last executing test programs: 2m36.514983651s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@map, 0xffffffffffffffff, 0x16, 0x2002}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r4, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, 0x0, 0x43044) sendmsg$NFQNL_MSG_CONFIG(r8, 0x0, 0x20010) 2m35.216031429s ago: executing program 4 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@map, 0xffffffffffffffff, 0x16, 0x2002}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) io_uring_enter(r4, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x43044) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x20010) 2m33.246581276s ago: executing program 4 (id=16): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newqdisc={0x78, 0x24, 0xe0b, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}, @TCA_TBF_PARMS={0x28, 0x1, {{0x80, 0x1, 0x5, 0x6, 0x6, 0x1}, {0x0, 0x0, 0x21, 0x9, 0x400, 0xea}, 0x8, 0x8, 0x14de}}]}}]}, 0x78}}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x5, 0x4) 2m32.996034121s ago: executing program 4 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet6_buf(r3, 0x29, 0xcd, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x80, 0x0) lseek(r7, 0x4000006, 0x1) getdents(r7, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x9c, &(0x7f00000002c0)=""/156, 0x8af70ea00e4cc799, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) 2m30.125180972s ago: executing program 4 (id=23): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00') exit(0x7000000000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pread64(r0, 0x0, 0x0, 0x793) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x1}, @exit, @alu={0x4, 0x0, 0x6, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) 2m29.119403482s ago: executing program 4 (id=28): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3fb, 0x0, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) rmdir(0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x100) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f00000000c0)="79d358", 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="850000002f000000d7000000100000009500000000000000423d19f1e4e058f160906b507e5120a0425f48f9550dcf76fc596696e6f89a4a2b1d29eadfdabd5217ba2d02d98d17b488d5437e04555f3dc719afc000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0xfffffffffffffe6a) ioctl$BLKSECTGET(r3, 0x1267, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 2m25.086866322s ago: executing program 1 (id=52): write$ppp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f00000000c0)={[{@delalloc}, {@noblock_validity}, {@bh}, {@nodiscard}, {@nouid32}, {@barrier}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x2108c8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@usrjquota}, {@block_validity}, {@minixdf}, {@resgid}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$eJzs3MtvG8UfAPCv17Gbvn7Jr5RHSwuBgqh4JE36oAcuRSBxAAkJDkWcQpJWpW6DmiDRqoLCoRxRJe6IIxJ/ARfKBQEnJK5wR0gV6oXCyWjtXedR24ldJy715yM5ntkZZ+a7u2OPZ20HMLDG0j+FiB0R8WtEjNSzKyuM1e9u3bw88/fNyzOFqFbf+LNQq/fXzcszedX8cdvrmWq1TbtX346YrlTmLmT5icVz700sXLz03Jlz06fnTs+dnzq+cOTw/vKxqaM9iXNn2te9H87v2/PKW9demzl57Z0fv077uyMrXx5Hr4zV925TT/a6sT7buSxdGOpjR+hIMSLSw1Wqjf+RKMbWRtlIvPxJXzsHbKhqNaluaV18pQrcw9KJOjCI8hf69P1vftukqcdd4caJaKxj3Mpu9ZKhSLI6pew90kYYi4iTV/754uRwPT9o+x8A2HzXT0TEs83mf0k8sKze/7JrQ6MR8f+I2BUR90XE7oi4P6JW98GIeKjD9ldfIbl9/lMd6SqwdUrnfy9k17ZWzv/y2V+MFrPczlr8pcKpM5W5Q9k+ORilLWl+sk0b3730y2etyhrzv+yWtp/eL9VI/hhatUA3O704Hauv03XpxscRe4eW4h9uxF9ozHnTdvZExN4u2zjz9Ff7WpWtHX8bPZiUV7+MeKp+/K/EiuO/tHcLza9PHj9yePL5Y1NHJ4ajMndoIj8rbvfTz1dfb9X+HcXfAzeuV2Nb0/O/Ef9oYThi4eKls7XrtQudt3H1t09bvqfp9vwvF96spcvZtg+mFxcvTEaUC6/evn1q6bF5Pq+fnv8HDzQf/7tiaU88HBHpSbw/Ih6JiEezvj8WEY9HxIE28f/w4hPvdh5/m1X5Hkrjn13r+Mfy479m4lJErNhSPPv9N53Hn0uP/5Fa6mC2JX/+a2ddPe3qbAYAAID/nqT2GfhCMt5IJ8n4eP0z/LtjW1KZX1h85tT8++dn65+VH41SsnylK18PnczWhvP81Kr84Wzd+PPi1lp+fGa+Mtvn2GHQbW8x/lO/F/vdO2DD+b4WDC7jHwAGj9d/GFzGPwyuZuP/oz70A9h8a7z+b92sfgCbz/wfBpfxD4PL+IeB1PK78UlalNZY5xfpJe4gUe7ZP/y23NFvNdxBIpK7YtfdQ4lSNC0aWvePWXSZ2NK0qN/PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//gELc7A==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x177) 2m23.61315809s ago: executing program 1 (id=58): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x404d02, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000840)={0x0, 0x2, 0x7}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000c40)={{r2}, r6, 0x1c, @inherit={0x88, &(0x7f0000000180)={0x0, 0x8, 0x6, 0x6, {0xa, 0x0, 0xfffffffffffffffc, 0x3, 0x3}, [0x3, 0x48, 0x80000000, 0x6, 0x3, 0x5, 0x8000000000000000, 0x4]}}, @devid=r7}) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c000000100001002d8a5a32ec00000000000000", @ANYRES32=0x0, @ANYBLOB="02210000c80f0600140003006e657464657673696d3000000000000068001680640001800c00040009000000fef5ffff1000020000000000830f0000faffffff10000600400000000500000008000000280001"], 0x9c}}, 0x0) 2m21.970394578s ago: executing program 1 (id=61): write$ppp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f00000000c0)={[{@delalloc}, {@noblock_validity}, {@bh}, {@nodiscard}, {@nouid32}, {@barrier}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x2108c8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@usrjquota}, {@block_validity}, {@minixdf}, {@resgid}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x177) 2m21.107134469s ago: executing program 1 (id=67): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x18400, 0xc24, 0x9, 0xfffffffb}}, 0x44) 2m20.744433571s ago: executing program 1 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@map, 0xffffffffffffffff, 0x16, 0x2002}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(0xffffffffffffffff, 0x627, 0xc1040000, 0x43, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x43044) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x20010) 2m20.524251804s ago: executing program 1 (id=70): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) open(0x0, 0x272842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0xfffc, 0x0, 0x7, 0x6916, 0x20005, 0xfffa, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x9, 0x8000}, 0x6720, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x30907e, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x713e, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x8, [0xffff, 0x3, 0x9, 0x3, 0x81]}) 2m20.487773856s ago: executing program 32 (id=70): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) open(0x0, 0x272842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0xfffc, 0x0, 0x7, 0x6916, 0x20005, 0xfffa, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x9, 0x8000}, 0x6720, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x30907e, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x713e, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x8, [0xffff, 0x3, 0x9, 0x3, 0x81]}) 2m13.597178037s ago: executing program 33 (id=28): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3fb, 0x0, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) rmdir(0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x100) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f00000000c0)="79d358", 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="850000002f000000d7000000100000009500000000000000423d19f1e4e058f160906b507e5120a0425f48f9550dcf76fc596696e6f89a4a2b1d29eadfdabd5217ba2d02d98d17b488d5437e04555f3dc719afc000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0xfffffffffffffe6a) ioctl$BLKSECTGET(r3, 0x1267, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 1m59.542572955s ago: executing program 5 (id=202): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f00, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18, 0x3000000}, 0x0) 1m59.541963555s ago: executing program 5 (id=203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ptrace$getsig(0x4202, 0x0, 0x100, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000085d74346b4364371"], 0x48) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) unshare(0x2a020400) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$cgroup_freezer_state(r6, &(0x7f0000000880)='FROZEN\x00', 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r7}}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r8, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x1b, &(0x7f0000001400)=""/223}, 0x94) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB="6e90c46f74732c000000000000000000000000008e9abec110f48ecacbc4a9846b144757669cc62336389368fe359e657a3be1b37d5a4797294c"], 0x1, 0x21f, &(0x7f0000000100)="$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") capset(0x0, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x26) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r9, 0xc0385868, &(0x7f0000000840)={r0, &(0x7f0000000740)='-+],)&):{\x00', 0x321000, &(0x7f0000000780)={@align=0x2, {0x5, 0x4, 0x7ff, 0x69}}, 0x2, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x1ff}) socketpair(0x1b, 0x2, 0xfffffff7, &(0x7f0000000380)) 1m59.173509096s ago: executing program 5 (id=208): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0x2000000000000216, &(0x7f0000000840)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYBLOB="05d300e0bed902aaddf06ba150aeac82e1f7a42b6f468b0985ed1271f7cd75aa402e7a566c90323efdaeebd18dd2f262314450da8b6363cb7d48a984ebec7451ec24ff9499c373021e4ea5c76f1cb6379fb929f3d84e18d7df51fc3e1d017edb3afef46f93072bc09dfed89bc10d5f3019b8ca5e3e2cf0c74c050dfc77e803a218df46a5e206c8cda2cbc69c649a78dd24658cac4634798dc37ffa7b98b73a831472e00f08ce8cba8303fd254ea0b468ab463a62a0eb42c6b7fdf8a385c97a2f24df28d26278723f80722e8cf2044e25bf0250c83da8e6e5e07791d760e250c227549077586de61a43f0", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32=r0], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m59.107502241s ago: executing program 5 (id=209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x4000, &(0x7f00000002c0)=ANY=[], 0x3, 0x240, &(0x7f0000000500)="$eJzs2s9rHGUYB/Bn0tbGlHQj/qIF8UUP6mVocvbQIC2IAUW7QhWkUzPRZcfdsLMsrIjJqV79EzyLR2+C9OglF/8CD14klxx7EEe6u5pG4iGI3ZJ+Ppd94N0vzzPMy8t7mP3Xv/6su1XnW8UwFrIsFq7GbtzLYiUW4i+78dorN3964b2bH7y1vrFx7d2Urq/fWF1LKV188ccPv/jupbvDC+9/f/GH87G38tH+wdqve8/tXdr/48annTp16tTrD1ORbvf7w+J2VabNTt3NU3qnKou6TJ1eXQ6OrG9V/e3tcSp6m8tL24OyrlPRG6duOU7DfhoOxqn4pOj0Up7naXkp+C/a395rmjhozt2Kpmme/CYu3I3lX6IV2VMpe/pq9uyt7Pnd7NJB07TmPSr/C+//8fbAob4YUX01ao/a09/p+vpWdKKKMq5EK36P+9tkZlpff3Pj2pU0sRJ3qp1ZfmfUPnM0vxqtWDk+vzrNp7hT/fbEtO3OqH0+liLORczya9GKZ47Prx3mJ/3PTPovxqsvP9A/j1b8/HH0o4rNuJ89zH+5mtIbb2+ko/NfnvwPAOC0ydPfjr2/5fm/rU/zJ7gf/uN+dTYun53vsxNRjz/vFlVVDhRVOVh8NMY4DUVENtlg2WyjzXsexQmLuR5LPCSHL33ekwAAAAAAAAAAAHASD+Nzwnk/IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj7MwAA//+3Ycw+") socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xf8, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0xeb, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@unspec=@CONNMARK={0x0, 'CONNMARK\x00', 0x1, {0x7f, 0x10001, 0x8, 0x1}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b1) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="67aba0db2d3597c88f6f466e84a2bbe76b91851407574c8b980eab08b54be05c184f3684908481c3f5ad0860d299e164", @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc6e6574646502000000300000000000000800060000fcffff08000900d7020200080011000700000008000e00800000000800"/80, @ANYRES64=r4], 0x5c}}, 0x88010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40082) socket$inet6(0xa, 0x1, 0x9) syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9800000001090300000000000000000003000004840002002c000180"], 0x98}, 0x1, 0x0, 0x0, 0x4040895}, 0x40810) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="f40000", @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf250700000008000100220000000c009900020000006200000014001780040006000400010004000500040004000a00e800080211000001000018001780040005000400050004000400040001000400060008001780040006000a00e800ffffffffffff00000c00178004000300040002000a00e80008021100000100000a00e80008021100000000001c00e70015fb11d2f9953f72d83eb681562113a23917426a634c74890a00e800ffffffffffff00000a00e80008021100000000001c00e700eaa70ae2d16e8a9aea43cc471b171d2782d9442deb97909e0c0017800400030004000600"], 0xf4}, 0x1, 0x0, 0x0, 0x810}, 0x4000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000000906030000000000000000000300000008000940000e00001c0007801800148014000240fc0100000000000000000000000000010800094000000007300003800900130073797a31000000000c001940000000000000c35c06001d4007dc00000c001b4000000000000000020800094000000005"], 0x78}, 0x1, 0x0, 0x0, 0x10004893}, 0x20004085) 1m58.571337043s ago: executing program 5 (id=214): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000088000000850000009e00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8070, 0xffffffffffffffff, 0x3faa6000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x4, @private2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '.'}], 0xa, "4a24a222ad39ff012539eb50e4f78e010036ca937d8aa8d095c8f1b9dc17c7ede870f41ed96eb3fa75c72ba8b200203427ef925e820200000000000000ee"}, 0x4b) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x28142, 0x8) (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000580)=0x7, 0x4) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x119) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000000c0)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x130, 0x98, 0x1f0, 0x130, 0x98, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x70}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x81}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dummy0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x8, 0x6}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) fdatasync(0xffffffffffffffff) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x80) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'sit0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x4, 0x5, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x43, 0x0, 0x41, 0x2f, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x14, 0x43, 0x1, 0x5, [{@local, 0x4}, {@remote, 0x5}]}]}}}}}) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES16=r7], 0x24}}, 0x20000000) (async) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1m58.347615196s ago: executing program 5 (id=217): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x2, 0x2, 0x20, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 1m58.123347509s ago: executing program 34 (id=217): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x2, 0x2, 0x20, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 4.925677116s ago: executing program 7 (id=1104): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) listen(r2, 0x7e5a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r5 = dup2(r3, r4) close_range(r5, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}], 0x1) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x2) r10 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000003c0)={'fscrypt:', @auto=[0x36, 0x64, 0x37, 0x64, 0x34, 0x62, 0x62, 0x64, 0x65, 0x35, 0x61, 0x30, 0x37, 0x35, 0x37, 0x39]}, &(0x7f0000000440)={0x0, "f308ae19609abfecd0c03061e0c269d1d5188244ab3a72b7ce1239831814560bfec83ac95b80b521988cc56cd77d2548806f7b4699faa577043ab13c94198063", 0x10}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r10, 0x0, 0xee01) fchdir(r9) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) 4.223001078s ago: executing program 7 (id=1110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x30925) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r3, 0x0) mq_timedsend(r3, &(0x7f0000001840)="466c0a99f29435", 0x7, 0x10001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf00020106500008ffffffe7020d0000052406000108247c2a6ad07be4aefb00000003"], 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_int(r5, 0x0, 0xc, 0x0, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000001a80000fc020000000000000000000000000000fe8000000000000000000000000004aa2234c204c9"], 0x0) 2.635377103s ago: executing program 0 (id=1124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_getvlan={0x48, 0x72, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4801) write$tun(r0, &(0x7f0000000180)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x0, 0x0, @void}}}}}}}}, 0x32) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0x0, 0x0, 0x0, 0x40}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x38, 0x2, [0x3, 0x9]}}) pipe2(&(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 2.436744594s ago: executing program 0 (id=1126): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@map, 0xffffffffffffffff, 0x16, 0x2002}, 0x20) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 1.50312752s ago: executing program 3 (id=1132): sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)="f1717194e54c186a5e1ed3c9d7213985", 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24004044) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x5, &(0x7f0000000140)=[{0x7, 0x0, 0x2, 0x8}, {0xce27, 0x6, 0xd, 0x2f}, {0x2, 0x38, 0x4}, {0x0, 0x0, 0x6, 0x66}, {0xff, 0x2, 0x4, 0x56}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000002c0)={r2, 0x9, 0x800}) io_setup(0x1, &(0x7f00000004c0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x56633bd1cf1d94b2) io_submit(r3, 0x2, &(0x7f0000000480)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x3, r4, 0x0, 0x0, 0x400a00}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f00000000c0)="e321fb92d5", 0x5, 0x7ff, 0x0, 0x2}]) 1.480975431s ago: executing program 0 (id=1134): r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) epoll_create(0x1) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1.382171117s ago: executing program 0 (id=1136): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x181000, 0x21) io_setup(0xca, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4e0e, r4, &(0x7f0000000880)="a3", 0x1, 0x2}]) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r12, 0x0, 0x39000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000180)=0x8, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$HIDIOCSUSAGE(r12, 0x4018480c, &(0x7f0000000140)={0x2, 0xffffffff, 0x67c, 0x0, 0x3, 0x13f5}) splice(r11, 0x0, r10, 0x0, 0x8000000000000000, 0x0) write$binfmt_elf64(r10, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r13, 0x0, 0x20000023892) ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f0000000080)) flock(r7, 0x2) 1.354335629s ago: executing program 3 (id=1137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@usrjquota}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55b, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="8c73ea94b8"], 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r3) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x10000}) close(r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x2b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc040}, 0x44004) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4044004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 1.34355592s ago: executing program 6 (id=1138): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x202240, 0x112, 0x12}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x14, 0x0, 0x8, 0x8000, 0x8800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @value=r0}, 0x50) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000000000000000000000000000004b187e0918fb76ffc128e0f99a870b5ca84e4cb01d710acfb291675637ce11e21b2a7ffbed3e8d4bc7f900b073a52de4fe16418a86e8b7fe6bf02aaa15ff9fb96b9e81401590f4ff3ebe648c5f76bd31312580f301b23d6b2d41a3a3b53e373a61a029394296134dc4d707234af8153f05a81f3a28461fce69eeb3e943fc5d34a1439e27963160407cb154474915", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) keyctl$reject(0x14, 0x0, 0xfffeffffffffff18, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000ffff26bd7000fe250000004000005eedbc11ec424520577ae4492971ca27b9c92e85ecfcf2f7f427f634836e5a47e6112d586075fbe290c99084723fe43b42cd208b9226cdab53cfc0bfff518a80ab916aae80f0b9e3d868b0e10f284c83dd290000464d2a7cabed2c911e28b2992e0483a9f0e44983f324cd0461827496c48e86cbb4754047752ddea34555a1ff761a26ee6748b35c8c9cb47a178cee9828743ac319b20d3591acdf28923829", @ANYRES32=0x0, @ANYBLOB="390e0300299605003c0012800b0001006d616373656300002c0002800500070003000000050009000100000005000c007f00000005000d00060000000500080001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x48094}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'l\xf0F\xfeo\xb3\x04\x19\xb7\xbd\x8a\xfcP\r\xb6\x1d\xc7v\x06]\xe9\xdd\xa2W\x8b\fFsj\xc9\xd8\x1f\"\xd8\x1e]\xcc\xff]\x12\x85\xc8\xa8\x84K\xb3\x1e\x19\f.@\xc7\x19Iqv;C\xcf=tN\xb3\xf9\xbb@\x8f\x9d\xfc\x9e\x19\xdeq\xa90\x03&'}, 0xffffff67, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r11, 0x1, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x1c, r11, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20004040) r12 = fcntl$dupfd(r9, 0x0, r9) io_uring_enter(r12, 0x2852, 0x8676, 0x26, &(0x7f0000000540)={[0x8]}, 0x8) write$sndseq(r12, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$msr(r12, 0x0, 0x300) 1.047903307s ago: executing program 6 (id=1140): r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x88042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000080)) r4 = syz_open_pts(r3, 0xc2040) ioctl$TCXONC(r4, 0x540a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000001c0)={0x8, 0x6, 0x7, 0x7f, 0x8, "ce623020a5173bfe1bde6fa7ce194fcd90ab63", 0x5, 0x1}) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$pppl2tp(0x18, 0x1, 0x1) getpeername(r7, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x2, r5}) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x50, &(0x7f00000000c0)=0x804, 0x4) ioctl(r8, 0x8916, &(0x7f0000000000)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) recvmmsg(r9, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x0, 0x0) ioctl(r8, 0x8936, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r12, @ANYBLOB="00000000000000001c001a800800058004000500080000003e"], 0x44}}, 0x100) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@setneightbl={0x20, 0x43, 0x2, 0x70bd27, 0x25dfdbff, {0x1c}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0xa20}]}, 0x20}}, 0x1) 953.835203ms ago: executing program 7 (id=1142): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, 0x0}}], 0x1, 0x20008050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 863.678338ms ago: executing program 7 (id=1144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x83}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb", 0x94, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000003740)=""/4083, 0xff3, 0x1, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000380)=0x8, 0x4) 859.219119ms ago: executing program 7 (id=1146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001100)=ANY=[], 0x58) 764.548064ms ago: executing program 7 (id=1147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getpgrp(0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000003c0), &(0x7f0000000340)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000009}, 0xc880) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0xfffffffc, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0xa2, @tick=0x4, 0x0, {0xfd}, 0x0, 0x2}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r3, r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r0) 575.512735ms ago: executing program 6 (id=1148): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x8}, 0x808, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8010000120a010200000000000000000200fffe0900020073797a310000000008000440000000000900010073797a30000000000800034000000008"], 0x220}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x2405c004) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0) r6 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r6, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r7, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}]}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) setns(r9, 0x4000000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000001c0)={r8, 0x100, 0x1a}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r10, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={r11, 0x4}, &(0x7f0000000340)=0x8) 488.744911ms ago: executing program 6 (id=1150): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b0000000000701080000000000000000000000010c00034000000000000000080900010073797a30000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8458}, 0x80) 468.554412ms ago: executing program 3 (id=1151): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth0\x00', @multicast}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="38db8842e3830071f9c0af7fa8755ce6782f90464f4172738f76e7088413a5f69cbfe334d3f10e4bcbe8b21fd17eaefcae8adc3b65ecb2879f899ee3875e274acd5886805243f77240d6b7f3b905e283fcc05f405ca9fa399d13b1ef30c154944a5ea33d78f0b97a42a0ee8574d97034aef77de8b77713a79a706c21d44be80cac466f0f23a5dd725e20a675f695d0fc461d80df969aa144fe148d73706e851951c941353abf9ab5acd54749a128901d6d71a9216e887003bc89039f", 0xbc}, {&(0x7f0000000140)="c5d072defcad6757b8ba489979ad92947abba403547a869a604dc9f2677c44a211aca1efe477e94dfe105ca34ad73fd150f10544c8665ddb62ff50cf20a50a98c1ef8dbb1a22e0815a4a4c96c6f5d4fd63de28bfd7c0eb56f197bbd375096a6f62f54f015bbf22005eb96b3bb8f4600c78526fb602532b8701831ffd96", 0x7d}, {&(0x7f00000001c0)="f35a11c68a36becd90685cc254236aa2aeb12d2df58abe211ea93c22", 0x1c}, {&(0x7f0000000200)="667b8fe79a21991179cd4369046f7011e5b9db7f1f475dd0e6cd1629bc921112e844fc04fc796c77e8da419bee18eabce0375762e7e7dad2e80fe92f7bcfd43ff505c21b6021974512d737d49b2a1d8df868a6133c58c6b7efa8b04e0b9ccfd0b2f1735daa30e23e393682846b2bdc71b0286ff13e6b1a176899eaa01b5dbf4f9df8c923bdf813a82c6ba8", 0x8b}], 0x4) io_setup(0x489e, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000340)="635913fc9940e8a70b1054a981afdef7dab6bafc66b1fa444fe70a63d91ca5b7ce484e225dca0c5cb65bea40e9a61b87c204ef59101a04b1078a5a823cfb3e0a1197c38514eb43c6e1dc12f352cbcbc27626da8a3a6f10788b2f1bde58bccbbe4672dfaa1f2ee9630c8408432a72898315088178beb3f2396c1bb2b5c8498d10c00e97cfd93f61651eff8864e07e75771207ae90", 0x94, 0x9, 0x0, 0x1, r0}]) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000500)="60e8f146", 0x4}, {&(0x7f0000000540)="e6d4a7efa63f77c47e5d6fde006211f789c7b9911511f2904ce41649025493b4ec2b8036b255c6945e3ac867571650d463b683e6227704e5f3eb031f5275391430dbef477916ba11282986da95ed50fec3cb9d42fa5c708c55725fffbb2c80dfaf34d3564199ea5ae0f5f0114141f6aab46c47e4337d5a5813f5f59dd880628d6989ab525da149a3d38750412f0e24473c265f8919c19fbfda0403491230fcce7cc7d6b1cec5352ea8682eac7bed0b646a3e737fe367e98f8e5af12fc0071dc06e9ed2b25f96f02cb469a89564761f32af67e42734a2e019c0b9dcbdd26ef74cefed6609ea0dbf3b3352d95f43f5cd445fc21aef5835", 0xf6}, {&(0x7f0000000640)="fec2e691ae852f4c485c0531e5925e850165e46ab3d98fd1276f950890fc58fcd5bf57c5da34f90773f7", 0x2a}, {&(0x7f0000000680)="51e8950eff766a9a99a58c23001b60d0e3bffc044d04c01ece407c14048f82f148b6d76749ad4f35b4724bb3605b7355876b3a981ac546af05b998ae6bb8a0baac0e851e951cf7ced4ad4b5773b8ae50ded3580617cda27bef005853451dc08954d8ea8927fc4e7cae81f3ad63ce7af204a2b7cf20902ad719349ce6a80e68119b5679d66bb543577fe3d8e0a1f25786947d7dcbc5f8b9d8a3674eab281a9a6b29ed7ee76a0b33720ea71af0dbcdf16aa788f03a7e94d92a58fc45a3bab0f3f71907f44af34cce4bf92768cd4622d4a953321ade720749a701524da3ec8c78db4be554a3bd76d8ca1aa0", 0xea}, {&(0x7f0000000780)="a59342a5a1f554dba545cfd2d9173608ee", 0x11}, {&(0x7f00000007c0)="03078cb3a390f0ac7923ee141a6835a214d95a305c33352c1855770cc4e74d410502c34f9eb9089e0072c5b3d80ff8324d17bf588f0ff72c9a46f2a2069aeb1906c8a9771b2758a78e81513f80ca934bf8f29b6898708b83c1d9cb8d260d75e43d0e206e6fe4f24f53b6dc396795c56e48c3eda87a728790de5de3f5dce434032dcb3daab57e7bd6ddff3929a36bd89df1c9d8d526e1c4362f18ac36e28b42e07572", 0xa2}], 0x6}, 0x4800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/profiling', 0x800, 0x2) syz_clone3(&(0x7f0000000b80)={0x0, &(0x7f0000000980)=0xffffffffffffffff, &(0x7f00000009c0)=0x0, &(0x7f0000000a00), {0xe}, &(0x7f0000000a40)=""/69, 0x45, &(0x7f0000000ac0)=""/126, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x7, {r0}}, 0x58) fcntl$lock(r2, 0x24, &(0x7f0000000c00)={0x0, 0x2, 0x3, 0xb6d, r4}) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) recvmsg$unix(r2, &(0x7f0000000f80)={&(0x7f0000000c40), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/250, 0xfa}, {&(0x7f0000000dc0)=""/108, 0x6c}, {&(0x7f0000000e40)=""/169, 0xa9}], 0x3, &(0x7f0000000f40)=[@cred={{0x1c}}], 0x20}, 0x20) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000fc0), 0x72040, 0x0) write$ppp(r5, &(0x7f0000001000)="d9e7eef6f034e1425c252e8db232cb68bb6cbc59dd7c46af0c9af8b026fadb92bd3f68316ca03dc6e602f16583346e8c6af2ca5d17e7220f5ef5cdf4b67281878b65e5336a16387c8a3b7f8229b0daab19b350e5eccdaec60b70d4c03a17f3269494bc2c73ddc54b2fd1a685bb320e7bcbb395e50de930ca77add85cfcaff2569031d79a7d8755c7604143c698bc5a17b9dbbd3c1d50e9c1ab5107f08c9ea5781b81a6dce30c5f938832c46a74614824fbac5034aaf38eaeb03018d10ab0a568adabcba87b5a8bb3d8bb031a5453c72fc7fce03f45aa7410c13a82ab67e019ed5b755d27", 0xe4) io_setup(0x8, &(0x7f0000001100)=0x0) io_pgetevents(r6, 0x7fffffff, 0x2, &(0x7f0000001140)=[{}, {}], &(0x7f0000001180)={0x77359400}, &(0x7f0000001200)={&(0x7f00000011c0)={[0x3]}, 0x8}) io_destroy(r1) pwritev(r5, &(0x7f0000001340)=[{&(0x7f0000001240)="947bb58b2b9406089caaefdcc041ce35c4d9544b7269e73d0129490c", 0x1c}, {&(0x7f0000001280)="ccebbd5da810d9be77f7655878774c4d14b2735a17a82459ebf91f72d27d66b7e58048165435909c6f85e25b501974d71b7179f12fa1a902f5e54f215b993148a56e1f6e82feb309a09d8f9d932bc79f8d73bd197bf2fac3a5677bf348f190f0a71573b1005b335d46eedd9df004cf6bbb55f0e1ea5f1b9f0f36d4c2dc0985ed52cf1ee4eb9eff8642b6ade4eb819fe4e8c294d58077f5d43ec6b05825c0e3885298f042aa1eeabae33fb87837ef20cda2cdb1e196bc4deaf66a3e4f9597049b", 0xc0}], 0x2, 0x6, 0x2d3) io_cancel(r6, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0xf4a, r3, &(0x7f0000001380)="df9476da82f756e05c7197614ef1e77af8869bbb142e476c56d9d98917ccd04a2a6f89885c253403a8648ef8ea807f1a87d2a49ee52223a2da26929ae59d36673608552cab321684a2e6926d688f05e64bd356c9259b3b6fcc3656a50e12fe6d92460f14b2530472a6272fb36f84ff24eaa5a3239da9a3f8fa607eaf213fce1aae17b4e42b64ff788164beafaa4b71b6bb90f4eb8551a1e8b42ccd1b6877341a12a993ddd72f15bf5d115cd63f5515828c491480d79d630fd40e9294df950ceb2f4417dc683b4e48a994ed", 0xcb, 0x3, 0x0, 0x3, r2}, &(0x7f00000014c0)) ftruncate(r3, 0x3) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000001500)={0x1, 0x5, 0x0, 0x4b, 0x4, 0x0, [{0x1764e3b2, 0x7dd3, 0x1, '\x00', 0x3000}, {0x5, 0x2, 0x9, '\x00', 0x1100}, {0x6, 0x2, 0x5, '\x00', 0x808}, {0x7fffffffffffffff, 0xaa6c, 0x0, '\x00', 0x8}]}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001600)='blkio.bfq.dequeue\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001640)=0x0, &(0x7f0000001680)=0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000016c0)={r7, r8}, 0x14) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000001700), &(0x7f0000001740)={'L+', 0x4}, 0x16, 0x1) waitid$P_PIDFD(0x3, r3, &(0x7f0000001780), 0x20000000, &(0x7f0000001800)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000018c0)={0xfff, 0x4, 0x3, 0x0, 0x6, "9ac072ad43450f73e4f38c5bb09f53d36bce34"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x101, '\x00', r8, r2, 0x5, 0x3, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002b40)={r7, 0x0, 0x1000, 0xf6, &(0x7f0000001980)="3b5b082cfe240412a1e97bac82f8fbb8cc2bdc5bd2cc785ffb1f6df7b7877c942ee04fc170998cf7addd3a932476a70ac7ba87ae81d749fa088c73db990aa73619f8d74e1477ac383f838a05c04033013c04744c479c12a2e8439e540616c682709e41886df684939442e7ea0da9d0b67cb0a0990b4e0a4f9115eebebc56c2bd666b8d1a367c30f1a4d4dbbe97842b336131065ba3eecf3087b6c28360ffe52696d1485bf8818fb4df20816b71f5dba25c247f84b94b00b3c25bde0ffab4bfb2f6208f53f9ce363ad46c3d12f8bc0c707d48cddbaa432cbe1dbbf8716ee0160ecee2fb972b3ccbe96d5352860ab6c72511db6b26fc07a043dcd4c3ad174b24bc6660a36645990a90372154364fecc6b878868a09e39d7c6a64c88a69e5634f0e816326bd52c3a566b7f7741389e6b7d47a3a6a40496967023edd41c09c883cb2c8231c4eb4faa307ca5b99ce5ab9a1645823d25a770085fbce4fcf1bcb71b7323266c0bb21c005c3a850f63e85c7eeddac95d26b482d4dbcbe1568efffd161768bd72d053cde27e254e8afd37a4ccc97f70bdb0ccc0e3d055b6bc70142810d4b7c487a2aece2186324904c238f527b97e2cd9d562b5e48b63452f910297fdead6bc6190e31f7803e622a01b3446e06aa6773f3fcafdde07636fdf8d60de705610d9d9d730145deed30cbff3d80e1c50a9a2a929aebfea79a1ed165427a6549dafdabea57687956298a7c0b7ea6d3a7fb31f567a308a130a6178de34024126b8682fb46150dec5adf133001d522ffda1cfbccf2787ea52415b55fe4b132149c82e775753b9e273b0d019cd87691cf5c8d45e2a4b21962d6ffbe843026435fabddbf6050d07f7c1327e54afb5114c62a835e0fc293879a1f01e31647aec5025c1dbdfc574205d524fb99f8a88c65a6dc28311386afdc85d92f6fc8c348dd2282e58fcf59ef8479477d89e671874276824a50f094c2c6fe8500a7c2e5523956d4ec3523560b4daff2dcf91b3d06b9fa355b5d0b5f255d3b47125450e8bd0a072b6d15f58e2a78e0cf844a12bb8f5b391a679313f84162d17566a3f34f5f3c65075cdce3858b1c7ab387ba9f3dd7375507a6fe7c2fa4a3682c1984688b053365859e1bc14961713edc0412549fdbfc3182e9ce4fd7f05939aa789b0ba16fb5390da8fff6641db44a8e926907e5ee68f939ae5e529b71433f6a17e1c549f0c1b68cc3ede949e94b23f30d2112bb8013091823634a6a346efbe677ef6fb3e1b563d4abe785cd14562c00d7f85729d1957cd6d658283ca0ab6cd763d8dab94414a258a54b4d613aa9808da38b08961d027f86db096229d1f00a7516cc58013cf9faa9b5b011abb682ccc22d509d016a1a28348182078e9e399b6bb0f1610b3cd81b71c1338b119b04851e9bfa0324630ad69e2279f1025b39b5e52aef1114fe10698496af0d3ee4237a349af6ef16deb1b8fdea297a3ab1e96431e7d9b3b066561603726c188b609b24a78f44861cd0733910ed110fbdf93e52b412010b2badc302928f866cc3d8353727da439a4922517b43a8d291914f1c5ce4ad63cf495f53b1d4365949a903ea9a68f593ec44f0c369b1bdb9548c518b7bc90a9b0453e0927e8f9a1faa5f7720c9dafaa8f144d6e18f7fcf78d9fd4cb97a42b537dd095ce531ffbd4bcd64dbc8e779d8ffb1514a1471309e87f0ff7b9d7f804b28bc2fd97dad5c463c5a33a84d03315b60c8a91502237e08c572a43350a2cea544984cc76d7646f17dd94a94735d9605a99aed71e2b544a2d4b93aee21ddb48d63bd4c02868dbc2df1d3e186d580326e106099567493b3d58744cf04e3a97bdb5cdb42503586a4320d7f858760dc412a0317ba6a618c71607ecc3de99ce236fbdf2c4426d79ea726e3a03936d90ed6ff24bd9a87e6dd6926a37eae26aaab9dcacd93fa858859d71f8c581cadcad0e39e4da0a781b55b57d2b389ed4c6b17b3ed5e1ff277564907cd7f02b5fe906780dc5f3ae0501114675eeaf69ab9b1ca4175054961fa0fee377fc6dcf7b296480dacbd1dcc72561edf5e10e73ea81b32ff5b9d49a11201a0341d87d0d94b9e908da15ee43c43e396d1c090a78ea1a4347b21ca14aa5e79d6ce658d9387fa5f517ac7fd6e6ae144434d9e1aba7af6004ac06ee062df02143b5a8ff036f4e36eae814096fadb4e810c69c6901ba5d1904a96ffc6129d92511e4964e633fb52d1a5d6cb795e465d796907263a9c1ebe23cc8c338b0e539385d24ea5eb8f68426eba7e30fe04904ffc76c12017e5fb72ebbe38c61139bcabf06b741933e263d2a1de4594bae471ab3d8543019ac6090612fbb8bd52fd07fe97b8cec4eb3fea887012a6f8747aef65b1663719dd3cfbf450447a82e88ae7a353a4a4edcbaecfd0f0d9a485104f6cb37553970a10572c140e7bf6707b077d20232a5539a7b9eb294383279348e13a647bb35eed72142265c7689b28a6b1c4cfc17331f06af01fae6a7e2e23120feb8bedf9a6473f8bdf4075a207b2a407ca4f134301986b7f9542dd7a23c01f31adf37344d9e180f0b19163effaaafcc5d459fbde53a520c3c4f3d5c1a5f7c76f289fb5cf260ed68b664cf59f4b1b63c625b4d3bf5b84ff8430911cbad235cd787f3648c975225e267e891f2347e2ee4a0616dcb9a4b3f3f96bd0f31e2d4927aa8f313fa341fb5e03e6467b1cbaa270fd34a732e2b850801f4e6ae35426bbd40d67698a08194c902928866ba60e8624b8a0c604588c1ab91672d40227449f3f8211ce81bdcb486c79d5797b8ea472180ad4f40c4d7324632d04f7e4f11a43112288327b7bfc09c394065640f77186b23a5990ae8280ddf02812b2cd4745fa638601d6e429d11ce605a9d178acf4346c740afa7a25786c24363d7689834ec4cf7079206ef2a11180a927b074ddd5c10ac144ae94a76260b25a3b5022f090588e3908b7f0cd9ee34dae64682750e3700c71cea1768434b4a15d86c69d70664989cda769f7205d753e7a7a31dcdd29b398ad7a9471a25966585309ec38a163dedcca998823457f34ce99cafc1b891df35bc43ce14f8807272e5955b7ec51e73400b75aad103908f2ed9fde72376f87b1c928a0ed3cd8ad04dcf86b9641ead70c8ab5089d3dc678a4ffb4895e933bed55d8fc2e0139f5d6fe2acf4b7657c1235e568ab6127a504e0dea6c3417f39daf6c4119201fea493fe748ad1d7769e7efe600a2a00af6e59b5e1aeb1d63f748c92d844a2a547b89179dcbb5d59aaa1d310583d927804e123089c3514b4cf17ff4c9cc4c909d4ac42c49cb6bd26a349c701ea24425bf62f395d474d4bf02b8be19370a5309ca2a22bd09d46c5ccfe75673f57ff7fcbb9a1dcb733f819efc68a4220a51531dbaadf9b9c8f4d4bc58abff9e49e445a0eed84b84d9560ae46cdc334b60a3b024946676eb9ff7938ca0bec181e5638364f2b07596deb395a54b57376d4bfa266b2d6c6bbe08761d30fa2c0aa5552a495ee8b6b1fb0c2b5a828aba89ccc55791cce456e17a6c9d6b857d7dc0841500682d6da57af134021115c6921263935c8b31e8f432a1cf2d39d7176b1958837aa982ab280396cf117033891d786d149fa069a56282ff54758dc0208a3be709b09619ab1246d28316a02e51284e8f491058cd34cdc13693b6c848303e0bc205ec547e0b1847cdefded1c21361a6222358fbd4d442e2d185fd87868d4afeb87cbe0b2aeef3fc3ea30f7d3ed57bdb8ae06a89f277e11289efaa7df7277fb769f17bca748cad4e0a3a721c85313681c0a80a28f435963aac3633925a075d6c8bda9aac681462055a394d5bfbb3f0a1318d563125da76e42a383c3a5c42bbbd81f619a18f634ecae1fc82f14e0cd755bd3d02a5ddd08b0f17545f3447bb2b1e67a88ff019f02ad51549066867a0069ab4e0d93d497df5ada2208e58c901187a46644bb6384222fd248e6e0bab0f87f3cb22ac1a96be84d60872c77c077474f584f8c9a73da66cdb26fe09feec545b7890c005df9852a1e845fd52621686124cade5d4c66a48841bce2000ebe03ccded78031f0d746955572f159dfb482cfa518d23c5f805cab9de40eb711aea7dd5132c3dc7e860a5770a990959e418e8f2ace10eb9920a4089119b4d41f5c9e8a67381353d0b67be50da97d6a54586bacea79f63ec30e856282b0f210bf29513c676a4952da47793361f0f2ea5aa2be20a6397b18453edbff7425869bada36c5e7ddc8d249375c3c5c0892d6d13e4afa0c769ea183a393b61b0fe96e5e44a123ee777f0b59b385806716740cdc92082562887f17643e2ff9f38c8c56b533a3203985c6408ab6e4a5aee0059bab9e05d7192d48f56c0a034c7080e233cd4a07c1fd40badb89968c9487e647c3698f7c6914e08d9128334c3dcd921d470e6828a99875df097106af5f7a26eafb5ad7034b562571f2ada1b89c6deb274086d18566a467652cc32e9e684db833b678323a74b9bc1dddd4e09472ec4a8eb0a98836413782f6f16687c7d701bfa552158a2507f469796d8abc1780051dca75a76858e860f0caf85fc1042b39f9b10ca89280df117ff262a158926b8f75c31eace380a6be9444013b77caced2813202e6b102b67c51ce439cbdc30a8b674205f25670807ccd1ea8ca77d829f0c7461c00b84cfe907a5119b8c1c8e785c24fc268d746f8c69315d6488918a6de1dc5c89011765edeba7be0e2191a336f8fdd878dfaabdd2dd66b4b9a4adb8e5c88d44268140532e065e949cca386b6699d2f4d2cd02f8304c8c167ce72b141eb70b2ac9fd86a4124deda2bc0a948d15c9fb4580705e68a3e21471d0d43603d73765eefbc8d46f95b29602ed301d40a4374b73cb4658796ec4a7c23bc6c33355b3147e112c00e488de568cbb7d1cf4cf2d0e0a53ef6c6f2f56c6d987bfe266dd834336771f0945339ed138ff1658cbd097ae42326930f55f33ebcb94a02fd0a75297f1c03c4cc72539fa2fd9445b753e06dce73f8b09aa829fd870c4f047c14e4233de84a79103e271c300bd8b3cd0055ffe8510f95cb1275340f7fbe2f54ff0695f0f56d94b9505c5e459a29354910e936877fa3c7d65e3ca68cc5173e56763b0266aec6d7f5b853cb78eeee2e00f79d45f632870938f3aa5f7042fd5123edcddea90ce034f6920b84e025a5fd6ba4ce77c668df43f8a4c6ea1f64e1a44ff6b2623a60f70cdd00b88616b4281090d0bd56aa2b39c34f443a1605eac55f955cf08b3820cc30ce9c777adba55708aa01c7797856493b69a7be6defd9d167304a72dccc3a7d41411c18665f1a3a349b9358ff74b938f75739bb9f1ad7be8fcdd9763c305d566108c812101b919adf75ea5403da29a53a0504f44a9009845b1cb91285c0e4fd1eb78e11a36b11c967858232ae99e551a362712ff21490ccddde06fa070c91e38f75dd916797b1d7509ae475cab49dd8ed3a78e5a05f8111f4041b921b396d31a57d53af0bea2983db49e2de7e0758043758718572744365c658f1bee462f7ebd308c96dfb792803c638a9af1ca012e3262cbd25215a28afbea44ac19340577a56a1d75e42ca017dfbd7bf868feac75ba2ea0ad623d2b1fe039eed59929812403ef62fa92360d18d4b16fff920d964f1fbb3d26438e1a917084a96717a25182eb47c8d869898af8219388de92635d34064cc803e60836c5d9a710e0ab7ee31477ef1b2621bceedd99299104e2d79e5c3ddf7f5138f33d7fdcd14d11b9ce5ece9b38292e95c1548da54a70f89f22bfedac411adfb7e3be60fefd55db665160b", &(0x7f0000002980)=""/246, 0x4, 0x0, 0x58, 0x1b, &(0x7f0000002a80)="9ae780de2b3324f3e4681c4e21e2b4d55b100ef4e7b762a5608e17889df4c7c947e489618f311ecb4ea75037183a2effef2d051c6752d21575808db67d4df633c7adf1a735718cb7e67dfe7d7b375758c53f3fa0110ea69d", &(0x7f0000002b00)="6bbb845ef8cf8d814813e31e50b4de7eeb08e240d47213c1ec3eb0", 0x1, 0x0, 0x3}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000002cc0)={r3, &(0x7f0000002bc0)='/^:!\x00', 0x400000, &(0x7f0000002c00)={@align=0x6171, {0x2, 0x1, 0x7fff, 0x9}}, 0x7, &(0x7f0000002c40)={@_ha_fsid}, &(0x7f0000002c80)=0x1}) utimensat(r9, &(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)={{}, {0x77359400}}, 0x100) 456.088432ms ago: executing program 6 (id=1153): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES16, @ANYRES64], 0x2, 0x245, &(0x7f00000007c0)="$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") recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 370.327798ms ago: executing program 0 (id=1154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x3c, r3, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) 368.843888ms ago: executing program 0 (id=1155): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@usrjquota}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55b, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="8c73ea94b8"], 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup(r3) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x2b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc040}, 0x44004) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4044004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x2, 0x81, 0x6, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x8000, 0x10, 0xe996, 0x10000300}}) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 352.061379ms ago: executing program 2 (id=1156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x83}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb", 0x94, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000003740)=""/4083, 0xff3, 0x1, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000380)=0x8, 0x4) 259.496864ms ago: executing program 6 (id=1157): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@usrjquota}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55b, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="8c73ea94b8"], 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup(r3) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x10000}) close(r7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x2b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc040}, 0x44004) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4044004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x2, 0x81, 0x6, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x8000, 0x10, 0xe996, 0x10000300}}) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 258.804114ms ago: executing program 2 (id=1158): fsopen(0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008000000000000", @ANYBLOB="0002ecfffffffffffffff8d20b"], 0x50) 241.165355ms ago: executing program 2 (id=1159): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) (async) syz_emit_ethernet(0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3886dd6000000000403a00fe8000000000000000000000000000bbff0200000000000000000000000000012b00000000000000010000000000000002009078000000066b338b4b00040001ff020000000000000000000000000001fe800000000000000100000001000000373005444c807e9c4442dbddd5dd96d6723753adee97a599f4d5e4a84d305e818ccf08708657ce3c24713a35bca024eb796dd8aac87609da3823f5ee9294beb1b8"], 0x0) (async) r3 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) (async, rerun: 32) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) (async, rerun: 32) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) 191.935278ms ago: executing program 2 (id=1160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f500"/15], 0x58) 127.419742ms ago: executing program 3 (id=1161): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x5, 0x0) listen(r0, 0x5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = add_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000002c0)="43d9fc8f8d786aa0fd9ac5c82a161ee60635deba56031ebdf6c58a4c82680e1ad407041e7b5564a8d6e59efae2351ff7af5fdfc9a04ebe6fa40a", 0x3a, 0xfffffffffffffffa) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) keyctl$chown(0x4, r2, r3, 0xee00) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000001c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997", 0x27}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2", 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea", 0x4c}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049c", 0x78}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db", 0x5d}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2e91f3af98057ad0674", 0x8b}], 0x5}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r5 = inotify_init1(0x800) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x29) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) 110.134303ms ago: executing program 3 (id=1162): getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000080)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 92.664514ms ago: executing program 2 (id=1163): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b0000000000701080000000000000000000000010c00034000000000000000080900010073797a30000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8458}, 0x80) 28.341248ms ago: executing program 3 (id=1164): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f00000002c0)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$eJzs3V1rFFcYAOB3NonGj9YIIrUXRfCiFuvGJK0fUNBellYqtPd2SdYg2biS3YhJhepFvelNkUIpFUp/QO97Kf0D/RVCK0iR0FKkkDKb2SQm+5Ho6q7u88DoOTOTPefsmXf2nJlZNoC+dTj9JxdxKCK+TSL2rds2GNnGwyv7LT26MZkuSSwvf/ZXEkm2rr5/kv2/J8u8ERG/fR1xLLeyfmjda1cWFmcKpVJxLsuPVmevjlYWFo9fni1MF6eLV8YnJk6/Pzx+5tTJjrX1nQv//PDpvY+Gvzmy9P0vD/bfSeJc7M22rW/HM7i5PnO48F+WGopzG3Yc60BhvSTpdgV4KgNZnKexeSj2xUAW9cCr76uIWAb6VCL+oU/VxwH1uX2H5sEvjYcfrkyANrd/cOXaSAzX5ka7l5InZkbpfHekA+WnZfz659076RKtr0PsapMH2JabtyLixODg5vNfkp3/nt6J2sXj1jaW0W+fP9BN99Lxz7uNxj+51fFPNBj/7GkQu0+jffznHjyR7fCNhnT890HD8e/qqWtkIMu9VhvzDSWXLpeKJyLi9Yg4GkM703yr+zmnl+4vN9u2fvyXLmn59bFgVo8Hgztrl+lXTRWqhWdr9ZqHtyLebDj+TVb7P2nQ/+n7caHlK6911MHi3bea7dW+/c/X8s8Rbzfs/7X6J03vT06Mnzl1crR2PIzWj4rN/r598Pdm5Xe7/Wn/727d/pFk/f3ayvbL+Gn4cbHZti0e/09Ij/8dyee19I5s3fVCtTo3FrEj+WTz+vG1v63n6/un7T96pPX5r9Hxn06+vthi+28fuN10117o/6lt9f/2E/c//vLHZuVvrf/fq6WOZms2nP8eb7iUUbPVCnbobQQAAAAAAICekIuIvZHk8qvpXC6fX3m+40DszpXKleqxS+X5K1NR+67sSAzl6ne699Vuwa48DzGWPQ9bfz5ifEN+IiL2R8R3A7tq+fxkuTTV7cYDAAAAAAAAAAAAAAAAAABAj9jT5Pv/qT8Gul074Lmr/bDBzm7XAuiGtj/534lfegJ6Utv4B15Z4h/6l/iH/iX+oX+Jf+hf4h/6V+P49/QP9AOf/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBRF86fT5flpUc3JtP81LWF+ZnyteNTxcpMfnZ+Mj9Znruany6Xp0vF/GR5tt3rlcrlq2PjMX99tFqsVEcrC4sXZ8vzV6oXL88WposXi0MvpFUAAAAAAAAAAAAAAAAAAADwcqksLM4USqXi3AtODEYXCm2VGM7ekAabzkZP1PD5Jc42b3v7xODmTf9GRC+0S+IZEl08KQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADABv8HAAD//9L0OVA=") chdir(&(0x7f0000000240)='./file0\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 0s ago: executing program 2 (id=1165): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x3c, r3, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) kernel console output (not intermixed with test programs): filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.953414][ T5343] netlink: 104 bytes leftover after parsing attributes in process `syz.3.402'. [ 100.960671][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.102501][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.135661][ T4546] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 101.135733][ T4546] loop7: lost filesystem error report for type 5 error -117 [ 101.135852][ T4546] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 101.135977][ T4546] loop7: lost filesystem error report for type 5 error -117 [ 101.136141][ T4546] EXT4-fs error (device loop7): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 101.136170][ T4546] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 101.178285][ T5356] loop2: detected capacity change from 0 to 512 [ 101.266006][ T5366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.266153][ T5366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.269989][ T5331] netlink: 'syz.6.399': attribute type 10 has an invalid length. [ 101.270008][ T5331] netlink: 40 bytes leftover after parsing attributes in process `syz.6.399'. [ 101.270085][ T5331] dummy0: entered promiscuous mode [ 101.270098][ T5331] dummy0: entered allmulticast mode [ 101.275472][ T5331] bridge0: port 3(dummy0) entered blocking state [ 101.361635][ T5331] bridge0: port 3(dummy0) entered disabled state [ 101.369097][ T5331] bridge0: port 3(dummy0) entered blocking state [ 101.375478][ T5331] bridge0: port 3(dummy0) entered forwarding state [ 101.405542][ T5373] netlink: 'syz.0.407': attribute type 1 has an invalid length. [ 101.659297][ T5391] can0: slcan on ttyS3. [ 101.708403][ T5393] loop6: detected capacity change from 0 to 512 [ 101.732039][ T5393] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.410: bg 0: block 5: invalid block bitmap [ 101.744315][ T5393] loop6: lost filesystem error report for type 5 error -117 [ 101.746094][ T5393] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 101.753425][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 101.753442][ C1] EXT4-fs (loop6): initial error at time 1771019975: ext4_validate_block_bitmap:432 [ 101.753480][ C1] EXT4-fs (loop6): last error at time 1771019975: ext4_validate_block_bitmap:432 [ 101.787575][ T5393] loop6: lost filesystem error report for type 5 error -117 [ 101.787772][ T5393] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.410: invalid indirect mapped block 3 (level 2) [ 101.808160][ T5393] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.808434][ T5393] EXT4-fs (loop6): 1 orphan inode deleted [ 101.823348][ T5393] EXT4-fs (loop6): 1 truncate cleaned up [ 101.829343][ T5393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.982068][ T5382] can0 (unregistered): slcan off ttyS3. [ 102.013671][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 102.013683][ T28] audit: type=1400 audit(1771019976.236:485): avc: denied { ioctl } for pid=5381 comm="syz.7.409" path="socket:[15086]" dev="sockfs" ino=15086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.051510][ T5397] netlink: 64 bytes leftover after parsing attributes in process `syz.2.406'. [ 102.181404][ T5423] sctp: [Deprecated]: syz.3.414 (pid 5423) Use of int in maxseg socket option. [ 102.181404][ T5423] Use struct sctp_assoc_value instead [ 102.257904][ T5420] bond0: (slave bond_slave_0): Releasing backup interface [ 102.268258][ T5428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.413'. [ 102.294321][ T5420] bond0: (slave bond_slave_1): Releasing backup interface [ 102.307219][ T5420] team0: Port device team_slave_0 removed [ 102.319188][ T5420] team0: Port device team_slave_1 removed [ 102.333127][ T5420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.341354][ T5430] netlink: 104 bytes leftover after parsing attributes in process `syz.3.415'. [ 102.361379][ T5420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.377586][ T5420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.387308][ T5420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.427310][ T5420] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.492407][ T3973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.528480][ T28] audit: type=1326 audit(1771019976.746:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92cfebf79 code=0x7ffc0000 [ 102.554979][ T5432] netlink: 'syz.3.417': attribute type 21 has an invalid length. [ 102.623592][ T28] audit: type=1326 audit(1771019976.746:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe92cfebf79 code=0x7ffc0000 [ 102.654799][ T5439] FAULT_INJECTION: forcing a failure. [ 102.654799][ T5439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.657122][ T5432] netlink: 'syz.3.417': attribute type 6 has an invalid length. [ 102.697311][ T5439] CPU: 0 UID: 0 PID: 5439 Comm: syz.7.419 Not tainted syzkaller #0 PREEMPT(full) [ 102.697360][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 102.697373][ T5439] Call Trace: [ 102.697379][ T5439] [ 102.697386][ T5439] __dump_stack+0x1d/0x30 [ 102.697410][ T5439] dump_stack_lvl+0x95/0xd0 [ 102.697491][ T5439] dump_stack+0x15/0x1b [ 102.697511][ T5439] should_fail_ex+0x263/0x280 [ 102.697534][ T5439] should_fail+0xb/0x20 [ 102.697588][ T5439] should_fail_usercopy+0x1a/0x20 [ 102.697680][ T5439] _copy_to_user+0x20/0xa0 [ 102.697710][ T5439] simple_read_from_buffer+0xb5/0x130 [ 102.697747][ T5439] proc_fail_nth_read+0x10e/0x150 [ 102.697803][ T5439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.697889][ T5439] vfs_read+0x1ab/0x7f0 [ 102.697918][ T5439] ? __rcu_read_unlock+0x4e/0x70 [ 102.697939][ T5439] ? __fget_files+0x184/0x1c0 [ 102.697960][ T5439] ? mutex_lock+0x57/0x90 [ 102.698025][ T5439] ksys_read+0xdc/0x1a0 [ 102.698056][ T5439] __x64_sys_read+0x40/0x50 [ 102.698161][ T5439] x64_sys_call+0x2886/0x3020 [ 102.698186][ T5439] do_syscall_64+0x12c/0x370 [ 102.698212][ T5439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.698288][ T5439] RIP: 0033:0x7f47df24c84e [ 102.698304][ T5439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.698322][ T5439] RSP: 002b:00007f47ddce6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.698341][ T5439] RAX: ffffffffffffffda RBX: 00007f47ddce76c0 RCX: 00007f47df24c84e [ 102.698423][ T5439] RDX: 000000000000000f RSI: 00007f47ddce70a0 RDI: 000000000000000c [ 102.698435][ T5439] RBP: 00007f47ddce7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.698447][ T5439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.698459][ T5439] R13: 00007f47df506038 R14: 00007f47df505fa0 R15: 00007fff15bf0ed8 [ 102.698478][ T5439] [ 102.748026][ T5432] netlink: 132 bytes leftover after parsing attributes in process `syz.3.417'. [ 102.918171][ T28] audit: type=1326 audit(1771019976.746:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92cfebf79 code=0x7ffc0000 [ 102.977232][ T5450] netlink: 60 bytes leftover after parsing attributes in process `syz.7.422'. [ 102.986545][ T5450] netlink: 'syz.7.422': attribute type 16 has an invalid length. [ 102.998459][ T5450] netlink: 'syz.7.422': attribute type 17 has an invalid length. [ 103.015796][ T5450] netlink: 'syz.7.422': attribute type 27 has an invalid length. [ 103.087966][ T28] audit: type=1326 audit(1771019976.746:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe92cfebf79 code=0x7ffc0000 [ 103.111410][ T28] audit: type=1326 audit(1771019976.746:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92cfebf79 code=0x7ffc0000 [ 103.134863][ T28] audit: type=1326 audit(1771019976.746:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fe92cfebf79 code=0x7ffc0000 [ 103.164226][ T5458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5458 comm=syz.7.422 [ 103.171282][ T28] audit: type=1326 audit(1771019976.776:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92cfebf79 code=0x7ffc0000 [ 103.254812][ T28] audit: type=1326 audit(1771019976.776:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe92cfebf79 code=0x7ffc0000 [ 103.351327][ T28] audit: type=1400 audit(1771019976.916:494): avc: denied { getopt } for pid=5434 comm="syz.6.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.392933][ T5471] x_tables: duplicate underflow at hook 1 [ 103.980052][ T5487] netlink: 'syz.6.429': attribute type 7 has an invalid length. [ 103.987819][ T5487] netlink: 140 bytes leftover after parsing attributes in process `syz.6.429'. [ 104.017002][ T5493] FAULT_INJECTION: forcing a failure. [ 104.017002][ T5493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.075943][ T5493] CPU: 0 UID: 0 PID: 5493 Comm: syz.0.430 Not tainted syzkaller #0 PREEMPT(full) [ 104.076013][ T5493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 104.076026][ T5493] Call Trace: [ 104.076032][ T5493] [ 104.076039][ T5493] __dump_stack+0x1d/0x30 [ 104.076064][ T5493] dump_stack_lvl+0x95/0xd0 [ 104.076086][ T5493] dump_stack+0x15/0x1b [ 104.076105][ T5493] should_fail_ex+0x263/0x280 [ 104.076199][ T5493] should_fail+0xb/0x20 [ 104.076217][ T5493] should_fail_usercopy+0x1a/0x20 [ 104.076241][ T5493] _copy_from_user+0x1c/0xb0 [ 104.076267][ T5493] ___sys_recvmsg+0xaa/0x3b0 [ 104.076335][ T5493] ? set_normalized_timespec64+0xe0/0x110 [ 104.076374][ T5493] do_recvmmsg+0x1ef/0x560 [ 104.076478][ T5493] __x64_sys_recvmmsg+0xfb/0x170 [ 104.076506][ T5493] x64_sys_call+0x80f/0x3020 [ 104.076602][ T5493] do_syscall_64+0x12c/0x370 [ 104.076716][ T5493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.076741][ T5493] RIP: 0033:0x7ff62bf1bf79 [ 104.076758][ T5493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.076778][ T5493] RSP: 002b:00007ff62a96f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 104.076815][ T5493] RAX: ffffffffffffffda RBX: 00007ff62c195fa0 RCX: 00007ff62bf1bf79 [ 104.076830][ T5493] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 104.076851][ T5493] RBP: 00007ff62a96f090 R08: 00002000000001c0 R09: 0000000000000000 [ 104.076866][ T5493] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 104.076880][ T5493] R13: 00007ff62c196038 R14: 00007ff62c195fa0 R15: 00007fffeb6d2588 [ 104.076902][ T5493] [ 104.144768][ T5498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 104.282877][ T5503] netlink: 60 bytes leftover after parsing attributes in process `syz.6.434'. [ 104.298816][ T5501] loop0: detected capacity change from 0 to 1024 [ 104.308252][ T5501] EXT4-fs: Ignoring removed orlov option [ 104.320643][ T5503] netlink: 'syz.6.434': attribute type 16 has an invalid length. [ 104.338964][ T5503] netlink: 'syz.6.434': attribute type 17 has an invalid length. [ 104.342575][ T5501] EXT4-fs (loop0): stripe (133) is not aligned with cluster size (16), stripe is disabled [ 104.347900][ T5503] netlink: 'syz.6.434': attribute type 27 has an invalid length. [ 104.379254][ T5501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.395263][ T5503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5503 comm=syz.6.434 [ 104.432060][ T5501] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #12: block 7: comm syz.0.433: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 104.471647][ T5501] EXT4-fs (loop0): Remounting filesystem read-only [ 104.498841][ T5515] netlink: 48 bytes leftover after parsing attributes in process `syz.6.439'. [ 104.501191][ T5513] option changes via remount are deprecated (pid=5512 comm=syz.7.437) [ 104.540944][ T5513] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 104.676766][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.766673][ T5536] can: request_module (can-proto-0) failed. [ 104.798682][ T5539] loop2: detected capacity change from 0 to 512 [ 104.809002][ T5539] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.443: bg 0: block 5: invalid block bitmap [ 104.821269][ T5539] loop2: lost filesystem error report for type 5 error -117 [ 104.821605][ T5539] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 104.828983][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 104.829002][ C1] EXT4-fs (loop2): initial error at time 1771019979: ext4_validate_block_bitmap:432 [ 104.829031][ C1] EXT4-fs (loop2): last error at time 1771019979: ext4_validate_block_bitmap:432 [ 104.862689][ T5539] loop2: lost filesystem error report for type 5 error -117 [ 104.863832][ T5539] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.443: invalid indirect mapped block 3 (level 2) [ 104.884481][ T5539] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.888552][ T5539] EXT4-fs (loop2): 1 orphan inode deleted [ 104.903491][ T5539] EXT4-fs (loop2): 1 truncate cleaned up [ 104.910210][ T5539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.075453][ T5546] FAULT_INJECTION: forcing a failure. [ 105.075453][ T5546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.123583][ T5546] CPU: 1 UID: 0 PID: 5546 Comm: syz.7.449 Not tainted syzkaller #0 PREEMPT(full) [ 105.123616][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 105.123627][ T5546] Call Trace: [ 105.123709][ T5546] [ 105.123717][ T5546] __dump_stack+0x1d/0x30 [ 105.123741][ T5546] dump_stack_lvl+0x95/0xd0 [ 105.123907][ T5546] dump_stack+0x15/0x1b [ 105.123989][ T5546] should_fail_ex+0x263/0x280 [ 105.124010][ T5546] should_fail+0xb/0x20 [ 105.124035][ T5546] should_fail_usercopy+0x1a/0x20 [ 105.124056][ T5546] _copy_from_user+0x1c/0xb0 [ 105.124079][ T5546] ___sys_sendmsg+0xc1/0x1e0 [ 105.124171][ T5546] __x64_sys_sendmsg+0xd4/0x160 [ 105.124193][ T5546] x64_sys_call+0x194c/0x3020 [ 105.124253][ T5546] do_syscall_64+0x12c/0x370 [ 105.124282][ T5546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.124307][ T5546] RIP: 0033:0x7f47df28bf79 [ 105.124320][ T5546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.124335][ T5546] RSP: 002b:00007f47ddce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.124427][ T5546] RAX: ffffffffffffffda RBX: 00007f47df505fa0 RCX: 00007f47df28bf79 [ 105.124442][ T5546] RDX: 0000000024040800 RSI: 0000200000004a00 RDI: 0000000000000003 [ 105.124457][ T5546] RBP: 00007f47ddce7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.124470][ T5546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.124483][ T5546] R13: 00007f47df506038 R14: 00007f47df505fa0 R15: 00007fff15bf0ed8 [ 105.124505][ T5546] [ 105.430578][ T5554] loop6: detected capacity change from 0 to 1024 [ 105.491780][ T5554] EXT4-fs: Ignoring removed orlov option [ 105.508187][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.522424][ T5554] EXT4-fs (loop6): stripe (133) is not aligned with cluster size (16), stripe is disabled [ 105.538270][ T5558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5558 comm=syz.7.453 [ 105.568536][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.453'. [ 105.576042][ T5554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.593305][ T5562] FAULT_INJECTION: forcing a failure. [ 105.593305][ T5562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.611957][ T5554] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.452: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 105.632640][ T5562] CPU: 0 UID: 0 PID: 5562 Comm: syz.2.455 Not tainted syzkaller #0 PREEMPT(full) [ 105.632669][ T5562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 105.632683][ T5562] Call Trace: [ 105.632772][ T5562] [ 105.632780][ T5562] __dump_stack+0x1d/0x30 [ 105.632810][ T5562] dump_stack_lvl+0x95/0xd0 [ 105.632852][ T5562] dump_stack+0x15/0x1b [ 105.632949][ T5562] should_fail_ex+0x263/0x280 [ 105.632976][ T5562] should_fail+0xb/0x20 [ 105.633057][ T5562] should_fail_usercopy+0x1a/0x20 [ 105.633085][ T5562] _copy_from_user+0x1c/0xb0 [ 105.633114][ T5562] ___sys_sendmsg+0xc1/0x1e0 [ 105.633224][ T5562] __x64_sys_sendmsg+0xd4/0x160 [ 105.633248][ T5562] x64_sys_call+0x194c/0x3020 [ 105.633352][ T5562] do_syscall_64+0x12c/0x370 [ 105.633385][ T5562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.633410][ T5562] RIP: 0033:0x7fdf1674bf79 [ 105.633494][ T5562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.633516][ T5562] RSP: 002b:00007fdf1519f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.633538][ T5562] RAX: ffffffffffffffda RBX: 00007fdf169c5fa0 RCX: 00007fdf1674bf79 [ 105.633551][ T5562] RDX: 000000000000c884 RSI: 0000200000000000 RDI: 0000000000000004 [ 105.633581][ T5562] RBP: 00007fdf1519f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.633594][ T5562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.633608][ T5562] R13: 00007fdf169c6038 R14: 00007fdf169c5fa0 R15: 00007ffd39551ac8 [ 105.633630][ T5562] [ 105.649498][ T5554] EXT4-fs (loop6): Remounting filesystem read-only [ 105.879487][ T3973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.994526][ T5569] bridge_slave_0: left allmulticast mode [ 106.000282][ T5569] bridge_slave_0: left promiscuous mode [ 106.006244][ T5569] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.016297][ T5569] bridge_slave_1: left allmulticast mode [ 106.026440][ T5569] bridge_slave_1: left promiscuous mode [ 106.051644][ T5569] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.071611][ T5569] bond0: (slave bond_slave_0): Releasing backup interface [ 106.093984][ T5569] bond0: (slave bond_slave_1): Releasing backup interface [ 106.136375][ T5569] team0: Port device team_slave_0 removed [ 106.152556][ T5569] team0: Port device team_slave_1 removed [ 106.159484][ T5569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.167364][ T5569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.176442][ T5569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.186819][ T5569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.214990][ T5569] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.239606][ T5587] loop6: detected capacity change from 0 to 128 [ 106.266942][ T5587] SELinux: security_context_str_to_sid (8ÝßÓ ´CW—ÜyP ìõA`ù¥aˆiþ¿vÕa„šGápºk—çjaÐܳâde•ñÈ´WÙO÷µã^­ [ 106.266942][ T5587] 8) failed with errno=-22 [ 106.304927][ T5592] loop3: detected capacity change from 0 to 512 [ 106.320951][ T5592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.356438][ T5592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.373595][ T5592] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.426103][ T5604] loop6: detected capacity change from 0 to 4096 [ 106.432952][ T5604] EXT4-fs: dax option not supported [ 106.467050][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.499122][ T5609] netlink: 'syz.6.473': attribute type 1 has an invalid length. [ 106.536053][ T5609] bridge0: port 3(dummy0) entered disabled state [ 106.544112][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.554107][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.626716][ T5608] loop0: detected capacity change from 0 to 8192 [ 106.786010][ T5626] loop7: detected capacity change from 0 to 256 [ 106.924348][ T5641] netlink: 'syz.6.482': attribute type 16 has an invalid length. [ 106.941937][ T5641] netlink: 'syz.6.482': attribute type 17 has an invalid length. [ 106.961498][ T5641] netlink: 'syz.6.482': attribute type 27 has an invalid length. [ 106.970479][ T5641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5641 comm=syz.6.482 [ 106.999865][ T5645] loop3: detected capacity change from 0 to 128 [ 107.054159][ T5626] FAT-fs (loop7): Directory bread(block 64) failed [ 107.073602][ T5626] FAT-fs (loop7): Directory bread(block 65) failed [ 107.082961][ T5626] FAT-fs (loop7): Directory bread(block 66) failed [ 107.090704][ T5626] FAT-fs (loop7): Directory bread(block 67) failed [ 107.100515][ T5626] FAT-fs (loop7): Directory bread(block 68) failed [ 107.107929][ T5626] FAT-fs (loop7): Directory bread(block 69) failed [ 107.115685][ T5626] FAT-fs (loop7): Directory bread(block 70) failed [ 107.118302][ T5645] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.123974][ T5626] FAT-fs (loop7): Directory bread(block 71) failed [ 107.142736][ T5626] FAT-fs (loop7): Directory bread(block 72) failed [ 107.149439][ T5626] FAT-fs (loop7): Directory bread(block 73) failed [ 107.214519][ T5645] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.269262][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 107.269352][ T28] audit: type=1326 audit(1771019981.486:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x7ffc0000 [ 107.308753][ T28] audit: type=1326 audit(1771019981.486:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x7ffc0000 [ 107.323608][ T5632] syz.0.479 (5632) used greatest stack depth: 7776 bytes left [ 107.333162][ T28] audit: type=1326 audit(1771019981.516:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f0e4625bf79 code=0x7ffc0000 [ 107.364110][ T28] audit: type=1326 audit(1771019981.516:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x7ffc0000 [ 107.388835][ T28] audit: type=1326 audit(1771019981.516:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x7ffc0000 [ 107.486853][ T28] audit: type=1326 audit(1771019981.516:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e4621c84e code=0x7ffc0000 [ 107.510929][ T28] audit: type=1326 audit(1771019981.516:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0e4621c84e code=0x7ffc0000 [ 107.569836][ T28] audit: type=1326 audit(1771019981.516:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0e4621c84e code=0x7ffc0000 [ 107.595944][ T5670] loop6: detected capacity change from 0 to 2048 [ 107.661407][ T28] audit: type=1326 audit(1771019981.516:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x7ffc0000 [ 107.688283][ T5678] __nla_validate_parse: 6 callbacks suppressed [ 107.688303][ T5678] netlink: 60 bytes leftover after parsing attributes in process `syz.7.496'. [ 107.704975][ T5678] netlink: 'syz.7.496': attribute type 16 has an invalid length. [ 107.737267][ T28] audit: type=1326 audit(1771019981.516:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0e4625bf79 code=0x7ffc0000 [ 107.746946][ T5678] netlink: 'syz.7.496': attribute type 17 has an invalid length. [ 107.771614][ T5670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.793977][ T5678] netlink: 'syz.7.496': attribute type 27 has an invalid length. [ 107.805954][ T5678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5678 comm=syz.7.496 [ 107.840907][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.878779][ T5689] syz_tun: entered allmulticast mode [ 107.885044][ T5689] syz_tun: left allmulticast mode [ 107.917395][ T5687] syz_tun: entered allmulticast mode [ 107.949970][ T5687] syz_tun: left allmulticast mode [ 108.009140][ T5708] loop3: detected capacity change from 0 to 512 [ 108.034185][ T5705] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.116843][ T5716] netlink: 104 bytes leftover after parsing attributes in process `syz.7.509'. [ 108.232815][ T5705] loop2: detected capacity change from 0 to 2048 [ 108.240738][ T5708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.253415][ T5708] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.265342][ T5708] EXT4-fs (loop3): shut down requested (1) [ 108.271579][ T5708] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 108.281930][ T5708] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 108.290927][ T5708] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 108.290958][ T5717] loop0: detected capacity change from 0 to 512 [ 108.308525][ T5708] lo: entered allmulticast mode [ 108.320523][ T5717] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.508: bg 0: block 5: invalid block bitmap [ 108.332743][ T5717] loop0: lost filesystem error report for type 5 error -117 [ 108.334131][ T5717] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 108.350212][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 108.350247][ C1] EXT4-fs (loop0): initial error at time 1771019982: ext4_validate_block_bitmap:432 [ 108.350269][ C1] EXT4-fs (loop0): last error at time 1771019982: ext4_validate_block_bitmap:432 [ 108.375264][ T5717] loop0: lost filesystem error report for type 5 error -117 [ 108.375416][ T5717] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.508: invalid indirect mapped block 3 (level 2) [ 108.395914][ T5717] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.396144][ T5717] EXT4-fs (loop0): 1 orphan inode deleted [ 108.411032][ T5717] EXT4-fs (loop0): 1 truncate cleaned up [ 108.417098][ T5717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.422446][ T5670] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.492: bg 0: block 234: padding at end of block bitmap is not set [ 108.445263][ T5670] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.461282][ T5670] EXT4-fs (loop6): This should not happen!! Data will be lost [ 108.461282][ T5670] [ 108.471196][ T5670] EXT4-fs (loop6): Total free blocks count 0 [ 108.477335][ T5670] EXT4-fs (loop6): Free/Dirty block details [ 108.483434][ T5670] EXT4-fs (loop6): free_blocks=0 [ 108.488664][ T5670] EXT4-fs (loop6): dirty_blocks=7120 [ 108.494192][ T5670] EXT4-fs (loop6): Block reservation details [ 108.501161][ T5670] EXT4-fs (loop6): i_reserved_data_blocks=445 [ 108.524721][ T5723] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.510'. [ 108.534364][ T5722] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.510'. [ 108.544846][ T50] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 108.546994][ T5706] lo: left allmulticast mode [ 108.586832][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.648317][ T5725] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.512: iget: bad i_size value: 38620345925642 [ 108.665585][ T5725] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.671850][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 108.687468][ C1] EXT4-fs (loop7): initial error at time 1771019982: ext4_orphan_get:1391: inode 15 [ 108.696898][ C1] EXT4-fs (loop7): last error at time 1771019982: ext4_orphan_get:1391: inode 15 [ 108.707093][ T5725] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.512: couldn't read orphan inode 15 (err -117) [ 108.718929][ T5725] loop7: lost filesystem error report for type 5 error -117 [ 108.725352][ T5725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.780011][ T5734] ext4: Unknown parameter 'obj_user' [ 108.821663][ T5737] bridge_slave_0: left allmulticast mode [ 108.834078][ T5737] bridge_slave_0: left promiscuous mode [ 108.839959][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.845554][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 108.860239][ T5737] bridge_slave_1: left allmulticast mode [ 108.866411][ T5737] bridge_slave_1: left promiscuous mode [ 108.876119][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.897058][ T5737] bond0: (slave bond_slave_0): Releasing backup interface [ 108.910330][ T5737] bond0: (slave bond_slave_1): Releasing backup interface [ 108.922629][ T5737] team0: Port device team_slave_0 removed [ 108.931579][ T5737] team0: Port device team_slave_1 removed [ 108.952187][ T5737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.970069][ T5737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.984909][ T5748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.520'. [ 109.004561][ T5748] netlink: 48 bytes leftover after parsing attributes in process `syz.3.520'. [ 109.039101][ T5748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.520'. [ 109.050137][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 109.061191][ T5737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.068679][ T5737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.082877][ T5737] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.131327][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.312829][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.652892][ T5248] tipc: Subscription rejected, illegal request [ 109.786380][ T5790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.532'. [ 109.796741][ T5790] netlink: 'syz.0.532': attribute type 16 has an invalid length. [ 109.808430][ T5790] netlink: 'syz.0.532': attribute type 17 has an invalid length. [ 109.816407][ T5790] netlink: 'syz.0.532': attribute type 27 has an invalid length. [ 109.844500][ T5790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5790 comm=syz.0.532 [ 109.916829][ T5795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.069127][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 139.069150][ T28] audit: type=1400 audit(1771020013.286:560): avc: denied { map } for pid=5817 comm="syz.3.543" path="socket:[16850]" dev="sockfs" ino=16850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 139.177641][ T5835] __nla_validate_parse: 5 callbacks suppressed [ 139.177660][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.545'. [ 139.212161][ T28] audit: type=1400 audit(1771020013.426:561): avc: denied { read } for pid=5836 comm="syz.3.550" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 139.306280][ T5840] No control pipe specified [ 139.343422][ T28] audit: type=1400 audit(1771020013.426:562): avc: denied { open } for pid=5836 comm="syz.3.550" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 139.718653][ T5848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.552'. [ 139.738621][ T5848] netlink: 48 bytes leftover after parsing attributes in process `syz.3.552'. [ 139.765056][ T28] audit: type=1400 audit(1771020013.986:563): avc: denied { read write } for pid=5831 comm="syz.2.548" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 139.820795][ T28] audit: type=1400 audit(1771020013.986:564): avc: denied { open } for pid=5831 comm="syz.2.548" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 139.964693][ T5849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.552'. [ 140.011854][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 140.406856][ T3421] IPVS: starting estimator thread 0... [ 140.545381][ T5862] IPVS: using max 2640 ests per chain, 132000 per kthread [ 141.038759][ T28] audit: type=1400 audit(1771020015.226:565): avc: denied { connect } for pid=5877 comm="syz.6.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.197961][ T28] audit: type=1400 audit(1771020015.246:566): avc: denied { shutdown } for pid=5873 comm="syz.7.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.153289][ T28] audit: type=1400 audit(1771020016.376:567): avc: denied { getopt } for pid=5890 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.175654][ T5892] set_capacity_and_notify: 2 callbacks suppressed [ 142.175717][ T5892] loop7: detected capacity change from 0 to 16384 [ 142.356240][ T5894] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 142.425276][ T5896] loop0: detected capacity change from 0 to 512 [ 142.438678][ T5896] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.567: bg 0: block 5: invalid block bitmap [ 142.451013][ T5896] loop0: lost filesystem error report for type 5 error -117 [ 142.451395][ T5896] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 142.458726][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 142.458749][ C1] EXT4-fs (loop0): initial error at time 1771020016: ext4_validate_block_bitmap:432 [ 142.458779][ C1] EXT4-fs (loop0): last error at time 1771020016: ext4_validate_block_bitmap:432 [ 142.492487][ T5896] loop0: lost filesystem error report for type 5 error -117 [ 142.492973][ T5896] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.567: invalid indirect mapped block 3 (level 2) [ 142.513558][ T5896] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.514053][ T5896] EXT4-fs (loop0): 1 orphan inode deleted [ 142.529040][ T5896] EXT4-fs (loop0): 1 truncate cleaned up [ 142.535981][ T5896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.624881][ T5899] veth0_virt_wifi: entered promiscuous mode [ 142.651064][ T28] audit: type=1400 audit(1771020016.836:568): avc: denied { read write } for pid=5891 comm="syz.0.567" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.862576][ T28] audit: type=1400 audit(1771020016.836:569): avc: denied { open } for pid=5891 comm="syz.0.567" path="/107/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.898808][ T5892] loop7: detected capacity change from 16384 to 0 [ 142.911423][ C0] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 143.054252][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 143.172325][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.275654][ T5914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.570'. [ 143.309122][ T5910] loop7: detected capacity change from 0 to 256 [ 143.814508][ T5930] loop3: detected capacity change from 0 to 512 [ 143.855129][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 143.855245][ T5922] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 143.855506][ T5922] batman_adv: batadv0: Removing interface: ipvlan2 [ 143.992185][ T5933] loop2: detected capacity change from 0 to 1024 [ 143.996226][ T5933] EXT4-fs: Ignoring removed oldalloc option [ 143.996319][ T5933] EXT4-fs: Ignoring removed bh option [ 144.028414][ T5930] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.575: bg 0: block 5: invalid block bitmap [ 144.028522][ T5930] loop3: lost filesystem error report for type 5 error -117 [ 144.028805][ T5930] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 144.028822][ T5930] loop3: lost filesystem error report for type 5 error -117 [ 144.029009][ T5930] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.575: invalid indirect mapped block 3 (level 2) [ 144.029044][ T5930] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 144.029224][ T5930] EXT4-fs (loop3): 1 orphan inode deleted [ 144.029239][ T5930] EXT4-fs (loop3): 1 truncate cleaned up [ 144.029797][ T5930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.060740][ T5933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.075536][ T5910] FAT-fs (loop7): Directory bread(block 64) failed [ 144.077051][ T5910] FAT-fs (loop7): Directory bread(block 65) failed [ 144.077468][ T5910] FAT-fs (loop7): Directory bread(block 66) failed [ 144.077532][ T5910] FAT-fs (loop7): Directory bread(block 67) failed [ 144.077730][ T5910] FAT-fs (loop7): Directory bread(block 68) failed [ 144.077839][ T5910] FAT-fs (loop7): Directory bread(block 69) failed [ 144.084647][ T5910] FAT-fs (loop7): Directory bread(block 70) failed [ 144.085035][ T5910] FAT-fs (loop7): Directory bread(block 71) failed [ 144.085065][ T5910] FAT-fs (loop7): Directory bread(block 72) failed [ 144.085082][ T5910] FAT-fs (loop7): Directory bread(block 73) failed [ 144.492132][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.204201][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.235990][ T3577] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.297678][ T5966] loop2: detected capacity change from 0 to 512 [ 145.375593][ T5966] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.581: bg 0: block 5: invalid block bitmap [ 145.388015][ T5966] loop2: lost filesystem error report for type 5 error -117 [ 145.389277][ T5966] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 145.396613][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 145.396637][ C1] EXT4-fs (loop2): initial error at time 1771020019: ext4_validate_block_bitmap:432 [ 145.396664][ C1] EXT4-fs (loop2): last error at time 1771020019: ext4_validate_block_bitmap:432 [ 145.430561][ T5966] loop2: lost filesystem error report for type 5 error -117 [ 145.431571][ T5966] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.581: invalid indirect mapped block 3 (level 2) [ 145.452037][ T5966] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.452286][ T5966] EXT4-fs (loop2): 1 orphan inode deleted [ 145.467214][ T5966] EXT4-fs (loop2): 1 truncate cleaned up [ 145.473355][ T5966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.557833][ T5967] loop0: detected capacity change from 0 to 128 [ 145.591600][ T5967] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.660207][ T5967] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.675894][ T5971] loop7: detected capacity change from 0 to 16384 [ 145.744776][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.796685][ T5976] netlink: 16 bytes leftover after parsing attributes in process `syz.7.585'. [ 145.812112][ T5974] loop7: detected capacity change from 16384 to 0 [ 145.828562][ C0] I/O error, dev loop7, sector 6408 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 145.897232][ T5984] EXT4-fs: Ignoring removed oldalloc option [ 145.932048][ T5984] EXT4-fs: Ignoring removed bh option [ 145.978378][ T5984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.006403][ T5989] netlink: 104 bytes leftover after parsing attributes in process `syz.7.588'. [ 146.175351][ T5999] FAULT_INJECTION: forcing a failure. [ 146.175351][ T5999] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 146.205165][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.7.591 Not tainted syzkaller #0 PREEMPT(full) [ 146.205196][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 146.205243][ T5999] Call Trace: [ 146.205253][ T5999] [ 146.205264][ T5999] __dump_stack+0x1d/0x30 [ 146.205296][ T5999] dump_stack_lvl+0x95/0xd0 [ 146.205325][ T5999] dump_stack+0x15/0x1b [ 146.205377][ T5999] should_fail_ex+0x263/0x280 [ 146.205406][ T5999] should_fail_alloc_page+0xf2/0x100 [ 146.205439][ T5999] __alloc_frozen_pages_noprof+0x108/0x350 [ 146.205528][ T5999] alloc_pages_mpol+0xb3/0x260 [ 146.205559][ T5999] ? obj_cgroup_charge_account+0x122/0x1a0 [ 146.205591][ T5999] alloc_pages_noprof+0x8f/0x130 [ 146.205623][ T5999] get_free_pages_noprof+0xc/0x40 [ 146.205700][ T5999] selinux_genfs_get_sid+0x33/0x180 [ 146.205781][ T5999] inode_doinit_with_dentry+0x5fd/0x7a0 [ 146.205815][ T5999] selinux_d_instantiate+0x27/0x40 [ 146.205843][ T5999] security_d_instantiate+0x76/0x90 [ 146.205889][ T5999] d_make_persistent+0x4f/0x110 [ 146.205983][ T5999] __debugfs_create_file+0x14e/0x2b0 [ 146.206019][ T5999] debugfs_create_file_full+0x3f/0x60 [ 146.206043][ T5999] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 146.206065][ T5999] ref_tracker_dir_debugfs+0x10e/0x220 [ 146.206098][ T5999] alloc_netdev_mqs+0x1a7/0xa40 [ 146.206167][ T5999] rtnl_create_link+0x239/0x720 [ 146.206189][ T5999] rtnl_newlink_create+0x174/0x650 [ 146.206280][ T5999] ? security_capable+0x7b/0x90 [ 146.206313][ T5999] ? netlink_ns_capable+0x86/0xa0 [ 146.206393][ T5999] rtnl_newlink+0x10a0/0x1330 [ 146.206428][ T5999] ? __siphash_unaligned+0x197/0x2e0 [ 146.206453][ T5999] ? __memcg_slab_free_hook+0x154/0x250 [ 146.206480][ T5999] ? __rcu_read_unlock+0x4e/0x70 [ 146.206544][ T5999] ? avc_has_perm_noaudit+0xab/0x130 [ 146.206577][ T5999] ? cred_has_capability+0x224/0x2a0 [ 146.206634][ T5999] ? selinux_capable+0x31/0x40 [ 146.206664][ T5999] ? security_capable+0x7b/0x90 [ 146.206783][ T5999] ? ns_capable+0x7c/0xb0 [ 146.206820][ T5999] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.206898][ T5999] rtnetlink_rcv_msg+0x64b/0x720 [ 146.206936][ T5999] netlink_rcv_skb+0x123/0x220 [ 146.206963][ T5999] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.207000][ T5999] rtnetlink_rcv+0x1c/0x30 [ 146.207103][ T5999] netlink_unicast+0x5c0/0x690 [ 146.207171][ T5999] netlink_sendmsg+0x5c8/0x6f0 [ 146.207204][ T5999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.207242][ T5999] ____sys_sendmsg+0x5af/0x600 [ 146.207334][ T5999] ___sys_sendmsg+0x195/0x1e0 [ 146.207408][ T5999] __x64_sys_sendmsg+0xd4/0x160 [ 146.207443][ T5999] x64_sys_call+0x194c/0x3020 [ 146.207530][ T5999] do_syscall_64+0x12c/0x370 [ 146.207564][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.207648][ T5999] RIP: 0033:0x7f47df28bf79 [ 146.207664][ T5999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.207687][ T5999] RSP: 002b:00007f47ddce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.207709][ T5999] RAX: ffffffffffffffda RBX: 00007f47df505fa0 RCX: 00007f47df28bf79 [ 146.207723][ T5999] RDX: 0000000004008040 RSI: 0000200000000280 RDI: 0000000000000004 [ 146.207785][ T5999] RBP: 00007f47ddce7090 R08: 0000000000000000 R09: 0000000000000000 [ 146.207803][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.207819][ T5999] R13: 00007f47df506038 R14: 00007f47df505fa0 R15: 00007fff15bf0ed8 [ 146.207843][ T5999] [ 146.781464][ T6002] EXT4-fs: Ignoring removed oldalloc option [ 146.820800][ T6002] EXT4-fs: Ignoring removed bh option [ 146.864142][ T6002] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.109403][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.201625][ T6012] set_capacity_and_notify: 2 callbacks suppressed [ 147.201688][ T6012] loop6: detected capacity change from 0 to 512 [ 147.272520][ T6012] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.595: bg 0: block 5: invalid block bitmap [ 147.284784][ T6012] loop6: lost filesystem error report for type 5 error -117 [ 147.285034][ T6012] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 147.292385][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 147.292409][ C1] EXT4-fs (loop6): initial error at time 1771020021: ext4_validate_block_bitmap:432 [ 147.292433][ C1] EXT4-fs (loop6): last error at time 1771020021: ext4_validate_block_bitmap:432 [ 147.326232][ T6012] loop6: lost filesystem error report for type 5 error -117 [ 147.326707][ T6012] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.595: invalid indirect mapped block 3 (level 2) [ 147.347204][ T6012] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 147.347777][ T6012] EXT4-fs (loop6): 1 orphan inode deleted [ 147.362698][ T6012] EXT4-fs (loop6): 1 truncate cleaned up [ 147.368920][ T6012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.383953][ T5965] Bluetooth: hci0: command 0x1003 tx timeout [ 147.390047][ T3786] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.661675][ T3973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.769870][ T6031] netlink: 104 bytes leftover after parsing attributes in process `syz.2.601'. [ 147.779228][ T6032] netlink: 60 bytes leftover after parsing attributes in process `syz.6.602'. [ 147.789109][ T6032] netlink: 'syz.6.602': attribute type 16 has an invalid length. [ 147.797538][ T6032] netlink: 'syz.6.602': attribute type 17 has an invalid length. [ 147.806251][ T6032] netlink: 'syz.6.602': attribute type 27 has an invalid length. [ 147.873085][ T6032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6032 comm=syz.6.602 [ 147.919957][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.112964][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 148.112979][ T28] audit: type=1400 audit(1771020022.326:571): avc: denied { getopt } for pid=6041 comm="syz.6.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.194959][ T28] audit: type=1400 audit(1771020022.326:572): avc: denied { ioctl } for pid=6041 comm="syz.6.606" path="socket:[17282]" dev="sockfs" ino=17282 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.394027][ T6049] netlink: 20 bytes leftover after parsing attributes in process `syz.6.608'. [ 148.409088][ T6049] netlink: 48 bytes leftover after parsing attributes in process `syz.6.608'. [ 148.521642][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.6.608'. [ 148.556587][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.608'. [ 148.753141][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.404892][ T6079] loop0: detected capacity change from 0 to 1024 [ 149.412218][ T6079] EXT4-fs: Ignoring removed oldalloc option [ 149.418264][ T6079] EXT4-fs: Ignoring removed bh option [ 149.434785][ T6079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.563949][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 149.606932][ T6086] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 149.639189][ T3577] Bluetooth: hci0: Frame reassembly failed (-84) [ 149.699925][ T6104] loop3: detected capacity change from 0 to 128 [ 149.717569][ T6104] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.739823][ T6104] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.767112][ T6108] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 149.847394][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'. [ 150.560171][ T6142] loop7: detected capacity change from 0 to 512 [ 150.665832][ T6142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.722545][ T6142] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.788288][ T28] audit: type=1400 audit(1771020025.006:573): avc: denied { map } for pid=6141 comm="syz.7.637" path="/83/file0/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.909014][ T28] audit: type=1400 audit(1771020025.036:574): avc: denied { execute } for pid=6141 comm="syz.7.637" path="/83/file0/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.010856][ T28] audit: type=1400 audit(1771020025.066:575): avc: denied { listen } for pid=6141 comm="syz.7.637" lport=37485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.169783][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.202840][ T6162] loop6: detected capacity change from 0 to 1024 [ 151.248135][ T6162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.332969][ T6170] __nla_validate_parse: 4 callbacks suppressed [ 151.332986][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 151.335179][ T6168] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 151.403773][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.648592][ T6184] loop2: detected capacity change from 0 to 512 [ 151.674158][ T6184] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 151.710046][ T6184] EXT4-fs (loop2): group descriptors corrupted! [ 151.716234][ T3786] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.722528][ T5965] Bluetooth: hci0: command 0x1003 tx timeout [ 151.733393][ T6185] loop7: detected capacity change from 0 to 512 [ 151.750035][ T6185] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 151.796539][ T6184] loop2: detected capacity change from 0 to 1024 [ 151.811909][ T6185] EXT4-fs (loop7): group descriptors corrupted! [ 151.867731][ T6184] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 151.884382][ T6185] loop7: detected capacity change from 0 to 1024 [ 151.900249][ T3973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.911927][ T6184] System zones: 0-1, 3-12 [ 151.916866][ T6184] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.942667][ T28] audit: type=1400 audit(1771020026.156:576): avc: denied { remove_name } for pid=6183 comm="syz.2.654" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.976584][ T6185] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 151.985215][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 152.021928][ T6185] System zones: 0-1, 3-12 [ 152.037081][ T6185] EXT4-fs (loop7): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.051665][ T28] audit: type=1400 audit(1771020026.156:577): avc: denied { rename } for pid=6183 comm="syz.2.654" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.103687][ T6195] netlink: 'syz.2.656': attribute type 21 has an invalid length. [ 152.111633][ T6195] netlink: 'syz.2.656': attribute type 6 has an invalid length. [ 152.122182][ T6195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.656'. [ 152.160762][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 152.289955][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.355431][ T6212] loop0: detected capacity change from 0 to 1024 [ 152.378451][ T6218] loop2: detected capacity change from 0 to 512 [ 152.476322][ T6218] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.658: bg 0: block 5: invalid block bitmap [ 152.488749][ T6218] loop2: lost filesystem error report for type 5 error -117 [ 152.489158][ T6218] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 152.496580][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 152.496621][ C1] EXT4-fs (loop2): initial error at time 1771020026: ext4_validate_block_bitmap:432 [ 152.496639][ C1] EXT4-fs (loop2): last error at time 1771020026: ext4_validate_block_bitmap:432 [ 152.530468][ T6218] loop2: lost filesystem error report for type 5 error -117 [ 152.531232][ T6218] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.658: invalid indirect mapped block 3 (level 2) [ 152.551678][ T6218] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.555093][ T6218] EXT4-fs (loop2): 1 orphan inode deleted [ 152.570071][ T6218] EXT4-fs (loop2): 1 truncate cleaned up [ 152.576523][ T6218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.605747][ T6212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.979594][ T6236] loop7: detected capacity change from 0 to 1024 [ 153.047034][ T6236] EXT4-fs: Ignoring removed oldalloc option [ 153.068700][ T6236] EXT4-fs: Ignoring removed bh option [ 153.171169][ T6240] loop3: detected capacity change from 0 to 512 [ 153.523196][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.532480][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.545971][ T6240] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.669: bg 0: block 5: invalid block bitmap [ 153.558962][ T6240] loop3: lost filesystem error report for type 5 error -117 [ 153.560576][ T6236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.571838][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 153.586846][ C0] EXT4-fs (loop3): initial error at time 1771020027: ext4_validate_block_bitmap:432 [ 153.596267][ C0] EXT4-fs (loop3): last error at time 1771020027: ext4_validate_block_bitmap:432 [ 153.617535][ T6240] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 153.631856][ T6240] loop3: lost filesystem error report for type 5 error -117 [ 153.638573][ T6240] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.669: invalid indirect mapped block 3 (level 2) [ 153.659051][ T6240] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.660731][ T6240] EXT4-fs (loop3): 1 orphan inode deleted [ 153.693390][ T6240] EXT4-fs (loop3): 1 truncate cleaned up [ 153.699548][ T6240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.228127][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'. [ 154.784130][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.862575][ T6278] loop7: detected capacity change from 0 to 512 [ 154.892077][ T6278] EXT4-fs: Ignoring removed orlov option [ 154.942327][ T6278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.984620][ T6278] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.006433][ T6290] loop0: detected capacity change from 0 to 512 [ 155.108015][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.345990][ T6305] loop6: detected capacity change from 0 to 512 [ 155.648113][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.044089][ T6321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.698'. [ 156.075479][ T6321] netlink: 48 bytes leftover after parsing attributes in process `syz.2.698'. [ 156.139951][ T6320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.698'. [ 156.170582][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 156.234758][ T6334] netlink: 104 bytes leftover after parsing attributes in process `syz.3.703'. [ 156.249967][ T6334] netlink: 36 bytes leftover after parsing attributes in process `syz.3.703'. [ 156.266967][ T6338] loop6: detected capacity change from 0 to 1024 [ 156.286889][ T6338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.360556][ T3973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.370975][ T6346] netlink: 'syz.2.707': attribute type 22 has an invalid length. [ 156.393423][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 156.470960][ T6351] tipc: Started in network mode [ 156.475971][ T6351] tipc: Node identity 0ee7a30367ac, cluster identity 4711 [ 156.483192][ T6351] tipc: Enabled bearer , priority 0 [ 156.496874][ T6352] loop2: detected capacity change from 0 to 512 [ 156.503838][ T6352] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.535180][ T6354] syzkaller0: entered promiscuous mode [ 156.540703][ T6354] syzkaller0: entered allmulticast mode [ 156.560567][ T6346] netlink: 'syz.2.707': attribute type 22 has an invalid length. [ 156.590640][ T6358] netlink: 60 bytes leftover after parsing attributes in process `syz.7.699'. [ 156.605703][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 157.107334][ T6358] loop7: detected capacity change from 0 to 128 [ 157.139862][ T6358] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 157.192576][ T6358] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 157.227582][ T6350] tipc: Resetting bearer [ 157.295696][ T4546] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.321027][ T6350] tipc: Disabling bearer [ 158.177733][ T6385] loop0: detected capacity change from 0 to 1024 [ 158.219009][ T6383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.719'. [ 158.257275][ T6383] netlink: 48 bytes leftover after parsing attributes in process `syz.3.719'. [ 158.301726][ T6390] loop7: detected capacity change from 0 to 512 [ 158.323197][ T6385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.350329][ T6390] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 158.393997][ T6383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.719'. [ 158.409728][ T6390] EXT4-fs (loop7): group descriptors corrupted! [ 158.443380][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.455249][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 158.498160][ T6395] loop2: detected capacity change from 0 to 1024 [ 158.522286][ T6395] EXT4-fs: Ignoring removed oldalloc option [ 158.559935][ T6395] EXT4-fs: Ignoring removed bh option [ 158.586386][ T6395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.855136][ T6390] loop7: detected capacity change from 0 to 1024 [ 158.873167][ T6408] tipc: Started in network mode [ 158.878127][ T6408] tipc: Node identity c60768aaa00c, cluster identity 4711 [ 158.923383][ T6408] tipc: Enabled bearer , priority 0 [ 158.948020][ T6390] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 158.970661][ T6414] syzkaller0: entered promiscuous mode [ 158.980782][ T6390] System zones: 0-1, 3-12 [ 158.981961][ T6414] syzkaller0: entered allmulticast mode [ 158.996591][ T6408] netlink: 44 bytes leftover after parsing attributes in process `syz.3.726'. [ 159.022597][ T6390] EXT4-fs (loop7): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.046122][ T6405] tipc: Resetting bearer [ 159.065354][ T6405] tipc: Disabling bearer [ 159.103705][ T28] audit: type=1400 audit(1771020033.326:578): avc: denied { rename } for pid=6389 comm="syz.7.722" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.103714][ T6390] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 16: comm syz.7.722: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 159.262372][ T6422] loop3: detected capacity change from 0 to 8192 [ 159.293675][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 159.807186][ T6434] loop0: detected capacity change from 0 to 1024 [ 159.846426][ T6434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.937810][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.237291][ T6402] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4224: comm syz.2.724: Allocating blocks 1-17 which overlap fs metadata [ 160.319352][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.362077][ T28] audit: type=1400 audit(1771020034.576:579): avc: denied { read } for pid=6446 comm="syz.7.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.411864][ T28] audit: type=1400 audit(1771020034.626:580): avc: denied { create } for pid=6446 comm="syz.7.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 160.443824][ T6445] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 160.461245][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 160.471770][ T28] audit: type=1400 audit(1771020034.626:581): avc: denied { sys_admin } for pid=6446 comm="syz.7.739" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 160.503354][ T6455] loop2: detected capacity change from 0 to 128 [ 160.552341][ T28] audit: type=1400 audit(1771020034.696:582): avc: denied { shutdown } for pid=6450 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.646298][ T6462] loop2: detected capacity change from 0 to 1024 [ 160.680992][ T6462] EXT4-fs: Ignoring removed oldalloc option [ 160.707507][ T6462] EXT4-fs: Ignoring removed bh option [ 160.762995][ T6462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.998044][ T6482] loop3: detected capacity change from 0 to 512 [ 161.084447][ T6482] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.744: bg 0: block 5: invalid block bitmap [ 161.293936][ T6482] loop3: lost filesystem error report for type 5 error -117 [ 161.295664][ T6482] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 161.303064][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 161.303080][ C0] EXT4-fs (loop3): initial error at time 1771020035: ext4_validate_block_bitmap:432 [ 161.303101][ C0] EXT4-fs (loop3): last error at time 1771020035: ext4_validate_block_bitmap:432 [ 161.700834][ T6482] loop3: lost filesystem error report for type 5 error -117 [ 161.701300][ T6482] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.744: invalid indirect mapped block 3 (level 2) [ 161.722476][ T6482] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.811032][ T6482] EXT4-fs (loop3): 1 orphan inode deleted [ 161.916208][ T6493] loop0: detected capacity change from 0 to 1024 [ 161.923245][ T6493] EXT4-fs: Ignoring removed oldalloc option [ 161.929429][ T6493] EXT4-fs: Ignoring removed bh option [ 161.986323][ T6493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.003481][ T6482] EXT4-fs (loop3): 1 truncate cleaned up [ 162.017999][ T6482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.240820][ T6501] bridge0: port 3(dummy0) entered disabled state [ 162.293095][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.313549][ T6501] bridge_slave_0: left allmulticast mode [ 162.326298][ T6501] bridge_slave_0: left promiscuous mode [ 162.342400][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.346890][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.753'. [ 162.381335][ T6501] bridge_slave_1: left allmulticast mode [ 162.420726][ T6509] EXT4-fs (loop2): orphan cleanup on readonly fs [ 162.421558][ T6501] bridge_slave_1: left promiscuous mode [ 162.430126][ T6509] Quota error (device loop2): v2_read_file_info: Number of blocks too big for quota file size (1579008 > 6144). [ 162.458339][ T6509] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 162.512272][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.544822][ T6509] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 162.551695][ T6509] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.754: couldn't read orphan inode 26 (err -116) [ 162.588812][ T6501] bond0: (slave bond_slave_0): Releasing backup interface [ 162.606777][ T6501] bond0: (slave bond_slave_1): Releasing backup interface [ 162.612508][ T6514] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.752: bg 0: block 5: invalid block bitmap [ 162.630253][ T6509] loop2: lost filesystem error report for type 5 error -116 [ 162.631818][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 162.645656][ C0] EXT4-fs (loop2): initial error at time 1771020036: ext4_orphan_get:1396 [ 162.653195][ T6509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.654265][ C0] EXT4-fs (loop2): last error at time 1771020036: ext4_orphan_get:1396 [ 162.682975][ T6501] team0: Port device team_slave_0 removed [ 162.692101][ T6514] loop7: lost filesystem error report for type 5 error -117 [ 162.693347][ T6514] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 162.709469][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 162.709487][ C0] EXT4-fs (loop7): initial error at time 1771020036: ext4_validate_block_bitmap:432 [ 162.709511][ C0] EXT4-fs (loop7): last error at time 1771020036: ext4_validate_block_bitmap:432 [ 162.734752][ T6514] loop7: lost filesystem error report for type 5 error -117 [ 162.736443][ T6501] team0: Port device team_slave_1 removed [ 162.752011][ T6514] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.752: invalid indirect mapped block 3 (level 2) [ 162.762962][ T6501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.776819][ T6514] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.778353][ T6514] EXT4-fs (loop7): 1 orphan inode deleted [ 162.800241][ T6501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.823025][ T6514] EXT4-fs (loop7): 1 truncate cleaned up [ 162.837094][ T6514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.912155][ T6501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.919624][ T6501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.972997][ T6501] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.133876][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.154436][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.335929][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.366729][ T6530] netlink: 104 bytes leftover after parsing attributes in process `syz.6.761'. [ 163.404928][ T6535] set_capacity_and_notify: 2 callbacks suppressed [ 163.404983][ T6535] loop7: detected capacity change from 0 to 1024 [ 163.430085][ T6537] netlink: 60 bytes leftover after parsing attributes in process `syz.6.763'. [ 163.449620][ T6537] netlink: 'syz.6.763': attribute type 16 has an invalid length. [ 163.460641][ T6537] netlink: 'syz.6.763': attribute type 17 has an invalid length. [ 163.468705][ T6537] netlink: 'syz.6.763': attribute type 27 has an invalid length. [ 163.477752][ T6537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6537 comm=syz.6.763 [ 163.876031][ T6551] loop6: detected capacity change from 0 to 512 [ 163.892532][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.935491][ T6535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.962693][ T6551] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 163.970893][ T6551] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 164.001485][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.022560][ T6551] EXT4-fs (loop6): 1 truncate cleaned up [ 164.028797][ T6551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.079157][ T6559] loop3: detected capacity change from 0 to 1024 [ 164.093319][ T6559] EXT4-fs: Ignoring removed oldalloc option [ 164.100738][ T6551] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #2: block 4: comm syz.6.769: lblock 0 mapped to illegal pblock 4 (length 1) [ 164.142454][ T6561] syzkaller0: entered promiscuous mode [ 164.147975][ T6561] syzkaller0: entered allmulticast mode [ 164.161924][ T28] audit: type=1400 audit(1771020038.376:583): avc: denied { getopt } for pid=6560 comm="syz.7.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.181919][ T6559] EXT4-fs: Ignoring removed bh option [ 164.190561][ T6551] EXT4-fs (loop6): Remounting filesystem read-only [ 164.236066][ T3973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.461860][ T6577] loop2: detected capacity change from 0 to 512 [ 164.473439][ T6577] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.771: bg 0: block 5: invalid block bitmap [ 164.485667][ T6577] loop2: lost filesystem error report for type 5 error -117 [ 164.485877][ T6577] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 164.493237][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 164.493260][ C1] EXT4-fs (loop2): initial error at time 1771020038: ext4_validate_block_bitmap:432 [ 164.493284][ C1] EXT4-fs (loop2): last error at time 1771020038: ext4_validate_block_bitmap:432 [ 164.527041][ T6577] loop2: lost filesystem error report for type 5 error -117 [ 164.527278][ T6577] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.771: invalid indirect mapped block 3 (level 2) [ 164.547711][ T6577] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 164.548028][ T6577] EXT4-fs (loop2): 1 orphan inode deleted [ 164.563005][ T6577] EXT4-fs (loop2): 1 truncate cleaned up [ 164.928519][ T6588] loop7: detected capacity change from 0 to 1024 [ 165.013988][ T6588] EXT4-fs: Ignoring removed oldalloc option [ 165.041907][ T6588] EXT4-fs: Ignoring removed bh option [ 166.116283][ T6624] team0: entered allmulticast mode [ 166.166288][ T6624] loop3: detected capacity change from 0 to 2048 [ 166.178745][ T6628] loop7: detected capacity change from 0 to 1024 [ 166.222362][ T6628] EXT4-fs: Ignoring removed oldalloc option [ 166.228389][ T6628] EXT4-fs: Ignoring removed bh option [ 166.807478][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.6.803'. [ 166.893160][ T6674] tipc: Enabled bearer , priority 0 [ 166.900570][ T6674] syzkaller0: entered promiscuous mode [ 166.906570][ T6674] syzkaller0: entered allmulticast mode [ 166.914912][ T6674] netlink: 44 bytes leftover after parsing attributes in process `syz.3.804'. [ 166.940707][ T6673] tipc: Resetting bearer [ 166.974558][ T6673] tipc: Disabling bearer [ 168.042461][ T6706] bond1: entered promiscuous mode [ 168.047840][ T6706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.554774][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 168.710309][ T6723] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.387156][ T6740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.826'. [ 169.462423][ T6740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25604 sclass=netlink_route_socket pid=6740 comm=syz.0.826 [ 169.890128][ T6750] tipc: Enabled bearer , priority 0 [ 169.914086][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.834'. [ 169.936543][ T6750] syzkaller0: entered promiscuous mode [ 169.951918][ T6750] syzkaller0: entered allmulticast mode [ 169.985129][ T6750] netlink: 44 bytes leftover after parsing attributes in process `syz.3.833'. [ 170.035761][ T6748] tipc: Resetting bearer [ 170.063434][ T6748] tipc: Disabling bearer [ 170.122016][ T28] audit: type=1400 audit(1771020044.336:584): avc: denied { mount } for pid=6765 comm="syz.6.839" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 170.297887][ T6777] loop3: detected capacity change from 0 to 512 [ 170.483063][ T6777] FAULT_INJECTION: forcing a failure. [ 170.483063][ T6777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.672057][ T6777] CPU: 1 UID: 0 PID: 6777 Comm: syz.3.842 Not tainted syzkaller #0 PREEMPT(full) [ 170.672103][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 170.672118][ T6777] Call Trace: [ 170.672125][ T6777] [ 170.672134][ T6777] __dump_stack+0x1d/0x30 [ 170.672166][ T6777] dump_stack_lvl+0x95/0xd0 [ 170.672194][ T6777] dump_stack+0x15/0x1b [ 170.672289][ T6777] should_fail_ex+0x263/0x280 [ 170.672313][ T6777] should_fail+0xb/0x20 [ 170.672348][ T6777] should_fail_usercopy+0x1a/0x20 [ 170.672378][ T6777] strncpy_from_user+0x27/0x250 [ 170.672415][ T6777] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 170.672624][ T6777] do_getname+0x59/0x1c0 [ 170.672666][ T6777] user_path_at+0x28/0x100 [ 170.672706][ T6777] __se_sys_mount+0x25b/0x2e0 [ 170.672740][ T6777] ? fput+0x8f/0xc0 [ 170.672812][ T6777] __x64_sys_mount+0x67/0x80 [ 170.672841][ T6777] x64_sys_call+0x2d61/0x3020 [ 170.672864][ T6777] do_syscall_64+0x12c/0x370 [ 170.672888][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.672966][ T6777] RIP: 0033:0x7fe92cfebf79 [ 170.672983][ T6777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.672999][ T6777] RSP: 002b:00007fe92ba47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.673094][ T6777] RAX: ffffffffffffffda RBX: 00007fe92d265fa0 RCX: 00007fe92cfebf79 [ 170.673110][ T6777] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 170.673125][ T6777] RBP: 00007fe92ba47090 R08: 0000000000000000 R09: 0000000000000000 [ 170.673139][ T6777] R10: 0000000002200020 R11: 0000000000000246 R12: 0000000000000001 [ 170.673153][ T6777] R13: 00007fe92d266038 R14: 00007fe92d265fa0 R15: 00007ffda809a348 [ 170.673174][ T6777] [ 171.023623][ T6787] loop0: detected capacity change from 0 to 512 [ 171.051537][ T6786] loop6: detected capacity change from 0 to 512 [ 171.187830][ T6787] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.836: bg 0: block 5: invalid block bitmap [ 171.200220][ T6787] loop0: lost filesystem error report for type 5 error -117 [ 171.200485][ T6787] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 171.207807][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 171.207822][ C1] EXT4-fs (loop0): initial error at time 1771020045: ext4_validate_block_bitmap:432 [ 171.207840][ C1] EXT4-fs (loop0): last error at time 1771020045: ext4_validate_block_bitmap:432 [ 171.241653][ T6787] loop0: lost filesystem error report for type 5 error -117 [ 171.291149][ T6793] loop7: detected capacity change from 0 to 512 [ 171.570742][ T6787] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.836: invalid indirect mapped block 3 (level 2) [ 171.583863][ T6787] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 171.584209][ T6787] EXT4-fs (loop0): 1 orphan inode deleted [ 171.599194][ T6787] EXT4-fs (loop0): 1 truncate cleaned up [ 171.610794][ T6793] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.844: bg 0: block 5: invalid block bitmap [ 171.623027][ T6793] loop7: lost filesystem error report for type 5 error -117 [ 171.623641][ T6793] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 171.639647][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 171.639670][ C1] EXT4-fs (loop7): initial error at time 1771020045: ext4_validate_block_bitmap:432 [ 171.639699][ C1] EXT4-fs (loop7): last error at time 1771020045: ext4_validate_block_bitmap:432 [ 171.664752][ T6793] loop7: lost filesystem error report for type 5 error -117 [ 171.665477][ T6793] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.844: invalid indirect mapped block 3 (level 2) [ 171.686086][ T6793] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 171.689504][ T6793] EXT4-fs (loop7): 1 orphan inode deleted [ 171.704532][ T6793] EXT4-fs (loop7): 1 truncate cleaned up [ 171.751096][ T6800] netlink: 68 bytes leftover after parsing attributes in process `syz.2.845'. [ 171.769125][ T6800] loop2: detected capacity change from 0 to 256 [ 171.784338][ T6800] vfat: Unknown parameter '00000000000000000001011' [ 171.795744][ T6785] Quota error (device loop6): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 171.821912][ T6800] loop2: detected capacity change from 0 to 512 [ 171.828350][ T6785] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 171.900137][ T6800] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.962987][ T28] audit: type=1400 audit(1771020046.186:585): avc: denied { link } for pid=6798 comm="syz.2.845" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.997204][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.015877][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.100997][ T6827] loop6: detected capacity change from 0 to 1024 [ 172.164670][ T6826] netlink: 'syz.2.855': attribute type 49 has an invalid length. [ 172.219318][ T6835] loop2: detected capacity change from 0 to 1024 [ 172.378880][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.862'. [ 172.541737][ T6859] loop0: detected capacity change from 0 to 512 [ 172.550211][ T6862] netlink: 'syz.6.868': attribute type 49 has an invalid length. [ 172.587465][ T6859] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 172.633637][ T6859] EXT4-fs (loop0): group descriptors corrupted! [ 172.749659][ T6868] loop3: detected capacity change from 0 to 512 [ 172.767726][ T6868] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.861: bg 0: block 5: invalid block bitmap [ 172.780012][ T6868] loop3: lost filesystem error report for type 5 error -117 [ 172.780839][ T6868] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 172.788205][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 172.788228][ C1] EXT4-fs (loop3): initial error at time 1771020047: ext4_validate_block_bitmap:432 [ 172.788256][ C1] EXT4-fs (loop3): last error at time 1771020047: ext4_validate_block_bitmap:432 [ 172.822419][ T6868] loop3: lost filesystem error report for type 5 error -117 [ 172.823422][ T6868] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.861: invalid indirect mapped block 3 (level 2) [ 172.843916][ T6868] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 172.846152][ T6868] EXT4-fs (loop3): 1 orphan inode deleted [ 172.861057][ T6868] EXT4-fs (loop3): 1 truncate cleaned up [ 172.867217][ T6868] EXT4-fs mount: 21 callbacks suppressed [ 172.867306][ T6868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.937097][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.967003][ T6859] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 173.076071][ T6859] System zones: 0-1, 3-12 [ 173.112584][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.259543][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 173.433836][ T6889] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.870: bg 0: block 5: invalid block bitmap [ 173.446166][ T6889] loop6: lost filesystem error report for type 5 error -117 [ 173.451822][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 173.465567][ C0] EXT4-fs (loop6): initial error at time 1771020047: ext4_validate_block_bitmap:432 [ 173.474969][ C0] EXT4-fs (loop6): last error at time 1771020047: ext4_validate_block_bitmap:432 [ 173.501447][ T6889] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 173.510218][ T6889] loop6: lost filesystem error report for type 5 error -117 [ 173.510486][ T6889] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.870: invalid indirect mapped block 3 (level 2) [ 173.530872][ T6889] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 173.534462][ T6889] EXT4-fs (loop6): 1 orphan inode deleted [ 173.549427][ T6889] EXT4-fs (loop6): 1 truncate cleaned up [ 173.555879][ T6889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.175159][ T6910] Unsupported ieee802154 address type: 0 [ 174.183219][ T28] audit: type=1400 audit(1771020048.396:586): avc: denied { bind } for pid=6909 comm="syz.2.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 174.343612][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 174.356227][ T6914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 174.393454][ T6925] netlink: 'syz.7.889': attribute type 10 has an invalid length. [ 174.415337][ T6925] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 174.477284][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.570201][ T6931] netlink: 20 bytes leftover after parsing attributes in process `syz.7.891'. [ 174.661314][ T6931] netlink: 48 bytes leftover after parsing attributes in process `syz.7.891'. [ 174.823262][ T6938] netlink: 20 bytes leftover after parsing attributes in process `syz.7.891'. [ 174.896530][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.7.891'. [ 175.320421][ T3973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.419293][ T6948] tipc: Enabled bearer , priority 0 [ 175.435796][ T6948] netlink: 44 bytes leftover after parsing attributes in process `syz.3.896'. [ 175.506314][ T6959] tipc: Resetting bearer [ 175.553946][ T28] audit: type=1400 audit(1771020049.766:587): avc: denied { write } for pid=6961 comm="syz.2.902" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 175.563029][ T6962] set_capacity_and_notify: 3 callbacks suppressed [ 175.563107][ T6962] loop7: detected capacity change from 0 to 1024 [ 175.594305][ T6947] tipc: Disabling bearer [ 175.631579][ T6962] EXT4-fs: Ignoring removed oldalloc option [ 175.671950][ T6962] EXT4-fs: Ignoring removed bh option [ 175.700515][ T6967] loop6: detected capacity change from 0 to 512 [ 175.874589][ T6967] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.897: bg 0: block 5: invalid block bitmap [ 175.886970][ T6967] loop6: lost filesystem error report for type 5 error -117 [ 175.887769][ T6967] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 175.895131][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 175.895145][ C1] EXT4-fs (loop6): initial error at time 1771020050: ext4_validate_block_bitmap:432 [ 175.895182][ C1] EXT4-fs (loop6): last error at time 1771020050: ext4_validate_block_bitmap:432 [ 175.928883][ T6967] loop6: lost filesystem error report for type 5 error -117 [ 175.929205][ T6967] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.897: invalid indirect mapped block 3 (level 2) [ 175.949638][ T6967] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 175.953945][ T6967] EXT4-fs (loop6): 1 orphan inode deleted [ 175.968878][ T6967] EXT4-fs (loop6): 1 truncate cleaned up [ 175.975464][ T6967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.995456][ T6962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.197312][ T6976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.895'. [ 176.232748][ T6976] netlink: 'syz.0.895': attribute type 16 has an invalid length. [ 176.240771][ T6976] netlink: 'syz.0.895': attribute type 17 has an invalid length. [ 176.255937][ T6976] netlink: 'syz.0.895': attribute type 27 has an invalid length. [ 176.286791][ T6983] SET target dimension over the limit! [ 176.310546][ T6983] loop3: detected capacity change from 0 to 2048 [ 176.325631][ T6984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6984 comm=syz.0.895 [ 176.340561][ T3973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.352313][ T6983] EXT4-fs: Mount option(s) incompatible with ext2 [ 176.381195][ T6985] loop2: detected capacity change from 0 to 512 [ 176.522752][ T6985] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.903: bg 0: block 5: invalid block bitmap [ 176.550558][ T6991] netlink: 20 bytes leftover after parsing attributes in process `syz.6.909'. [ 176.560745][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.570464][ T6991] netlink: 48 bytes leftover after parsing attributes in process `syz.6.909'. [ 176.604072][ T6985] loop2: lost filesystem error report for type 5 error -117 [ 176.607792][ T6985] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 176.615163][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 176.615179][ C1] EXT4-fs (loop2): initial error at time 1771020050: ext4_validate_block_bitmap:432 [ 176.615204][ C1] EXT4-fs (loop2): last error at time 1771020050: ext4_validate_block_bitmap:432 [ 176.684067][ T6991] netlink: 20 bytes leftover after parsing attributes in process `syz.6.909'. [ 176.704453][ T6985] loop2: lost filesystem error report for type 5 error -117 [ 176.769850][ T6985] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.903: invalid indirect mapped block 3 (level 2) [ 176.790558][ T6985] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 176.820984][ T6985] EXT4-fs (loop2): 1 orphan inode deleted [ 176.870590][ T6985] EXT4-fs (loop2): 1 truncate cleaned up [ 176.881863][ T6985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.909444][ T7011] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 176.945280][ T28] audit: type=1400 audit(1771020051.156:588): avc: denied { listen } for pid=7012 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.992644][ T7013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=7013 comm=syz.3.917 [ 177.001967][ T28] audit: type=1400 audit(1771020051.156:589): avc: denied { accept } for pid=7012 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.201887][ T28] audit: type=1400 audit(1771020051.186:590): avc: denied { create } for pid=7015 comm="syz.6.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 177.241868][ T28] audit: type=1400 audit(1771020051.246:591): avc: denied { open } for pid=7025 comm="syz.6.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.329286][ T28] audit: type=1400 audit(1771020051.246:592): avc: denied { kernel } for pid=7025 comm="syz.6.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.351561][ T7041] SELinux: failed to load policy [ 177.368649][ T7043] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 177.401916][ T28] audit: type=1400 audit(1771020051.246:593): avc: denied { tracepoint } for pid=7025 comm="syz.6.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.412227][ T7041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15446 sclass=netlink_route_socket pid=7041 comm=syz.6.928 [ 177.433695][ T28] audit: type=1400 audit(1771020051.266:594): avc: denied { mount } for pid=7025 comm="syz.6.921" name="/" dev="configfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 177.485617][ T28] audit: type=1400 audit(1771020051.376:595): avc: denied { write } for pid=7034 comm="syz.6.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.514205][ T28] audit: type=1400 audit(1771020051.546:596): avc: denied { load_policy } for pid=7040 comm="syz.6.928" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 177.544374][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.618631][ T7061] sd 0:0:1:0: device reset [ 177.651261][ T7063] loop2: detected capacity change from 0 to 512 [ 177.724950][ T7067] netlink: 'syz.0.938': attribute type 16 has an invalid length. [ 177.732871][ T7067] netlink: 'syz.0.938': attribute type 17 has an invalid length. [ 177.740816][ T7067] netlink: 'syz.0.938': attribute type 27 has an invalid length. [ 177.750088][ T7067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7067 comm=syz.0.938 [ 177.815480][ T7063] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 177.882144][ T7063] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.937: bg 0: block 104: invalid block bitmap [ 178.015354][ T7063] loop2: lost filesystem error report for type 5 error -117 [ 178.017175][ T7063] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 178.024677][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 178.024692][ C1] EXT4-fs (loop2): initial error at time 1771020052: ext4_validate_block_bitmap:432 [ 178.024710][ C1] EXT4-fs (loop2): last error at time 1771020052: ext4_validate_block_bitmap:432 [ 178.150759][ T7079] loop3: detected capacity change from 0 to 1024 [ 178.162960][ T7063] loop2: lost filesystem error report for type 5 error -117 [ 178.163111][ T7063] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.937: invalid indirect mapped block 1 (level 1) [ 178.196016][ T7076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.226723][ T7079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.239100][ T7063] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 178.239329][ T7063] EXT4-fs (loop2): 1 truncate cleaned up [ 178.296144][ T7063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.694352][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.749875][ T7107] loop0: detected capacity change from 0 to 1024 [ 178.768892][ T7107] EXT4-fs: Ignoring removed oldalloc option [ 178.776348][ T7109] syzkaller0: entered promiscuous mode [ 178.781905][ T7109] syzkaller0: entered allmulticast mode [ 178.819016][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.851913][ T7107] EXT4-fs: Ignoring removed bh option [ 178.882948][ T7107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.043778][ T7127] loop7: detected capacity change from 0 to 512 [ 179.070855][ T7127] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 179.092804][ T7127] EXT4-fs (loop7): group descriptors corrupted! [ 179.118181][ T7127] loop7: detected capacity change from 0 to 1024 [ 179.183255][ T7127] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 179.205261][ T7127] System zones: 0-1, 3-12 [ 179.210326][ T7127] EXT4-fs (loop7): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.505307][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 179.631264][ T7145] __nla_validate_parse: 5 callbacks suppressed [ 179.631346][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.7.965'. [ 179.662554][ T7145] netlink: 48 bytes leftover after parsing attributes in process `syz.7.965'. [ 179.703026][ T7151] syzkaller0: entered promiscuous mode [ 179.721896][ T7151] syzkaller0: entered allmulticast mode [ 179.740972][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.762052][ T7146] netlink: 20 bytes leftover after parsing attributes in process `syz.7.965'. [ 179.773672][ T7151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.967'. [ 179.781409][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.7.965'. [ 180.715720][ T7184] loop6: detected capacity change from 0 to 128 [ 180.722159][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 180.722175][ T28] audit: type=1400 audit(1771020054.926:601): avc: denied { read } for pid=7183 comm="syz.6.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 181.151288][ T7203] loop2: detected capacity change from 0 to 1024 [ 181.171490][ T7203] EXT4-fs: Ignoring removed oldalloc option [ 181.187728][ T7203] EXT4-fs: Ignoring removed bh option [ 181.235780][ T7203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.273540][ T7210] loop7: detected capacity change from 0 to 764 [ 181.293607][ T7210] iso9660: Unknown parameter './file1' [ 181.595007][ T7220] loop3: detected capacity change from 0 to 1024 [ 181.612974][ T7220] EXT4-fs: Ignoring removed oldalloc option [ 181.619442][ T7220] EXT4-fs: Ignoring removed bh option [ 181.638830][ T7220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.054728][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.371095][ T7246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.996'. [ 182.381115][ T7246] netlink: 48 bytes leftover after parsing attributes in process `syz.2.996'. [ 182.492351][ T7247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.996'. [ 182.501353][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 182.570167][ T7227] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4224: comm syz.3.985: Allocating blocks 1-17 which overlap fs metadata [ 182.612986][ T7220] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4224: comm syz.3.985: Allocating blocks 1-17 which overlap fs metadata [ 182.686356][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.848738][ T28] audit: type=1400 audit(1771020057.066:602): avc: denied { watch watch_reads } for pid=7258 comm="syz.0.1000" path="/194/file0" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.963619][ T7265] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1003'. [ 182.975721][ T7267] loop3: detected capacity change from 0 to 512 [ 182.990887][ T7265] netlink: 'syz.0.1003': attribute type 1 has an invalid length. [ 183.004515][ T7267] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.998: bg 0: block 5: invalid block bitmap [ 183.088357][ T7267] loop3: lost filesystem error report for type 5 error -117 [ 183.088520][ T7267] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 183.095943][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 183.095966][ C0] EXT4-fs (loop3): initial error at time 1771020057: ext4_validate_block_bitmap:432 [ 183.096006][ C0] EXT4-fs (loop3): last error at time 1771020057: ext4_validate_block_bitmap:432 [ 183.152904][ T7267] loop3: lost filesystem error report for type 5 error -117 [ 183.161960][ T7267] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.998: invalid indirect mapped block 3 (level 2) [ 183.243322][ T7267] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 183.245500][ T7267] EXT4-fs (loop3): 1 orphan inode deleted [ 183.274364][ T7267] EXT4-fs (loop3): 1 truncate cleaned up [ 183.282916][ T7267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.778274][ T7293] loop0: detected capacity change from 0 to 512 [ 183.785041][ T7293] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 183.884234][ T28] audit: type=1400 audit(1771020058.106:603): avc: denied { name_bind } for pid=7298 comm="syz.2.1014" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 183.980724][ T28] audit: type=1400 audit(1771020058.106:604): avc: denied { ioctl } for pid=7289 comm="syz.6.1011" path="socket:[21584]" dev="sockfs" ino=21584 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.075325][ T7303] loop7: detected capacity change from 0 to 512 [ 184.228040][ T7303] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1009: bg 0: block 5: invalid block bitmap [ 184.248915][ T7303] loop7: lost filesystem error report for type 5 error -117 [ 184.249112][ T7303] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 184.256587][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 184.256611][ C0] EXT4-fs (loop7): initial error at time 1771020058: ext4_validate_block_bitmap:432 [ 184.256639][ C0] EXT4-fs (loop7): last error at time 1771020058: ext4_validate_block_bitmap:432 [ 184.290957][ T7303] loop7: lost filesystem error report for type 5 error -117 [ 184.291179][ T7303] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1009: invalid indirect mapped block 3 (level 2) [ 184.311726][ T7303] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.314890][ T7303] EXT4-fs (loop7): 1 orphan inode deleted [ 184.330100][ T7303] EXT4-fs (loop7): 1 truncate cleaned up [ 184.336257][ T7303] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.506353][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.597421][ T7311] geneve2: entered promiscuous mode [ 185.385419][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.591207][ T7330] loop3: detected capacity change from 0 to 1024 [ 185.612479][ T7330] EXT4-fs: Ignoring removed oldalloc option [ 185.638774][ T7330] EXT4-fs: Ignoring removed bh option [ 185.674916][ T7330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.819151][ T5485] tipc: Subscription rejected, illegal request [ 185.924705][ T7349] loop7: detected capacity change from 0 to 1024 [ 185.931554][ T7349] EXT4-fs: Ignoring removed oldalloc option [ 185.943204][ T7349] EXT4-fs: Ignoring removed bh option [ 185.981274][ T7349] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.212278][ T28] audit: type=1400 audit(2000000000.510:605): avc: denied { remount } for pid=7361 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 186.442537][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.616664][ T7372] loop0: detected capacity change from 0 to 512 [ 186.644063][ T7372] ext4: Bad value for 'mb_optimize_scan' [ 186.773532][ T7383] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7383 comm=syz.6.1037 [ 186.963083][ T28] audit: type=1326 audit(2000000001.210:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.6.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x50000 [ 187.081550][ T7387] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7387 comm=syz.6.1037 [ 187.208997][ T28] audit: type=1326 audit(2000000001.230:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.6.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x50000 [ 187.234292][ T28] audit: type=1326 audit(2000000001.230:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.6.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x50000 [ 187.257476][ T28] audit: type=1326 audit(2000000001.250:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.6.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x50000 [ 187.280778][ T28] audit: type=1326 audit(2000000001.300:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.6.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x50000 [ 187.304317][ T28] audit: type=1326 audit(2000000001.300:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.6.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x50000 [ 187.327482][ T28] audit: type=1326 audit(2000000001.300:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.6.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x50000 [ 187.350735][ T28] audit: type=1326 audit(2000000001.310:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.6.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x50000 [ 187.382571][ T28] audit: type=1326 audit(2000000001.310:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.6.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4625bf79 code=0x50000 [ 187.503635][ T7392] __nla_validate_parse: 7 callbacks suppressed [ 187.503721][ T7392] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1040'. [ 187.590112][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.682011][ T7407] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1046'. [ 187.708580][ T7408] loop7: detected capacity change from 0 to 1024 [ 187.753687][ T7408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.765862][ T7411] loop0: detected capacity change from 0 to 1024 [ 187.792607][ T7418] netlink: 'syz.3.1052': attribute type 15 has an invalid length. [ 187.815045][ T7411] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 187.837024][ T7411] System zones: 0-1, 3-12 [ 187.842328][ T7411] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.854384][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.857455][ T7411] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 16: comm syz.0.1049: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 187.876082][ T7424] loop6: detected capacity change from 0 to 1024 [ 187.897836][ T7424] EXT4-fs: Ignoring removed oldalloc option [ 187.904004][ T7424] EXT4-fs: Ignoring removed bh option [ 187.930312][ T7424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.952263][ T7431] 9pnet_fd: Insufficient options for proto=fd [ 187.959061][ T7420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1053'. [ 187.969221][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 187.981515][ T7420] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1053'. [ 188.072022][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1053'. [ 188.081024][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 188.355883][ T7462] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1065'. [ 188.444514][ T7464] loop0: detected capacity change from 0 to 1024 [ 188.466868][ T7468] loop3: detected capacity change from 0 to 1024 [ 188.574771][ T7468] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 188.588494][ T7468] System zones: 0-1, 3-12 [ 188.594497][ T7468] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.611397][ T7468] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 16: comm syz.3.1067: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 188.622239][ T7464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.663283][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 188.756037][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.222125][ T7489] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1075'. [ 189.242002][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1075'. [ 189.276298][ T7489] geneve2: entered promiscuous mode [ 189.894525][ T3973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.192065][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 190.295916][ T7511] loop2: detected capacity change from 0 to 1024 [ 190.334708][ T7511] EXT4-fs: Ignoring removed oldalloc option [ 190.369603][ T7511] EXT4-fs: Ignoring removed bh option [ 190.423514][ T7511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.587765][ T7533] loop3: detected capacity change from 0 to 1024 [ 190.613247][ T7533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 190.642323][ T7533] System zones: 0-1, 3-12 [ 190.656667][ T7533] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.913604][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 191.179385][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.372840][ T7568] netlink: 'syz.2.1100': attribute type 16 has an invalid length. [ 191.380767][ T7568] netlink: 'syz.2.1100': attribute type 17 has an invalid length. [ 191.413554][ T7568] netlink: 'syz.2.1100': attribute type 27 has an invalid length. [ 191.449729][ T7568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7568 comm=syz.2.1100 [ 191.619602][ T7581] tipc: Enabled bearer , priority 0 [ 191.721030][ T7581] tipc: Resetting bearer [ 191.840685][ T7569] tipc: Disabling bearer [ 192.324943][ T7597] loop7: detected capacity change from 0 to 8192 [ 192.343498][ T7597] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.378538][ T7597] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 192.413390][ T7597] FAT-fs (loop7): Filesystem has been set read-only [ 192.430235][ T7597] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 192.449894][ T7597] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 192.470666][ T7597] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 192.489902][ T7597] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 192.509073][ T7597] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 192.533376][ T7597] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 192.560716][ T7597] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 192.579756][ T7597] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 192.606534][ T7596] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 192.835742][ T7610] __nla_validate_parse: 6 callbacks suppressed [ 192.835759][ T7610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1112'. [ 192.895246][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'. [ 193.203955][ T7627] loop2: detected capacity change from 0 to 1024 [ 193.244499][ T7627] EXT4-fs: Ignoring removed oldalloc option [ 193.260617][ T7627] EXT4-fs: Ignoring removed bh option [ 193.285248][ T7627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.629600][ T7640] loop6: detected capacity change from 0 to 512 [ 193.638833][ T7640] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1122: bg 0: block 5: invalid block bitmap [ 193.651280][ T7640] loop6: lost filesystem error report for type 5 error -117 [ 193.651787][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 193.665543][ C1] EXT4-fs (loop6): initial error at time 2000000007: ext4_validate_block_bitmap:432 [ 193.675037][ C1] EXT4-fs (loop6): last error at time 2000000007: ext4_validate_block_bitmap:432 [ 193.691884][ T7640] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 193.700645][ T7640] loop6: lost filesystem error report for type 5 error -117 [ 193.705491][ T7640] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1122: invalid indirect mapped block 3 (level 2) [ 193.726528][ T7640] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 193.735706][ T7640] EXT4-fs (loop6): 1 orphan inode deleted [ 193.750882][ T7640] EXT4-fs (loop6): 1 truncate cleaned up [ 193.757065][ T7640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.851032][ T3973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.933191][ T7654] loop6: detected capacity change from 0 to 512 [ 193.973873][ T7654] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 193.988847][ T7654] EXT4-fs (loop6): orphan cleanup on readonly fs [ 194.101688][ T7654] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.1125: corrupted inode contents [ 194.114352][ T7654] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 194.114779][ T7654] EXT4-fs (loop6): Remounting filesystem read-only [ 194.123965][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 194.123988][ C1] EXT4-fs (loop6): initial error at time 2000000008: ext4_do_update_inode:5569: inode 16 [ 194.124014][ C1] EXT4-fs (loop6): last error at time 2000000008: ext4_do_update_inode:5569: inode 16 [ 194.157092][ T7654] EXT4-fs (loop6): 1 truncate cleaned up [ 194.632205][ T3577] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.644872][ T7662] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1128'. [ 194.654226][ T7662] netlink: 'syz.3.1128': attribute type 16 has an invalid length. [ 194.663539][ T7662] netlink: 'syz.3.1128': attribute type 17 has an invalid length. [ 194.671383][ T7662] netlink: 'syz.3.1128': attribute type 27 has an invalid length. [ 194.673477][ T3577] __quota_error: 7 callbacks suppressed [ 194.673488][ T3577] Quota error (device loop6): write_blk: dquota write failed [ 194.683038][ T7662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7662 comm=syz.3.1128 [ 194.696555][ T3577] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 194.714951][ T3577] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.725867][ T3577] Quota error (device loop6): write_blk: dquota write failed [ 194.738593][ T3577] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 194.748521][ T3577] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 194.758887][ T3577] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 194.767843][ T3577] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 194.778213][ T7654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.792854][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.040780][ T7678] FAULT_INJECTION: forcing a failure. [ 195.040780][ T7678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.062876][ T3973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.076964][ T7682] loop3: detected capacity change from 0 to 1024 [ 195.083492][ T7678] CPU: 1 UID: 0 PID: 7678 Comm: syz.2.1135 Not tainted syzkaller #0 PREEMPT(full) [ 195.083516][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 195.083580][ T7678] Call Trace: [ 195.083588][ T7678] [ 195.083595][ T7678] __dump_stack+0x1d/0x30 [ 195.083628][ T7678] dump_stack_lvl+0x95/0xd0 [ 195.083715][ T7678] dump_stack+0x15/0x1b [ 195.083735][ T7678] should_fail_ex+0x263/0x280 [ 195.083759][ T7678] should_fail+0xb/0x20 [ 195.083784][ T7678] should_fail_usercopy+0x1a/0x20 [ 195.083815][ T7678] _copy_to_user+0x20/0xa0 [ 195.083923][ T7678] simple_read_from_buffer+0xb5/0x130 [ 195.084009][ T7678] proc_fail_nth_read+0x10e/0x150 [ 195.084115][ T7678] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.084197][ T7678] vfs_read+0x1ab/0x7f0 [ 195.084226][ T7678] ? __rcu_read_unlock+0x4e/0x70 [ 195.084266][ T7678] ? __fget_files+0x184/0x1c0 [ 195.084285][ T7678] ? mutex_lock+0x57/0x90 [ 195.084305][ T7678] ksys_read+0xdc/0x1a0 [ 195.084334][ T7678] __x64_sys_read+0x40/0x50 [ 195.084369][ T7678] x64_sys_call+0x2886/0x3020 [ 195.084439][ T7678] do_syscall_64+0x12c/0x370 [ 195.084468][ T7678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.084525][ T7678] RIP: 0033:0x7fdf1670c84e [ 195.084546][ T7678] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.084569][ T7678] RSP: 002b:00007fdf1519efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.084592][ T7678] RAX: ffffffffffffffda RBX: 00007fdf1519f6c0 RCX: 00007fdf1670c84e [ 195.084695][ T7678] RDX: 000000000000000f RSI: 00007fdf1519f0a0 RDI: 0000000000000004 [ 195.084710][ T7678] RBP: 00007fdf1519f090 R08: 0000000000000000 R09: 0000000000000000 [ 195.084722][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.084733][ T7678] R13: 00007fdf169c6038 R14: 00007fdf169c5fa0 R15: 00007ffd39551ac8 [ 195.084752][ T7678] [ 195.088615][ T7682] EXT4-fs: Ignoring removed oldalloc option [ 195.193621][ T7685] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1138'. [ 195.208656][ T7682] EXT4-fs: Ignoring removed bh option [ 195.296420][ T7685] netlink: 'syz.6.1138': attribute type 16 has an invalid length. [ 195.308497][ T7685] netlink: 'syz.6.1138': attribute type 17 has an invalid length. [ 195.321871][ T7685] netlink: 'syz.6.1138': attribute type 27 has an invalid length. [ 195.332229][ T7685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7685 comm=syz.6.1138 [ 195.349351][ T7687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1139'. [ 195.368440][ T7687] netlink: 'syz.2.1139': attribute type 16 has an invalid length. [ 195.377878][ T7682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.383029][ T7687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7687 comm=syz.2.1139 [ 195.469213][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1143'. [ 195.479405][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1143'. [ 195.515523][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 195.592023][ T7710] pimreg: entered allmulticast mode [ 195.604137][ T7712] loop2: detected capacity change from 0 to 1024 [ 195.807415][ T7718] netlink: 444 bytes leftover after parsing attributes in process `syz.6.1148'. [ 195.818101][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1148'. [ 195.842788][ T7718] sock: sock_set_timeout: `syz.6.1148' (pid 7718) tries to set negative timeout [ 195.852204][ T7718] sctp: [Deprecated]: syz.6.1148 (pid 7718) Use of int in maxseg socket option. [ 195.852204][ T7718] Use struct sctp_assoc_value instead [ 195.959074][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.972076][ T7725] loop6: detected capacity change from 0 to 256 [ 195.978818][ T7725] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿ' [ 196.011384][ T7726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7726 comm=syz.2.1152 [ 196.081267][ T7732] loop0: detected capacity change from 0 to 1024 [ 196.090536][ T7732] EXT4-fs: Ignoring removed oldalloc option [ 196.115067][ T7732] EXT4-fs: Ignoring removed bh option [ 196.122812][ T7736] loop6: detected capacity change from 0 to 1024 [ 196.131934][ T7732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.140069][ T7736] EXT4-fs: Ignoring removed oldalloc option [ 196.159654][ T7736] EXT4-fs: Ignoring removed bh option [ 196.181804][ T7736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.427025][ T7755] ================================================================== [ 196.435172][ T7755] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 196.443107][ T7755] [ 196.445447][ T7755] write to 0xffff88811b8786ec of 4 bytes by task 7732 on cpu 1: [ 196.453090][ T7755] xas_set_mark+0x12b/0x140 [ 196.457619][ T7755] tag_pages_for_writeback+0xe3/0x2e0 [ 196.463023][ T7755] ext4_do_writepages+0x6a8/0x27f0 [ 196.468187][ T7755] ext4_writepages+0x18f/0x320 [ 196.472983][ T7755] do_writepages+0x1c6/0x310 [ 196.477610][ T7755] file_write_and_wait_range+0x178/0x2f0 [ 196.483286][ T7755] generic_buffers_fsync_noflush+0x45/0x130 [ 196.489210][ T7755] ext4_sync_file+0x1aa/0x680 [ 196.493905][ T7755] vfs_fsync_range+0xc5/0xe0 [ 196.498535][ T7755] ext4_buffered_write_iter+0x34f/0x3c0 [ 196.504120][ T7755] ext4_file_write_iter+0x380/0xfa0 [ 196.509372][ T7755] iter_file_splice_write+0x6bc/0xa80 [ 196.514765][ T7755] direct_splice_actor+0x156/0x2a0 [ 196.519908][ T7755] splice_direct_to_actor+0x311/0x670 [ 196.525296][ T7755] do_splice_direct+0x119/0x1a0 [ 196.530195][ T7755] do_sendfile+0x382/0x650 [ 196.534636][ T7755] __x64_sys_sendfile64+0x105/0x150 [ 196.539866][ T7755] x64_sys_call+0x2dc4/0x3020 [ 196.544555][ T7755] do_syscall_64+0x12c/0x370 [ 196.549172][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.555076][ T7755] [ 196.557465][ T7755] read to 0xffff88811b8786ec of 4 bytes by task 7755 on cpu 0: [ 196.565028][ T7755] __writeback_single_inode+0x1f2/0x6e0 [ 196.570602][ T7755] writeback_single_inode+0x16d/0x3f0 [ 196.575997][ T7755] sync_inode_metadata+0x6e/0xa0 [ 196.580957][ T7755] generic_buffers_fsync_noflush+0xee/0x130 [ 196.586874][ T7755] ext4_sync_file+0x1aa/0x680 [ 196.591569][ T7755] vfs_fsync_range+0xc5/0xe0 [ 196.596163][ T7755] ext4_buffered_write_iter+0x34f/0x3c0 [ 196.601737][ T7755] ext4_file_write_iter+0x380/0xfa0 [ 196.606979][ T7755] iter_file_splice_write+0x6bc/0xa80 [ 196.612388][ T7755] direct_splice_actor+0x156/0x2a0 [ 196.617553][ T7755] splice_direct_to_actor+0x311/0x670 [ 196.622955][ T7755] do_splice_direct+0x119/0x1a0 [ 196.627835][ T7755] do_sendfile+0x382/0x650 [ 196.632261][ T7755] __x64_sys_sendfile64+0x105/0x150 [ 196.637512][ T7755] x64_sys_call+0x2dc4/0x3020 [ 196.642246][ T7755] do_syscall_64+0x12c/0x370 [ 196.646864][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.652781][ T7755] [ 196.655116][ T7755] value changed: 0x02000021 -> 0x0e000021 [ 196.660841][ T7755] [ 196.663170][ T7755] Reported by Kernel Concurrency Sanitizer on: [ 196.669327][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.0.1155 Not tainted syzkaller #0 PREEMPT(full) [ 196.678626][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 196.688697][ T7755] ================================================================== [ 196.701179][ T7762] loop3: detected capacity change from 0 to 1024 [ 196.732759][ T7762] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 196.745517][ T7762] System zones: 0-1, 3-12 [ 196.753892][ T7762] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.799166][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 196.922104][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.037660][ T3973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.