0xffffffffffffffff, 0x0, 0x2, 0x722, 0x9, 0x800000000000, 0x3, 0x2a25d069}) 3m44.769692217s ago: executing program 1 (id=601): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r0, 0x2da0, 0x7721, 0x56, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_MCE_KILL(0x21, 0x1000000, 0x0) 3m44.766211257s ago: executing program 33 (id=601): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r0, 0x2da0, 0x7721, 0x56, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_MCE_KILL(0x21, 0x1000000, 0x0) 3m34.913434747s ago: executing program 4 (id=690): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000005040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) socket$can_bcm(0x1d, 0x2, 0x2) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0, 0x4}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x1224, 0xfdffffff, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x10702, 0x35, 0x6, 0x8, 0x7, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n'}}, {@uid_gt}, {@uid_gt={'uid>', 0xee00}}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) getrlimit(0xc, &(0x7f0000000040)) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0xf}, 0x900, 0x0, 0x2000000, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) timerfd_create(0x3, 0x0) clock_gettime(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x346, &(0x7f00000001c0)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000000380001000000000000009f25037c0000100001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$kcm(r2, 0x0, 0xff4c) 3m33.605431858s ago: executing program 4 (id=699): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, 0x0, 0x1) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200e5fcffffff0000000003000008850000002800000085000000a000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 3m33.554460129s ago: executing program 4 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000b2f0cbaa1f357331000000180001801400020073797a5f74756e000000000000000000080002000f"], 0x34}, 0x1, 0x0, 0x0, 0x400c890}, 0x4080000) 3m33.50525533s ago: executing program 4 (id=702): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x2100, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x130, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000140)='nilfs2\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', 0x10002, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$FIONCLEX(r2, 0x5450) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) r4 = open(0x0, 0x4827e, 0x20) fallocate(r4, 0x0, 0x832d, 0x87ffffd) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000300)={0x2, r8}) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x8) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0x8, 0x2], 0xfe) 3m33.385061083s ago: executing program 4 (id=703): r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x4, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4b, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa9078ac1414bbac1414bb0f009078000900058e08201fc6a26dce548898e452a41072795ed6ae557615b1b58d337fdd22e29de8cc46cf00c1e7db"], 0x0) sendto$inet6(r1, &(0x7f0000000100)='0', 0xfffffffffffffdcd, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0xb8b413797f05204c}, 0x8081) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f00000001c0)={0xffff, 0xffff, 0xd, 0x9, 0x9}) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) keyctl$clear(0x7, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a4000145200009002cea19853626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x20004080) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000002000000000000200000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000ffffffff000000000000000000000000fe800000000000000000000000000024ff020000a8151a7ba477e2b200000001ff050000000000000a000a000020010000000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000013c0200000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) 3m29.759981998s ago: executing program 6 (id=725): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1000000, &(0x7f0000000280)={[{@usrjquota}, {@init_itable}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000020000"], 0x310) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) memfd_create(0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000180)={0x53, 0x1, 0x0, 0xaf, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x10023, 0xffffef01, 0x0}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x8012, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) lseek(r3, 0x800, 0x5f45e1c9307e1ff2) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa91aabb72b40000005908060001080006040001aaaaaaaaaa16ac1414bbaaaaaaaa1209ff"], 0x0) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='minix\x00', 0x80000, &(0x7f0000000240)=',/,\\{%@+\x00') mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write$eventfd(r7, &(0x7f0000000080)=0x754, 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) unshare(0x66000080) 3m29.101520013s ago: executing program 6 (id=732): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff00000000040000010190748f1e0001ac1414aa05009078e00100e046000000000000090011"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) symlink(0x0, &(0x7f0000000240)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010000000000000002000300", @ANYRES32=r0, @ANYBLOB="0402000000000000000001", @ANYBLOB="3ce0f1ae54ff82d6d29539aad030f300c87925", @ANYBLOB="1000050000000000"], 0x34, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000140)=0x10001, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1}, 0x9}], 0x2, 0x10100, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) close(0xffffffffffffffff) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@map=r2, 0xffffffffffffffff, 0x5, 0x2020}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3m28.155382095s ago: executing program 6 (id=738): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x3, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x52) write$binfmt_elf64(r3, &(0x7f0000000500)=ANY=[], 0x78) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4000000000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x117414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x80000000, @private0, 0x1}}, [0x8, 0x9908, 0x6c84, 0x910, 0x0, 0xc95, 0x0, 0x6, 0x3ff, 0x4, 0x5, 0x1, 0x5, 0x1, 0x6]}, &(0x7f0000000300)=0x100) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r8 = io_uring_setup(0x428, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r8, 0x2da0, 0x7721, 0x56, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={r7, 0x401, 0x2, [0x9, 0x6]}, &(0x7f0000000380)=0xc) timer_settime(r6, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r10, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000200)={'veth0_to_bond\x00', 0x600}) 3m27.95770794s ago: executing program 6 (id=741): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000002c0)={[{@errors_continue}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6041, 0x59) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='processors', 0xa) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 3m27.588787949s ago: executing program 6 (id=745): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x363480) readv(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) 3m26.567348833s ago: executing program 6 (id=752): socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', '', [{0x20, 'cpuacct.usage_percpu_user\x00'}, {0x20, ']}+!!-['}, {0x20, '\x00'}]}, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x812c3186c1a5186a, 0x100) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000014000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) (async) io_uring_setup(0x896, &(0x7f0000000040)={0x0, 0x3cad, 0x1c080, 0x7, 0x20002f7}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) set_mempolicy(0x0, 0x0, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000200), 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000140)=0x7, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x9, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 3m26.376915368s ago: executing program 34 (id=752): socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', '', [{0x20, 'cpuacct.usage_percpu_user\x00'}, {0x20, ']}+!!-['}, {0x20, '\x00'}]}, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x812c3186c1a5186a, 0x100) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000014000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) (async) io_uring_setup(0x896, &(0x7f0000000040)={0x0, 0x3cad, 0x1c080, 0x7, 0x20002f7}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) set_mempolicy(0x0, 0x0, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000200), 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000140)=0x7, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x9, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 3m18.125077581s ago: executing program 35 (id=703): r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x4, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4b, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa9078ac1414bbac1414bb0f009078000900058e08201fc6a26dce548898e452a41072795ed6ae557615b1b58d337fdd22e29de8cc46cf00c1e7db"], 0x0) sendto$inet6(r1, &(0x7f0000000100)='0', 0xfffffffffffffdcd, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0xb8b413797f05204c}, 0x8081) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f00000001c0)={0xffff, 0xffff, 0xd, 0x9, 0x9}) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) keyctl$clear(0x7, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a4000145200009002cea19853626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x20004080) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000002000000000000200000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000ffffffff000000000000000000000000fe800000000000000000000000000024ff020000a8151a7ba477e2b200000001ff050000000000000a000a000020010000000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000013c0200000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) 2m59.619543254s ago: executing program 2 (id=961): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff00000000040000010190748f1e0001ac1414aa05009078e00100e046000000000000090011"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) symlink(0x0, &(0x7f0000000240)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="040200000000000000000100", @ANYBLOB="3ce0f1ae54ff82d6d29539aad030f300c87925", @ANYBLOB="1000050000000000"], 0x34, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000140)=0x10001, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1}, 0x9}], 0x2, 0x10100, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) close(0xffffffffffffffff) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@map=r2, 0xffffffffffffffff, 0x5, 0x2020}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 2m58.638233987s ago: executing program 2 (id=968): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}]}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x8, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r1, 0x101}, &(0x7f0000000400)=0x8) 2m58.553219169s ago: executing program 2 (id=969): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x294600, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="a00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100002300000000000000000000010c000280050001000000000006000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000007fffffff07400000000004000680"], 0xa0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x40004, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000}, [@tail_call]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2m57.817103477s ago: executing program 2 (id=978): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@nouid32}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340)}, 0x80, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setns(0xc9, 0x0) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xf7, 0x1000005, 0x12, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6430, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x4, @perf_config_ext={0x3, 0x8}, 0x100002, 0x8001, 0x1000, 0x5, 0x8, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7f, 0x4}, 0x838, 0x0, 0x3, 0x0, 0x40000000008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0, 0x100000000000001, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4002, &(0x7f0000000040)={[{@init_itable}], [{@obj_user={'obj_user', 0x3d, '(!)/:'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-\xf4\\\x9a[(:.'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, ':.'}}]}, 0x1, 0x7c5, &(0x7f0000001880)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5403, 0x4, 0x14) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r4, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x400c4d06, &(0x7f0000001140)="bdc26cf09a268c4134c56683c42fbdc19cace97afd0871bf5b825bbcbf02de5c9fe622c7726feca17fb46600c300"/58) 2m56.114017126s ago: executing program 2 (id=996): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (async, rerun: 32) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa0042, 0x0) (rerun: 32) copy_file_range(r2, 0x0, r2, &(0x7f0000000040)=0x8, 0x2, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0x36, 0x0, &(0x7f00000009c0)="c1df07000000d30a0000e68886dd8772432c7976ac7819c262e050cbbb2d0f328f8723d8b56c4bcd03cf2883ed1c2fedb704a4960444", 0x0, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1c8, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10001, 0x3d}}}}, [@NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1400, 0xc, 0x0, 0x40, 0x2, 0x0, 0xc, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1}, {0x6}, {0x2, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x2, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0x7}, {0x6, 0x1}, {0x3}, {0x1, 0xa}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x0, 0x6, 0xc, 0x16, 0x3, 0x9, 0x2, 0x24, 0x12, 0x5, 0x60, 0x9, 0x5, 0x3, 0x7c1291fd1a25edc1, 0x16, 0x9, 0x48, 0x18, 0x2, 0x5, 0x1, 0x0, 0x1b, 0x24, 0x24, 0x24, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x9, 0xf, 0x12, 0x2300, 0x3ff, 0x66e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0xff9d, 0xc2a, 0x0, 0x7ff, 0x5, 0x40]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x8, 0x80, 0x5, 0x284, 0x0, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9c9, 0x8, 0x4, 0x4c1, 0x4000, 0x4, 0x80, 0x9]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1000, 0x9, 0x4, 0xb2, 0x1ff, 0x0, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x4000, 0x0, 0x3ff, 0x9, 0x8, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0x0, 0x5, 0x6, 0x16, 0x6c, 0x16, 0x12, 0xc, 0x1b, 0x12, 0x7bbb10af25dcb83c, 0x1d, 0x12, 0x1, 0x1c, 0xc, 0x1b, 0x6c, 0x9, 0x48, 0x4f]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x30, 0x48, 0x0, 0x27, 0xb, 0x1b, 0x1b, 0x36, 0x12, 0xb, 0x6c, 0x5, 0xc, 0x4, 0x6a, 0x18, 0xb, 0x36, 0x0, 0x24, 0x48, 0x9, 0x6, 0x4, 0x2, 0xc, 0x4, 0x30, 0x6, 0x12, 0x1e]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x101, 0x4, 0x4, 0xfff7, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x6cec, 0x5, 0x5, 0x9, 0x18a3, 0x7]}}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40}, 0x20044004) (async, rerun: 32) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xffffffffffffffff) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="0a00010036eff10f90856d7b"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2m55.834186993s ago: executing program 2 (id=997): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x50, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x874}, 0xc004) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x2, 0xfffffffd, 0x5, 0xc, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0xd) write(r1, &(0x7f00000001c0)='p:s/p ./file0:0', 0xf) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000100)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x4b, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x38, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 2m55.797951844s ago: executing program 36 (id=997): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x50, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x874}, 0xc004) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x2, 0xfffffffd, 0x5, 0xc, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0xd) write(r1, &(0x7f00000001c0)='p:s/p ./file0:0', 0xf) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000100)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x4b, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x38, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 2.52503848s ago: executing program 7 (id=2687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c00128008000100677470003000028008000300eec2000008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="14000800fe8000000000000000000000000000bb08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) 2.313687855s ago: executing program 9 (id=2690): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, 0x0, 0x0) 2.253583177s ago: executing program 7 (id=2692): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100880000"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r2, &(0x7f0000000500)=ANY=[], 0xfdef) 2.243556877s ago: executing program 8 (id=2693): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0xef, 0x0, 0xfffff034}, {0x50, 0x1, 0x2}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) 2.09624374s ago: executing program 9 (id=2695): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) 2.053616992s ago: executing program 8 (id=2696): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00002f00000061118c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x46}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0xa6e7cc47bbd68e85, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto(r0, &(0x7f00000002c0)="00edb418cfb659d8994edfa99e2f9aa83087b2100facf8a521d4d278242af6c703cebd4d789e5dfd7ee8dad1c81014b734b2792718a455d19e6db328bfbadfbe3e66cd3fb66c2b95bd9bfa62db4d5402c1dc", 0x52, 0x8040, &(0x7f0000000400)=@in6={0xa, 0x4e20, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6ff16901dc11fffe8800000e63142c213d0a527cf1dd2c2fc74c012c06bc9e8100000000000000000084000001fc01000000000000cf54cb21000000004e254e2101dc9078ee373935ef0f8da10b47000507b0025a"], 0x204) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x12, 0x60d, 0xf0, 0x202, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xfe], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xd0, 0xf0}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae328689605bc686) 1.961764804s ago: executing program 9 (id=2697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0xe20, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x5c, 0x66, 0x0, 0x4, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "d7d256885555de75a559e78cb5330e9893bce0d27b9a550d", "4bb87aa4f3fb81f80fe4d0f03c1d4a613cf34d1bbfc0b0a497bc3b0a43205d1a"}}}}, 0x6a) 1.894163325s ago: executing program 7 (id=2698): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)) 1.736083599s ago: executing program 8 (id=2701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce3c61821c000b250a005f42000000000000", @ANYRES32], 0x1c}}, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1.69072073s ago: executing program 5 (id=2702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a1a5000021a40400140003006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x70}}, 0x4000844) 1.623878032s ago: executing program 7 (id=2703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c00128008000100677470003000028008000300eec2000008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="14000800fe8000000000000000000000000000bb08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) 1.322758079s ago: executing program 9 (id=2704): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xe4}}, 0x20050840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 1.322201539s ago: executing program 5 (id=2705): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.2656756s ago: executing program 0 (id=2706): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) 1.179756302s ago: executing program 8 (id=2707): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) 1.164152482s ago: executing program 5 (id=2708): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100880000"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r2, &(0x7f0000000500)=ANY=[], 0xfdef) 1.090720134s ago: executing program 7 (id=2709): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78", 0x6e}], 0x1}}], 0x1, 0x2090) shutdown(r0, 0x1) 1.053368376s ago: executing program 9 (id=2710): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac0000000000000000000000000000000000000000000000040000000000"], 0xc4}}, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f00000000c0), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c010000130001010000000000000000fc0200000000000000000000000000007f0000010000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000008000000000000000000000000000000ffff00000000000000000000000000000001000000000000feffffff00000000000000030000000084000500ac141419000000000000000000000000000004d42b0000000a000000fc0100000000000000000000000000000000000004010300000000000200000006000000ac1414aa000000000000000000000000000004d42b0000000a000000fc00000000000000004b5074416000000000000001"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r7, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 960.082338ms ago: executing program 0 (id=2711): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r0, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffc}]}, 0x40}}, 0x4) 906.339489ms ago: executing program 8 (id=2712): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x48, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 832.012271ms ago: executing program 7 (id=2713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000080)=0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 726.716353ms ago: executing program 5 (id=2714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0xe20, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x5c, 0x66, 0x0, 0x4, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "d7d256885555de75a559e78cb5330e9893bce0d27b9a550d", "4bb87aa4f3fb81f80fe4d0f03c1d4a613cf34d1bbfc0b0a497bc3b0a43205d1a"}}}}, 0x6a) 675.749624ms ago: executing program 0 (id=2715): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)="528eb0", 0x3}, 0x1, 0x0, 0x0, 0x44000}, 0xc004) 506.310598ms ago: executing program 0 (id=2716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c000000100001002bbd7000fbdbdf2500000000", @ANYBLOB="ea4300000000000050001980350002"], 0x8c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 333.602172ms ago: executing program 0 (id=2717): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce3c61821c000b250a005f42000000000000", @ANYRES32], 0x1c}}, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 217.706045ms ago: executing program 5 (id=2718): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 194.218826ms ago: executing program 8 (id=2719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x8c055ce}, 0x1c) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a03000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 155.389526ms ago: executing program 9 (id=2720): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xe4}}, 0x20050840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 49.599229ms ago: executing program 5 (id=2721): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 0s ago: executing program 0 (id=2722): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @empty, 0x15, 0x3, 'wlc\x00', 0x4, 0x5, 0x72}, 0x2c) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000480)="63eced8e46dc3b0adf33c9f7b9", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): : batadv0: Removing interface: batadv_slave_0 [ 217.367912][T10248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.375349][T10248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.399785][T10248] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.909312][ T112] Bluetooth: hci0: Frame reassembly failed (-84) [ 218.069413][T10264] loop0: detected capacity change from 0 to 512 [ 218.102599][T10264] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.223175][T10268] loop7: detected capacity change from 0 to 512 [ 218.241372][T10268] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.365816][T10270] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1771'. [ 218.740992][T10279] loop9: detected capacity change from 0 to 512 [ 218.757935][T10279] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.894298][T10288] FAULT_INJECTION: forcing a failure. [ 218.894298][T10288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.894358][T10288] CPU: 0 UID: 0 PID: 10288 Comm: syz.9.1777 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.894383][T10288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.894396][T10288] Call Trace: [ 218.894403][T10288] [ 218.894412][T10288] __dump_stack+0x1d/0x30 [ 218.894496][T10288] dump_stack_lvl+0x95/0xd0 [ 218.894555][T10288] dump_stack+0x15/0x1b [ 218.894632][T10288] should_fail_ex+0x262/0x280 [ 218.894719][T10288] should_fail+0xb/0x20 [ 218.894779][T10288] should_fail_usercopy+0x1a/0x20 [ 218.894862][T10288] _copy_from_iter+0xcc/0xe70 [ 218.894916][T10288] ? __alloc_skb+0x516/0x6f0 [ 218.894987][T10288] ? __alloc_skb+0x209/0x6f0 [ 218.895111][T10288] netlink_sendmsg+0x4a4/0x6f0 [ 218.895277][T10288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.895435][T10288] ____sys_sendmsg+0x532/0x580 [ 218.895545][T10288] ___sys_sendmsg+0x195/0x1e0 [ 218.895674][T10288] __x64_sys_sendmsg+0xd4/0x160 [ 218.895885][T10288] x64_sys_call+0x22ab/0x2550 [ 218.896029][T10288] do_syscall_64+0x112/0x360 [ 218.896130][T10288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.896206][T10288] RIP: 0033:0x7f72fcb9e159 [ 218.896272][T10288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.896446][T10288] RSP: 002b:00007f72fb5f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.896503][T10288] RAX: ffffffffffffffda RBX: 00007f72fce25fa0 RCX: 00007f72fcb9e159 [ 218.896544][T10288] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 218.896589][T10288] RBP: 00007f72fb5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 218.896628][T10288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.896691][T10288] R13: 00007f72fce26038 R14: 00007f72fce25fa0 R15: 00007fff626506b8 [ 218.896802][T10288] [ 219.108513][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 219.108539][ T29] audit: type=1400 audit(2000000099.790:3996): avc: denied { setopt } for pid=10291 comm="syz.9.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.144067][ T29] audit: type=1400 audit(2000000099.830:3997): avc: denied { create } for pid=10291 comm="syz.9.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 219.421365][T10303] netlink: 'syz.0.1782': attribute type 2 has an invalid length. [ 219.596021][T10299] netlink: 143932 bytes leftover after parsing attributes in process `syz.9.1791'. [ 219.596192][T10299] netlink: zone id is out of range [ 219.596333][T10299] netlink: zone id is out of range [ 219.596428][T10299] netlink: zone id is out of range [ 219.596469][T10299] netlink: zone id is out of range [ 219.596550][T10299] netlink: zone id is out of range [ 219.596664][T10299] netlink: zone id is out of range [ 219.596684][T10299] netlink: zone id is out of range [ 219.596693][T10299] netlink: zone id is out of range [ 219.596718][T10299] netlink: zone id is out of range [ 219.709711][T10318] loop7: detected capacity change from 0 to 512 [ 219.744022][T10318] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.775871][ T29] audit: type=1400 audit(2000000100.460:3998): avc: denied { write } for pid=10317 comm="syz.7.1788" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.920396][T10329] loop9: detected capacity change from 0 to 512 [ 219.945414][T10329] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.950007][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 219.950160][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 220.153617][ T29] audit: type=1400 audit(2000000100.840:3999): avc: denied { write } for pid=10328 comm="syz.9.1792" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.213383][ T29] audit: type=1400 audit(2000000100.900:4000): avc: denied { write } for pid=10328 comm="syz.9.1792" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.335800][T10345] loop7: detected capacity change from 0 to 1764 [ 220.400920][T10347] netlink: 164 bytes leftover after parsing attributes in process `syz.9.1792'. [ 220.531193][T10353] loop7: detected capacity change from 0 to 1024 [ 220.589278][ T29] audit: type=1400 audit(2000000101.270:4001): avc: denied { write } for pid=10351 comm="syz.7.1799" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.614983][T10359] tipc: Enabling of bearer rejected, already enabled [ 220.719325][T10361] loop7: detected capacity change from 0 to 512 [ 220.747012][T10361] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.788390][ T29] audit: type=1400 audit(2000000101.470:4002): avc: denied { write } for pid=10360 comm="syz.7.1802" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.836307][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.955026][T10375] loop5: detected capacity change from 0 to 512 [ 220.993841][T10375] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.006154][ T29] audit: type=1400 audit(2000000101.690:4003): avc: denied { write } for pid=10374 comm="syz.5.1808" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.037307][ T29] audit: type=1400 audit(2000000101.720:4004): avc: denied { write } for pid=10374 comm="syz.5.1808" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.572650][T10394] loop8: detected capacity change from 0 to 512 [ 221.594165][T10394] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.606104][ T29] audit: type=1400 audit(2000000102.290:4005): avc: denied { write } for pid=10393 comm="syz.8.1815" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.667822][T10398] loop0: detected capacity change from 0 to 1024 [ 221.732664][T10402] loop8: detected capacity change from 0 to 512 [ 221.772130][T10402] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.872622][T10409] random: crng reseeded on system resumption [ 222.037515][T10423] syzkaller0: entered promiscuous mode [ 222.037547][T10423] syzkaller0: entered allmulticast mode [ 222.185985][T10423] tipc: Enabled bearer , priority 0 [ 222.600429][T10427] net_ratelimit: 3549 callbacks suppressed [ 222.600458][T10427] Set syz1 is full, maxelem 65536 reached [ 222.774261][T10436] loop8: detected capacity change from 0 to 512 [ 222.801737][T10436] EXT4-fs mount: 32 callbacks suppressed [ 222.801766][T10436] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.801851][T10436] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.832512][T10416] tipc: Resetting bearer [ 222.840620][T10416] tipc: Disabling bearer [ 222.892011][ T6793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.909173][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 222.909216][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.207917][T10456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.303913][T10465] loop5: detected capacity change from 0 to 128 [ 223.322189][T10467] loop7: detected capacity change from 0 to 512 [ 223.342992][T10467] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.343146][T10467] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.343804][T10465] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 223.357844][T10465] ext4 filesystem being mounted at /240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.893801][T10480] syzkaller0: entered promiscuous mode [ 223.893831][T10480] syzkaller0: entered allmulticast mode [ 223.916460][ T5352] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.938434][T10480] tipc: Enabled bearer , priority 0 [ 223.989635][T10484] loop9: detected capacity change from 0 to 1024 [ 224.008557][T10484] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.017144][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 224.098890][T10489] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1839'. [ 224.121171][ T7720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.164272][T10491] FAULT_INJECTION: forcing a failure. [ 224.164272][T10491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.164360][T10491] CPU: 0 UID: 0 PID: 10491 Comm: syz.9.1846 Not tainted syzkaller #0 PREEMPT(lazy) [ 224.164631][T10491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.164676][T10491] Call Trace: [ 224.164696][T10491] [ 224.164716][T10491] __dump_stack+0x1d/0x30 [ 224.164802][T10491] dump_stack_lvl+0x95/0xd0 [ 224.164867][T10491] dump_stack+0x15/0x1b [ 224.164930][T10491] should_fail_ex+0x262/0x280 [ 224.165013][T10491] should_fail+0xb/0x20 [ 224.165068][T10491] should_fail_usercopy+0x1a/0x20 [ 224.165121][T10491] _copy_from_user+0x1c/0xb0 [ 224.165153][T10491] ___sys_sendmsg+0xc1/0x1e0 [ 224.165348][T10491] __x64_sys_sendmsg+0xd4/0x160 [ 224.165475][T10491] x64_sys_call+0x22ab/0x2550 [ 224.165551][T10491] do_syscall_64+0x112/0x360 [ 224.165638][T10491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.165704][T10491] RIP: 0033:0x7f72fcb9e159 [ 224.165752][T10491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.165809][T10491] RSP: 002b:00007f72fb5f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.165875][T10491] RAX: ffffffffffffffda RBX: 00007f72fce25fa0 RCX: 00007f72fcb9e159 [ 224.165978][T10491] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 224.166017][T10491] RBP: 00007f72fb5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 224.166105][T10491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.166141][T10491] R13: 00007f72fce26038 R14: 00007f72fce25fa0 R15: 00007fff626506b8 [ 224.166212][T10491] [ 224.344888][ T6543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.511127][T10504] loop9: detected capacity change from 0 to 512 [ 224.559309][T10504] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.559402][T10504] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.585660][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 224.585688][ T29] audit: type=1400 audit(2000000105.270:4018): avc: denied { write } for pid=10503 comm="syz.9.1852" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.656802][T10477] tipc: Resetting bearer [ 224.666379][T10477] tipc: Disabling bearer [ 224.702331][ T7720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.851052][T10517] veth0_macvtap: left promiscuous mode [ 224.866934][T10519] loop7: detected capacity change from 0 to 1024 [ 224.874193][T10516] loop8: detected capacity change from 0 to 128 [ 224.888129][T10516] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 224.902911][T10516] ext4 filesystem being mounted at /222/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.968848][T10519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.984440][ T29] audit: type=1400 audit(2000000105.670:4019): avc: denied { write } for pid=10518 comm="syz.7.1857" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.057714][T10524] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 225.058703][T10524] ext4 filesystem being mounted at /215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 225.108752][ T6543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.244182][T10529] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.244269][T10529] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.249346][ T29] audit: type=1400 audit(2000000105.910:4020): avc: denied { write } for pid=10507 comm="syz.8.1853" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.314564][ T29] audit: type=1400 audit(2000000106.000:4021): avc: denied { write } for pid=10507 comm="syz.8.1853" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.361713][ T6793] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.373506][ T29] audit: type=1400 audit(2000000106.040:4022): avc: denied { write } for pid=10509 comm="syz.9.1854" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.412452][ T29] audit: type=1400 audit(2000000106.100:4023): avc: denied { write } for pid=10509 comm="syz.9.1854" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.454235][ T7720] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.483096][T10534] bridge_slave_0: left allmulticast mode [ 225.483123][T10534] bridge_slave_0: left promiscuous mode [ 225.483294][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.508100][T10534] bridge_slave_1: left allmulticast mode [ 225.508125][T10534] bridge_slave_1: left promiscuous mode [ 225.523018][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.546404][T10534] team0: Port device team_slave_0 removed [ 225.560008][T10534] team0: Port device team_slave_1 removed [ 225.570129][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.570155][T10534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.595782][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.595806][T10534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.623792][T10534] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.656576][ T29] audit: type=1400 audit(2000000106.340:4024): avc: denied { write } for pid=10528 comm="syz.7.1859" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.714537][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1864'. [ 225.780861][ T29] audit: type=1400 audit(2000000106.460:4025): avc: denied { write } for pid=10528 comm="syz.7.1859" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.934766][T10529] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1859'. [ 225.963069][T10547] FAULT_INJECTION: forcing a failure. [ 225.963069][T10547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.963105][T10547] CPU: 1 UID: 0 PID: 10547 Comm: syz.0.1866 Not tainted syzkaller #0 PREEMPT(lazy) [ 225.963144][T10547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.963234][T10547] Call Trace: [ 225.963242][T10547] [ 225.963252][T10547] __dump_stack+0x1d/0x30 [ 225.963282][T10547] dump_stack_lvl+0x95/0xd0 [ 225.963306][T10547] dump_stack+0x15/0x1b [ 225.963372][T10547] should_fail_ex+0x262/0x280 [ 225.963399][T10547] should_fail+0xb/0x20 [ 225.963422][T10547] should_fail_usercopy+0x1a/0x20 [ 225.963445][T10547] _copy_to_user+0x20/0xa0 [ 225.963480][T10547] simple_read_from_buffer+0xb5/0x130 [ 225.963525][T10547] proc_fail_nth_read+0x10e/0x150 [ 225.963567][T10547] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.963659][T10547] vfs_read+0x18e/0x7c0 [ 225.963756][T10547] ? __rcu_read_unlock+0x4e/0x70 [ 225.963794][T10547] ? __fget_files+0x184/0x1c0 [ 225.963819][T10547] ? mutex_lock+0x57/0x90 [ 225.963841][T10547] ksys_read+0xdc/0x1a0 [ 225.963909][T10547] __x64_sys_read+0x40/0x50 [ 225.964002][T10547] x64_sys_call+0x2135/0x2550 [ 225.964094][T10547] do_syscall_64+0x112/0x360 [ 225.964137][T10547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.964162][T10547] RIP: 0033:0x7f240f01e98e [ 225.964178][T10547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.964201][T10547] RSP: 002b:00007f240dab6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.964254][T10547] RAX: ffffffffffffffda RBX: 00007f240dab76c0 RCX: 00007f240f01e98e [ 225.964273][T10547] RDX: 000000000000000f RSI: 00007f240dab70a0 RDI: 0000000000000003 [ 225.964289][T10547] RBP: 00007f240dab7090 R08: 0000000000000000 R09: 0000000000000000 [ 225.964306][T10547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.964322][T10547] R13: 00007f240f2e6038 R14: 00007f240f2e5fa0 R15: 00007ffee189e6f8 [ 225.964418][T10547] [ 226.024476][T10554] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.029232][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 226.029292][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 226.040619][ T29] audit: type=1400 audit(2000000106.730:4026): avc: denied { write } for pid=10553 comm="syz.8.1869" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.234079][ T6543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.270111][ T6793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.515540][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 226.526634][T10584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.526708][T10584] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.582249][T10586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.605855][T10592] set_capacity_and_notify: 7 callbacks suppressed [ 226.606027][T10592] loop7: detected capacity change from 0 to 128 [ 226.620457][T10592] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 226.622260][T10592] ext4 filesystem being mounted at /168/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 226.642229][ T29] audit: type=1400 audit(2000000107.330:4027): avc: denied { write } for pid=10585 comm="syz.0.1884" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.793039][ T4386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.856020][ T6543] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.978819][T10595] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1883'. [ 227.015932][T10597] loop0: detected capacity change from 0 to 512 [ 227.045770][T10597] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.051141][T10597] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 227.053041][T10597] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.1885: inode #15: comm syz.0.1885: iget: illegal inode # [ 227.053203][T10597] loop0: lost filesystem error report for type 5 error -117 [ 227.055211][T10597] EXT4-fs (loop0): Remounting filesystem read-only [ 227.056125][T10597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.175118][T10605] loop7: detected capacity change from 0 to 512 [ 227.396479][ T5352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.478497][ T4386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.593121][T10624] loop5: detected capacity change from 0 to 128 [ 227.683488][T10631] loop0: detected capacity change from 0 to 128 [ 227.691407][T10629] loop5: detected capacity change from 0 to 512 [ 227.703932][T10631] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 227.717277][T10631] ext4 filesystem being mounted at /336/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 227.847963][T10626] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.952569][ T4386] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.963237][T10639] loop7: detected capacity change from 0 to 512 [ 227.984322][T10639] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.984566][T10639] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.024371][T10643] syzkaller1: entered promiscuous mode [ 228.024399][T10643] syzkaller1: entered allmulticast mode [ 228.151407][T10639] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1902'. [ 228.221823][ T6543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.544798][T10667] loop8: detected capacity change from 0 to 128 [ 228.563769][T10667] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 228.582358][T10667] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.589226][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 228.589319][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 228.793789][T10669] loop7: detected capacity change from 0 to 128 [ 228.829833][T10669] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 228.846100][T10669] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.846654][T10672] loop9: detected capacity change from 0 to 512 [ 228.914954][T10672] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.915201][T10672] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.222144][T10683] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1916'. [ 229.247465][ T6793] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.277422][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'. [ 229.282242][T10685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.282456][T10685] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.461865][T10695] netlink: 164 bytes leftover after parsing attributes in process `syz.9.1912'. [ 229.633094][ T6543] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.688701][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 229.688816][ T29] audit: type=1400 audit(2000000110.370:4044): avc: denied { write } for pid=10684 comm="syz.0.1917" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.713398][ T29] audit: type=1400 audit(2000000110.400:4045): avc: denied { write } for pid=10684 comm="syz.0.1917" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.850623][T10708] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1917'. [ 229.912196][T10711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.912338][T10711] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.100659][ T4386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.338246][ T7720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.379808][T10723] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 230.534436][ T29] audit: type=1400 audit(2000000111.210:4046): avc: denied { write } for pid=10710 comm="syz.7.1926" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.742178][ T29] audit: type=1400 audit(2000000111.430:4047): avc: denied { write } for pid=10710 comm="syz.7.1926" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.007219][T10745] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.007301][T10745] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.178035][ T29] audit: type=1400 audit(2000000111.860:4048): avc: denied { write } for pid=10744 comm="syz.9.1939" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.291536][ T29] audit: type=1400 audit(2000000111.980:4049): avc: denied { write } for pid=10744 comm="syz.9.1939" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.316033][T10749] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1926'. [ 231.473800][T10750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.494535][T10745] netlink: 164 bytes leftover after parsing attributes in process `syz.9.1939'. [ 231.720724][ T7720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.814830][T10761] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.128353][T10779] set_capacity_and_notify: 5 callbacks suppressed [ 232.128385][T10779] loop0: detected capacity change from 0 to 128 [ 232.138847][ T29] audit: type=1400 audit(2000000112.820:4050): avc: denied { read } for pid=10774 comm="syz.5.1950" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 232.188550][ T6543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.226290][T10775] geneve2: entered promiscuous mode [ 232.441300][T10787] loop0: detected capacity change from 0 to 512 [ 232.482099][T10787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.482272][T10787] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.620231][T10784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.796807][ T29] audit: type=1400 audit(2000000113.480:4051): avc: denied { write } for pid=10786 comm="syz.0.1953" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.857702][ T29] audit: type=1400 audit(2000000113.540:4052): avc: denied { write } for pid=10786 comm="syz.0.1953" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.003159][T10787] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1953'. [ 233.088269][T10797] loop5: detected capacity change from 0 to 512 [ 233.113411][T10797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.113520][T10797] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.176531][T10794] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.375837][ T4386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.656906][ T38] Bluetooth: hci0: Frame reassembly failed (-84) [ 233.794578][ T29] audit: type=1400 audit(2000000114.480:4053): avc: denied { write } for pid=10796 comm="syz.5.1955" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.031933][T10797] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1955'. [ 234.291060][ T5352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.324968][T10824] loop5: detected capacity change from 0 to 128 [ 234.578082][T10837] ip6tnl2: entered allmulticast mode [ 234.763620][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 234.763664][ T29] audit: type=1326 audit(2000000115.450:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.7.1974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179febe159 code=0x7ffc0000 [ 234.763703][ T29] audit: type=1326 audit(2000000115.450:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.7.1974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179febe159 code=0x7ffc0000 [ 234.788896][ T29] audit: type=1326 audit(2000000115.470:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.7.1974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179febe159 code=0x7ffc0000 [ 234.794343][ T29] audit: type=1326 audit(2000000115.480:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.7.1974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f179febe159 code=0x7ffc0000 [ 234.794457][ T29] audit: type=1326 audit(2000000115.480:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.7.1974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179febe159 code=0x7ffc0000 [ 234.794631][ T29] audit: type=1326 audit(2000000115.480:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.7.1974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179febe159 code=0x7ffc0000 [ 234.805330][ T29] audit: type=1326 audit(2000000115.470:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.7.1974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179febe159 code=0x7ffc0000 [ 234.805418][ T29] audit: type=1326 audit(2000000115.490:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.7.1974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179febe159 code=0x7ffc0000 [ 234.810753][ T29] audit: type=1326 audit(2000000115.500:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.7.1974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f179febe159 code=0x7ffc0000 [ 234.810848][ T29] audit: type=1326 audit(2000000115.500:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.7.1974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179febe159 code=0x7ffc0000 [ 235.271107][T10853] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1975'. [ 235.271136][T10853] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1975'. [ 235.463520][T10857] loop5: detected capacity change from 0 to 128 [ 235.709171][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 235.709216][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 235.831576][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1983'. [ 235.888618][T10875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1983'. [ 236.239792][T10888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 236.456917][T10897] loop8: detected capacity change from 0 to 128 [ 236.583727][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 236.695394][T10905] bridge_slave_1: entered allmulticast mode [ 236.729584][T10905] loop5: detected capacity change from 0 to 512 [ 236.757997][T10905] EXT4-fs (loop5): required journal recovery suppressed and not mounted read-only [ 236.898325][T10905] loop5: detected capacity change from 0 to 2048 [ 236.925228][T10905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.974942][T10905] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 236.975039][T10905] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 236.975136][T10905] EXT4-fs (loop5): This should not happen!! Data will be lost [ 236.975136][T10905] [ 236.975152][T10905] EXT4-fs (loop5): Total free blocks count 0 [ 236.975239][T10905] EXT4-fs (loop5): Free/Dirty block details [ 236.975257][T10905] EXT4-fs (loop5): free_blocks=4096 [ 236.975274][T10905] EXT4-fs (loop5): dirty_blocks=64 [ 236.975290][T10905] EXT4-fs (loop5): Block reservation details [ 236.975306][T10905] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 237.050925][T10904] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 237.343194][T10925] loop8: detected capacity change from 0 to 512 [ 237.362023][T10925] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.362087][T10925] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.669761][T10931] loop7: detected capacity change from 0 to 512 [ 237.731621][T10931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.731815][T10931] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.954744][T10936] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2001'. [ 238.149948][T10922] loop5: detected capacity change from 0 to 1164 [ 238.157285][ T6793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.323869][T10922] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 238.389437][T10947] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2002'. [ 238.509258][T10956] netlink: 'syz.5.1999': attribute type 10 has an invalid length. [ 238.519406][T10922] netlink: 'syz.5.1999': attribute type 10 has an invalid length. [ 238.589163][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 238.589200][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 238.731831][T10923] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.771865][T10952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.814100][T10953] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.856236][T10956] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 238.934944][ T6543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.061640][T10973] loop0: detected capacity change from 0 to 512 [ 239.087362][T10973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.087500][T10973] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.266932][T10974] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.426421][T10981] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2017'. [ 239.911354][ T71] Bluetooth: hci0: Frame reassembly failed (-84) [ 239.922983][ T4386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.169788][T10995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.237831][T11003] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.397891][T11015] loop9: detected capacity change from 0 to 512 [ 240.448106][T11015] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.448182][T11015] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.733953][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 240.733987][ T29] audit: type=1400 audit(2000000121.420:4100): avc: denied { write } for pid=11014 comm="syz.9.2034" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.830098][ T29] audit: type=1400 audit(2000000121.520:4101): avc: denied { connect } for pid=10998 comm="syz.7.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.012557][T11026] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2034'. [ 241.023216][ T29] audit: type=1400 audit(2000000121.710:4102): avc: denied { write } for pid=11014 comm="syz.9.2034" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.134865][ T7720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.224142][T11031] FAULT_INJECTION: forcing a failure. [ 241.224142][T11031] name failslab, interval 1, probability 0, space 0, times 0 [ 241.224274][T11031] CPU: 0 UID: 0 PID: 11031 Comm: syz.9.2036 Not tainted syzkaller #0 PREEMPT(lazy) [ 241.224301][T11031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.224321][T11031] Call Trace: [ 241.224327][T11031] [ 241.224335][T11031] __dump_stack+0x1d/0x30 [ 241.224389][T11031] dump_stack_lvl+0x95/0xd0 [ 241.224413][T11031] dump_stack+0x15/0x1b [ 241.224433][T11031] should_fail_ex+0x262/0x280 [ 241.224479][T11031] should_failslab+0x8c/0xb0 [ 241.224512][T11031] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 241.224624][T11031] ? kstrtoull+0x119/0x150 [ 241.224657][T11031] ? shmem_alloc_inode+0x34/0x50 [ 241.224830][T11031] ? shmem_alloc_inode+0x34/0x50 [ 241.224933][T11031] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 241.225031][T11031] shmem_alloc_inode+0x34/0x50 [ 241.225182][T11031] alloc_inode+0x40/0x170 [ 241.225303][T11031] new_inode+0x1d/0xe0 [ 241.225380][T11031] shmem_get_inode+0x250/0x7b0 [ 241.225480][T11031] __shmem_file_setup+0x14f/0x260 [ 241.225622][T11031] shmem_file_setup+0x3b/0x50 [ 241.225708][T11031] memfd_alloc_file+0x4e/0x300 [ 241.225850][T11031] __se_sys_memfd_create+0x2e1/0x3b0 [ 241.225930][T11031] __x64_sys_memfd_create+0x31/0x40 [ 241.226008][T11031] x64_sys_call+0x1955/0x2550 [ 241.226163][T11031] do_syscall_64+0x112/0x360 [ 241.226282][T11031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.226371][T11031] RIP: 0033:0x7f72fcb9e159 [ 241.226476][T11031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.226534][T11031] RSP: 002b:00007f72fb5f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 241.226597][T11031] RAX: ffffffffffffffda RBX: 00007f72fce25fa0 RCX: 00007f72fcb9e159 [ 241.226632][T11031] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000300 [ 241.226673][T11031] RBP: 00007f72fb5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 241.226766][T11031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.226802][T11031] R13: 00007f72fce26038 R14: 00007f72fce25fa0 R15: 00007fff626506b8 [ 241.226859][T11031] [ 241.829716][T11045] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.949200][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 241.949309][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 242.059943][T11057] loop5: detected capacity change from 0 to 512 [ 242.086733][T11057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.086821][T11057] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.272330][T11054] loop8: detected capacity change from 0 to 128 [ 242.389649][T11054] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 242.411407][ T29] audit: type=1400 audit(2000000123.100:4103): avc: denied { write } for pid=11056 comm="syz.5.2046" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.494423][T11054] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 242.597070][T11072] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2046'. [ 242.608207][ T29] audit: type=1400 audit(2000000123.290:4104): avc: denied { write } for pid=11056 comm="syz.5.2046" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.009123][ T29] audit: type=1400 audit(2000000123.690:4105): avc: denied { write } for pid=11053 comm="syz.8.2045" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.068729][ T29] audit: type=1400 audit(2000000123.750:4106): avc: denied { write } for pid=11053 comm="syz.8.2045" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.144610][ T6793] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.161005][ T5352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.385606][ T71] Bluetooth: hci0: Frame reassembly failed (-84) [ 243.431075][T11086] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.495294][ T29] audit: type=1400 audit(2000000124.180:4107): avc: granted { setsecparam } for pid=11094 comm="syz.5.2057" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 243.495339][ T29] audit: type=1400 audit(2000000124.180:4108): avc: granted { setsecparam } for pid=11094 comm="syz.5.2057" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 243.832409][T11109] loop7: detected capacity change from 0 to 512 [ 243.868242][T11109] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.868325][T11109] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.904464][ T29] audit: type=1400 audit(2000000124.590:4109): avc: denied { write } for pid=11108 comm="syz.7.2061" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.961510][T11113] loop5: detected capacity change from 0 to 512 [ 244.008273][T11113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.008391][T11113] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.382834][T11120] loop0: detected capacity change from 0 to 128 [ 244.401264][T11120] ext4 filesystem being mounted at /371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 245.389058][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 245.389092][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 245.532796][T11140] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499 [ 245.547625][T11139] loop9: detected capacity change from 0 to 764 [ 245.739539][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 245.739562][ T29] audit: type=1400 audit(2000000126.430:4128): avc: denied { create } for pid=11146 comm="syz.5.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.773121][ T29] audit: type=1400 audit(2000000126.460:4129): avc: denied { read write } for pid=4386 comm="syz-executor" name="loop0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.773245][ T29] audit: type=1400 audit(2000000126.460:4130): avc: denied { open } for pid=4386 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.830698][ T29] audit: type=1400 audit(2000000126.520:4131): avc: denied { ioctl } for pid=4386 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=993 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.857160][ T29] audit: type=1400 audit(2000000126.540:4132): avc: denied { write } for pid=11146 comm="syz.5.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.857192][ T29] audit: type=1400 audit(2000000126.540:4133): avc: denied { connect } for pid=11146 comm="syz.5.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.876988][ T29] audit: type=1400 audit(2000000126.560:4134): avc: denied { name_connect } for pid=11146 comm="syz.5.2075" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 245.935518][ T29] audit: type=1400 audit(2000000126.610:4135): avc: denied { create } for pid=11147 comm="syz.8.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.036030][ T29] audit: type=1400 audit(2000000126.720:4136): avc: denied { open } for pid=11150 comm="syz.9.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 246.055601][ T29] audit: type=1400 audit(2000000126.720:4137): avc: denied { perfmon } for pid=11150 comm="syz.9.2086" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 246.522065][T11157] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2076'. [ 246.522096][T11157] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2076'. [ 246.952023][T11162] loop8: detected capacity change from 0 to 128 [ 247.004344][T11162] ext4 filesystem being mounted at /271/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 247.090931][T11167] loop9: detected capacity change from 0 to 512 [ 247.124398][T11167] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.606500][ T71] Bluetooth: hci0: Frame reassembly failed (-84) [ 248.371931][T11189] loop8: detected capacity change from 0 to 512 [ 248.394143][T11189] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.416263][T11189] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 248.433415][T11189] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2087: inode #15: comm syz.8.2087: iget: illegal inode # [ 248.433501][T11189] loop8: lost filesystem error report for type 5 error -117 [ 248.439648][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 248.439730][ C0] EXT4-fs (loop8): initial error at time 2000000129: ext4_orphan_get:1403 [ 248.439798][ C0] EXT4-fs (loop8): last error at time 2000000129: ext4_orphan_get:1403 [ 248.480831][T11189] EXT4-fs (loop8): Remounting filesystem read-only [ 248.906134][T11171] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2080'. [ 249.188690][T11198] loop8: detected capacity change from 0 to 512 [ 249.218697][T11198] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.629153][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 249.629201][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 249.988883][T11216] loop5: detected capacity change from 0 to 128 [ 250.028931][T11216] ext4 filesystem being mounted at /292/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 250.625347][T11234] loop8: detected capacity change from 0 to 512 [ 250.681021][T11234] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.703357][T11232] loop9: detected capacity change from 0 to 128 [ 250.738357][T11232] ext4 filesystem being mounted at /263/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 250.783664][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 250.783686][ T29] audit: type=1400 audit(2000000131.470:4603): avc: denied { open } for pid=11233 comm="syz.8.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 250.783715][ T29] audit: type=1400 audit(2000000131.470:4604): avc: denied { perfmon } for pid=11229 comm="syz.5.2099" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.784284][ T29] audit: type=1400 audit(2000000131.470:4605): avc: denied { tracepoint } for pid=11229 comm="syz.5.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 250.784436][ T29] audit: type=1400 audit(2000000131.470:4606): avc: denied { perfmon } for pid=11229 comm="syz.5.2099" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.795320][ T29] audit: type=1400 audit(2000000131.490:4608): avc: denied { read write } for pid=11226 comm="syz.9.2109" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.795477][ T29] audit: type=1400 audit(2000000131.490:4609): avc: denied { open } for pid=11226 comm="syz.9.2109" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.797018][ T29] audit: type=1400 audit(2000000131.470:4607): avc: denied { perfmon } for pid=11233 comm="syz.8.2101" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.800061][ T29] audit: type=1400 audit(2000000131.490:4610): avc: denied { write } for pid=11226 comm="syz.9.2109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 250.806869][ T29] audit: type=1400 audit(2000000131.490:4611): avc: denied { kernel } for pid=11233 comm="syz.8.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 250.806997][ T29] audit: type=1400 audit(2000000131.490:4612): avc: denied { perfmon } for pid=11233 comm="syz.8.2101" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 251.457243][T11242] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2101'. [ 251.622010][T11251] loop0: detected capacity change from 0 to 512 [ 251.654363][T11251] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.952342][T11256] loop9: detected capacity change from 0 to 512 [ 251.985046][T11256] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.139987][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 253.181866][T11277] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 253.439944][T11288] loop9: detected capacity change from 0 to 512 [ 253.480812][T11288] EXT4-fs mount: 22 callbacks suppressed [ 253.480836][T11288] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.481154][T11288] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.530662][T11295] bonding: unable to delete non-existent net_prio [ 253.551597][T11296] bonding: b is being created... [ 253.626400][T11295] loop7: detected capacity change from 0 to 1764 [ 254.189287][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 254.195503][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 254.415682][T11313] loop5: detected capacity change from 0 to 512 [ 254.427579][T11313] EXT4-fs (loop5): 1 truncate cleaned up [ 254.428563][T11313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.433352][T11313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.841416][T11321] loop0: detected capacity change from 0 to 512 [ 254.865137][T11321] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.879642][T11321] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 254.895893][T11321] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.2126: inode #15: comm syz.0.2126: iget: illegal inode # [ 254.895959][T11321] loop0: lost filesystem error report for type 5 error -117 [ 254.908732][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 254.908755][ C0] EXT4-fs (loop0): initial error at time 2000000135: ext4_orphan_get:1403 [ 254.908806][ C0] EXT4-fs (loop0): last error at time 2000000135: ext4_orphan_get:1403 [ 254.946862][T11321] EXT4-fs (loop0): Remounting filesystem read-only [ 254.963240][T11321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.276681][T11330] loop7: detected capacity change from 0 to 128 [ 255.305394][T11327] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.325734][T11330] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 255.344219][T11333] netlink: 'syz.5.2131': attribute type 10 has an invalid length. [ 255.361303][T11330] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.530647][T11333] loop5: detected capacity change from 0 to 4096 [ 255.548818][T11333] EXT4-fs (loop5): unsupported descriptor size 0 [ 255.662914][T11335] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2117'. [ 255.804610][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 255.804637][ T29] audit: type=1400 audit(2000000136.470:5152): avc: denied { bpf } for pid=11325 comm="syz.7.2129" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 255.806840][ T29] audit: type=1400 audit(2000000136.490:5158): avc: denied { write } for pid=11331 comm="syz.5.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 255.812993][ T29] audit: type=1400 audit(2000000136.510:5159): avc: denied { perfmon } for pid=11285 comm="syz.9.2117" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 255.816273][ T29] audit: type=1400 audit(2000000136.510:5160): avc: denied { tracepoint } for pid=11285 comm="syz.9.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 255.832968][ T29] audit: type=1400 audit(2000000136.530:5161): avc: denied { perfmon } for pid=11285 comm="syz.9.2117" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 255.904714][ T29] audit: type=1400 audit(2000000136.590:5162): avc: denied { unmount } for pid=6793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 255.923315][ T29] audit: type=1400 audit(2000000136.610:5163): avc: denied { write } for pid=11325 comm="syz.7.2129" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.923454][ T29] audit: type=1400 audit(2000000136.610:5164): avc: denied { add_name } for pid=11325 comm="syz.7.2129" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.923582][ T29] audit: type=1400 audit(2000000136.610:5165): avc: denied { create } for pid=11325 comm="syz.7.2129" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 255.935249][ T29] audit: type=1400 audit(2000000136.610:5166): avc: denied { create } for pid=11325 comm="syz.7.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.144030][ T7720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.199896][ T6543] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.211089][ T4386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.382689][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 257.232040][T11368] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 257.255742][T11369] loop8: detected capacity change from 0 to 512 [ 257.286052][T11369] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.286824][T11369] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.386319][ T6793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.841019][T11376] loop8: detected capacity change from 0 to 512 [ 258.084131][T11376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.085326][T11376] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.120845][T11384] loop0: detected capacity change from 0 to 128 [ 258.141295][T11384] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 258.156747][T11384] ext4 filesystem being mounted at /390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 258.429134][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 258.435300][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 258.533433][ T4386] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.780410][ T6793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.780996][T11392] loop5: detected capacity change from 0 to 4096 [ 258.804382][T11392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.871041][ T5352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.051496][T11396] batadv_slave_0: entered promiscuous mode [ 259.258224][T11409] loop7: detected capacity change from 0 to 512 [ 259.312807][T11409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.313064][T11409] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.468988][T11394] batadv_slave_0: left promiscuous mode [ 259.663846][ T71] Bluetooth: hci0: Frame reassembly failed (-84) [ 259.736481][ T6543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.197643][T11432] loop7: detected capacity change from 0 to 128 [ 260.219080][T11436] loop0: detected capacity change from 0 to 512 [ 260.232144][T11432] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 260.249903][T11432] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 260.323151][T11436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.323351][T11436] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.813238][ T6543] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.842111][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 260.842133][ T29] audit: type=1400 audit(2000000141.530:5651): avc: denied { open } for pid=11444 comm="syz.9.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 260.842164][ T29] audit: type=1400 audit(2000000141.530:5652): avc: denied { read write } for pid=6543 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.842258][ T29] audit: type=1400 audit(2000000141.530:5653): avc: denied { open } for pid=6543 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.860335][ T29] audit: type=1400 audit(2000000141.540:5654): avc: denied { perfmon } for pid=11444 comm="syz.9.2164" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 260.871035][ T29] audit: type=1400 audit(2000000141.560:5655): avc: denied { kernel } for pid=11444 comm="syz.9.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 260.881797][ T29] audit: type=1400 audit(2000000141.570:5656): avc: denied { perfmon } for pid=11444 comm="syz.9.2164" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 260.912491][ T29] audit: type=1400 audit(2000000141.590:5657): avc: denied { read write } for pid=5352 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.912564][ T29] audit: type=1400 audit(2000000141.600:5658): avc: denied { open } for pid=5352 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.913078][ T29] audit: type=1400 audit(2000000141.600:5659): avc: denied { ioctl } for pid=5352 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.957251][ T29] audit: type=1400 audit(2000000141.640:5660): avc: denied { ioctl } for pid=6543 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.632527][T11452] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2162'. [ 261.709368][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 261.709406][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 261.967183][T11465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.967357][T11465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.985879][ T4386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.336794][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2172'. [ 262.729681][T11477] loop8: detected capacity change from 0 to 512 [ 262.754795][T11477] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.779940][T11477] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 262.790301][T11477] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2174: inode #15: comm syz.8.2174: iget: illegal inode # [ 262.790334][T11477] loop8: lost filesystem error report for type 5 error -117 [ 262.803045][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 262.803085][ C1] EXT4-fs (loop8): initial error at time 2000000143: ext4_orphan_get:1403 [ 262.803108][ C1] EXT4-fs (loop8): last error at time 2000000143: ext4_orphan_get:1403 [ 262.834322][T11477] EXT4-fs (loop8): Remounting filesystem read-only [ 262.834954][T11477] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.373946][T11493] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.476918][ T6793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.789588][T11505] loop9: detected capacity change from 0 to 512 [ 263.840711][T11505] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.840991][T11505] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.019808][T11499] loop5: detected capacity change from 0 to 512 [ 264.056102][T11499] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.2180: iget: bad extended attribute block 134217728 [ 264.056176][T11499] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.059071][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 264.059138][ C0] EXT4-fs (loop5): initial error at time 2000000144: ext4_orphan_get:1403: inode 15 [ 264.059215][ C0] EXT4-fs (loop5): last error at time 2000000144: ext4_orphan_get:1403: inode 15 [ 264.063277][T11499] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2180: couldn't read orphan inode 15 (err -117) [ 264.063369][T11499] loop5: lost filesystem error report for type 5 error -117 [ 264.070233][T11499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.615231][ T5352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.707475][ T71] Bluetooth: hci0: Frame reassembly failed (-84) [ 264.903023][T11518] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2182'. [ 265.196897][ T7720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.894877][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 265.894901][ T29] audit: type=1400 audit(2000000146.580:6104): avc: denied { open } for pid=11542 comm="syz.5.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 265.894928][ T29] audit: type=1400 audit(2000000146.580:6105): avc: denied { perfmon } for pid=11542 comm="syz.5.2190" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 265.920713][ T29] audit: type=1400 audit(2000000146.590:6106): avc: denied { kernel } for pid=11542 comm="syz.5.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 265.920739][ T29] audit: type=1400 audit(2000000146.600:6107): avc: denied { perfmon } for pid=11542 comm="syz.5.2190" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 265.939152][ T29] audit: type=1400 audit(2000000146.620:6108): avc: denied { create } for pid=11542 comm="syz.5.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.966521][ T29] audit: type=1400 audit(2000000146.650:6109): avc: denied { create } for pid=11542 comm="syz.5.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.999799][ T29] audit: type=1400 audit(2000000146.680:6110): avc: denied { bind } for pid=11542 comm="syz.5.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.066536][ T29] audit: type=1400 audit(2000000146.750:6111): avc: denied { listen } for pid=11542 comm="syz.5.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.095521][ T29] audit: type=1400 audit(2000000146.780:6112): avc: denied { connect } for pid=11542 comm="syz.5.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.115482][ T3579] page_pool_release_retry() stalled pool shutdown: id 122, 1 inflight 121 sec [ 266.268724][ T29] audit: type=1400 audit(2000000146.950:6113): avc: denied { accept } for pid=11542 comm="syz.5.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.750372][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 266.750410][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 267.284365][T11551] loop9: detected capacity change from 0 to 128 [ 267.321268][T11551] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.324239][T11551] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.464899][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2194'. [ 267.651714][T11560] usb usb8: usbfs: process 11560 (syz.0.2195) did not claim interface 0 before use [ 267.925509][T11563] loop0: detected capacity change from 0 to 512 [ 268.014270][ T7720] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.016629][T11563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.035239][T11563] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.407735][T11571] batadv_slave_0: entered promiscuous mode [ 268.464334][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 268.473655][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2200'. [ 268.636378][T11571] batadv_slave_0 (unregistering): left promiscuous mode [ 268.714726][T11569] loop9: detected capacity change from 0 to 256 [ 268.796631][T11569] vfat: Unknown parameter '' [ 268.992013][T11577] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2197'. [ 269.013340][T11579] FAULT_INJECTION: forcing a failure. [ 269.013340][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 269.013398][T11579] CPU: 1 UID: 0 PID: 11579 Comm: syz.5.2203 Not tainted syzkaller #0 PREEMPT(lazy) [ 269.013422][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.013434][T11579] Call Trace: [ 269.013440][T11579] [ 269.013467][T11579] __dump_stack+0x1d/0x30 [ 269.013495][T11579] dump_stack_lvl+0x95/0xd0 [ 269.013533][T11579] dump_stack+0x15/0x1b [ 269.013553][T11579] should_fail_ex+0x262/0x280 [ 269.013597][T11579] ? vm_area_alloc+0x2c/0xb0 [ 269.013631][T11579] should_failslab+0x8c/0xb0 [ 269.013669][T11579] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 269.013704][T11579] ? vm_area_alloc+0x2c/0xb0 [ 269.013733][T11579] vm_area_alloc+0x2c/0xb0 [ 269.013766][T11579] mmap_region+0x1266/0x21a0 [ 269.013834][T11579] do_mmap+0xa20/0xc70 [ 269.013879][T11579] vm_mmap_pgoff+0x183/0x2d0 [ 269.013916][T11579] ksys_mmap_pgoff+0xc1/0x310 [ 269.013954][T11579] ? __x64_sys_mmap+0x49/0x70 [ 269.013991][T11579] x64_sys_call+0x23b3/0x2550 [ 269.014016][T11579] do_syscall_64+0x112/0x360 [ 269.014067][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.014093][T11579] RIP: 0033:0x7ffb9683e159 [ 269.014110][T11579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.014129][T11579] RSP: 002b:00007ffb95297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 269.014150][T11579] RAX: ffffffffffffffda RBX: 00007ffb96ac5fa0 RCX: 00007ffb9683e159 [ 269.014165][T11579] RDX: 0000000002800003 RSI: 0000000000fbe000 RDI: 0000200000000000 [ 269.014195][T11579] RBP: 00007ffb968d5024 R08: ffffffffffffffff R09: 00000000231cd000 [ 269.014213][T11579] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000000 [ 269.014228][T11579] R13: 00007ffb96ac6038 R14: 00007ffb96ac5fa0 R15: 00007ffd09d6c438 [ 269.014252][T11579] [ 269.205070][T11569] loop9: detected capacity change from 0 to 512 [ 269.295508][ T4386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.337665][T11569] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 269.354248][T11569] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 269.373598][T11569] EXT4-fs (loop9): orphan cleanup on readonly fs [ 269.404083][T11569] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4223: comm syz.9.2198: Allocating blocks 41-42 which overlap fs metadata [ 269.404202][T11569] loop9: lost filesystem error report for type 5 error -117 [ 269.418141][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 269.418168][ C1] EXT4-fs (loop9): initial error at time 2000000150: ext4_mb_mark_diskspace_used:4223 [ 269.418196][ C1] EXT4-fs (loop9): last error at time 2000000150: ext4_mb_mark_diskspace_used:4223 [ 269.443871][T11569] EXT4-fs (loop9): Remounting filesystem read-only [ 269.467784][T11569] EXT4-fs (loop9): 1 truncate cleaned up [ 269.475934][T11569] EXT4-fs (loop9): pa ffff888104c35c40: logic 1, phys. 41, len 23 [ 269.512337][T11586] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 269.513198][T11569] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.821695][ T7720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.934679][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 270.282125][T11608] loop5: detected capacity change from 0 to 512 [ 270.302228][T11608] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 270.316886][T11608] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 270.323615][T11608] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.2209: inode #15: comm syz.5.2209: iget: illegal inode # [ 270.323686][T11608] loop5: lost filesystem error report for type 5 error -117 [ 270.326123][T11608] EXT4-fs (loop5): Remounting filesystem read-only [ 270.327158][T11608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.509113][ T3896] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 270.656355][ T5352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.831017][T11617] syzkaller0: entered promiscuous mode [ 270.831041][T11617] syzkaller0: entered allmulticast mode [ 270.900736][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 270.900761][ T29] audit: type=1400 audit(2000000151.590:6515): avc: denied { write } for pid=11613 comm="syz.7.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 270.927614][ T29] audit: type=1400 audit(2000000151.610:6516): avc: denied { bpf } for pid=11612 comm="syz.5.2214" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 270.951501][ T29] audit: type=1400 audit(2000000151.640:6517): avc: denied { perfmon } for pid=11612 comm="syz.5.2214" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 270.951535][ T29] audit: type=1400 audit(2000000151.640:6518): avc: denied { perfmon } for pid=11612 comm="syz.5.2214" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 270.995499][ T29] audit: type=1400 audit(2000000151.680:6519): avc: denied { perfmon } for pid=11612 comm="syz.5.2214" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 270.995528][ T29] audit: type=1400 audit(2000000151.680:6520): avc: denied { perfmon } for pid=11612 comm="syz.5.2214" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 271.030651][T11617] tipc: Enabled bearer , priority 0 [ 271.047418][ T29] audit: type=1400 audit(2000000151.730:6521): avc: denied { bpf } for pid=11612 comm="syz.5.2214" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 271.047547][ T29] audit: type=1400 audit(2000000151.730:6522): avc: denied { prog_load } for pid=11612 comm="syz.5.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 271.089044][ T29] audit: type=1400 audit(2000000151.770:6523): avc: denied { bpf } for pid=11612 comm="syz.5.2214" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 271.110173][ T29] audit: type=1400 audit(2000000151.800:6524): avc: denied { prog_run } for pid=11612 comm="syz.5.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 271.599193][T11613] tipc: Resetting bearer [ 271.670803][T11613] tipc: Disabling bearer [ 271.897135][T11638] loop9: detected capacity change from 0 to 128 [ 272.171673][T11641] syzkaller1: entered allmulticast mode [ 272.213352][T11638] loop9: detected capacity change from 0 to 128 [ 272.273219][T11638] loop9: detected capacity change from 0 to 128 [ 272.326729][T11638] loop9: detected capacity change from 0 to 128 [ 272.395162][T11638] loop9: detected capacity change from 0 to 128 [ 272.426511][T11643] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2222'. [ 272.720166][ T38] Bluetooth: hci0: Frame reassembly failed (-84) [ 273.727623][T11667] syzkaller0: entered promiscuous mode [ 273.727694][T11667] syzkaller0: entered allmulticast mode [ 273.796885][T11671] loop9: detected capacity change from 0 to 512 [ 273.818786][T11671] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 273.839943][T11672] tipc: Enabled bearer , priority 0 [ 273.843574][T11671] EXT4-fs (loop9): 1 truncate cleaned up [ 273.844723][T11671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.881064][T11668] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2232: invalid indirect mapped block 4294901760 (level 0) [ 273.881157][T11668] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 273.883333][T11668] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2232: invalid indirect mapped block 2185560079 (level 0) [ 273.883480][T11668] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 273.888273][T11668] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #13: comm syz.9.2232: corrupted inode contents [ 273.888368][T11668] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 273.891047][T11668] EXT4-fs error (device loop9): ext4_dirty_inode:6731: inode #13: comm syz.9.2232: mark_inode_dirty error [ 273.891071][T11668] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 273.891745][T11668] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2232: invalid indirect mapped block 65535 (level 2) [ 273.891909][T11668] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 273.892632][T11668] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #13: comm syz.9.2232: corrupted inode contents [ 273.892751][T11668] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 273.895977][T11668] EXT4-fs error (device loop9): ext4_truncate:4721: inode #13: comm syz.9.2232: mark_inode_dirty error [ 273.896106][T11668] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 273.901396][T11668] EXT4-fs error (device loop9): ext4_evict_inode:280: comm syz.9.2232: couldn't truncate inode 13 (err -117) [ 274.185789][T11678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2234'. [ 274.377047][T11664] tipc: Resetting bearer [ 274.395381][T11664] tipc: Disabling bearer [ 274.418450][ T7720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.651802][T11687] loop0: detected capacity change from 0 to 512 [ 274.695007][T11687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.696119][T11687] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.749563][ T3542] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 274.976834][T11696] loop9: detected capacity change from 0 to 256 [ 275.852562][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2245'. [ 275.894948][T11710] loop9: detected capacity change from 0 to 256 [ 275.917912][ T29] kauditd_printk_skb: 676 callbacks suppressed [ 275.917935][ T29] audit: type=1400 audit(2000000156.600:7201): avc: denied { mount } for pid=11709 comm="syz.9.2245" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 275.918031][ T29] audit: type=1400 audit(2000000156.600:7202): avc: denied { read write } for pid=11709 comm="syz.9.2245" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.934070][ T29] audit: type=1400 audit(2000000156.600:7203): avc: denied { open } for pid=11709 comm="syz.9.2245" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.959222][ T29] audit: type=1400 audit(2000000156.650:7204): avc: denied { write } for pid=11708 comm="syz.8.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 276.013325][ T29] audit: type=1400 audit(2000000156.700:7205): avc: denied { sys_module } for pid=11708 comm="syz.8.2246" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 276.033686][ T29] audit: type=1400 audit(2000000156.720:7206): avc: denied { module_request } for pid=11708 comm="syz.8.2246" kmod="wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 276.067499][ T29] audit: type=1400 audit(2000000156.750:7207): avc: denied { write } for pid=11708 comm="syz.8.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 276.087529][ T29] audit: type=1400 audit(2000000156.770:7208): avc: denied { ioctl } for pid=11708 comm="syz.8.2246" path="socket:[32955]" dev="sockfs" ino=32955 ioctlcmd=0x583d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.115391][ T29] audit: type=1400 audit(2000000156.800:7209): avc: denied { write } for pid=11708 comm="syz.8.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 276.140602][ T29] audit: type=1400 audit(2000000156.830:7210): avc: denied { getopt } for pid=11708 comm="syz.8.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 276.236586][T11716] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2238'. [ 276.463160][ T4386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.144569][T11748] loop0: detected capacity change from 0 to 512 [ 277.181525][T11748] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.194349][T11748] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 277.198716][T11748] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.2257: inode #15: comm syz.0.2257: iget: illegal inode # [ 277.198825][T11748] loop0: lost filesystem error report for type 5 error -117 [ 277.199094][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 277.199146][ C0] EXT4-fs (loop0): initial error at time 2000000157: ext4_orphan_get:1403 [ 277.199218][ C0] EXT4-fs (loop0): last error at time 2000000157: ext4_orphan_get:1403 [ 277.215196][T11748] EXT4-fs (loop0): Remounting filesystem read-only [ 277.216246][T11748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.326470][T11751] loop9: detected capacity change from 0 to 512 [ 277.520998][T11751] netlink: 'syz.9.2260': attribute type 13 has an invalid length. [ 277.521106][T11751] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2260'. [ 277.723713][T11746] loop8: detected capacity change from 0 to 256 [ 277.739280][ T4386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.782512][T11746] vfat: Unknown parameter '' [ 277.914411][T11762] loop5: detected capacity change from 0 to 512 [ 277.950922][T11762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.951651][T11762] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.444277][T11746] loop8: detected capacity change from 0 to 512 [ 278.523279][T11746] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.543952][T11746] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 278.554248][T11746] EXT4-fs (loop8): orphan cleanup on readonly fs [ 278.577592][T11746] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4223: comm syz.8.2259: Allocating blocks 41-42 which overlap fs metadata [ 278.577784][T11746] loop8: lost filesystem error report for type 5 error -117 [ 278.592709][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 278.592730][ C1] EXT4-fs (loop8): initial error at time 2000000159: ext4_mb_mark_diskspace_used:4223 [ 278.592758][ C1] EXT4-fs (loop8): last error at time 2000000159: ext4_mb_mark_diskspace_used:4223 [ 278.660333][T11746] EXT4-fs (loop8): Remounting filesystem read-only [ 278.695974][T11746] EXT4-fs (loop8): 1 truncate cleaned up [ 278.704157][T11746] EXT4-fs (loop8): pa ffff888104c35b60: logic 1, phys. 41, len 23 [ 278.723534][T11746] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.847238][T11773] loop9: detected capacity change from 0 to 128 [ 278.905102][T11773] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 278.913182][T11773] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 279.019648][ T6793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.092617][T11762] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2264'. [ 279.415368][ T5352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.510968][ T7720] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.082629][T11795] loop9: detected capacity change from 0 to 1164 [ 280.135259][T11795] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 282.744061][T11793] bond0: (slave bridge0): Releasing backup interface [ 282.779981][ T29] kauditd_printk_skb: 653 callbacks suppressed [ 282.780025][ T29] audit: type=1400 audit(2000000163.470:7860): avc: denied { read write } for pid=6543 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.780057][ T29] audit: type=1400 audit(2000000163.470:7861): avc: denied { open } for pid=6543 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.780137][ T29] audit: type=1400 audit(2000000163.470:7862): avc: denied { ioctl } for pid=6543 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.871930][T11793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 282.911111][ T29] audit: type=1400 audit(2000000163.590:7863): avc: denied { read write } for pid=5352 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.911150][ T29] audit: type=1400 audit(2000000163.590:7864): avc: denied { open } for pid=5352 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.911262][ T29] audit: type=1400 audit(2000000163.590:7865): avc: denied { ioctl } for pid=5352 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.960980][ T29] audit: type=1400 audit(2000000163.640:7866): avc: denied { read write } for pid=6793 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.961079][ T29] audit: type=1400 audit(2000000163.640:7867): avc: denied { open } for pid=6793 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.961187][ T29] audit: type=1400 audit(2000000163.640:7868): avc: denied { ioctl } for pid=6793 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.009135][ T29] audit: type=1400 audit(2000000163.690:7869): avc: denied { create } for pid=11797 comm="syz.0.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 283.554947][T11816] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.695269][T11804] loop8: detected capacity change from 0 to 512 [ 283.783094][T11803] loop7: detected capacity change from 0 to 512 [ 283.793919][T11803] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.808207][T11803] EXT4-fs (loop7): warning: maximal mount count reached, running e2fsck is recommended [ 283.826093][T11804] EXT4-fs: Ignoring removed oldalloc option [ 283.832473][T11803] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.2274: inode #15: comm syz.7.2274: iget: illegal inode # [ 283.832514][T11803] loop7: lost filesystem error report for type 5 error -117 [ 283.845228][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 283.845244][ C1] EXT4-fs (loop7): initial error at time 2000000164: ext4_orphan_get:1403 [ 283.845270][ C1] EXT4-fs (loop7): last error at time 2000000164: ext4_orphan_get:1403 [ 283.867969][T11803] EXT4-fs (loop7): Remounting filesystem read-only [ 283.868436][T11803] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.897241][T11804] EXT4-fs (loop8): filesystem is read-only [ 283.898457][T11804] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 283.945402][T11804] EXT4-fs (loop8): filesystem is read-only [ 283.954968][T11804] EXT4-fs (loop8): orphan cleanup on readonly fs [ 283.968399][T11804] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.2276: bg 0: block 64: padding at end of block bitmap is not set [ 283.968504][T11804] loop8: lost filesystem error report for type 5 error -117 [ 283.969318][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 283.969401][ C0] EXT4-fs (loop8): initial error at time 2000000164: ext4_validate_block_bitmap:445 [ 283.969465][ C0] EXT4-fs (loop8): last error at time 2000000164: ext4_validate_block_bitmap:445 [ 283.971539][T11804] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 283.971655][T11804] loop8: lost filesystem error report for type 5 error -117 [ 283.975664][T11804] EXT4-fs (loop8): 1 orphan inode deleted [ 283.986231][T11804] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.063470][T11825] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2282'. [ 284.063565][T11825] gre0: entered promiscuous mode [ 284.070141][T11825] gre0: entered allmulticast mode [ 284.533068][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2287'. [ 284.582515][ T6793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.746055][T11841] netlink: 'syz.0.2289': attribute type 17 has an invalid length. [ 284.746085][T11841] netlink: 'syz.0.2289': attribute type 2 has an invalid length. [ 284.832366][T11846] gre0: entered promiscuous mode [ 284.832389][T11846] gre0: entered allmulticast mode [ 284.918413][T11848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11848 comm=syz.9.2291 [ 285.213910][ T6543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.317692][T11860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 285.355131][T11858] syzkaller1: entered promiscuous mode [ 285.355159][T11858] syzkaller1: entered allmulticast mode [ 285.464190][T11861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2296'. [ 286.035426][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 286.278963][T11881] tipc: New replicast peer: 172.20.20.187 [ 286.279287][T11881] tipc: Enabled bearer , priority 10 [ 287.279124][ T3579] tipc: Node number set to 4041330706 [ 287.403371][T11915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.546007][T11925] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 287.569424][T11926] netlink: 'syz.0.2320': attribute type 17 has an invalid length. [ 287.569450][T11926] netlink: 'syz.0.2320': attribute type 2 has an invalid length. [ 287.800948][ T29] kauditd_printk_skb: 545 callbacks suppressed [ 287.800971][ T29] audit: type=1400 audit(2000000168.490:8415): avc: denied { create } for pid=11934 comm="syz.9.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 287.828886][ T29] audit: type=1400 audit(2000000168.510:8416): avc: denied { create } for pid=11934 comm="syz.9.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.870837][ T29] audit: type=1400 audit(2000000168.560:8417): avc: denied { setopt } for pid=11934 comm="syz.9.2322" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.906439][ T29] audit: type=1400 audit(2000000168.590:8418): avc: denied { setopt } for pid=11934 comm="syz.9.2322" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.927590][ T29] audit: type=1400 audit(2000000168.600:8419): avc: denied { connect } for pid=11934 comm="syz.9.2322" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.954859][ T29] audit: type=1400 audit(2000000168.640:8420): avc: denied { write } for pid=11934 comm="syz.9.2322" laddr=172.20.20.44 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.954926][ T29] audit: type=1400 audit(2000000168.640:8421): avc: denied { read write } for pid=6543 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.954965][ T29] audit: type=1400 audit(2000000168.640:8423): avc: denied { write } for pid=11934 comm="syz.9.2322" laddr=172.20.20.44 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.955030][ T29] audit: type=1400 audit(2000000168.640:8422): avc: denied { open } for pid=6543 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.955069][ T29] audit: type=1400 audit(2000000168.640:8424): avc: denied { ioctl } for pid=6543 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.454714][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2329'. [ 288.499071][ T112] IPVS: starting estimator thread 0... [ 288.527650][T11950] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 288.590698][T11951] IPVS: using max 2256 ests per chain, 112800 per kthread [ 288.733878][T11957] netlink: 'syz.9.2333': attribute type 17 has an invalid length. [ 288.733903][T11957] netlink: 'syz.9.2333': attribute type 2 has an invalid length. [ 289.835425][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2346'. [ 290.002513][T11993] bond1: (slave gtp0): The slave device specified does not support setting the MAC address [ 290.016299][T11993] bond1: (slave gtp0): Error -95 calling set_mac_address [ 290.034033][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2346'. [ 290.485438][T12009] tipc: Enabled bearer , priority 0 [ 290.591029][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2353'. [ 291.134416][T12028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 291.672641][ T6917] tipc: Node number set to 1201648472 [ 292.561361][T12085] netlink: 'syz.8.2384': attribute type 1 has an invalid length. [ 292.561382][T12085] netlink: 'syz.8.2384': attribute type 2 has an invalid length. [ 292.809852][ T29] kauditd_printk_skb: 611 callbacks suppressed [ 292.809893][ T29] audit: type=1400 audit(2000000173.500:9036): avc: denied { perfmon } for pid=12095 comm="syz.8.2388" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 292.810058][ T29] audit: type=1400 audit(2000000173.500:9037): avc: denied { bpf } for pid=12095 comm="syz.8.2388" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 292.810817][ T29] audit: type=1400 audit(2000000173.500:9038): avc: denied { prog_load } for pid=12095 comm="syz.8.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 292.846393][ T29] audit: type=1400 audit(2000000173.530:9039): avc: denied { create } for pid=12098 comm="syz.7.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 292.902019][ T29] audit: type=1400 audit(2000000173.590:9040): avc: denied { create } for pid=12098 comm="syz.7.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 292.981874][ T29] audit: type=1400 audit(2000000173.670:9041): avc: denied { create } for pid=12098 comm="syz.7.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 293.005664][ T29] audit: type=1400 audit(2000000173.690:9042): avc: denied { create } for pid=12098 comm="syz.7.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 293.034534][ T29] audit: type=1400 audit(2000000173.720:9043): avc: denied { bind } for pid=12098 comm="syz.7.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 293.070857][ T29] audit: type=1400 audit(2000000173.760:9044): avc: denied { listen } for pid=12098 comm="syz.7.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 293.097979][ T29] audit: type=1400 audit(2000000173.780:9045): avc: denied { connect } for pid=12098 comm="syz.7.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 293.406217][T12111] IPVS: dh: FWM 3 0x00000003 - no destination available [ 293.406308][ C1] IPVS: dh: FWM 3 0x00000003 - no destination available [ 293.468683][T12109] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 294.373686][T12148] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 295.686512][T12190] syzkaller1: entered promiscuous mode [ 295.686539][T12190] syzkaller1: entered allmulticast mode [ 295.711632][T12191] syzkaller0: left promiscuous mode [ 295.711754][T12191] syzkaller0: left allmulticast mode [ 297.077262][T12138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.095479][T12145] netlink: 'syz.7.2408': attribute type 1 has an invalid length. [ 297.095534][T12145] netlink: 'syz.7.2408': attribute type 2 has an invalid length. [ 297.645157][T12231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.821471][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 297.821500][ T29] audit: type=1400 audit(2000000178.510:9566): avc: denied { write } for pid=12235 comm="syz.9.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 297.833330][ T29] audit: type=1400 audit(2000000178.520:9567): avc: denied { ioctl } for pid=6793 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.886637][ T29] audit: type=1400 audit(2000000178.570:9568): avc: denied { read write } for pid=12236 comm="syz.0.2445" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.888146][ T29] audit: type=1400 audit(2000000178.570:9569): avc: denied { open } for pid=12236 comm="syz.0.2445" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.932333][ T29] audit: type=1400 audit(2000000178.620:9570): avc: denied { write } for pid=12235 comm="syz.9.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 297.970583][ T29] audit: type=1400 audit(2000000178.660:9571): avc: denied { create } for pid=12235 comm="syz.9.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.979136][ T29] audit: type=1400 audit(2000000178.660:9572): avc: denied { getopt } for pid=12235 comm="syz.9.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 298.007514][ T29] audit: type=1400 audit(2000000178.690:9573): avc: denied { read } for pid=12236 comm="syz.0.2445" dev="nsfs" ino=4026532805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 298.007612][ T29] audit: type=1400 audit(2000000178.690:9574): avc: denied { read open } for pid=12236 comm="syz.0.2445" path="net:[4026532805]" dev="nsfs" ino=4026532805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 298.056409][ T29] audit: type=1400 audit(2000000178.720:9575): avc: denied { create } for pid=12236 comm="syz.0.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.721086][T12258] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.907761][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2453'. [ 299.882457][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2471'. [ 299.930773][T12303] ieee802154 phy0 wpan0: encryption failed: -22 [ 300.723484][T12336] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2486'. [ 301.291280][T12249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.394716][T12361] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2497'. [ 301.406990][T12360] syzkaller0: entered promiscuous mode [ 301.407019][T12360] syzkaller0: entered allmulticast mode [ 301.554747][T12368] netlink: 'syz.0.2502': attribute type 17 has an invalid length. [ 301.554771][T12368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2502'. [ 302.072241][T12389] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2510'. [ 302.225721][T12393] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2512'. [ 302.841248][ T29] kauditd_printk_skb: 691 callbacks suppressed [ 302.841287][ T29] audit: type=1400 audit(2000000183.530:10267): avc: denied { setopt } for pid=12415 comm="syz.0.2522" laddr=::1 lport=56121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 302.880515][T12420] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2524'. [ 302.903557][ T29] audit: type=1400 audit(2000000183.590:10268): avc: denied { read write } for pid=6543 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.903594][ T29] audit: type=1400 audit(2000000183.590:10269): avc: denied { open } for pid=6543 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.954543][ T29] audit: type=1400 audit(2000000183.640:10270): avc: denied { ioctl } for pid=6543 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.985509][ T29] audit: type=1400 audit(2000000183.670:10271): avc: denied { read write } for pid=4386 comm="syz-executor" name="loop0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.985609][ T29] audit: type=1400 audit(2000000183.670:10272): avc: denied { open } for pid=4386 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.985642][ T29] audit: type=1400 audit(2000000183.670:10273): avc: denied { ioctl } for pid=4386 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=993 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.084640][ T29] audit: type=1400 audit(2000000183.770:10274): avc: denied { read } for pid=12422 comm="syz.0.2526" dev="nsfs" ino=4026532805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 303.084709][ T29] audit: type=1400 audit(2000000183.770:10275): avc: denied { open } for pid=12422 comm="syz.0.2526" path="net:[4026532805]" dev="nsfs" ino=4026532805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 303.107302][ T29] audit: type=1400 audit(2000000183.790:10276): avc: denied { create } for pid=12422 comm="syz.0.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 303.504458][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2530'. [ 303.886974][T12459] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 304.015253][T12464] netlink: 'syz.5.2539': attribute type 1 has an invalid length. [ 304.015294][T12464] netlink: 'syz.5.2539': attribute type 2 has an invalid length. [ 304.622034][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2552'. [ 304.822753][T12489] netlink: 'syz.0.2553': attribute type 17 has an invalid length. [ 304.822783][T12489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2553'. [ 304.853735][T12486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2554'. [ 305.435922][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2566'. [ 305.514779][T12520] netlink: 'syz.8.2568': attribute type 17 has an invalid length. [ 305.514802][T12520] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2568'. [ 305.514841][T12520] bond0: option all_slaves_active: invalid value (8) [ 305.862605][T12538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 306.247499][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2584'. [ 306.355649][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2583'. [ 306.668420][T12561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.776886][T12567] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.568653][T12592] netlink: 'syz.0.2598': attribute type 17 has an invalid length. [ 307.568683][T12592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2598'. [ 307.863591][ T29] kauditd_printk_skb: 649 callbacks suppressed [ 307.863619][ T29] audit: type=1400 audit(2000000188.550:10926): avc: denied { create } for pid=12594 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.900333][ T29] audit: type=1400 audit(2000000188.590:10927): avc: denied { map_create } for pid=12596 comm="syz.0.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 307.900373][ T29] audit: type=1400 audit(2000000188.590:10928): avc: denied { create } for pid=12594 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.903711][ T29] audit: type=1400 audit(2000000188.590:10929): avc: denied { write } for pid=12594 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.903802][ T29] audit: type=1400 audit(2000000188.590:10930): avc: denied { nlmsg_write } for pid=12594 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.906666][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2600'. [ 307.923002][ T29] audit: type=1400 audit(2000000188.610:10931): avc: denied { prog_load } for pid=12596 comm="syz.0.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 307.966411][T12598] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.976095][ T29] audit: type=1400 audit(2000000188.660:10932): avc: denied { create } for pid=12594 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 307.983367][ T29] audit: type=1400 audit(2000000188.680:10933): avc: denied { getopt } for pid=12594 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 307.992980][ T29] audit: type=1400 audit(2000000188.690:10934): avc: denied { create } for pid=12594 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.008366][ T29] audit: type=1400 audit(2000000188.690:10935): avc: denied { write } for pid=12594 comm="syz.5.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.314262][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2604'. [ 308.834912][T12623] netlink: 'syz.8.2612': attribute type 17 has an invalid length. [ 308.834962][T12623] bond0: option all_slaves_active: invalid value (8) [ 310.114301][T12668] __nla_validate_parse: 4 callbacks suppressed [ 310.114325][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2634'. [ 310.309631][T12676] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2638'. [ 310.494316][T12681] netlink: 'syz.8.2639': attribute type 17 has an invalid length. [ 310.494345][T12681] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2639'. [ 310.494387][T12681] bond0: option all_slaves_active: invalid value (8) [ 311.213137][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2649'. [ 311.238394][T12707] gre0: entered promiscuous mode [ 311.238423][T12707] gre0: entered allmulticast mode [ 311.267355][T12707] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2649'. [ 311.331076][T12711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2652'. [ 311.372450][T12714] netlink: 'syz.0.2653': attribute type 17 has an invalid length. [ 311.372473][T12714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2653'. [ 311.589693][T12717] gre0: left promiscuous mode [ 311.589794][T12717] gre0: left allmulticast mode [ 312.155716][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2662'. [ 312.207497][T12717] tipc: Resetting bearer [ 312.212283][T12717] ip6tnl2: left allmulticast mode [ 312.259229][ T71] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.259281][ T71] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.259458][ T71] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.259611][ T71] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.871666][ T29] kauditd_printk_skb: 643 callbacks suppressed [ 312.871691][ T29] audit: type=1400 audit(2000000193.560:11579): avc: denied { prog_load } for pid=12752 comm="syz.9.2667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 312.926187][ T29] audit: type=1400 audit(2000000193.610:11580): avc: denied { read write } for pid=6543 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.927238][ T29] audit: type=1400 audit(2000000193.610:11581): avc: denied { open } for pid=6543 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.927505][ T29] audit: type=1400 audit(2000000193.610:11582): avc: denied { ioctl } for pid=6543 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.001744][ T29] audit: type=1400 audit(2000000193.670:11583): avc: denied { prog_load } for pid=12761 comm="syz.0.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 313.001778][ T29] audit: type=1400 audit(2000000193.700:11584): avc: denied { bpf } for pid=12761 comm="syz.0.2670" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.025673][ T29] audit: type=1400 audit(2000000193.720:11585): avc: denied { perfmon } for pid=12761 comm="syz.0.2670" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.025766][ T29] audit: type=1400 audit(2000000193.720:11586): avc: denied { bpf } for pid=12761 comm="syz.0.2670" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.027268][ T29] audit: type=1400 audit(2000000193.720:11587): avc: denied { read write } for pid=7720 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.027358][ T29] audit: type=1400 audit(2000000193.720:11588): avc: denied { open } for pid=7720 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.424526][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2673'. [ 313.954848][T12790] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.376231][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'. [ 315.050389][T12832] gre0: entered promiscuous mode [ 315.050412][T12832] gre0: entered allmulticast mode [ 315.191963][T12837] __nla_validate_parse: 2 callbacks suppressed [ 315.191994][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2702'. [ 315.294185][T12832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2700'. [ 315.537364][T12848] netlink: 'syz.9.2704': attribute type 17 has an invalid length. [ 315.537396][T12848] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2704'. [ 315.537452][T12848] bond0: option all_slaves_active: invalid value (8) [ 315.895700][T12858] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2710'. [ 316.042437][T12865] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 316.152418][T12869] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.640259][T12885] netlink: 'syz.9.2720': attribute type 17 has an invalid length. [ 316.640282][T12885] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2720'. [ 316.640314][T12885] bond0: option all_slaves_active: invalid value (8) [ 316.719289][ T3381] ================================================================== [ 316.719328][ T3381] BUG: KCSAN: data-race in kick_pool_pick / wq_worker_running [ 316.719375][ T3381] [ 316.719380][ T3381] read-write to 0xffff888237c2b0a4 of 4 bytes by task 3395 on cpu 0: [ 316.719400][ T3381] wq_worker_running+0x9c/0x120 [ 316.719434][ T3381] schedule_timeout+0xca/0x180 [ 316.719462][ T3381] wait_for_common+0xef/0x1d0 [ 316.719495][ T3381] usb_start_wait_urb+0x12c/0x220 [ 316.719525][ T3381] usb_control_msg+0x182/0x240 [ 316.719553][ T3381] hub_ext_port_status+0xb4/0x410 [ 316.719578][ T3381] hub_event+0x47e/0x2aa0 [ 316.719608][ T3381] process_scheduled_works+0x56a/0xa50 [ 316.719638][ T3381] worker_thread+0x569/0x750 [ 316.719667][ T3381] kthread+0x223/0x270 [ 316.719687][ T3381] ret_from_fork+0x146/0x330 [ 316.719716][ T3381] ret_from_fork_asm+0x1a/0x30 [ 316.719742][ T3381] [ 316.719747][ T3381] read to 0xffff888237c2b0a4 of 4 bytes by task 3381 on cpu 1: [ 316.719763][ T3381] kick_pool_pick+0x5f/0x310 [ 316.719790][ T3381] __queue_work+0x90a/0xbc0 [ 316.719806][ T3381] queue_work_on+0xa9/0x140 [ 316.719823][ T3381] process_srcu+0xa39/0xd90 [ 316.719842][ T3381] process_scheduled_works+0x56a/0xa50 [ 316.719869][ T3381] worker_thread+0x569/0x750 [ 316.719899][ T3381] kthread+0x223/0x270 [ 316.719917][ T3381] ret_from_fork+0x146/0x330 [ 316.719943][ T3381] ret_from_fork_asm+0x1a/0x30 [ 316.719968][ T3381] [ 316.719972][ T3381] value changed: 0x00000000 -> 0x00000001 [ 316.719983][ T3381] [ 316.719986][ T3381] Reported by Kernel Concurrency Sanitizer on: [ 316.719998][ T3381] CPU: 1 UID: 0 PID: 3381 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(lazy) [ 316.720022][ T3381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 316.720036][ T3381] Workqueue: rcu_gp process_srcu [ 316.720057][ T3381] ================================================================== [ 317.040815][T12890] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 326.429065][ T3579] page_pool_release_retry() stalled pool shutdown: id 122, 1 inflight 181 sec