last executing test programs: 47.713261129s ago: executing program 2 (id=322): connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4a23}, 0x6e) 47.413530121s ago: executing program 2 (id=324): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x6, 0x9}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"e46583b65844e9a43021910dce1785c4", r2, r3, {0x7fffffff, 0x3}, {0x1, 0x6}, 0x6, [0xe, 0xffffffff, 0x6, 0x8000000000000001, 0x8, 0x4, 0xffffffffffffff84, 0x5, 0x100000001, 0x8, 0x3, 0xc2, 0xd, 0x1, 0x2b2a, 0xff]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000400), 0x3, 0x80140) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x20044040) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x80}}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000740)=0xe8) sendmsg$nl_xfrm(r8, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)=@flushpolicy={0x108, 0x1d, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@offload={0xc, 0x1c, {r6}}, @policy={0xac, 0x7, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0x4e20, 0x6, 0x2, 0xa0, 0x0, 0x0, r6, r9}, {0x4000000000, 0x3, 0x4, 0x8, 0xa677, 0xe, 0x2, 0x2}, {0x7, 0x2ecf, 0x980, 0x4}, 0x3, 0x6e6bc0, 0x0, 0x1, 0x3, 0x1}}, @lifetime_val={0x24, 0x9, {0xc, 0x7c0dd6e, 0x0, 0xfff}}, @mark={0xc, 0x15, {0x35075d, 0x3}}, @proto={0x5, 0x19, 0x3c}, @proto={0x5, 0x19, 0x2b}]}, 0x108}, 0x1, 0x0, 0x0, 0x2000081}, 0x80) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)=@flushpolicy={0x108, 0x1d, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@offload={0xc, 0x1c, {r6}}, @policy={0xac, 0x7, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0x4e20, 0x6, 0x2, 0xa0, 0x0, 0x0, r6, r9}, {0x4000000000, 0x3, 0x4, 0x8, 0xa677, 0xe, 0x2, 0x2}, {0x7, 0x2ecf, 0x980, 0x4}, 0x3, 0x6e6bc0, 0x0, 0x1, 0x3, 0x1}}, @lifetime_val={0x24, 0x9, {0xc, 0x7c0dd6e, 0x0, 0xfff}}, @mark={0xc, 0x15, {0x35075d, 0x3}}, @proto={0x5, 0x19, 0x3c}, @proto={0x5, 0x19, 0x2b}]}, 0x108}, 0x1, 0x0, 0x0, 0x2000081}, 0x80) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000940)=0x1, 0x5, 0x1) io_uring_register$IORING_UNREGISTER_RING_FDS(r8, 0x15, &(0x7f0000001480)=[{0x4, 0x1, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/76, 0x4c}, {&(0x7f0000000ac0)=""/193, 0xc1}, {&(0x7f0000000bc0)=""/4, 0x4}], &(0x7f0000000c40)=[0x1, 0x6, 0x9]}, {0x3, 0x1, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c80)=""/135, 0x87}, {&(0x7f0000000d40)=""/88, 0x58}, {&(0x7f0000000dc0)=""/215, 0xd7}], &(0x7f0000000f00)=[0x3, 0x608a, 0xdf, 0x9, 0x3, 0x92a6, 0x5]}, {0x7, 0x1, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000f40)=""/134, 0x86}, {&(0x7f0000001000)=""/180, 0xb4}, {&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f00000011c0)=""/79, 0x4f}, {&(0x7f0000001240)=""/170, 0xaa}, {&(0x7f0000001300)=""/9, 0x9}, {&(0x7f0000001340)=""/73, 0x49}], &(0x7f0000001440)=[0x1, 0x9, 0x2, 0x7, 0x0, 0xc, 0x10000, 0x7]}], 0x3) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r8, 0x15, &(0x7f0000001480)=[{0x4, 0x1, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/76, 0x4c}, {&(0x7f0000000ac0)=""/193, 0xc1}, {&(0x7f0000000bc0)=""/4, 0x4}], &(0x7f0000000c40)=[0x1, 0x6, 0x9]}, {0x3, 0x1, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c80)=""/135, 0x87}, {&(0x7f0000000d40)=""/88, 0x58}, {&(0x7f0000000dc0)=""/215, 0xd7}], &(0x7f0000000f00)=[0x3, 0x608a, 0xdf, 0x9, 0x3, 0x92a6, 0x5]}, {0x7, 0x1, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000f40)=""/134, 0x86}, {&(0x7f0000001000)=""/180, 0xb4}, {&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f00000011c0)=""/79, 0x4f}, {&(0x7f0000001240)=""/170, 0xaa}, {&(0x7f0000001300)=""/9, 0x9}, {&(0x7f0000001340)=""/73, 0x49}], &(0x7f0000001440)=[0x1, 0x9, 0x2, 0x7, 0x0, 0xc, 0x10000, 0x7]}], 0x3) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000001500)=0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000001540)={0x5, 0xfffffffffffffe00}) (async) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000001540)={0x5, 0xfffffffffffffe00}) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000001580), 0x4) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000015c0)={[{0x2b, 'cpuacct'}, {0x2d, 'rdma'}, {0x2b, 'cpuacct'}, {0x2d, 'net_prio'}]}, 0x22) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000001600)) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000001600)) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x50, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x26}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x11}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x36}, {0x3}, {0x36}, {0x9}, {0x16}, {0x6}, {0x2, 0x1}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x844}}]}, 0x50}}, 0x8040) (async) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x50, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x26}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x11}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x36}, {0x3}, {0x36}, {0x9}, {0x16}, {0x6}, {0x2, 0x1}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x844}}]}, 0x50}}, 0x8040) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000001780)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0xffff, @rand_addr=' \x01\x00', 0x6}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe06}, @in6={0xa, 0x4e22, 0x10, @mcast2, 0x8778}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x3fffc000, @local, 0x455}], 0xc0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000001780)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0xffff, @rand_addr=' \x01\x00', 0x6}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe06}, @in6={0xa, 0x4e22, 0x10, @mcast2, 0x8778}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x3fffc000, @local, 0x455}], 0xc0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001840)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f00000018c0)={r10, 0x1, r8, 0x7, 0x80000}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001980)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r11, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x32a295b500cf5728}, 0x8800) 46.717243832s ago: executing program 2 (id=328): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}, @struct={0x4}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r6, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5248ad423"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/170, 0x4d, 0xaa, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) socketpair(0x11, 0x6, 0x8001, &(0x7f00000000c0)) 45.407549385s ago: executing program 2 (id=334): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, 0x0, 0x0, 0x12000000, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") r2 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 45.297810609s ago: executing program 2 (id=339): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080006"], 0x60}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x4, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) 45.29744062s ago: executing program 4 (id=340): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) writev(r3, &(0x7f0000000a40), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000180000000700000000000000050000007a0ac0ff1000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xfdff) 44.973937867s ago: executing program 2 (id=343): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xfdff) 44.973525036s ago: executing program 4 (id=344): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f00000004c0)={[{@map_normal}, {@session={'session', 0x3d, 0x5c}}, {@map_acorn}, {}, {@check_relaxed}, {@map_acorn}]}, 0x1, 0x566, &(0x7f0000000540)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) (fail_nth: 2) 44.916373913s ago: executing program 32 (id=343): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xfdff) 44.577500886s ago: executing program 4 (id=348): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000340)=ANY=[@ANYBLOB='mpol=local=']) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x5, 0x1, [0x40]}, 0xa) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000380)) 43.649650635s ago: executing program 4 (id=354): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40047440, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x200, 0x3}, 0x102802, 0xffffffffffffffff, 0xe6, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x2, 0x0) mkdirat(r4, &(0x7f0000002040)='./file0\x00', 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000000)={{0x2, 0x4e22, @broadcast}, {0x306, @remote}, 0x0, {0x2, 0x4e21, @broadcast}, 'pimreg1\x00'}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYRES64=r1, @ANYRESHEX=r3, @ANYBLOB="2c04"]) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") pread64(r2, &(0x7f0000000100)=""/94, 0x5e, 0x7fffffff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c1202, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xe, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$TUNGETDEVNETNS(r7, 0x5460, 0x20000000) 42.764836254s ago: executing program 4 (id=363): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c093, 0x2, @perf_config_ext={0x6fa, 0x7}, 0x4, 0x0, 0x10000, 0x6, 0x0, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x800) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x6, 0xa20e, 0x0, 0x0, 0x5989, 0x2}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000200)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, 0x0) 42.253123727s ago: executing program 4 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x50, 0x0, 0x4, 0x8, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x45}, 0x4) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000003e00290200000000fcdbdf250a000080"], 0x18}}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delnexthop={0x28, 0x69, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{0x8}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r8, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r8, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x8}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000001d00850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.252941327s ago: executing program 33 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x50, 0x0, 0x4, 0x8, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x45}, 0x4) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000003e00290200000000fcdbdf250a000080"], 0x18}}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delnexthop={0x28, 0x69, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{0x8}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r8, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r8, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x8}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000001d00850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.689751925s ago: executing program 1 (id=646): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mq_open(&(0x7f0000000140)=']\x00', 0x40, 0x30, &(0x7f00000002c0)={0x401, 0xbe9e, 0x1003b9ac9ff, 0xd0}) 4.377306507s ago: executing program 1 (id=651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c00000000000090010000000100000020100400", @ANYRES32, @ANYBLOB="0004000000000000000000000004000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000000400"/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext={0x5}}) 4.269541902s ago: executing program 3 (id=654): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x8000, 0x91) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7f, @empty, 0xa09b}, {0xa, 0x4ea5, 0x200009, @mcast1, 0x1}, 0xffffffffffffffff, 0x400}}, 0x48) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) 3.462437798s ago: executing program 1 (id=659): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[], 0x24, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) pwrite64(r4, &(0x7f00000000c0)="a96ac27db2bb30e7d928897d80be51dc41547d87d38a481f6ce588d65c044d1fd9b375bfef2282661c43ff4e38f5737d021e72b1eab0ae0ff8086b0c88a7eec1cf8208e54b29e92fbf9827b0cffd6fde5b3d", 0x52, 0xfffffffffffffffe) sendfile(r5, r3, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 3.461842308s ago: executing program 3 (id=660): socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x7e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000100)={&(0x7f0000002000)={[{&(0x7f0000000040)="453a8f4d12e914fcc499dc49540b4d8705ae59700c6e390b8ceb6622d5870bc6a5708eb2f8a5ad51d0192d091006024bba3f78dcc38f0618adbf", 0x3a, 0x3}]}, 0x1, 0x3}, 0x1) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x12) timer_gettime(0x0, 0x0) listen(r3, 0x7d4165c9) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r10}, 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f00000000c0), 0xf00) mount$9p_fd(0x0, 0x0, 0x0, 0x218888, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e73e3e6ff0a7266646e6f"]) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0xffff, 0xfff9}, {0xffff}}}, 0x24}}, 0x0) 2.844688277s ago: executing program 3 (id=664): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) writev(r7, &(0x7f0000000a40), 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000180000000700000000000000050000007a0ac0ff1000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$qrtr(0x2a, 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xfdff) 2.650431493s ago: executing program 0 (id=666): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x2, 0x7) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) geteuid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) 2.532135807s ago: executing program 6 (id=668): socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x7e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000100)={&(0x7f0000002000)={[{&(0x7f0000000040)="453a8f4d12e914fcc499dc49540b4d8705ae59700c6e390b8ceb6622d5870bc6a5708eb2f8a5ad51d0192d091006024bba3f78dcc38f0618adbf", 0x3a, 0x3}]}, 0x1, 0x3}, 0x1) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x12) timer_gettime(0x0, 0x0) listen(r3, 0x7d4165c9) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r10}, 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f00000000c0), 0xf00) mount$9p_fd(0x0, 0x0, 0x0, 0x218888, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e73e3e6ff0a7266646e6f"]) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0xffff, 0xfff9}, {0xffff}}}, 0x24}}, 0x0) 2.521043484s ago: executing program 1 (id=669): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c00000000000090010000000100000020100400", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="01000000000000000400"/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext={0x5}}) 2.33004378s ago: executing program 5 (id=670): r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xb80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400008, 0x0, @perf_bp={0x0}, 0x1102, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x0, 0x0, 0x7}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket(0x6, 0x4, 0xffff0000) 2.23997673s ago: executing program 6 (id=671): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x8000, 0x91) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7f, @empty, 0xa09b}, {0xa, 0x4ea5, 0x200009, @mcast1, 0x1}, 0xffffffffffffffff, 0x400}}, 0x48) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) 2.141306138s ago: executing program 0 (id=672): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c093, 0x2, @perf_config_ext={0x6fa, 0x7}, 0x4, 0x0, 0x10000, 0x6, 0x0, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000200)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, 0x0) 1.97465142s ago: executing program 5 (id=673): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000000500000008000600", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x40400b0}, 0x0) 1.960939756s ago: executing program 5 (id=674): socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x7e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000100)={&(0x7f0000002000)={[{&(0x7f0000000040)="453a8f4d12e914fcc499dc49540b4d8705ae59700c6e390b8ceb6622d5870bc6a5708eb2f8a5ad51d0192d091006024bba3f78dcc38f0618adbf", 0x3a, 0x3}]}, 0x1, 0x3}, 0x1) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x12) timer_gettime(0x0, 0x0) listen(r3, 0x7d4165c9) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r10}, 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f00000000c0), 0xf00) mount$9p_fd(0x0, 0x0, 0x0, 0x218888, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e73e3e6ff0a7266646e6f"]) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0xffff, 0xfff9}, {0xffff}}}, 0x24}}, 0x0) 1.922543878s ago: executing program 3 (id=675): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000880)=ANY=[], 0x2, 0x5d5, &(0x7f0000000800)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x6, {{0x19, 0x4, 0x0, 0x7, 0x64, 0x65, 0x0, 0xfe, 0x29, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0x81, [@broadcast]}, @timestamp_addr={0x44, 0x1c, 0xdd, 0x1, 0x5, [{@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x8}, {@loopback, 0xf9d1}]}, @generic={0x88, 0xe, "2981f86f1b559c39150cf4bc"}, @rr={0x7, 0x17, 0xb, [@private=0xa010100, @multicast2, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x25}]}, @ssrr={0x89, 0x7, 0x9b, [@loopback]}]}}}}}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) flock(0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}], [@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x1, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0xb, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0xd, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x0, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xb, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0xe, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x4, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x8, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0xa, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x5, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0xffff, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x3, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000c40)={0x0, 0x7}) openat$full(0xffffffffffffff9c, 0x0, 0x400080, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x700, 0x700, 0xfffffff6, 0x3, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x64, 0x0, 0xf8, 0x4, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x1c, 0x16, 0x0, 0x7, [0xff, 0x8, 0x8, 0x8, 0x1000, 0x101]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000001740)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fddbdf251500000034000180140002006970366772653000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="14000200626f6e645f736c6176655f30000000005c00018008000100", @ANYRES32=r7, @ANYBLOB="00000000000000000000000045af4d93206e6e26163b1c023d85372d6cc8d549d33431af2e371a52189a84c6537390f3f2ea799f824dd1e17c21e52e91a1aa19aaa0cdf2b493e6e0e594bd598c00510bf7a82dd9ad5f8792b99a", @ANYRES32=r8, @ANYBLOB="0800030001000000140002006d616373656330000000000000000000080003000100000008000100", @ANYRES32=r9, @ANYBLOB="14000200726f73653000000000000000000000002c000180140002007663616e3000000000000000000000001400020073797a6b616c6c657230000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x4054) 1.853732292s ago: executing program 6 (id=676): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000700000000000091100200000000009500"/32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x3) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r5, r6, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r7, 0x8, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffe, 0x4, 0x9}}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xb4}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r8) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="27120000", @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf250100000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x888c}, 0x20000004) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000040)={0x406, 0x9, 0x3, 0x0, 0x8, 0x1, 0x0, &(0x7f0000000000)=[{0x15, 0x101, 0x3b85}]}) 1.433165926s ago: executing program 1 (id=677): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) writev(r7, &(0x7f0000000a40), 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000180000000700000000000000050000007a0ac0ff1000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$qrtr(0x2a, 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xfdff) 1.329270683s ago: executing program 5 (id=678): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 1.312367389s ago: executing program 6 (id=679): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_subtree(r1, 0x0, 0xfe1b) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000140)) syz_io_uring_setup(0x231, &(0x7f0000002200)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc880) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) r8 = syz_open_dev$usbmon(&(0x7f0000000280), 0x7, 0x200) ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000040)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000440)=@urb_type_iso={0x0, {0x4, 0x1}, 0x3, 0x0, &(0x7f0000000a00)="460a7b87774771702663e07eed4404f0025fb7d61c80c84020c532a7ec3d533c00df1a130563881bd94695d10769e29e0f3003235620b02a5ed236f23ff850267338c6a9f8de9506cda3cce9bc6e7b7ca7411f24b210b5860345fe14d65a18dc8c4ec3070af4319ce2f1457e75c3926ae18c4b3db270cc7dfab9f32e4d5ca81207c1ddc3bdf11e73fa50f94e759df4138ec60a70ba5dabc09ea92796e4c072140cfe4ce3765c4d4fa5df9b5e17a83587225e27fed00eb40f8eef2bc7f36252680322e04fcb6f2fcc660ed0523487626f0f6935bbedb678cdd91c1bcb5e9596", 0xdf, 0x6, 0x5, 0x59, 0x0, 0x8000, &(0x7f0000000380)="cbe7c5136c80d37eda853b9596ac2b7679d4a9ed59f2945537ba892fd3464669f0000132dd73e4810e2f9bf1505c6fe42424ed1e2e1b94a2acfc673f873d799b3887cdfcb3fb9d84d1f200b1c0b090890e01e57e4a03edd891382041b77252ad45b441de804897a49b2daa1e51015b6bd4e52d0f3c43249b450313425ffe4899fc561692e5b2433cea9d684b58225a0ba1a8ee7fd548508d82d3a527ac161776e5ce7dcce9dee36cb646ad7e", [{0x9, 0x7, 0x4}, {0x1, 0x3, 0xfffffffb}, {0x3, 0x2, 0x800}, {0x6b000000, 0x8, 0x5}, {0x4, 0xf4, 0x7ff}, {0x2, 0x6, 0x3}, {0x3, 0x6, 0xff}, {0x0, 0x6, 0x2}, {0xfffffffb, 0x768, 0xc0000000}, {0xb, 0xd544, 0x8}, {0x4, 0x8001, 0x63}, {0x9, 0x3ff, 0x8}, {0x800, 0x0, 0x401}, {0x8, 0x5, 0x2}, {0xe0, 0x7fff, 0xc181}, {0xf6, 0x0, 0x1}, {0x9, 0x800, 0x1}, {0x7fff, 0xe0, 0x9}, {0x0, 0xf, 0x8}, {0x4, 0x3, 0x33}, {0xb, 0x7, 0x2}, {0x2, 0x3, 0x5e8}, {0x1a0de000, 0x5, 0xab86}, {0x3, 0x4, 0x658a}, {0xfffff801, 0xffff, 0x9}, {0x3, 0x1ce, 0xa}, {0xc, 0x351a, 0x4}, {0x4, 0x39d, 0x3}, {0x644, 0x5, 0x86a}, {0x7, 0xdf, 0x4}, {0x9, 0x5, 0x7f}, {0x93, 0x0, 0xffffffff}, {0x8, 0x8001, 0x7ff}, {0x769, 0x4}, {0x5, 0x7, 0x6}, {0x6, 0xfff, 0x10000}, {0x40, 0x6, 0x4}, {0xff, 0x51a236dd, 0x8}, {0x9, 0x76, 0x8}, {0x9, 0x18000, 0x1}, {0x0, 0x93fe, 0xf05}, {0x9, 0xfffffffa, 0xee8}, {0x7, 0x0, 0xea}, {0x10, 0xffff, 0x7}, {0x0, 0xffff, 0x7}, {0x9, 0x2, 0x4}, {0x2, 0x101, 0x5}, {0x2, 0x1, 0x9}, {0x1, 0x5, 0x1}, {0x4, 0x40, 0x7}, {0xd, 0x80000000, 0x7}, {0x81, 0xb, 0x2}, {0x4a, 0x5, 0x6}, {0x2d7ef72a, 0x4, 0x6}, {0x1, 0x80, 0x5}, {0x0, 0x7, 0x1}, {0xf9, 0x6, 0x7}, {0x4, 0x7b3, 0x400}, {0x3, 0x3, 0x1e16}, {0x6, 0x8d, 0x84}, {0x3, 0x4, 0x2}, {0x8, 0xfffffffa, 0x9}, {0xffffffff, 0x0, 0x60000000}, {0x0, 0x3dcf, 0xffffffe2}, {0x6, 0x59, 0x6}, {0x4, 0xf7e9, 0x6}, {0x8, 0x7, 0x7fff}, {0x0, 0x1, 0x5}, {0xbc4, 0x2, 0x4}, {0x2, 0x9, 0xfffffff8}, {0x8, 0x1, 0x9}, {0x9, 0x1, 0xffe}, {0x6, 0x9, 0x2}, {0x2, 0x200, 0x8}, {0x8, 0x4, 0xa1f6}, {0x3, 0xfffffff9, 0xa3c}, {0x8, 0x0, 0x7}, {0xa682, 0x3ff, 0x401}, {0x8, 0x1b1b8542, 0xc00000}, {0x3, 0x5, 0x8}, {0x2, 0x10000000, 0x6}, {0xa, 0x1ff, 0x9}, {0x8, 0x9, 0x9}, {0x4, 0x732, 0x6}, {0xf5d, 0x566b, 0x80000001}, {0x6, 0x6, 0x7fff}, {0x6, 0x5add, 0x4}, {0x2b, 0x2, 0xb9c9}, {0x400, 0xffffffff, 0x9}]}) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044841}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x80000000, 0x10100, 0x3, 0xffffffbd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r11, 0x80, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x4e24, @private=0xa010102}, 0x1, 0x1, 0x2, 0x4}}, 0x0, 0x0, 0x1}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r12, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x303}, "2c09000000e45246", "3df53dd0912222be8a6eae6b3b0b6560", "0e884b1d", "44b7e0945c434f73"}, 0x28) 1.072718194s ago: executing program 5 (id=680): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xfdff) 997.303117ms ago: executing program 0 (id=681): socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x7e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000100)={&(0x7f0000002000)={[{&(0x7f0000000040)="453a8f4d12e914fcc499dc49540b4d8705ae59700c6e390b8ceb6622d5870bc6a5708eb2f8a5ad51d0192d091006024bba3f78dcc38f0618adbf", 0x3a, 0x3}]}, 0x1, 0x3}, 0x1) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x12) timer_gettime(0x0, 0x0) listen(r3, 0x7d4165c9) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r10}, 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f00000000c0), 0xf00) mount$9p_fd(0x0, 0x0, 0x0, 0x218888, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e73e3e6ff0a7266646e6f"]) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0xffff, 0xfff9}, {0xffff}}}, 0x24}}, 0x0) 736.393308ms ago: executing program 0 (id=682): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nocompress,session=0x0000000000000033,block=0x0\x00\x000000000000200,nocompress,dmode=0x000000000000000b,\x00'], 0xff, 0x569, &(0x7f0000000940)="$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") (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x8031, r2, 0x21620000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x2, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x9, 0x6}, 0x59, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e23, @private=0xa010100}}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000016c0)=ANY=[], 0x23, 0x35a, &(0x7f0000001980)="$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") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000001100)={0x14, &(0x7f0000001040)={0x40, 0x31, 0x77, {0x77, 0x0, "93a9bade5d629aff5d27c57ecc4c9f8fd6842ff709eacfc713583a03306d0480db70a21216503a1e480f8ea3dec1adee6e8e83016542717c0f960e34cf1659e623d09c728ab11bbe20e20a78f1f68a525f3db34818d726e86b2a31a9e81452f732078c84702966c3591d93d7c4d458bb14d7ccf3a9"}}, &(0x7f0000000600)={0x0, 0x3, 0x44, @string={0x44, 0x3, "a5ac6e6d75d8d5a8eb867d4b3d60e3b510877b4bcd82d0608c65b1fddef6073b3a524a4b287da5ec21cab2a1047f9cbbaf001eebe9f28adde71fecd00e5ce52fa339"}}}, &(0x7f0000001640)={0x44, &(0x7f0000001440)={0x0, 0x0, 0x9f, "56893f9a4a4d7972ab9e700c16f14930752f9ccca67e6ff8f822e677654692e6aa5d146582407528939f1fe02bdeb855637b4981a0f04914dfbc0fa44d98fe6780d45e0408e2e3fb6eed3ab11ace066fd198ec3c248f09f0f64c2ef4d8c0076c4bad041aa124e9d5d743fb963ac0c70a49f9125e070ac710db01ac62dc92e7f1f12f377c6c4413d4a7218754cc054f1f817fe2eb1c8bc6af9f2f0103f11361"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001500)={0x20, 0x81, 0x1, 'g'}, &(0x7f0000001540)={0x20, 0x82, 0x1, "95"}, &(0x7f0000001580)={0x20, 0x83, 0x1, "15"}, &(0x7f00000015c0)={0x20, 0x84, 0x2, "ddb0"}, &(0x7f0000001600)={0x20, 0x85, 0x3, "141b52"}}) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0xfffff801, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r7 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x7}, 0x0, 0x4005, 0xa600000, 0x3, 0x80000000002, 0x7, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a01040000000000000000050000040900010073797a300000000008000540000000020900020073797a310000000008000a4000000002140011800c000100636f756e74657200040002803c0000000c0a010100000000000000000a8cc6088548b9f4630000030900020073797a320000000014000380100000800c00018006000100d1030000140000001100010000000000000000000200000a2206"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) read(r7, &(0x7f0000000440)=""/138, 0x8a) 645.120857ms ago: executing program 0 (id=683): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000200)="75a1d703ff", 0x5, 0xfffffffffffffffe) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000200)={0xa0, 0x8000, 0x83, {0x7, 0x800}, 0x10000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001400)={'netpci0\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001340), 0x80800, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000180)="c75d5290fac6af2e1f27c1fc57e5db68", 0x10}, {&(0x7f0000000280)="cb4e1e730286705a877b494fbaffbc3dfe96b4336a655cf4f7297fd9f63a53", 0x1f}, {&(0x7f0000001600)="4f79123ca4f226f9e7a8d18e7e1f4d50d86d333ea6caca16cda08195b7540573008d6e1d36ff35a9663f307ed561e1d0e40443659d7be8f2ebe23b5785e0875e8c61657a458c2908dc773d748c4eab4f1e7f6f6abbabf77d7db53fbce9bb82a004687d7c42f25d2154ef7ed18082dfcc33d92d68eea86d5a27f1a180fe387a3edf96dd19a4da70900e811c6a54af33214dc885769790af9fff59276218a1f151d5efe369b64ecbf47257938fc7f082b2e38819c9cbbdcebf58d520729d9f17cea046e3e670a1923fcb426010f4acccc3bcb77459fe1a481b2fda51b56c3ba8ae38031c9fc6588045ba481e40e8c5914f583528a9d63552887a07594277a8733a98382393b0811a3ad9beece9be62aa8b3255da8dca77441ce70e000000000000000000000000000000003fee71bbf05abf4a04a5b0a8e61ef28d7107abfdc913b89aa2982faa66ca4e5169644cfe94c1b9b37d783acfeff54cc4673b7090", 0x15e}], 0x4, &(0x7f0000001480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @private=0xa010102}}}], 0x58}}], 0x1, 0x20000804) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x404c040) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x60, &(0x7f0000000140)=0x0) io_submit(r7, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x28, r8, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x74}}}}}, 0x28}}, 0x20000000) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r10) 617.877701ms ago: executing program 3 (id=684): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000000500000008000600", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x40400b0}, 0x0) 601.424637ms ago: executing program 5 (id=685): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) writev(r7, &(0x7f0000000a40), 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000180000000700000000000000050000007a0ac0ff1000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$qrtr(0x2a, 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xfdff) 531.025981ms ago: executing program 3 (id=686): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[], 0x24, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) pwrite64(r4, &(0x7f00000000c0)="a96ac27db2bb30e7d928897d80be51dc41547d87d38a481f6ce588d65c044d1fd9b375bfef2282661c43ff4e38f5737d021e72b1eab0ae0ff8086b0c88a7eec1cf8208e54b29e92fbf9827b0cffd6fde5b3d", 0x52, 0xfffffffffffffffe) sendfile(r5, r3, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 349.19793ms ago: executing program 0 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c00000000000090010000000100000020100400", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="01000000000000000400"/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext={0x5}}) 321.402904ms ago: executing program 6 (id=688): socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x7e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000100)={&(0x7f0000002000)={[{&(0x7f0000000040)="453a8f4d12e914fcc499dc49540b4d8705ae59700c6e390b8ceb6622d5870bc6a5708eb2f8a5ad51d0192d091006024bba3f78dcc38f0618adbf", 0x3a, 0x3}]}, 0x1, 0x3}, 0x1) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x12) timer_gettime(0x0, 0x0) listen(r3, 0x7d4165c9) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r10}, 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f00000000c0), 0xf00) mount$9p_fd(0x0, 0x0, 0x0, 0x218888, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e73e3e6ff0a7266646e6f"]) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0xffff, 0xfff9}, {0xffff}}}, 0x24}}, 0x0) 111.450205ms ago: executing program 1 (id=689): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r1 = socket$kcm(0x2, 0x3, 0x106) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a3000000000fdffffff73797a3200000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto$inet(r7, 0x0, 0x0, 0x24008085, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00', 0x4}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000280)=0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x4c0, 0xff}) 0s ago: executing program 6 (id=690): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 0][ T4149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.918819][ T4145] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.948377][ T4143] EXT4-fs (loop4): 1 truncate cleaned up [ 69.954011][ T4149] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.964832][ T4145] EXT4-fs (loop0): 1 truncate cleaned up [ 69.981109][ T4145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.991930][ T4143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.048138][ T4158] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 70.064127][ T4158] SELinux: failed to load policy [ 70.108846][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.128240][ T4154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 70.139969][ T4163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.183137][ T4163] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.239669][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.268670][ T4163] SELinux: failed to load policy [ 70.328643][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.398345][ T4167] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.498694][ T4183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 70.512476][ T4178] netlink: 'syz.3.161': attribute type 10 has an invalid length. [ 70.581109][ T4182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.697388][ T4167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.719056][ T4182] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.750062][ T4167] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.854358][ T4190] SELinux: policydb magic number 0x2e does not match expected magic number 0xf97cff8c [ 70.935458][ T4190] SELinux: failed to load policy [ 70.980265][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.990630][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.060571][ T4196] set_capacity_and_notify: 8 callbacks suppressed [ 71.060588][ T4196] loop4: detected capacity change from 0 to 4096 [ 71.086569][ T4196] EXT4-fs: Ignoring removed bh option [ 71.109887][ T4192] loop0: detected capacity change from 0 to 512 [ 71.119515][ T4196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.176210][ T4198] loop1: detected capacity change from 0 to 512 [ 71.185497][ T4198] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.195955][ T4192] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.214371][ T4198] EXT4-fs (loop1): 1 truncate cleaned up [ 71.227407][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.243546][ T4198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.262833][ T4192] EXT4-fs (loop0): 1 truncate cleaned up [ 71.296040][ T4192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.444818][ T4214] netlink: 'syz.2.167': attribute type 10 has an invalid length. [ 71.599966][ T4206] loop3: detected capacity change from 0 to 512 [ 71.769491][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.841276][ T4206] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.905214][ T4206] EXT4-fs (loop3): 1 truncate cleaned up [ 71.911026][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.924625][ T4206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.946360][ T4217] loop1: detected capacity change from 0 to 512 [ 71.946369][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.971856][ T4217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.009653][ T4220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 72.018679][ T4217] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.056104][ T4220] vlan2: entered promiscuous mode [ 72.061173][ T4220] bridge0: entered promiscuous mode [ 72.082405][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.092941][ T4222] ipvlan0: entered promiscuous mode [ 72.098308][ T4222] ipvlan0: entered allmulticast mode [ 72.101411][ T4217] SELinux: failed to load policy [ 72.104486][ T4222] veth0_vlan: entered allmulticast mode [ 72.127160][ T4222] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 72.150131][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.212454][ T4229] netlink: 60 bytes leftover after parsing attributes in process `syz.1.172'. [ 72.244521][ T4227] loop0: detected capacity change from 0 to 4096 [ 72.279739][ T4227] EXT4-fs: Ignoring removed bh option [ 72.319253][ T4227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.371343][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 72.412552][ T4231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 72.483763][ T4254] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 72.768520][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.010581][ T4234] loop2: detected capacity change from 0 to 1024 [ 73.042758][ T4253] loop3: detected capacity change from 0 to 1024 [ 73.060210][ T4253] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.094152][ T4234] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.130037][ T4259] loop4: detected capacity change from 0 to 512 [ 73.172481][ T4253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.190547][ T4253] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.222282][ T4259] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.274018][ T4259] EXT4-fs (loop4): 1 truncate cleaned up [ 73.274577][ T4234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.304535][ T4259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.309817][ T4234] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.385426][ T4263] loop0: detected capacity change from 0 to 1024 [ 73.414210][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.433671][ T4263] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.527798][ T4263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.555041][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.567938][ T4263] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.571126][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.769509][ T4288] netlink: 60 bytes leftover after parsing attributes in process `syz.3.186'. [ 73.841262][ T4273] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.922567][ T4273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.966703][ T4273] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.000500][ T4287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 74.092745][ T4303] tmpfs: Bad value for 'mpol' [ 74.103319][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 74.164015][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.520367][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 74.911431][ T4313] tmpfs: Bad value for 'mpol' [ 75.165691][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.260234][ T4318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.276561][ T4318] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.327943][ T4318] SELinux: failed to load policy [ 75.366151][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.456485][ T4327] EXT4-fs: Ignoring removed bh option [ 75.517666][ T4327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.629787][ T4329] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.694934][ T4329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.731656][ T4322] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.742170][ T4329] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.800238][ T4323] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.860753][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.986275][ T4322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.014996][ T4354] __nla_validate_parse: 1 callbacks suppressed [ 76.015018][ T4354] netlink: 60 bytes leftover after parsing attributes in process `syz.1.199'. [ 76.024883][ T4323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.042228][ T4322] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.048374][ T4323] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.110815][ T4355] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 76.166595][ T4355] SELinux: failed to load policy [ 76.237741][ T4362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 76.275356][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.291921][ T4357] set_capacity_and_notify: 6 callbacks suppressed [ 76.291942][ T4357] loop1: detected capacity change from 0 to 512 [ 76.325424][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.351348][ T4357] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.394634][ T4367] loop0: detected capacity change from 0 to 512 [ 76.439230][ T4357] EXT4-fs (loop1): 1 truncate cleaned up [ 76.449838][ T4357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.514649][ T4367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.535584][ T4367] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.554319][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.588347][ T4373] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 76.658458][ T4376] tmpfs: Bad value for 'mpol' [ 76.692722][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 77.015894][ T4377] SELinux: failed to load policy [ 77.491647][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.506303][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.529895][ T4378] loop4: detected capacity change from 0 to 512 [ 77.602038][ T4378] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.639200][ T4378] EXT4-fs (loop4): 1 truncate cleaned up [ 77.657023][ T4378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.296033][ T4398] tmpfs: Bad value for 'mpol' [ 78.326107][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 78.947565][ T4401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.212'. [ 79.088722][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.176367][ T4410] loop0: detected capacity change from 0 to 4096 [ 79.208077][ T4410] EXT4-fs: Ignoring removed bh option [ 79.259093][ T4412] loop4: detected capacity change from 0 to 512 [ 79.291802][ T4410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.351064][ T4415] loop1: detected capacity change from 0 to 512 [ 79.405439][ T4404] loop3: detected capacity change from 0 to 512 [ 79.415019][ T4412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.432485][ T4415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.454104][ T4405] loop2: detected capacity change from 0 to 1024 [ 79.461912][ T4404] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.468471][ T4405] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.494569][ T4415] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.529890][ T4404] EXT4-fs (loop3): 1 truncate cleaned up [ 79.532383][ T4412] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.605406][ T4404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.639692][ T4422] SELinux: policydb magic number 0x8 does not match expected magic number 0xf97cff8c [ 79.654732][ T4422] SELinux: failed to load policy [ 79.707943][ T4405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.735708][ T4405] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.754543][ T4412] SELinux: policydb magic number 0x8 does not match expected magic number 0xf97cff8c [ 79.769185][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.792779][ T4412] SELinux: failed to load policy [ 79.844064][ T4426] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 79.886924][ T4426] SELinux: failed to load policy [ 79.889443][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.978651][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.114080][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.189778][ T4435] loop0: detected capacity change from 0 to 512 [ 80.274987][ T4437] tmpfs: Bad value for 'mpol' [ 80.291670][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 80.461317][ T4435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.641042][ T4435] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.801285][ T4443] loop2: detected capacity change from 0 to 512 [ 80.866913][ T4431] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.908172][ T4435] SELinux: failed to load policy [ 80.922341][ T4443] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.963980][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.979650][ T4443] EXT4-fs (loop2): 1 truncate cleaned up [ 80.987487][ T4443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.037929][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.234081][ T4455] EXT4-fs: Ignoring removed bh option [ 81.234615][ T4431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.273512][ T4431] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.341799][ T4450] set_capacity_and_notify: 2 callbacks suppressed [ 81.341852][ T4450] loop0: detected capacity change from 0 to 1024 [ 81.370134][ T4450] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.653070][ T4450] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.793470][ T4470] netlink: 'syz.2.228': attribute type 10 has an invalid length. [ 82.085383][ T4480] loop3: detected capacity change from 0 to 512 [ 82.114942][ T4480] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.131404][ T4485] loop1: detected capacity change from 0 to 512 [ 82.197077][ T4485] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.210402][ T4480] EXT4-fs (loop3): 1 truncate cleaned up [ 82.362476][ T4485] SELinux: policydb magic number 0x2e does not match expected magic number 0xf97cff8c [ 82.384997][ T4485] SELinux: failed to load policy [ 82.536675][ T4490] loop0: detected capacity change from 0 to 4096 [ 82.543689][ T4490] EXT4-fs: Ignoring removed bh option [ 82.700518][ T4497] loop4: detected capacity change from 0 to 4096 [ 82.770192][ T4497] EXT4-fs: Ignoring removed bh option [ 82.843933][ T4494] loop3: detected capacity change from 0 to 1024 [ 82.959392][ T4494] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.085522][ T4493] loop1: detected capacity change from 0 to 512 [ 83.098512][ T4516] Driver unsupported XDP return value 0 on prog (id 134) dev N/A, expect packet loss! [ 83.158092][ T4493] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.191955][ T4507] loop0: detected capacity change from 0 to 512 [ 83.227028][ T4507] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.236374][ T4494] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.272010][ T28] audit: type=1400 audit(1772467520.182:224): avc: denied { name_bind } for pid=4522 comm="syz.4.242" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 83.321216][ T4523] netlink: 'syz.4.242': attribute type 4 has an invalid length. [ 83.347377][ T4517] loop2: detected capacity change from 0 to 1024 [ 83.353595][ T4493] EXT4-fs (loop1): 1 truncate cleaned up [ 83.373011][ T4526] netlink: 'syz.4.242': attribute type 4 has an invalid length. [ 83.379963][ T4507] EXT4-fs (loop0): 1 truncate cleaned up [ 83.390962][ T28] audit: type=1400 audit(1772467520.222:225): avc: denied { node_bind } for pid=4522 comm="syz.4.242" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 83.421869][ T28] audit: type=1400 audit(1772467520.222:226): avc: denied { mount } for pid=4522 comm="syz.4.242" name="/" dev="configfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 83.475478][ T4517] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.529667][ T4528] FAULT_INJECTION: forcing a failure. [ 83.529667][ T4528] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.550414][ T4528] CPU: 1 UID: 0 PID: 4528 Comm: syz.4.243 Not tainted syzkaller #0 PREEMPT(full) [ 83.550497][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.550521][ T4528] Call Trace: [ 83.550529][ T4528] [ 83.550538][ T4528] __dump_stack+0x1d/0x30 [ 83.550570][ T4528] dump_stack_lvl+0x95/0xd0 [ 83.550680][ T4528] dump_stack+0x15/0x1b [ 83.550711][ T4528] should_fail_ex+0x263/0x280 [ 83.550743][ T4528] should_fail+0xb/0x20 [ 83.550765][ T4528] should_fail_usercopy+0x1a/0x20 [ 83.550799][ T4528] strncpy_from_user+0x27/0x250 [ 83.550947][ T4528] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 83.550981][ T4528] delayed_getname+0x5b/0x150 [ 83.551019][ T4528] io_openat_prep+0x12e/0x2a0 [ 83.551124][ T4528] io_submit_sqes+0x75a/0x1270 [ 83.551189][ T4528] __se_sys_io_uring_enter+0x1c9/0xf50 [ 83.551351][ T4528] ? __fget_files+0x184/0x1c0 [ 83.551384][ T4528] ? mutex_unlock+0x4e/0x90 [ 83.551462][ T4528] ? fput+0x8f/0xc0 [ 83.551500][ T4528] __x64_sys_io_uring_enter+0x78/0x90 [ 83.551545][ T4528] x64_sys_call+0x1e16/0x3020 [ 83.551594][ T4528] do_syscall_64+0x12c/0x370 [ 83.551624][ T4528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.551666][ T4528] RIP: 0033:0x7ff460a5c799 [ 83.551695][ T4528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.551720][ T4528] RSP: 002b:00007ff45f4b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 83.551835][ T4528] RAX: ffffffffffffffda RBX: 00007ff460cd5fa0 RCX: 00007ff460a5c799 [ 83.551939][ T4528] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 83.551953][ T4528] RBP: 00007ff45f4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.551971][ T4528] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 83.551987][ T4528] R13: 00007ff460cd6038 R14: 00007ff460cd5fa0 R15: 00007fffa0e2af58 [ 83.552061][ T4528] [ 83.836250][ T4517] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.983083][ T4534] loop4: detected capacity change from 0 to 512 [ 84.007419][ T4534] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.081309][ T4537] SELinux: policydb magic number 0x2e does not match expected magic number 0xf97cff8c [ 84.095045][ T4537] SELinux: failed to load policy [ 84.246238][ T28] audit: type=1400 audit(1772467521.162:227): avc: denied { connect } for pid=4538 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.285262][ T28] audit: type=1400 audit(1772467521.162:228): avc: denied { write } for pid=4538 comm="syz.1.246" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.349897][ T4543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 84.371978][ T4553] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.744779][ T4562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.959496][ T4562] EXT4-fs (loop2): 1 truncate cleaned up [ 85.278271][ T4553] SELinux: failed to load policy [ 85.295391][ T28] audit: type=1400 audit(1772467522.202:229): avc: denied { bind } for pid=4570 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.321362][ T28] audit: type=1400 audit(1772467522.202:230): avc: denied { name_bind } for pid=4570 comm="syz.4.254" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 85.345302][ T28] audit: type=1400 audit(1772467522.232:231): avc: denied { node_bind } for pid=4570 comm="syz.4.254" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 85.412640][ T28] audit: type=1400 audit(1772467522.252:232): avc: denied { read } for pid=4570 comm="syz.4.254" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.515640][ T4576] netlink: 88 bytes leftover after parsing attributes in process `syz.1.255'. [ 85.951242][ T4587] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.010403][ T4578] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.068666][ T4578] EXT4-fs (loop0): 1 truncate cleaned up [ 86.076042][ T4595] xt_hashlimit: size too large, truncated to 1048576 [ 86.118177][ T4592] 9p: Bad value for 'rfdno' [ 86.138690][ T4587] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.720262][ T4611] set_capacity_and_notify: 4 callbacks suppressed [ 86.720284][ T4611] loop2: detected capacity change from 0 to 1024 [ 86.777531][ T4612] loop1: detected capacity change from 0 to 256 [ 86.882924][ T4615] loop3: detected capacity change from 0 to 4096 [ 86.908416][ T4615] EXT4-fs: Ignoring removed bh option [ 86.911660][ T4618] xt_CONNSECMARK: invalid mode: 0 [ 86.967800][ T28] audit: type=1400 audit(1772467523.872:233): avc: denied { append } for pid=4605 comm="syz.2.266" path="/51/file1/blkio.bfq.group_wait_time" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.016534][ T4621] netlink: 88 bytes leftover after parsing attributes in process `syz.0.269'. [ 87.068134][ T4624] loop4: detected capacity change from 0 to 1024 [ 87.090526][ T4624] EXT4-fs (loop4): unsupported descriptor size 1344 [ 87.253348][ T4638] loop3: detected capacity change from 0 to 512 [ 87.256337][ T4638] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.377298][ T4646] FAULT_INJECTION: forcing a failure. [ 87.377298][ T4646] name failslab, interval 1, probability 0, space 0, times 1 [ 87.406643][ T4646] CPU: 1 UID: 0 PID: 4646 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(full) [ 87.406681][ T4646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.406698][ T4646] Call Trace: [ 87.406708][ T4646] [ 87.406718][ T4646] __dump_stack+0x1d/0x30 [ 87.406824][ T4646] dump_stack_lvl+0x95/0xd0 [ 87.406855][ T4646] dump_stack+0x15/0x1b [ 87.406884][ T4646] should_fail_ex+0x263/0x280 [ 87.406921][ T4646] should_failslab+0x8c/0xb0 [ 87.407016][ T4646] kmem_cache_alloc_noprof+0x66/0x400 [ 87.407078][ T4646] ? security_inode_alloc+0x37/0x100 [ 87.407117][ T4646] security_inode_alloc+0x37/0x100 [ 87.407154][ T4646] inode_init_always_gfp+0x4b7/0x500 [ 87.407266][ T4646] ? __pfx_proc_alloc_inode+0x10/0x10 [ 87.407317][ T4646] alloc_inode+0x58/0x170 [ 87.407346][ T4646] new_inode+0x1d/0xe0 [ 87.407380][ T4646] proc_pid_make_inode+0x1f/0xd0 [ 87.407544][ T4646] proc_ns_dir_lookup+0x486/0x560 [ 87.407660][ T4646] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 87.407737][ T4646] path_openat+0xbf0/0x2050 [ 87.407795][ T4646] do_file_open+0x16c/0x290 [ 87.407840][ T4646] ? __pfx_kfree_link+0x10/0x10 [ 87.407869][ T4646] do_sys_openat2+0x94/0x130 [ 87.407931][ T4646] __x64_sys_openat+0xf2/0x120 [ 87.407985][ T4646] x64_sys_call+0x1e39/0x3020 [ 87.408021][ T4646] do_syscall_64+0x12c/0x370 [ 87.408048][ T4646] ? arch_exit_to_user_mode_prepare+0xab/0xc0 [ 87.408238][ T4646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.408268][ T4646] RIP: 0033:0x7f78a036cfce [ 87.408289][ T4646] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.408320][ T4646] RSP: 002b:00007f789edfeec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.408356][ T4646] RAX: ffffffffffffffda RBX: 00007f789edff6c0 RCX: 00007f78a036cfce [ 87.408447][ T4646] RDX: 0000000000000002 RSI: 00007f789edfef90 RDI: ffffffffffffff9c [ 87.408465][ T4646] RBP: 00007f789edff090 R08: 0000000000000000 R09: 0000000000000000 [ 87.408482][ T4646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.408497][ T4646] R13: 00007f78a0626038 R14: 00007f78a0625fa0 R15: 00007ffe13dcf528 [ 87.408524][ T4646] [ 87.551208][ T4638] SELinux: failed to load policy [ 87.914132][ T4660] tmpfs: Bad value for 'mpol' [ 87.928904][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 88.704758][ T4664] netlink: 88 bytes leftover after parsing attributes in process `syz.2.281'. [ 88.961290][ T4668] loop1: detected capacity change from 0 to 512 [ 89.021980][ T4668] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.119806][ T4675] loop2: detected capacity change from 0 to 4096 [ 89.145207][ T4675] EXT4-fs: Ignoring removed bh option [ 89.213720][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 89.213740][ T28] audit: type=1400 audit(1772467526.112:239): avc: denied { lock } for pid=4685 comm="syz.0.287" path="socket:[8217]" dev="sockfs" ino=8217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.269737][ T28] audit: type=1400 audit(1772467526.112:240): avc: denied { create } for pid=4685 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.291735][ T28] audit: type=1400 audit(1772467526.112:241): avc: denied { bind } for pid=4685 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.298686][ T4671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 89.338397][ T28] audit: type=1400 audit(1772467526.122:242): avc: denied { listen } for pid=4685 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.367003][ T28] audit: type=1400 audit(1772467526.122:243): avc: denied { connect } for pid=4685 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.420288][ T4692] loop3: detected capacity change from 0 to 512 [ 89.443970][ T4695] netlink: 'syz.1.288': attribute type 11 has an invalid length. [ 89.463807][ T4695] netlink: 44 bytes leftover after parsing attributes in process `syz.1.288'. [ 89.479387][ T4692] ------------[ cut here ]------------ [ 89.485126][ T4692] EA inode 11 i_nlink=2 [ 89.485224][ T4692] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.290/4692 [ 89.500540][ T4692] Modules linked in: [ 89.504813][ T4692] CPU: 0 UID: 0 PID: 4692 Comm: syz.3.290 Not tainted syzkaller #0 PREEMPT(full) [ 89.514655][ T4692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.524813][ T4692] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 89.531551][ T4692] Code: 54 5a 99 ff 4c 8d 2d 3d ea 5d 05 49 8d 7e 40 e8 c4 f0 b5 ff 49 8b 6e 40 4c 89 e7 e8 f8 eb b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 44 dd 03 66 66 66 66 66 66 2e [ 89.551745][ T4692] RSP: 0018:ffffc9001130f778 EFLAGS: 00010246 [ 89.558180][ T4692] RAX: ffff88810465ac38 RBX: ffff88810a032048 RCX: ffffffff81bffae8 [ 89.566476][ T4692] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de510 [ 89.574737][ T4692] RBP: 000000000000000b R08: 000188810a031ffb R09: 0000000000000000 [ 89.583073][ T4692] R10: ffffc9001130f6a8 R11: 0001c9001130f6a8 R12: ffff88810a031ff8 [ 89.591320][ T4692] R13: ffffffff871de510 R14: ffff88810a031fb0 R15: 0000000000000001 [ 89.599665][ T4692] FS: 00007f486b9b76c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 89.608847][ T4692] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.615766][ T4692] CR2: 00007f789edbdd58 CR3: 000000011bd9c000 CR4: 00000000003506f0 [ 89.623837][ T4692] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.632294][ T4692] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 89.640456][ T4692] Call Trace: [ 89.643888][ T4692] [ 89.646859][ T4692] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 89.647896][ T4682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.286'. [ 89.652864][ T4692] ? errseq_check+0x2c/0x50 [ 89.652966][ T4692] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 89.653011][ T4692] ? ext4_truncate+0x92b/0xb00 [ 89.653168][ T4692] ext4_evict_inode+0xa1f/0xd60 [ 89.653277][ T4692] ? __pfx_ext4_evict_inode+0x10/0x10 [ 89.653318][ T4692] evict+0x2af/0x510 [ 89.653421][ T4692] ? __dquot_initialize+0x146/0x7c0 [ 89.653487][ T4692] iput+0x41a/0x580 [ 89.653522][ T4692] ext4_process_orphan+0x1a9/0x1c0 [ 89.653609][ T4692] ext4_orphan_cleanup+0x6a8/0xa00 [ 89.653669][ T4692] ext4_fill_super+0x3408/0x37c0 [ 89.653704][ T4692] ? set_blocksize+0x14c/0x270 [ 89.653734][ T4692] ? setup_bdev_super+0x30e/0x370 [ 89.653810][ T4692] ? __pfx_ext4_fill_super+0x10/0x10 [ 89.653839][ T4692] get_tree_bdev_flags+0x291/0x300 [ 89.653885][ T4692] ? __pfx_ext4_fill_super+0x10/0x10 [ 89.653971][ T4692] get_tree_bdev+0x1f/0x30 [ 89.654040][ T4692] ext4_get_tree+0x1c/0x30 [ 89.654075][ T4692] vfs_get_tree+0x57/0x1d0 [ 89.654120][ T4692] do_new_mount+0x288/0x8d0 [ 89.654154][ T4692] path_mount+0x4d0/0xbc0 [ 89.768225][ T4692] __se_sys_mount+0x28c/0x2e0 [ 89.773323][ T4692] ? __se_sys_mkdirat+0xa2/0xf0 [ 89.778596][ T4692] ? kmem_cache_free+0xc8/0x380 [ 89.784697][ T4692] __x64_sys_mount+0x67/0x80 [ 89.789777][ T4692] x64_sys_call+0x2d61/0x3020 [ 89.795156][ T4692] do_syscall_64+0x12c/0x370 [ 89.799889][ T4692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.805968][ T4692] RIP: 0033:0x7f486cf5da0a [ 89.810544][ T4692] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.830990][ T4692] RSP: 002b:00007f486b9b6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.839601][ T4692] RAX: ffffffffffffffda RBX: 00007f486b9b6ee0 RCX: 00007f486cf5da0a [ 89.844191][ T28] audit: type=1400 audit(1772467526.722:244): avc: denied { read write } for pid=4702 comm="syz.1.291" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 89.848462][ T4692] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f486b9b6ea0 [ 89.880440][ T4692] RBP: 00002000000009c0 R08: 00007f486b9b6ee0 R09: 0000000000800718 [ 89.881020][ T23] kernel read not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 89.888750][ T4692] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 89.898958][ T28] audit: type=1400 audit(1772467526.722:245): avc: denied { open } for pid=4702 comm="syz.1.291" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 89.906277][ T4692] R13: 00007f486b9b6ea0 R14: 000000000000048d R15: 0000200000000200 [ 89.906309][ T4692] [ 89.906316][ T4692] ---[ end trace 0000000000000000 ]--- [ 89.943831][ T4692] EXT4-fs (loop3): 1 orphan inode deleted [ 90.020174][ T4703] 9pnet_fd: Insufficient options for proto=fd [ 90.026605][ T3383] IPVS: starting estimator thread 0... [ 90.040290][ T4708] loop4: detected capacity change from 0 to 512 [ 90.065368][ T28] audit: type=1326 audit(1772467526.982:246): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486cf5c799 code=0x7ffc0000 [ 90.105060][ T4708] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.118542][ T4703] debugfs: 'ttyS3' already exists in 'caif_serial' [ 90.132034][ T4706] IPVS: using max 2160 ests per chain, 108000 per kthread [ 90.186660][ T28] audit: type=1326 audit(1772467526.982:247): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f486cf5c799 code=0x7ffc0000 [ 90.250545][ T4718] netlink: 72 bytes leftover after parsing attributes in process `syz.2.295'. [ 90.265889][ T28] audit: type=1326 audit(1772467527.052:248): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486cf5c799 code=0x7ffc0000 [ 90.434570][ T4727] FAULT_INJECTION: forcing a failure. [ 90.434570][ T4727] name failslab, interval 1, probability 0, space 0, times 0 [ 90.452241][ T4727] CPU: 1 UID: 0 PID: 4727 Comm: syz.2.297 Tainted: G W syzkaller #0 PREEMPT(full) [ 90.452278][ T4727] Tainted: [W]=WARN [ 90.452286][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.452302][ T4727] Call Trace: [ 90.452310][ T4727] [ 90.452320][ T4727] __dump_stack+0x1d/0x30 [ 90.452406][ T4727] dump_stack_lvl+0x95/0xd0 [ 90.452509][ T4727] dump_stack+0x15/0x1b [ 90.452532][ T4727] should_fail_ex+0x263/0x280 [ 90.452555][ T4727] should_failslab+0x8c/0xb0 [ 90.452580][ T4727] __kmalloc_noprof+0xb8/0x4e0 [ 90.452625][ T4727] ? io_cache_alloc_new+0x2a/0xb0 [ 90.452658][ T4727] io_cache_alloc_new+0x2a/0xb0 [ 90.452683][ T4727] io_msg_alloc_async+0xf9/0x190 [ 90.452761][ T4727] io_recvmsg_prep+0x493/0x880 [ 90.452787][ T4727] ? io_sendrecv_fail+0x6d/0xc0 [ 90.452813][ T4727] ? __pfx_io_sendrecv_fail+0x10/0x10 [ 90.452924][ T4727] io_submit_sqes+0x75a/0x1270 [ 90.452989][ T4727] __se_sys_io_uring_enter+0x1c9/0xf50 [ 90.453023][ T4727] ? __fget_files+0x184/0x1c0 [ 90.453117][ T4727] ? mutex_unlock+0x4e/0x90 [ 90.453218][ T4727] ? fput+0x8f/0xc0 [ 90.453253][ T4727] __x64_sys_io_uring_enter+0x78/0x90 [ 90.453295][ T4727] x64_sys_call+0x1e16/0x3020 [ 90.453336][ T4727] do_syscall_64+0x12c/0x370 [ 90.453367][ T4727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.453394][ T4727] RIP: 0033:0x7f03786fc799 [ 90.453412][ T4727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.453434][ T4727] RSP: 002b:00007f037714f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 90.453457][ T4727] RAX: ffffffffffffffda RBX: 00007f0378975fa0 RCX: 00007f03786fc799 [ 90.453485][ T4727] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 90.453499][ T4727] RBP: 00007f037714f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.453511][ T4727] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 90.453523][ T4727] R13: 00007f0378976038 R14: 00007f0378975fa0 R15: 00007fffad5cdae8 [ 90.453541][ T4727] [ 90.761641][ T4708] SELinux: failed to load policy [ 90.917250][ T4760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 90.999750][ T4765] loop2: detected capacity change from 0 to 4096 [ 91.020441][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 91.036024][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 91.054713][ T4765] EXT4-fs: Ignoring removed bh option [ 91.084566][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 91.127708][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 91.162682][ T4781] netlink: 72 bytes leftover after parsing attributes in process `syz.3.307'. [ 91.213973][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 91.289049][ T4781] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.296731][ T4781] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.880446][ T4805] hub 8-0:1.0: USB hub found [ 91.885683][ T4805] hub 8-0:1.0: 8 ports detected [ 92.775284][ T4764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.782708][ T4764] IPv6: NLM_F_CREATE should be set when creating new route [ 92.790235][ T4764] IPv6: NLM_F_CREATE should be set when creating new route [ 93.265992][ T4846] loop2: detected capacity change from 0 to 512 [ 93.277346][ T4840] loop0: detected capacity change from 0 to 256 [ 93.363010][ T4848] hub 8-0:1.0: USB hub found [ 93.368495][ T4848] hub 8-0:1.0: 8 ports detected [ 93.408146][ T4846] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.182556][ T4863] netlink: 'syz.4.323': attribute type 10 has an invalid length. [ 94.237841][ T4868] tmpfs: Bad value for 'mpol' [ 95.152065][ T4877] loop3: detected capacity change from 0 to 256 [ 95.177738][ T4877] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 95.480986][ T4883] __nla_validate_parse: 31 callbacks suppressed [ 95.481854][ T4883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.331'. [ 95.561029][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 95.561045][ T28] audit: type=1400 audit(1772467532.472:260): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 95.637388][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.645115][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.701926][ T4885] loop3: detected capacity change from 0 to 512 [ 95.861427][ T4885] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.887182][ T4893] loop2: detected capacity change from 0 to 512 [ 95.895976][ T4885] SELinux: policydb magic number 0x2e does not match expected magic number 0xf97cff8c [ 95.917536][ T4885] SELinux: failed to load policy [ 96.045784][ T4899] loop1: detected capacity change from 0 to 512 [ 96.169641][ T4899] EXT4-fs (loop1): 1 truncate cleaned up [ 96.275571][ T4907] loop0: detected capacity change from 0 to 256 [ 96.309775][ T4911] loop4: detected capacity change from 0 to 736 [ 96.321578][ T4907] loop0: detected capacity change from 0 to 1024 [ 96.363060][ T28] audit: type=1400 audit(1772467533.272:261): avc: denied { mount } for pid=4910 comm="syz.4.344" name="/" dev="loop4" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 96.364503][ T4911] FAULT_INJECTION: forcing a failure. [ 96.364503][ T4911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.418853][ T4911] CPU: 1 UID: 0 PID: 4911 Comm: syz.4.344 Tainted: G W syzkaller #0 PREEMPT(full) [ 96.418902][ T4911] Tainted: [W]=WARN [ 96.418911][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 96.418926][ T4911] Call Trace: [ 96.418934][ T4911] [ 96.418943][ T4911] __dump_stack+0x1d/0x30 [ 96.419049][ T4911] dump_stack_lvl+0x95/0xd0 [ 96.419168][ T4911] dump_stack+0x15/0x1b [ 96.419192][ T4911] should_fail_ex+0x263/0x280 [ 96.419218][ T4911] should_fail+0xb/0x20 [ 96.419239][ T4911] should_fail_usercopy+0x1a/0x20 [ 96.419301][ T4911] strncpy_from_user+0x27/0x250 [ 96.419387][ T4911] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 96.419414][ T4911] do_getname+0x59/0x1c0 [ 96.419455][ T4911] __se_sys_mkdirat+0x21/0xf0 [ 96.419477][ T4911] __x64_sys_mkdirat+0x43/0x50 [ 96.419498][ T4911] x64_sys_call+0x2c4e/0x3020 [ 96.419671][ T4911] do_syscall_64+0x12c/0x370 [ 96.419694][ T4911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.419718][ T4911] RIP: 0033:0x7ff460a5c799 [ 96.419775][ T4911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.419795][ T4911] RSP: 002b:00007ff45f4b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 96.419861][ T4911] RAX: ffffffffffffffda RBX: 00007ff460cd5fa0 RCX: 00007ff460a5c799 [ 96.419877][ T4911] RDX: 00000000000001ff RSI: 0000200000000240 RDI: ffffffffffffff9c [ 96.419891][ T4911] RBP: 00007ff45f4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.419905][ T4911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.419918][ T4911] R13: 00007ff460cd6038 R14: 00007ff460cd5fa0 R15: 00007fffa0e2af58 [ 96.419944][ T4911] [ 96.681573][ T28] audit: type=1400 audit(1772467533.592:262): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 96.775309][ T4935] xt_hashlimit: max too large, truncated to 1048576 [ 96.787029][ T4936] tmpfs: Bad value for 'mpol' [ 96.796847][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 96.837623][ T250] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.909274][ T4915] syzkaller0: entered promiscuous mode [ 96.916532][ T4915] syzkaller0: entered allmulticast mode [ 96.945032][ T250] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.041273][ T250] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.100624][ T250] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.116585][ T4949] loop3: detected capacity change from 0 to 4096 [ 97.134811][ T4949] EXT4-fs: Ignoring removed bh option [ 97.198356][ T28] audit: type=1400 audit(1772467534.112:263): avc: denied { create } for pid=4948 comm="syz.3.351" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.249443][ T28] audit: type=1400 audit(1772467534.142:264): avc: denied { read } for pid=4948 comm="syz.3.351" path="/68/file3/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.285261][ T4956] EXT4-fs: Ignoring removed bh option [ 97.381220][ T4951] ext4: Unknown parameter 'fsuuid' [ 97.397590][ T250] bridge_slave_1: left allmulticast mode [ 97.403678][ T250] bridge_slave_1: left promiscuous mode [ 97.409945][ T250] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.426312][ T250] bridge_slave_0: left allmulticast mode [ 97.433963][ T250] bridge_slave_0: left promiscuous mode [ 97.440256][ T250] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.472641][ T28] audit: type=1400 audit(1772467534.382:265): avc: denied { read } for pid=4950 comm="syz.1.350" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 97.542614][ T28] audit: type=1400 audit(1772467534.382:266): avc: denied { open } for pid=4950 comm="syz.1.350" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 97.655178][ T28] audit: type=1400 audit(1772467534.382:267): avc: denied { name_bind } for pid=4950 comm="syz.1.350" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 97.726965][ T250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.737298][ T250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.748573][ T4972] 9p: Bad value for 'rfdno' [ 97.754526][ T250] bond0 (unregistering): Released all slaves [ 97.771103][ T4972] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 97.786454][ T4972] System zones: 0-1, 3-36 [ 97.795573][ T4972] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.354: bad orphan inode 134217728 [ 97.838535][ T250] hsr_slave_0: left promiscuous mode [ 97.850881][ T4972] loop4: lost filesystem error report for type 5 error -117 [ 97.854069][ T250] hsr_slave_1: left promiscuous mode [ 97.888433][ T28] audit: type=1400 audit(1772467534.792:268): avc: denied { ioctl } for pid=4969 comm="syz.4.354" path="net:[4026532490]" dev="nsfs" ino=4026532490 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.913865][ T250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.931822][ T250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.954944][ T250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.982398][ T250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.994996][ T28] audit: type=1400 audit(1772467534.912:269): avc: denied { create } for pid=4979 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 98.030643][ T250] veth1_macvtap: left promiscuous mode [ 98.040567][ T250] veth0_macvtap: left promiscuous mode [ 98.046600][ T250] veth1_vlan: left promiscuous mode [ 98.052237][ T250] veth0_vlan: left promiscuous mode [ 98.189383][ T5000] mmap: syz.3.359 (5000) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.208738][ T250] team0 (unregistering): Port device macvlan1 removed [ 98.244954][ T5003] netlink: 'syz.0.357': attribute type 10 has an invalid length. [ 98.275080][ T250] team0 (unregistering): Port device team_slave_1 removed [ 98.287134][ T250] team0 (unregistering): Port device team_slave_0 removed [ 98.377611][ T4920] chnl_net:caif_netlink_parms(): no params data found [ 98.415972][ T5010] set_capacity_and_notify: 4 callbacks suppressed [ 98.415993][ T5010] loop3: detected capacity change from 0 to 256 [ 98.552899][ T5022] loop3: detected capacity change from 0 to 512 [ 98.673314][ T4920] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.681450][ T4920] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.689662][ T4920] bridge_slave_0: entered allmulticast mode [ 98.697540][ T4920] bridge_slave_0: entered promiscuous mode [ 98.705316][ T4920] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.713851][ T4920] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.722049][ T4920] bridge_slave_1: entered allmulticast mode [ 98.729384][ T4920] bridge_slave_1: entered promiscuous mode [ 98.749065][ T4920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.760085][ T4920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.781922][ T4920] team0: Port device team_slave_0 added [ 98.789430][ T4920] team0: Port device team_slave_1 added [ 98.845981][ T4920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.875404][ T5022] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.893720][ T4920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.010115][ T4920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.054114][ T4920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.071588][ T4920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.149948][ T5033] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 99.220057][ T5033] SELinux: failed to load policy [ 99.228377][ T4920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.308925][ T4920] hsr_slave_0: entered promiscuous mode [ 99.353436][ T4920] hsr_slave_1: entered promiscuous mode [ 99.360099][ T4920] debugfs: 'hsr0' already exists in 'hsr' [ 99.373545][ T5042] loop3: detected capacity change from 0 to 512 [ 99.386515][ T5042] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.397448][ T4920] Cannot create hsr debugfs directory [ 99.615462][ T5042] SELinux: failed to load policy [ 99.727701][ T4920] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.738345][ T4920] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.774258][ T5057] loop1: detected capacity change from 0 to 512 [ 99.791732][ T4920] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.804930][ T4920] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.847827][ T5057] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.876878][ T250] bridge_slave_1: left allmulticast mode [ 99.883041][ T250] bridge_slave_1: left promiscuous mode [ 99.891847][ T250] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.922047][ T5057] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.370: Invalid block bitmap block 0 in block_group 0 [ 99.943064][ T250] bridge_slave_0: left allmulticast mode [ 99.949624][ T250] bridge_slave_0: left promiscuous mode [ 99.956371][ T5057] loop1: lost filesystem error report for type 5 error -117 [ 99.957953][ T5057] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 99.966759][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 99.966898][ C0] EXT4-fs (loop1): initial error at time 1772467536: ext4_read_block_bitmap_nowait:483 [ 99.967148][ C0] EXT4-fs (loop1): last error at time 1772467536: ext4_read_block_bitmap_nowait:483 [ 100.011992][ T250] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.014067][ T5057] loop1: lost filesystem error report for type 5 error -117 [ 100.024288][ T5057] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.370: attempt to clear invalid blocks 983261 len 1 [ 100.049151][ T5057] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 100.050571][ T5057] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.370: Invalid inode table block 0 in block_group 0 [ 100.076140][ T5057] loop1: lost filesystem error report for type 5 error -117 [ 100.078224][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 100.095039][ T5057] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 100.105483][ T5057] loop1: lost filesystem error report for type 5 error -117 [ 100.106619][ T5057] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 100.124475][ T5057] loop1: lost filesystem error report for type 5 error -117 [ 100.126096][ T5057] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.370: Invalid inode table block 0 in block_group 0 [ 100.148404][ T5057] loop1: lost filesystem error report for type 5 error -117 [ 100.150142][ T250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.151715][ T5057] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 100.177637][ T5057] loop1: lost filesystem error report for type 5 error -117 [ 100.178400][ T250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.194881][ T5057] EXT4-fs error (device loop1): ext4_truncate:4587: inode #11: comm syz.1.370: mark_inode_dirty error [ 100.206682][ T5057] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 100.207575][ T5057] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 100.208035][ T250] bond0 (unregistering): Released all slaves [ 100.247609][ T5057] loop1: lost filesystem error report for type 5 error -117 [ 100.249957][ T5057] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.370: Invalid inode table block 0 in block_group 0 [ 100.295337][ T5057] loop1: lost filesystem error report for type 5 error -117 [ 100.297465][ T5057] EXT4-fs (loop1): 1 truncate cleaned up [ 100.308697][ T5094] loop0: detected capacity change from 0 to 512 [ 100.344213][ T5094] EXT4-fs mount: 64 callbacks suppressed [ 100.344236][ T5094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.375904][ T5094] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.387853][ T5094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.419336][ T5057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.436057][ T250] hsr_slave_0: left promiscuous mode [ 100.469148][ T5102] loop3: detected capacity change from 0 to 1024 [ 100.471611][ T5057] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.370: Invalid inode table block 0 in block_group 0 [ 100.477202][ T5102] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.500365][ T250] hsr_slave_1: left promiscuous mode [ 100.508292][ T250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.532274][ T5057] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 100.552443][ T250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.564881][ T5102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.583490][ T5102] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.608386][ T5057] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.370: mark_inode_dirty error [ 100.643920][ T250] team0 (unregistering): Port device macvlan1 removed [ 100.770478][ T250] team0 (unregistering): Port device team_slave_1 removed [ 100.791534][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.802771][ T250] team0 (unregistering): Port device team_slave_0 removed [ 100.893845][ T5040] chnl_net:caif_netlink_parms(): no params data found [ 100.948057][ T356] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm kworker/u8:6: Invalid inode table block 0 in block_group 0 [ 100.967368][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.005850][ T4920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.032929][ T5133] netlink: 'syz.1.382': attribute type 10 has an invalid length. [ 101.056507][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.063900][ T5040] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.067760][ T5138] loop0: detected capacity change from 0 to 512 [ 101.071736][ T5040] bridge_slave_0: entered allmulticast mode [ 101.085795][ T5040] bridge_slave_0: entered promiscuous mode [ 101.097049][ T4920] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.106505][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.118789][ T5138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.138664][ T5040] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.148729][ T5138] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.172766][ T5040] bridge_slave_1: entered allmulticast mode [ 101.180539][ T5040] bridge_slave_1: entered promiscuous mode [ 101.187607][ T5138] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 101.208466][ T5138] SELinux: failed to load policy [ 101.210025][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.222561][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.250006][ T5040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.261784][ T5040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.272170][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.309779][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.316976][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.326934][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 101.326951][ T28] audit: type=1400 audit(1772467538.242:274): avc: denied { ioctl } for pid=5143 comm="syz.1.384" path="socket:[9339]" dev="sockfs" ino=9339 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.379049][ T5040] team0: Port device team_slave_0 added [ 101.387908][ T5040] team0: Port device team_slave_1 added [ 101.423697][ T5040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.432593][ T5040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.474639][ T5040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.499154][ T5040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.507039][ T5040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.535786][ T5040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.572244][ T4920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.584572][ T4920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.620424][ T5040] hsr_slave_0: entered promiscuous mode [ 101.630666][ T5040] hsr_slave_1: entered promiscuous mode [ 101.654846][ T5157] loop0: detected capacity change from 0 to 512 [ 101.682470][ T5157] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.711255][ T5157] EXT4-fs (loop0): 1 truncate cleaned up [ 101.725334][ T5157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.804858][ T28] audit: type=1400 audit(1772467538.722:275): avc: denied { write } for pid=5168 comm="syz.3.387" path="socket:[9369]" dev="sockfs" ino=9369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.878012][ T28] audit: type=1400 audit(1772467538.792:276): avc: denied { setopt } for pid=5168 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.908132][ T4920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.019663][ T5040] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.033673][ T5040] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.043941][ T5040] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.078883][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.084305][ T5040] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.160042][ T5202] loop3: detected capacity change from 0 to 736 [ 102.245966][ T5040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.265931][ T5202] rock: directory entry would overflow storage [ 102.283844][ T5213] netlink: 'syz.0.390': attribute type 21 has an invalid length. [ 102.295943][ T5040] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.303275][ T5202] rock: sig=0x3b10, size=4, remaining=3 [ 102.312588][ T5201] capability: warning: `syz.3.389' uses 32-bit capabilities (legacy support in use) [ 102.325699][ T5213] netlink: 128 bytes leftover after parsing attributes in process `syz.0.390'. [ 102.336869][ T5213] netlink: 'syz.0.390': attribute type 5 has an invalid length. [ 102.353425][ T28] audit: type=1400 audit(1772467539.262:277): avc: denied { ioctl } for pid=5191 comm="syz.3.389" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.361188][ T5213] netlink: 'syz.0.390': attribute type 6 has an invalid length. [ 102.405842][ T5213] netlink: 3 bytes leftover after parsing attributes in process `syz.0.390'. [ 102.436532][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.444223][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.457576][ T4920] veth0_vlan: entered promiscuous mode [ 102.491545][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.498886][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.522800][ T4920] veth1_vlan: entered promiscuous mode [ 102.532818][ T5212] loop1: detected capacity change from 0 to 512 [ 102.629761][ T4920] veth0_macvtap: entered promiscuous mode [ 102.646252][ T4920] veth1_macvtap: entered promiscuous mode [ 102.661598][ T5212] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.701396][ T4920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.734990][ T4920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.770667][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.813275][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.822335][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.836560][ T5244] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 102.837465][ T5212] EXT4-fs (loop1): 1 truncate cleaned up [ 102.871368][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.902230][ T5212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.926480][ T5040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.084913][ T5257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.118266][ T28] audit: type=1400 audit(1772467540.032:278): avc: denied { getopt } for pid=5265 comm="syz.5.345" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.124893][ T5257] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.212157][ T28] audit: type=1400 audit(1772467540.122:279): avc: denied { setopt } for pid=5265 comm="syz.5.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.252247][ T5266] syzkaller0: entered promiscuous mode [ 103.277104][ T5257] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 103.283620][ T28] audit: type=1400 audit(1772467540.122:280): avc: denied { connect } for pid=5265 comm="syz.5.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.293779][ T5257] SELinux: failed to load policy [ 103.319993][ T5266] syzkaller0: entered allmulticast mode [ 103.338323][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.355948][ T28] audit: type=1400 audit(1772467540.122:281): avc: denied { accept } for pid=5265 comm="syz.5.345" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.404970][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.483991][ T5285] set_capacity_and_notify: 2 callbacks suppressed [ 103.484010][ T5285] loop3: detected capacity change from 0 to 256 [ 103.503742][ T5260] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.640427][ T5260] EXT4-fs (loop0): 1 truncate cleaned up [ 103.659873][ T5260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.690815][ T5040] veth0_vlan: entered promiscuous mode [ 103.716305][ T5040] veth1_vlan: entered promiscuous mode [ 103.741478][ T5040] veth0_macvtap: entered promiscuous mode [ 103.753608][ T5040] veth1_macvtap: entered promiscuous mode [ 103.821640][ T5040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.919072][ T5313] hub 8-0:1.0: USB hub found [ 103.924800][ T5313] hub 8-0:1.0: 8 ports detected [ 103.971807][ T5283] loop5: detected capacity change from 0 to 512 [ 104.254933][ T5283] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.452159][ T5318] netlink: 52 bytes leftover after parsing attributes in process `syz.1.399'. [ 104.477915][ T5283] EXT4-fs (loop5): 1 truncate cleaned up [ 104.491916][ T5040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.511462][ T5283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.538510][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.548199][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.573103][ T250] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.601665][ T250] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.626399][ T250] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.703680][ T250] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.781670][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.871443][ T5335] loop1: detected capacity change from 0 to 512 [ 104.961145][ T4920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.040383][ T5349] loop5: detected capacity change from 0 to 512 [ 105.119778][ T5346] loop6: detected capacity change from 0 to 256 [ 105.147753][ T5353] netlink: 'syz.0.406': attribute type 10 has an invalid length. [ 105.409296][ T5322] loop3: detected capacity change from 0 to 512 [ 105.485397][ T5357] tmpfs: Bad value for 'mpol' [ 105.497858][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 105.680378][ T28] audit: type=1400 audit(1772467542.557:282): avc: denied { create } for pid=5354 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.718527][ T5322] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.787615][ T5349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.022607][ T5349] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.070340][ T5349] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 106.121814][ T5349] SELinux: failed to load policy [ 106.229485][ T5322] EXT4-fs (loop3): 1 truncate cleaned up [ 106.251318][ T5371] netlink: 52 bytes leftover after parsing attributes in process `syz.1.411'. [ 106.291981][ T4920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.323352][ T5322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.359920][ T5375] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.503687][ T5380] team_slave_0: entered promiscuous mode [ 106.509444][ T5380] team_slave_1: entered promiscuous mode [ 106.529185][ T5368] loop0: detected capacity change from 0 to 1024 [ 106.540781][ T5380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.556213][ T5382] loop6: detected capacity change from 0 to 1024 [ 106.627346][ T5382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.634282][ T5368] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.689486][ T5382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.807127][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.873388][ T5040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.089873][ T5401] loop3: detected capacity change from 0 to 512 [ 107.100039][ T5401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.119159][ T5401] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.404554][ T5409] loop5: detected capacity change from 0 to 512 [ 107.426106][ T5415] tmpfs: Bad value for 'mpol' [ 107.557632][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.600129][ T5368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 107.656456][ T5409] EXT4-fs: Ignoring removed nobh option [ 107.834679][ T5409] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 107.853640][ T5368] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.122705][ T5409] EXT4-fs (loop5): 1 truncate cleaned up [ 108.170220][ T5430] netlink: 'syz.6.428': attribute type 1 has an invalid length. [ 108.191471][ T5409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.378520][ T5443] netlink: 'syz.1.430': attribute type 10 has an invalid length. [ 108.499151][ T5438] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 108.666335][ T5438] EXT4-fs (loop6): 1 truncate cleaned up [ 108.695617][ T28] audit: type=1400 audit(1772467545.363:283): avc: denied { append } for pid=5404 comm="syz.5.422" path="/8/file2/blkio.bfq.avg_queue_size" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.758051][ T5438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.824220][ T5432] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.920428][ T5432] EXT4-fs (loop3): 1 truncate cleaned up [ 108.983060][ T5432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.026751][ T5040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.040171][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.143869][ T5454] set_capacity_and_notify: 2 callbacks suppressed [ 109.143889][ T5454] loop6: detected capacity change from 0 to 256 [ 109.273298][ T5457] loop1: detected capacity change from 0 to 4096 [ 109.282180][ T5457] EXT4-fs: Ignoring removed bh option [ 109.321911][ T5457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.489222][ T5460] loop6: detected capacity change from 0 to 512 [ 109.534498][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.604265][ T5460] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 109.672025][ T5460] EXT4-fs (loop6): 1 truncate cleaned up [ 109.760130][ T5406] syz.5.422 (5406) used greatest stack depth: 6704 bytes left [ 109.782328][ T5460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.861863][ T5473] tmpfs: Bad value for 'mpol' [ 109.870284][ T5473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 110.278899][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.328815][ T5479] netlink: 'syz.0.439': attribute type 10 has an invalid length. [ 110.372076][ T4920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.438748][ T5483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.440'. [ 110.474202][ T5040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.515706][ T28] audit: type=1400 audit(1772467547.084:284): avc: denied { ioctl } for pid=5486 comm="syz.5.443" path="socket:[9790]" dev="sockfs" ino=9790 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.576449][ T5485] ipvlan0: entered promiscuous mode [ 110.608899][ T5485] ipvlan0: entered allmulticast mode [ 110.639186][ T5485] veth0_vlan: entered allmulticast mode [ 110.691967][ T5485] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 110.858822][ T5492] loop1: detected capacity change from 0 to 1024 [ 110.886625][ T5492] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.900351][ T5496] loop3: detected capacity change from 0 to 512 [ 111.071426][ T5496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.239816][ T5496] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.261297][ T5492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 111.405856][ T5492] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.640366][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.713543][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 111.769574][ T5520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.778267][ T28] audit: type=1400 audit(1772467548.253:285): avc: denied { write } for pid=5519 comm="syz.1.453" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.809470][ T5520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.833174][ T28] audit: type=1400 audit(1772467548.253:286): avc: denied { ioctl } for pid=5519 comm="syz.1.453" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.931376][ T5513] loop5: detected capacity change from 0 to 512 [ 111.990407][ T5513] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.109103][ T5513] EXT4-fs (loop5): 1 truncate cleaned up [ 112.143416][ T5513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.205779][ T5528] netlink: 60 bytes leftover after parsing attributes in process `syz.6.455'. [ 112.329367][ T5543] netlink: 64 bytes leftover after parsing attributes in process `syz.0.459'. [ 112.360450][ T28] audit: type=1400 audit(1772467548.805:287): avc: denied { write } for pid=5542 comm="syz.0.459" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 112.384795][ T5543] random: crng reseeded on system resumption [ 112.414743][ T28] audit: type=1400 audit(1772467548.805:288): avc: denied { open } for pid=5542 comm="syz.0.459" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 112.515880][ T5553] loop6: detected capacity change from 0 to 4096 [ 112.543650][ T5553] EXT4-fs: Ignoring removed bh option [ 112.578603][ T5553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.771387][ T4920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.792406][ T5559] loop3: detected capacity change from 0 to 512 [ 112.839427][ T5562] loop1: detected capacity change from 0 to 1024 [ 112.879156][ T5562] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.894530][ T5559] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.013634][ T5559] EXT4-fs (loop3): 1 truncate cleaned up [ 113.058871][ T5562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.064493][ T5559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.156260][ T5562] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.190196][ T28] audit: type=1400 audit(1772467549.581:289): avc: denied { ioctl } for pid=5542 comm="syz.0.459" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 113.416155][ T5040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.588092][ T5579] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 113.660089][ T5581] loop5: detected capacity change from 0 to 256 [ 113.713864][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.787937][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.848596][ T5589] netlink: 60 bytes leftover after parsing attributes in process `syz.3.469'. [ 114.002969][ T5413] syz.5.422 (5413) used greatest stack depth: 6592 bytes left [ 114.115559][ T5599] tmpfs: Bad value for 'mpol' [ 114.125146][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.471'. [ 115.027716][ T5596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.050329][ T5596] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.353703][ T5600] tmpfs: Bad value for 'mpol' [ 115.364565][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 115.661642][ T5605] set_capacity_and_notify: 1 callbacks suppressed [ 115.661724][ T5605] loop3: detected capacity change from 0 to 512 [ 115.750983][ T5605] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.764719][ T28] audit: type=1400 audit(1772467551.976:290): avc: denied { mounton } for pid=5612 comm="syz.6.476" path="/proc/53/cgroup" dev="proc" ino=9975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 115.791764][ T5614] bond_slave_0: entered promiscuous mode [ 115.798184][ T5614] bond_slave_1: entered promiscuous mode [ 115.812003][ T5618] loop1: detected capacity change from 0 to 256 [ 115.816431][ T5614] macvtap1: entered promiscuous mode [ 115.831023][ T5605] EXT4-fs (loop3): 1 truncate cleaned up [ 115.868864][ T4920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.880320][ T5605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.895184][ T5624] loop1: detected capacity change from 0 to 4096 [ 115.900837][ T5614] bond0: entered promiscuous mode [ 115.912839][ T5624] EXT4-fs: Ignoring removed bh option [ 115.939850][ T5624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.958471][ T5614] macvtap1: entered allmulticast mode [ 115.975428][ T5614] bond0: entered allmulticast mode [ 115.981699][ T5614] bond_slave_0: entered allmulticast mode [ 116.029774][ T5614] bond_slave_1: entered allmulticast mode [ 116.050326][ T5614] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 116.068649][ T5614] bond0: left allmulticast mode [ 116.082449][ T5614] bond_slave_0: left allmulticast mode [ 116.103928][ T5614] bond_slave_1: left allmulticast mode [ 116.129677][ T5614] bond0: left promiscuous mode [ 116.160659][ T5614] bond_slave_0: left promiscuous mode [ 116.168449][ T5614] bond_slave_1: left promiscuous mode [ 116.238289][ T5636] loop5: detected capacity change from 0 to 512 [ 116.283207][ T5636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.344910][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.359192][ T5636] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.390078][ T5645] loop6: detected capacity change from 0 to 256 [ 116.498865][ T5649] netlink: 56 bytes leftover after parsing attributes in process `syz.3.482'. [ 116.561007][ T5649] ALSA: seq fatal error: cannot create timer (-16) [ 116.601644][ T5648] delete_channel: no stack [ 116.614141][ T5648] delete_channel: no stack [ 116.640487][ T5636] SELinux: failed to load policy [ 116.704562][ T5664] netlink: 60 bytes leftover after parsing attributes in process `syz.3.484'. [ 116.752160][ T4920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.824914][ T28] audit: type=1400 audit(1772467552.977:291): avc: denied { mounton } for pid=5667 comm="syz.3.487" path="/proc/301/task" dev="proc" ino=11338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 116.851214][ T5669] loop3: detected capacity change from 0 to 1024 [ 116.872234][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.879281][ T5672] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 116.888945][ T5672] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 116.916725][ T5672] vhci_hcd vhci_hcd.0: Device attached [ 116.966354][ T5672] syzkaller1: entered promiscuous mode [ 116.972793][ T5672] syzkaller1: entered allmulticast mode [ 116.993844][ T28] audit: type=1400 audit(1772467553.145:292): avc: denied { create } for pid=5671 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.018227][ T5672] loop0: detected capacity change from 0 to 512 [ 117.045845][ T5672] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 117.059648][ T5677] loop5: detected capacity change from 0 to 512 [ 117.068957][ T5672] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.092378][ T5677] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.104700][ T5672] EXT4-fs (loop0): mount failed [ 117.123692][ T5677] EXT4-fs (loop5): 1 truncate cleaned up [ 117.150327][ T5677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.154949][ T28] audit: type=1400 audit(1772467553.286:293): avc: denied { write } for pid=5671 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.194085][ T35] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 117.202226][ T5690] netlink: 'syz.3.490': attribute type 10 has an invalid length. [ 117.226207][ T28] audit: type=1400 audit(1772467553.351:294): avc: denied { add_name } for pid=5674 comm="syz.5.486" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.238035][ T5673] vhci_hcd: connection reset by peer [ 117.299407][ T36] vhci_hcd vhci_hcd.0: stop threads [ 117.319196][ T36] vhci_hcd vhci_hcd.0: release socket [ 117.335091][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 117.391043][ T4920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.570264][ T5697] loop6: detected capacity change from 0 to 256 [ 117.594523][ T5693] loop5: detected capacity change from 0 to 8192 [ 117.628696][ T5693] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.657568][ T5693] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 117.675523][ T5693] FAT-fs (loop5): Filesystem has been set read-only [ 117.683095][ T5693] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 117.694295][ T5693] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 117.703711][ T5693] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 117.713718][ T5693] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 117.724085][ T5693] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 117.842153][ T5693] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 117.869828][ T5693] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 117.931780][ T5693] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 117.947403][ T5699] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.958565][ T5693] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 118.094092][ T5699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.154825][ T5699] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.253118][ T5701] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.431011][ T28] audit: type=1400 audit(1772467554.483:295): avc: denied { shutdown } for pid=5705 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.479532][ T28] audit: type=1400 audit(1772467554.483:296): avc: denied { ioctl } for pid=5705 comm="syz.1.496" path="socket:[10068]" dev="sockfs" ino=10068 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.506662][ T28] audit: type=1400 audit(1772467554.483:297): avc: denied { name_connect } for pid=5705 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 118.537141][ T28] audit: type=1400 audit(1772467554.511:298): avc: denied { getattr } for pid=5708 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.590572][ T5701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.626269][ T5715] netlink: 60 bytes leftover after parsing attributes in process `syz.1.497'. [ 118.657409][ T5701] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.780415][ T5723] gtp0: entered promiscuous mode [ 118.785518][ T5723] gtp0: entered allmulticast mode [ 118.798726][ T5040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.859731][ T5728] netlink: 'syz.6.500': attribute type 12 has an invalid length. [ 118.893893][ T5728] netlink: 'syz.6.500': attribute type 29 has an invalid length. [ 118.929363][ T5732] netlink: 'syz.1.499': attribute type 10 has an invalid length. [ 118.950155][ T5728] netlink: 148 bytes leftover after parsing attributes in process `syz.6.500'. [ 118.968753][ T5728] netlink: 59 bytes leftover after parsing attributes in process `syz.6.500'. [ 119.559658][ T5755] tmpfs: Bad value for 'mpol' [ 119.569219][ T5755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.502'. [ 119.792781][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.015971][ T5771] netlink: 60 bytes leftover after parsing attributes in process `syz.5.509'. [ 120.212155][ T5768] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.269445][ T5780] EXT4-fs: Ignoring removed bh option [ 120.285843][ T5768] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 120.295005][ T5768] FAT-fs (loop3): Filesystem has been set read-only [ 120.302119][ T5768] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 120.345276][ T5768] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 120.362843][ T5768] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 120.372765][ T5768] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 120.381918][ T5768] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 120.391061][ T5768] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 120.400239][ T5768] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 120.419583][ T5768] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 120.439273][ T5768] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 120.558831][ T5803] EXT4-fs: Ignoring removed bh option [ 120.593179][ T5806] tmpfs: Bad value for 'mpol' [ 120.621429][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 120.895682][ T5807] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 120.962724][ T5807] EXT4-fs (loop5): 1 truncate cleaned up [ 121.196601][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.519'. [ 121.323621][ T5825] set_capacity_and_notify: 7 callbacks suppressed [ 121.323690][ T5825] loop1: detected capacity change from 0 to 512 [ 121.347620][ T5848] loop3: detected capacity change from 0 to 256 [ 121.415336][ T5825] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.438288][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 121.438311][ T28] audit: type=1400 audit(1772467557.298:305): avc: denied { connect } for pid=5850 comm="syz.5.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.493674][ T5859] loop5: detected capacity change from 0 to 1024 [ 121.553426][ T28] audit: type=1400 audit(1772467557.298:306): avc: denied { write } for pid=5850 comm="syz.5.521" path="socket:[11557]" dev="sockfs" ino=11557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.559438][ T5825] EXT4-fs (loop1): 1 truncate cleaned up [ 121.588384][ T5852] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 121.598195][ T5852] SELinux: failed to load policy [ 121.617254][ T5859] EXT4-fs: inline encryption not supported [ 121.678371][ T5859] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e856e028, mo2=0102] [ 121.710877][ T5859] System zones: 1-12 [ 121.905577][ T5877] netlink: 'syz.6.528': attribute type 10 has an invalid length. [ 121.916173][ T5867] loop3: detected capacity change from 0 to 512 [ 121.971434][ T5867] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.993146][ T5877] macvlan1: entered allmulticast mode [ 122.001295][ T5877] veth1_vlan: entered allmulticast mode [ 122.013494][ T5877] team0: Port device macvlan1 added [ 122.049153][ T5867] EXT4-fs (loop3): 1 truncate cleaned up [ 122.107323][ T5882] loop6: detected capacity change from 0 to 4096 [ 122.139326][ T5882] EXT4-fs: Ignoring removed bh option [ 122.478704][ T5895] tmpfs: Bad value for 'mpol' [ 122.486792][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 122.519875][ T5887] loop5: detected capacity change from 0 to 1024 [ 122.920741][ T5887] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.991005][ T5903] loop3: detected capacity change from 0 to 256 [ 123.010015][ T35] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 123.174543][ T5887] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.284116][ T5913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.537'. [ 123.351550][ T5915] hub 8-0:1.0: USB hub found [ 123.356897][ T5915] hub 8-0:1.0: 8 ports detected [ 123.517785][ T28] audit: type=1400 audit(1772467559.244:307): avc: denied { listen } for pid=5916 comm="syz.6.538" lport=51409 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.609907][ T28] audit: type=1400 audit(1772467559.272:308): avc: denied { accept } for pid=5916 comm="syz.6.538" lport=51409 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.656926][ T28] audit: type=1400 audit(1772467559.281:309): avc: denied { write } for pid=5916 comm="syz.6.538" path="socket:[12336]" dev="sockfs" ino=12336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 123.719247][ T5919] netlink: 'syz.1.539': attribute type 10 has an invalid length. [ 123.943285][ T28] audit: type=1400 audit(1772467559.281:310): avc: denied { setopt } for pid=5916 comm="syz.6.538" lport=51409 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 124.235861][ T5929] loop3: detected capacity change from 0 to 4096 [ 124.282364][ T5929] EXT4-fs: Ignoring removed bh option [ 124.390972][ T5927] loop6: detected capacity change from 0 to 512 [ 124.420086][ T5941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'. [ 124.492606][ T5936] SELinux: failed to load policy [ 124.567517][ T5927] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 124.595271][ T5948] netlink: 'syz.5.550': attribute type 10 has an invalid length. [ 124.611447][ T5948] macvlan1: entered allmulticast mode [ 124.619563][ T5948] veth1_vlan: entered allmulticast mode [ 124.628823][ T5948] team0: Port device macvlan1 added [ 124.673906][ T5955] FAULT_INJECTION: forcing a failure. [ 124.673906][ T5955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.704113][ T5927] EXT4-fs (loop6): 1 truncate cleaned up [ 124.726198][ T5955] CPU: 0 UID: 0 PID: 5955 Comm: syz.5.551 Tainted: G W syzkaller #0 PREEMPT(full) [ 124.726265][ T5955] Tainted: [W]=WARN [ 124.726284][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.726299][ T5955] Call Trace: [ 124.726307][ T5955] [ 124.726316][ T5955] __dump_stack+0x1d/0x30 [ 124.726351][ T5955] dump_stack_lvl+0x95/0xd0 [ 124.726388][ T5955] dump_stack+0x15/0x1b [ 124.726463][ T5955] should_fail_ex+0x263/0x280 [ 124.726551][ T5955] should_fail+0xb/0x20 [ 124.726579][ T5955] should_fail_usercopy+0x1a/0x20 [ 124.726612][ T5955] _copy_to_user+0x20/0xa0 [ 124.726647][ T5955] simple_read_from_buffer+0xb5/0x130 [ 124.726683][ T5955] proc_fail_nth_read+0x10e/0x150 [ 124.726725][ T5955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.726763][ T5955] vfs_read+0x1ab/0x7f0 [ 124.726802][ T5955] ? __rcu_read_unlock+0x4e/0x70 [ 124.726828][ T5955] ? __fget_files+0x184/0x1c0 [ 124.726858][ T5955] ? mutex_lock+0x57/0x90 [ 124.726892][ T5955] ksys_read+0xdc/0x1a0 [ 124.727002][ T5955] __x64_sys_read+0x40/0x50 [ 124.727041][ T5955] x64_sys_call+0x2886/0x3020 [ 124.727083][ T5955] do_syscall_64+0x12c/0x370 [ 124.727112][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.727205][ T5955] RIP: 0033:0x7fcdf71ccfce [ 124.727231][ T5955] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.727249][ T5955] RSP: 002b:00007fcdf5c5efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.727329][ T5955] RAX: ffffffffffffffda RBX: 00007fcdf5c5f6c0 RCX: 00007fcdf71ccfce [ 124.727356][ T5955] RDX: 000000000000000f RSI: 00007fcdf5c5f0a0 RDI: 0000000000000003 [ 124.727421][ T5955] RBP: 00007fcdf5c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.727435][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.727448][ T5955] R13: 00007fcdf7486038 R14: 00007fcdf7485fa0 R15: 00007ffdb4143688 [ 124.727468][ T5955] [ 124.968008][ T5942] loop1: detected capacity change from 0 to 1024 [ 124.974966][ T5942] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.006849][ T5945] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.018619][ T5958] netlink: 830 bytes leftover after parsing attributes in process `syz.5.552'. [ 125.018659][ T5958] veth0_to_bond: entered promiscuous mode [ 125.090474][ T5945] EXT4-fs (loop0): 1 truncate cleaned up [ 125.145897][ T5942] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.391272][ T5969] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.424396][ T5969] EXT4-fs (loop3): 1 truncate cleaned up [ 125.583104][ T5982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.559'. [ 125.603144][ T5980] syzkaller0: entered promiscuous mode [ 125.608971][ T5980] syzkaller0: entered allmulticast mode [ 125.623832][ T28] audit: type=1400 audit(1772467561.218:311): avc: denied { relabelfrom } for pid=5979 comm="syz.6.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 125.649361][ T28] audit: type=1400 audit(1772467561.218:312): avc: denied { relabelto } for pid=5979 comm="syz.6.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 125.842111][ T5992] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.863480][ T5990] syzkaller0: entered promiscuous mode [ 125.903851][ T5984] SELinux: failed to load policy [ 125.931804][ T5990] syzkaller0: entered allmulticast mode [ 125.938808][ T28] audit: type=1400 audit(1772467561.508:313): avc: denied { shutdown } for pid=5991 comm="syz.6.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.945527][ T5992] netlink: 88 bytes leftover after parsing attributes in process `syz.6.563'. [ 125.970090][ T5992] netlink: 48 bytes leftover after parsing attributes in process `syz.6.563'. [ 126.004941][ T28] audit: type=1400 audit(1772467561.508:314): avc: denied { read } for pid=5991 comm="syz.6.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.083440][ T5993] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.168342][ T5993] EXT4-fs (loop0): 1 truncate cleaned up [ 126.198948][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.567'. [ 126.351023][ T6014] hub 8-0:1.0: USB hub found [ 126.355910][ T6014] hub 8-0:1.0: 8 ports detected [ 126.912248][ T6018] set_capacity_and_notify: 4 callbacks suppressed [ 126.912306][ T6018] loop3: detected capacity change from 0 to 512 [ 126.933708][ T6018] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.947559][ T6018] EXT4-fs (loop3): 1 truncate cleaned up [ 127.137906][ T6027] netlink: 88 bytes leftover after parsing attributes in process `syz.1.572'. [ 127.230159][ T6013] SELinux: failed to load policy [ 127.385600][ T6039] loop6: detected capacity change from 0 to 256 [ 127.403424][ T6029] loop5: detected capacity change from 0 to 512 [ 127.419788][ T6029] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 127.437078][ T6038] SELinux: failed to load policy [ 127.463713][ T6029] EXT4-fs (loop5): 1 truncate cleaned up [ 127.607752][ T6039] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 127.613879][ T6039] syzkaller0: group set to 5 [ 127.737622][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 128.141326][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 128.141342][ T28] audit: type=1400 audit(1772467563.528:320): avc: denied { mount } for pid=6051 comm="syz.1.580" name="/" dev="ramfs" ino=11893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 128.256557][ T6052] loop1: detected capacity change from 0 to 512 [ 128.279978][ T6062] loop6: detected capacity change from 0 to 4096 [ 128.317705][ T6062] EXT4-fs: Ignoring removed bh option [ 128.493326][ T6066] loop0: detected capacity change from 0 to 512 [ 128.537782][ T6066] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.572937][ T6066] EXT4-fs (loop0): 1 truncate cleaned up [ 128.705828][ T6086] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 128.774228][ T6086] SELinux: failed to load policy [ 128.823630][ T6088] loop3: detected capacity change from 0 to 256 [ 128.887740][ T6093] loop5: detected capacity change from 0 to 512 [ 128.940435][ T6093] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.591: bad orphan inode 15 [ 128.957800][ T6093] loop5: lost filesystem error report for type 5 error -117 [ 128.964398][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 128.978746][ C0] EXT4-fs (loop5): initial error at time 1772467564: ext4_orphan_get:1417 [ 128.987700][ C0] EXT4-fs (loop5): last error at time 1772467564: ext4_orphan_get:1417 [ 129.001632][ T6093] ext4_test_bit(bit=14, block=5) = 0 [ 129.008712][ T6093] FAULT_INJECTION: forcing a failure. [ 129.008712][ T6093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.022275][ T6093] CPU: 0 UID: 0 PID: 6093 Comm: syz.5.591 Tainted: G W syzkaller #0 PREEMPT(full) [ 129.022307][ T6093] Tainted: [W]=WARN [ 129.022314][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.022326][ T6093] Call Trace: [ 129.022333][ T6093] [ 129.022414][ T6093] __dump_stack+0x1d/0x30 [ 129.022440][ T6093] dump_stack_lvl+0x95/0xd0 [ 129.022471][ T6093] dump_stack+0x15/0x1b [ 129.022622][ T6093] should_fail_ex+0x263/0x280 [ 129.022672][ T6093] should_fail+0xb/0x20 [ 129.022703][ T6093] should_fail_usercopy+0x1a/0x20 [ 129.022732][ T6093] _copy_from_user+0x1c/0xb0 [ 129.022762][ T6093] __sys_bind+0x106/0x290 [ 129.022870][ T6093] __x64_sys_bind+0x3f/0x50 [ 129.022898][ T6093] x64_sys_call+0x2b30/0x3020 [ 129.022933][ T6093] do_syscall_64+0x12c/0x370 [ 129.022964][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.023033][ T6093] RIP: 0033:0x7fcdf720c799 [ 129.023051][ T6093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.023069][ T6093] RSP: 002b:00007fcdf5c5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 129.023095][ T6093] RAX: ffffffffffffffda RBX: 00007fcdf7485fa0 RCX: 00007fcdf720c799 [ 129.023135][ T6093] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000004 [ 129.023151][ T6093] RBP: 00007fcdf5c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 129.023167][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.023195][ T6093] R13: 00007fcdf7486038 R14: 00007fcdf7485fa0 R15: 00007ffdb4143688 [ 129.023258][ T6093] [ 129.446955][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.593'. [ 129.492553][ T28] audit: type=1400 audit(1772467564.810:321): avc: denied { bind } for pid=6107 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.571345][ T6096] loop0: detected capacity change from 0 to 512 [ 129.608422][ T28] audit: type=1400 audit(1772467564.819:322): avc: denied { setopt } for pid=6107 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.668846][ T6096] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.755680][ T6116] tmpfs: Bad value for 'mpol' [ 129.761299][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.597'. [ 129.887682][ T6096] EXT4-fs (loop0): 1 truncate cleaned up [ 130.047762][ T6119] loop1: detected capacity change from 0 to 512 [ 130.116823][ T6119] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 130.177804][ T6119] EXT4-fs (loop1): orphan cleanup on readonly fs [ 130.185201][ T6119] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.599: Block bitmap for bg 0 marked uninitialized [ 130.198649][ T6119] loop1: lost filesystem error report for type 5 error -117 [ 130.203544][ T6119] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 130.211214][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 130.211244][ C1] EXT4-fs (loop1): initial error at time 1772467565: ext4_read_block_bitmap_nowait:517 [ 130.211297][ C1] EXT4-fs (loop1): last error at time 1772467565: ext4_read_block_bitmap_nowait:517 [ 130.247692][ T6119] loop1: lost filesystem error report for type 5 error -117 [ 130.249130][ T6119] EXT4-fs (loop1): 1 orphan inode deleted [ 130.278512][ T28] audit: type=1400 audit(1772467565.567:323): avc: denied { remount } for pid=6118 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 130.278526][ T6119] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 130.302013][ T6119] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 130.406359][ T28] audit: type=1400 audit(1772467565.642:324): avc: denied { create } for pid=6123 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 130.573097][ T6129] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.599: Block bitmap for bg 0 marked uninitialized [ 130.907628][ T28] audit: type=1400 audit(1772467565.848:325): avc: denied { setattr } for pid=6118 comm="syz.1.599" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.930086][ T28] audit: type=1400 audit(1772467565.913:326): avc: denied { accept } for pid=6123 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.282748][ T6139] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.382823][ T6139] EXT4-fs (loop0): 1 truncate cleaned up [ 131.479748][ T6154] netlink: 88 bytes leftover after parsing attributes in process `syz.6.610'. [ 131.761050][ T6166] tmpfs: Bad value for 'mpol' [ 131.766558][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.612'. [ 132.021477][ T6169] EXT4-fs: Ignoring removed bh option [ 132.236307][ T28] audit: type=1400 audit(1772467823.406:327): avc: denied { append } for pid=6173 comm="syz.0.614" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 132.255313][ T6174] FAULT_INJECTION: forcing a failure. [ 132.255313][ T6174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.291436][ T28] audit: type=1400 audit(1772467823.406:328): avc: denied { open } for pid=6173 comm="syz.0.614" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 132.326660][ T3314] EXT4-fs unmount: 49 callbacks suppressed [ 132.326685][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.346685][ T6174] CPU: 0 UID: 0 PID: 6174 Comm: syz.0.614 Tainted: G W syzkaller #0 PREEMPT(full) [ 132.346727][ T6174] Tainted: [W]=WARN [ 132.346737][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.346759][ T6174] Call Trace: [ 132.346767][ T6174] [ 132.346852][ T6174] __dump_stack+0x1d/0x30 [ 132.346935][ T6174] dump_stack_lvl+0x95/0xd0 [ 132.346968][ T6174] dump_stack+0x15/0x1b [ 132.347034][ T6174] should_fail_ex+0x263/0x280 [ 132.347064][ T6174] should_fail+0xb/0x20 [ 132.347091][ T6174] should_fail_usercopy+0x1a/0x20 [ 132.347122][ T6174] strncpy_from_user+0x27/0x250 [ 132.347163][ T6174] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 132.347212][ T6174] do_getname+0x59/0x1c0 [ 132.347245][ T6174] getname_flags+0x1d/0x30 [ 132.347276][ T6174] do_sys_openat2+0x60/0x130 [ 132.347332][ T6174] __x64_sys_openat+0xf2/0x120 [ 132.347418][ T6174] x64_sys_call+0x1e39/0x3020 [ 132.347524][ T6174] do_syscall_64+0x12c/0x370 [ 132.347554][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.347584][ T6174] RIP: 0033:0x7f78a036cfce [ 132.347607][ T6174] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.347797][ T6174] RSP: 002b:00007f789edfeec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.347893][ T6174] RAX: ffffffffffffffda RBX: 00007f789edff6c0 RCX: 00007f78a036cfce [ 132.347911][ T6174] RDX: 0000000000000002 RSI: 00007f789edfef90 RDI: ffffffffffffff9c [ 132.347925][ T6174] RBP: 00007f789edff090 R08: 0000000000000000 R09: 0000000000000000 [ 132.347941][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.347970][ T6174] R13: 00007f78a0626038 R14: 00007f78a0625fa0 R15: 00007ffe13dcf528 [ 132.348001][ T6174] [ 132.542836][ T28] audit: type=1400 audit(1772467823.509:329): avc: denied { read } for pid=6173 comm="syz.0.614" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 132.621847][ T6178] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 132.633717][ T6178] SELinux: failed to load policy [ 132.638972][ T6182] netlink: 'syz.1.618': attribute type 3 has an invalid length. [ 132.638995][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 132.811305][ T6192] SELinux: failed to load policy [ 132.842578][ T6197] netlink: 88 bytes leftover after parsing attributes in process `syz.3.623'. [ 132.857855][ T6188] set_capacity_and_notify: 3 callbacks suppressed [ 132.857909][ T6188] loop5: detected capacity change from 0 to 256 [ 133.219598][ T6210] tmpfs: Bad value for 'mpol' [ 133.231045][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 133.677611][ T6204] loop3: detected capacity change from 0 to 1024 [ 133.694304][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 133.694357][ T28] audit: type=1400 audit(1772467824.762:333): avc: denied { write } for pid=6219 comm="syz.6.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 133.732693][ T6221] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.793410][ T6204] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.809884][ T6213] loop0: detected capacity change from 0 to 512 [ 133.892368][ T6213] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.925645][ T6213] EXT4-fs (loop0): 1 truncate cleaned up [ 134.039654][ T6213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.111181][ T6204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.138377][ T6231] tmpfs: Bad value for 'mpol' [ 134.144590][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.631'. [ 134.275124][ T6204] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.297703][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 134.395645][ T6235] loop1: detected capacity change from 0 to 764 [ 134.454380][ T6235] iso9660: Unknown parameter 'obj_type' [ 134.642886][ T28] audit: type=1400 audit(1772467825.323:334): avc: denied { bind } for pid=6234 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.665839][ T28] audit: type=1400 audit(1772467825.323:335): avc: denied { write } for pid=6234 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.716539][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.744742][ T6242] netlink: 88 bytes leftover after parsing attributes in process `syz.0.636'. [ 134.832448][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.959797][ T6246] loop0: detected capacity change from 0 to 512 [ 134.989890][ T6246] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.025161][ T6252] loop5: detected capacity change from 0 to 4096 [ 135.033557][ T6254] loop3: detected capacity change from 0 to 256 [ 135.042977][ T6246] EXT4-fs (loop0): 1 truncate cleaned up [ 135.064805][ T6252] EXT4-fs: Ignoring removed bh option [ 135.078417][ T6252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.107200][ T6246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.126472][ T6259] loop6: detected capacity change from 0 to 764 [ 135.203888][ T6259] rock: directory entry would overflow storage [ 135.237407][ T6259] rock: sig=0x4654, size=5, remaining=4 [ 135.341877][ T28] audit: type=1400 audit(1772467826.306:336): avc: denied { create } for pid=6258 comm="syz.6.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 135.354116][ T6240] SELinux: failed to load policy [ 135.410782][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.521068][ T6267] netlink: 36 bytes leftover after parsing attributes in process `syz.6.645'. [ 135.537022][ T28] audit: type=1400 audit(1772467826.474:337): avc: denied { read } for pid=6266 comm="syz.6.645" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.581020][ T28] audit: type=1400 audit(1772467826.474:338): avc: denied { ioctl } for pid=6266 comm="syz.6.645" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.785302][ T6276] tmpfs: Bad value for 'mpol' [ 135.795592][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 136.642155][ T6278] tmpfs: Bad value for 'mpol' [ 136.712659][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 136.785519][ T6280] netlink: 88 bytes leftover after parsing attributes in process `syz.6.649'. [ 136.822726][ T4920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.963501][ T6292] netlink: 'syz.5.648': attribute type 10 has an invalid length. [ 136.972840][ T6292] veth1_vlan: left allmulticast mode [ 137.045932][ T6298] FAULT_INJECTION: forcing a failure. [ 137.045932][ T6298] name failslab, interval 1, probability 0, space 0, times 0 [ 137.068047][ T6298] CPU: 1 UID: 0 PID: 6298 Comm: syz.6.655 Tainted: G W syzkaller #0 PREEMPT(full) [ 137.068089][ T6298] Tainted: [W]=WARN [ 137.068099][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.068116][ T6298] Call Trace: [ 137.068185][ T6298] [ 137.068196][ T6298] __dump_stack+0x1d/0x30 [ 137.068377][ T6298] dump_stack_lvl+0x95/0xd0 [ 137.068465][ T6298] dump_stack+0x15/0x1b [ 137.068494][ T6298] should_fail_ex+0x263/0x280 [ 137.068525][ T6298] ? alloc_fs_context+0x46/0x580 [ 137.068584][ T6298] should_failslab+0x8c/0xb0 [ 137.068615][ T6298] __kmalloc_cache_noprof+0x5f/0x410 [ 137.068653][ T6298] alloc_fs_context+0x46/0x580 [ 137.068694][ T6298] fs_context_for_mount+0x22/0x30 [ 137.068725][ T6298] do_new_mount+0xe7/0x8d0 [ 137.068831][ T6298] ? security_capable+0x7b/0x90 [ 137.068872][ T6298] path_mount+0x4d0/0xbc0 [ 137.068908][ T6298] __se_sys_mount+0x28c/0x2e0 [ 137.068939][ T6298] ? fput+0x8f/0xc0 [ 137.069042][ T6298] __x64_sys_mount+0x67/0x80 [ 137.069074][ T6298] x64_sys_call+0x2d61/0x3020 [ 137.069112][ T6298] do_syscall_64+0x12c/0x370 [ 137.069216][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.069245][ T6298] RIP: 0033:0x7f84119bc799 [ 137.069267][ T6298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.069303][ T6298] RSP: 002b:00007f841040f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.069332][ T6298] RAX: ffffffffffffffda RBX: 00007f8411c35fa0 RCX: 00007f84119bc799 [ 137.069411][ T6298] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 137.069432][ T6298] RBP: 00007f841040f090 R08: 00002000000002c0 R09: 0000000000000000 [ 137.069476][ T6298] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 137.069522][ T6298] R13: 00007f8411c36038 R14: 00007f8411c35fa0 R15: 00007fff50c62868 [ 137.069551][ T6298] [ 137.289408][ T6295] loop0: detected capacity change from 0 to 512 [ 137.334635][ T6295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.455237][ T6304] loop6: detected capacity change from 0 to 256 [ 137.580980][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.719043][ T6294] SELinux: failed to load policy [ 137.902118][ T6316] tmpfs: Bad value for 'mpol' [ 137.972106][ T6311] EXT4-fs: Ignoring removed bh option [ 138.150595][ T6311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.230620][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 138.388287][ T6329] netlink: 88 bytes leftover after parsing attributes in process `syz.6.663'. [ 138.738702][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.783736][ T6339] set_capacity_and_notify: 1 callbacks suppressed [ 138.783758][ T6339] loop0: detected capacity change from 0 to 512 [ 138.799502][ T6331] loop3: detected capacity change from 0 to 1024 [ 138.827116][ T6339] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.840727][ T6331] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.866455][ T6339] EXT4-fs (loop0): 1 truncate cleaned up [ 138.885136][ T6339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.961752][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.668'. [ 138.989804][ T6331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.021541][ T6331] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.120632][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.126068][ T28] audit: type=1400 audit(1772467829.841:339): avc: denied { create } for pid=6361 comm="syz.5.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 139.334761][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.378248][ T6360] SELinux: failed to load policy [ 139.443052][ T6373] loop3: detected capacity change from 0 to 164 [ 139.466801][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 139.497372][ T6371] loop0: detected capacity change from 0 to 256 [ 139.954894][ T28] audit: type=1400 audit(1772467830.618:340): avc: denied { append } for pid=6385 comm="syz.6.679" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 139.978346][ T28] audit: type=1400 audit(1772467830.618:341): avc: denied { read } for pid=6385 comm="syz.6.679" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.043383][ T28] audit: type=1400 audit(1772467830.618:342): avc: denied { open } for pid=6385 comm="syz.6.679" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.116346][ T28] audit: type=1400 audit(1772467830.618:343): avc: denied { write } for pid=6385 comm="syz.6.679" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.208688][ T28] audit: type=1400 audit(1772467830.627:344): avc: denied { ioctl } for pid=6385 comm="syz.6.679" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.263526][ T6382] loop1: detected capacity change from 0 to 1024 [ 140.365464][ T6382] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.485816][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 140.524780][ T6382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.585217][ T28] audit: type=1400 audit(1772467831.207:345): avc: denied { name_bind } for pid=6415 comm="syz.0.683" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 140.670137][ T6382] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.787134][ T6425] loop3: detected capacity change from 0 to 4096 [ 140.802114][ T6425] EXT4-fs: Ignoring removed bh option [ 140.841516][ T6425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.129887][ T6423] loop5: detected capacity change from 0 to 1024 [ 141.154424][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 141.190047][ T6423] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.207961][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.688'. [ 141.324954][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 141.354895][ C0] ================================================================== [ 141.365268][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 141.372645][ C0] [ 141.375019][ C0] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1: [ 141.383220][ C0] wq_worker_tick+0x60/0x230 [ 141.388164][ C0] sched_tick+0xda/0x210 [ 141.392494][ C0] update_process_times+0x15e/0x190 [ 141.397852][ C0] tick_nohz_handler+0x275/0x3d0 [ 141.403557][ C0] __hrtimer_run_queues+0x218/0x4f0 [ 141.409557][ C0] hrtimer_interrupt+0x269/0x810 [ 141.416237][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 141.423515][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 141.431152][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 141.437374][ C0] _raw_spin_unlock_irq+0x12/0x30 [ 141.444578][ C0] process_scheduled_works+0x497/0x9e0 [ 141.451173][ C0] worker_thread+0x581/0x770 [ 141.457937][ C0] kthread+0x22a/0x280 [ 141.462620][ C0] ret_from_fork+0x150/0x360 [ 141.468349][ C0] ret_from_fork_asm+0x1a/0x30 [ 141.474658][ C0] [ 141.477948][ C0] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0: [ 141.487290][ C0] wq_worker_tick+0x60/0x230 [ 141.492458][ C0] sched_tick+0xda/0x210 [ 141.497253][ C0] update_process_times+0x15e/0x190 [ 141.503039][ C0] tick_nohz_handler+0x275/0x3d0 [ 141.508658][ C0] __hrtimer_run_queues+0x218/0x4f0 [ 141.514189][ C0] hrtimer_interrupt+0x269/0x810 [ 141.519829][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 141.528565][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 141.534716][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 141.540927][ C0] queue_work_on+0xda/0x140 [ 141.545875][ C0] tty_insert_flip_string_and_push_buffer+0x1ce/0x1f0 [ 141.552883][ C0] pty_write+0x70/0x90 [ 141.557290][ C0] tty_put_char+0x8f/0xc0 [ 141.561843][ C0] __process_echoes+0x2f9/0x6b0 [ 141.567480][ C0] n_tty_receive_buf_common+0x918/0xc10 [ 141.573307][ C0] n_tty_receive_buf2+0x33/0x40 [ 141.578348][ C0] tty_ldisc_receive_buf+0x66/0xf0 [ 141.583516][ C0] tty_port_default_receive_buf+0x59/0x90 [ 141.589337][ C0] flush_to_ldisc+0x148/0x340 [ 141.594148][ C0] process_scheduled_works+0x4de/0x9e0 [ 141.599661][ C0] worker_thread+0x581/0x770 [ 141.604312][ C0] kthread+0x22a/0x280 [ 141.608670][ C0] ret_from_fork+0x150/0x360 [ 141.613511][ C0] ret_from_fork_asm+0x1a/0x30 [ 141.618335][ C0] [ 141.620691][ C0] value changed: 0x00000000000cf850 -> 0x00000000000d1f60 [ 141.628016][ C0] [ 141.630375][ C0] Reported by Kernel Concurrency Sanitizer on: [ 141.636654][ C0] CPU: 0 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(full) [ 141.647715][ C0] Tainted: [W]=WARN [ 141.651642][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.661740][ C0] Workqueue: events_unbound flush_to_ldisc [ 141.667599][ C0] ================================================================== [ 141.680945][ T6423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 141.713589][ T6423] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.747846][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.794310][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'. [ 142.000475][ T4920] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.