last executing test programs: 1m9.038761528s ago: executing program 0 (id=17): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x28040811}, 0x4000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x184, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0xf, 0x0, 0x1, [@typed={0x14, 0xbf, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x92, 0x0, 0x0, @pid}, @nested={0x30, 0x3b, 0x0, 0x1, [@nested={0x2c, 0x1c, 0x0, 0x1, [@nested={0x25, 0x105, 0x0, 0x1, [@typed={0x4, 0x11f}, @generic="14daf6e8b2d7e38286cbd3ef221540b41ca6c7df2f06ac1e4273ddaf88"]}]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xa9, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x6d, 0x0, 0x1, [@nested={0x108, 0xd1, 0x0, 0x1, [@nested={0x104, 0x112, 0x0, 0x1, [@nested={0xfd, 0xcd, 0x0, 0x1, [@generic="42110f1d6f88ff52f41c6a703875b814ba2c48b3f0cf607256b8d243a3227bb11571d268c41187452c28663be3d9e39505157b48b9212b07ca7b4686a2a55f4f80cbea3f494421c794c12d35f89faffe1de6605dfada605ad7c5d1212f30e4f92cf2ae0e57c77aa34e47801d546b04458c2f6011fb906b6ed5217cb687ba4ddfe78e78b635fdfc513245c2cf7b69f9218d14bb4039e9e3c4cd1c649f4cdea528557d814da783fd6a399fb44d9ceae7ab2e046a74094f015f2aad655abdd7d7bd884d9eacfdffb8d690d970427074e38ab80e3fd67c77f2ec7fb214f91cdf12924a9bc02b01c5e2618391a7ef7c9a44cdce8b538dc7", @nested={0x4, 0x28}]}]}]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0x1, 0x0, 0x200, 0x9400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r3, 0x0) chmod(&(0x7f0000000740)='./cgroup.cpu/cgroup.procs\x00', 0x30) timer_create(0x9, &(0x7f0000000180)={0x0, 0x4, 0x4}, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x8, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x2, 0x8}, 0x10ecc8, 0x2c65, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0xffffffffffffff2e, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) 1m8.788783033s ago: executing program 0 (id=18): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r2, 0x25, 0x4, @void}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r4, &(0x7f0000001000)=""/61, 0x3d) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)='batadv0\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000016c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x4}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x87, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}}}}}}}, 0xfdef) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket(0x2b, 0x80801, 0x1) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000002c0)={0x1, 0x0, {0x29, 0x33, 0x14, 0x2, 0xc, 0x401, 0x4, 0xce, 0x1}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m7.740479418s ago: executing program 0 (id=24): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000180)) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f000000b680)=[{{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000000580)="5fecf1ef", 0x4}, {0x0}], 0x2, 0x0, 0x0, 0x8090}}], 0x1, 0xd0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010000}}}}}, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffc, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_dev$usbfs(0x0, 0x77, 0x1013c1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000280000000000000a30000000100a090000000000000000000200000008000540000000270900000130000000140a03000000000000000000020000000900020073797a300000000008000340000000010800034000000001140000001100010000000000000000000000000a00"/136], 0x88}}, 0x0) 1m6.80137044s ago: executing program 2 (id=33): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x99f}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x80000007) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r2, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x9, 0x34, @random="09a9863093"}, @NL80211_ATTR_SSID={0x24, 0x34, @random="4ef675e28e47f9bdef3a09cee9a386b4171a76c4cd46f11244e9d7bf10910899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x74}}, 0x4080) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) setns(0xc9, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x27, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x6, 0x9}, 0x0, 0x2080001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x7c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xe}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="25032abd7000fcdbdf251300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) 1m6.579223535s ago: executing program 2 (id=37): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x1010051, &(0x7f0000000100), 0x1, 0x567, &(0x7f0000000ac0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff91, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x47, &(0x7f0000000240)={@random="b10d13d9eb32", @link_local={0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@x25={0x805, {0x0, 0xa, 0x17, "d57749ce9a2262475554c894ba0e59b83406550f9cd91c867f98d07a91d19d0d13c0d392c387a5ca887e16de4118"}}}}, 0x0) 1m6.532240746s ago: executing program 0 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0x01\x00', 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffd}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0xa18c14, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d6d6163696e7569742c757466383d302c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c726f6469722c696f636861c3d065743d6d6163726f6d616e2c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d302c666c7573682c756e695f786c6174653d312c757466383d302c64656275672c00"], 0x81, 0x2a6, &(0x7f0000000180)="$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") bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) readv(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 1m6.39154055s ago: executing program 0 (id=41): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x11d045}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x4, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r5) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r6) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4c7, 0x7}, 0x0, 0x0, 0x3}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x11d045}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x4, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00'}) (async) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r5) (async) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r6) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4c7, 0x7}, 0x0, 0x0, 0x3}) (async) 1m6.136983566s ago: executing program 0 (id=43): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x52, 0x1, 0x0, 0x4, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x400000000008309}, 0x100600, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x20000097d, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, r2, r2], 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x40, 0x5}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000001c00)={0x4, 0xffffffffffffffff, 0xf, {0x100, 0x3}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x24000890}, 0x4000) 1m6.136701416s ago: executing program 32 (id=43): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x52, 0x1, 0x0, 0x4, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x400000000008309}, 0x100600, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x20000097d, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, r2, r2], 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x40, 0x5}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000001c00)={0x4, 0xffffffffffffffff, 0xf, {0x100, 0x3}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x24000890}, 0x4000) 1m6.097509767s ago: executing program 2 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xf}, 0x3092, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x158) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x1c901) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000340)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) chdir(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c000000060a09040000000000000000020000237000048010000180080001006c6f6700040002805c0001800a00010071756f74610000004c0002800c000440fffffffffffffffb0c000440ffffffff7fffffff0c00044000000000ffffffff0c00014000000000000000020c00044000000000000000050c00014000000000000000070900010073797a30000000000900020073797a320000000014000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r2) r3 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@resuid}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@bsdgroups}, {@mb_optimize_scan}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, 0x0, 0x0) utimes(&(0x7f0000000000)='./file1\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x88c0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f0000000140), 0x0, 0x200, 0x20000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x7, @loopback, 0x10000006, 0xfffffffd}, 0x80, 0x0}, 0x2004c040) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, 0x0) sendmsg$kcm(r7, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x400000, 0x1}, 0x80, 0x0}, 0x20040010) 1m5.741679015s ago: executing program 2 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0x01\x00', 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffd}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0xa18c14, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d6d6163696e7569742c757466383d302c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c726f6469722c696f636861c3d065743d6d6163726f6d616e2c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d302c666c7573682c756e695f786c6174653d312c757466383d302c64656275672c00"], 0x81, 0x2a6, &(0x7f0000000180)="$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") bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) readv(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 1m5.160488528s ago: executing program 2 (id=55): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000167400ffff2abd7000fedbdf2500000000496abd4c10de243837eee0f286335d17c6a3245c08bc2f6ed3", @ANYRES32=0x0, @ANYBLOB="178100000000000008001c00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000100)={0xbb, 0x3, 0x3}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x6, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) rt_sigtimedwait(&(0x7f0000000a00)={[0x8001]}, 0x0, &(0x7f0000000ac0)={0x0, 0x989680}, 0x8) ptrace$poke(0x4, 0x0, &(0x7f0000000140), 0x3) sendto$inet_nvme_of_msg(r2, &(0x7f0000000540)={@data_h2c_hdigest={{0x6, 0x0, 0x18, 0x1c, 0x200000}, 0x7, 0x0, 0xa208, 0x10, "fdd5f472"}, @val=&(0x7f0000000440)="ce9c99bb9c632482403b4170971ef743ce7032be4815f2ccdd03b45ea9bdd87c0ede771a2b8e5718e6fd8c06576aa3f1f5fa9e551a66c59b83f5488b7393ef669c3d46b207edaae38a6ac75b0272547accb9b4affa089098e4464e287f33ca9b111142df85e2a7507876865096a867629f0bfa3aa6d02ff3d06a72e2c6cd34ede7e2299825bac171ecb7691b13431c0446309ace4f3a40f9f6110c830e37c998da89e2b71df50ee170fd8e0ed2392099fad350a9828d158d363e368209bc6107f790c02b8d0f8e"}, 0x88, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x1, 0xee, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0xb, 0xc0, 0x8, {0x8, 0xb, 0x2, 0x0, 0x1, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x40, 0x15b3}, [@source_unit={0xc, 0x24, 0xb, 0xf8, 0x1, 0x1, 0x6, 0x8}, @mixer_unit={0x7, 0x24, 0x5, 0x2, 0x0, "21f0"}, @selector_unit={0x7, 0x24, 0xc, 0xc, 0x2, "b823"}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x0, 0x6, 0x2, 0xab, 0x8, 0x4, 0xae, 0x1}, @power_domain={0x9, 0x24, 0x10, 0x1, 0xff, 0xac9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x9, 0x0, 0x8, 0x2, 0x4, 0x4, 0x0, 0xe9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2000, 0x4, 0x0, 0xfc}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x5, 0x0, {0xa, 0x25, 0x25, 0x2d, 0xd6, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x4, 0x3, 0xf8}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x10, 0x3, 0x1, 0xf, "2be360", "6db8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x9, 0x7f, {0xa, 0x25, 0x25, 0xa, 0xb, 0x9}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x300, 0x9, 0x5, 0x8, 0x10, 0x2}, 0x1f, &(0x7f0000000740)={0x5, 0xf, 0x1f, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x8, 0xee00, 0x9f3, [0xc030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xaaf999bfeb07c760, 0x1, 0xb4, 0x9}]}, 0x2, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x816}}, {0x98, &(0x7f00000007c0)=@string={0x98, 0x3, "77b583eb76c3eadfa76205a06d7379ddaa61228fff8dfe5d67f5863cd238dd554a64ee75eff9062f6aaccdb19278f1d1ca4be888ce3e436af75d148e2ea7260c00afb3e54961657cc1b51f5ccb6a4637ae1ec0812b3a24583282fa84c40e0615296c63f9881d5e5879153223fce89b403c9719a932eb7b33f101379f9cb494ad3cbacb93f4078e49c86bc9fe2e5f419ae31d24156868"}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x80000000}]) io_getevents(r6, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ptrace$peek(0x2, 0x0, &(0x7f00000001c0)) 1m4.555005613s ago: executing program 2 (id=57): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x3, 0x0) epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x70bd28, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8864}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000"], 0x24}}, 0x4000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x7, 0x7], 0x4, 0x5}, {0xffffffffffffffff, [0x7]}}}}, {{@ip={@multicast1, @empty, 0xffffffff, 0xffffffff, 'veth1_to_batadv\x00', 'batadv_slave_1\x00', {0xff}, {}, 0xcb, 0x2, 0x6c}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) syz_emit_ethernet(0x56, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1486dd600040000020060100000000000000000000ffff0a010101fe8000000000000000000000000000aa4e244e28b369ec859de99159796a3bcd3aee0b86785ae5ee31dc9ae646991ad4b0a52eb924b23e8bfbce3909f68f956886519b3c153c00fbedc4a59081c68645bc441564a1046f1806043287b5ebb6b5f8829ba96027d5e3e106f42b30151d8c27f958b71297199acf9adc973428009bbc4f23541fc88683644afd9f76b47b8e4082101d2ef9fffd74d8e88ce2056e0f4133c221518dd26666eb0a8b4130849fd488bfdf15", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8000000290780000220b75e3e30fbadb52a40300"], 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x3ff, 0x10002000402) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r6, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x8) ppoll(&(0x7f0000000040)=[{r6, 0x140}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)="2829652816c7d3cbf20d961e93b8733fc47556eef0061b3b26970704573c4970ad324cfd6b22d7112ec9c3651c8c74c521b3a0e2af6865271fcfe0fff10aa94842a215c2ecd9b8c2139855601d20cee8ec326f258f507aa9a391c48f0668680e7e303935860847441634ec7dbce6ea8d319a4e8de5d5e6c54f27050d020b7e221a", 0x81) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000180), &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a80)={r5, 0x20, &(0x7f0000001a40)={&(0x7f0000001900)=""/63, 0x3f, 0x0, &(0x7f0000001940)=""/223, 0xdf}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000008634000000460018cea6badfbe515df7d6da29b406000000000000010000000000070000b696ea2d0000000000d4de3c622dab2e1e55583b69f6d0f221cafeffdb31c9afbed7b47be4f65c4cff1ee5f1fdbdd9bfc9b63a52bf9428b771835e9cd4544b663c280607a2638b161f2455705629f87f833af28d842ec30aab8a40fb8094b58ffd1c", @ANYRES16=r7], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000880)=""/4096, 0x40f00, 0xdb, '\x00', r8, @fallback=0x2c, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000018c0)={0x10, 0xe, 0x7, 0xa}, 0x10, r9, r5, 0x3, &(0x7f0000001ac0)=[r7, r6, r7, r7], &(0x7f0000001b00)=[{0x8, 0x1, 0xf, 0xa}, {0x4, 0x3, 0x10, 0x2}, {0x3, 0x3, 0x10, 0x8}], 0x10, 0x6}, 0x94) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000240)=[@exit_looper, @exit_looper, @dead_binder_done, @enter_looper], 0xa8, 0x0, &(0x7f0000000280)="b63bc623fd46e6c8a65a4a9ecb67310281e85335851d3f47b317ab92e80287ce112ba853e67f93673bdbe55b5017333e6f1d538c1c25b6fde916d4df689229c03f5a24ccb93197eedabd1dedce222224280d9fea884c67bb645ffbaeb2cfd3427f2682d884b1623573bb097641725d5600f3458c03a8da1a2983d06194bf17215b82dd94cdb28815cc3b47cc810e90f0ce3f79728a9127d9b2bb28ca24c0ae0da5102b47bd4417da"}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x7fe, 0x8}) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000040)={0x2, 0x1, 0x1000, 0x8, 0x9, 0x8, 0x22, "c6a298cafc66d14e1f64cdf0c3a08c7a5fbc23e6", "77febe89a1d3389aa42f27caa249ec0b79da90b1"}) 1m4.492196794s ago: executing program 33 (id=57): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x3, 0x0) epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x70bd28, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8864}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000"], 0x24}}, 0x4000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x7, 0x7], 0x4, 0x5}, {0xffffffffffffffff, [0x7]}}}}, {{@ip={@multicast1, @empty, 0xffffffff, 0xffffffff, 'veth1_to_batadv\x00', 'batadv_slave_1\x00', {0xff}, {}, 0xcb, 0x2, 0x6c}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) syz_emit_ethernet(0x56, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1486dd600040000020060100000000000000000000ffff0a010101fe8000000000000000000000000000aa4e244e28b369ec859de99159796a3bcd3aee0b86785ae5ee31dc9ae646991ad4b0a52eb924b23e8bfbce3909f68f956886519b3c153c00fbedc4a59081c68645bc441564a1046f1806043287b5ebb6b5f8829ba96027d5e3e106f42b30151d8c27f958b71297199acf9adc973428009bbc4f23541fc88683644afd9f76b47b8e4082101d2ef9fffd74d8e88ce2056e0f4133c221518dd26666eb0a8b4130849fd488bfdf15", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8000000290780000220b75e3e30fbadb52a40300"], 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x3ff, 0x10002000402) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r6, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x8) ppoll(&(0x7f0000000040)=[{r6, 0x140}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)="2829652816c7d3cbf20d961e93b8733fc47556eef0061b3b26970704573c4970ad324cfd6b22d7112ec9c3651c8c74c521b3a0e2af6865271fcfe0fff10aa94842a215c2ecd9b8c2139855601d20cee8ec326f258f507aa9a391c48f0668680e7e303935860847441634ec7dbce6ea8d319a4e8de5d5e6c54f27050d020b7e221a", 0x81) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000180), &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a80)={r5, 0x20, &(0x7f0000001a40)={&(0x7f0000001900)=""/63, 0x3f, 0x0, &(0x7f0000001940)=""/223, 0xdf}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000008634000000460018cea6badfbe515df7d6da29b406000000000000010000000000070000b696ea2d0000000000d4de3c622dab2e1e55583b69f6d0f221cafeffdb31c9afbed7b47be4f65c4cff1ee5f1fdbdd9bfc9b63a52bf9428b771835e9cd4544b663c280607a2638b161f2455705629f87f833af28d842ec30aab8a40fb8094b58ffd1c", @ANYRES16=r7], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000880)=""/4096, 0x40f00, 0xdb, '\x00', r8, @fallback=0x2c, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000018c0)={0x10, 0xe, 0x7, 0xa}, 0x10, r9, r5, 0x3, &(0x7f0000001ac0)=[r7, r6, r7, r7], &(0x7f0000001b00)=[{0x8, 0x1, 0xf, 0xa}, {0x4, 0x3, 0x10, 0x2}, {0x3, 0x3, 0x10, 0x8}], 0x10, 0x6}, 0x94) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000240)=[@exit_looper, @exit_looper, @dead_binder_done, @enter_looper], 0xa8, 0x0, &(0x7f0000000280)="b63bc623fd46e6c8a65a4a9ecb67310281e85335851d3f47b317ab92e80287ce112ba853e67f93673bdbe55b5017333e6f1d538c1c25b6fde916d4df689229c03f5a24ccb93197eedabd1dedce222224280d9fea884c67bb645ffbaeb2cfd3427f2682d884b1623573bb097641725d5600f3458c03a8da1a2983d06194bf17215b82dd94cdb28815cc3b47cc810e90f0ce3f79728a9127d9b2bb28ca24c0ae0da5102b47bd4417da"}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x7fe, 0x8}) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000040)={0x2, 0x1, 0x1000, 0x8, 0x9, 0x8, 0x22, "c6a298cafc66d14e1f64cdf0c3a08c7a5fbc23e6", "77febe89a1d3389aa42f27caa249ec0b79da90b1"}) 1m3.890382718s ago: executing program 3 (id=60): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lli}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="b306ac9676b27004d3c8ff6f88ec", 0x0, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000b40)={0x0, 0x0, 0x1000010000000b, 0xfffffffffffffffb}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ftruncate(r2, 0x80000000) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x0, 0x0, 0x73f0, 0x5}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x73f4, 0x73e9}) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000340)) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001940)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000140)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='personality\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c000000020000000000000004000d0000000500000008000000000000000e000000020000000000428f28f0ce5199e99597b6e6c226d927b15743ac033136de5fbbf0be097be468e491e731f2297e5e30801f0ec76e7b1c7fa667c1c291e221604ee8b3ceab4bb84a05fc0528b8dddb48f0"], &(0x7f0000000f40)=""/4089, 0x46, 0x9ec, 0xa, 0x331}, 0x28) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x404200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) 1m3.022778459s ago: executing program 3 (id=66): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xf, 0xfff1}, {0xffff}, {0x2, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) ioperm(0xc, 0x8, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x58d200, 0x92) flock(r5, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fea000000071131a0000000000"], &(0x7f0000000480)='syzkaller\x00', 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) 1m2.088791621s ago: executing program 3 (id=72): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 64) r2 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x30208, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x401, 0x7ab8}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/156, 0x9c}], 0x4}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8c0}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) (async, rerun: 64) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) (async, rerun: 64) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x4000040) (async, rerun: 32) socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x6}, &(0x7f0000000300)=0x8) (async) mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r0}, 0xc) 1m2.027841162s ago: executing program 3 (id=73): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0x01\x00', 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffd}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0xa18c14, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d6d6163696e7569742c757466383d302c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c726f6469722c696f636861c3d065743d6d6163726f6d616e2c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d302c666c7573682c756e695f786c6174653d312c757466383d302c64656275672c00"], 0x81, 0x2a6, &(0x7f0000000180)="$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") bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) readv(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 1m1.784856178s ago: executing program 3 (id=75): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10480, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004804) 1m1.472965725s ago: executing program 3 (id=76): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x10c828, 0x0, 0x7, 0x3, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0xc}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x0, 0xb, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000000500)={0x2, 0x8, [0xc, 0x6, 0xb26, 0x7fff], &(0x7f00000000c0)=[0x0]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 1m1.472751805s ago: executing program 34 (id=76): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x10c828, 0x0, 0x7, 0x3, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0xc}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x0, 0xb, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000000500)={0x2, 0x8, [0xc, 0x6, 0xb26, 0x7fff], &(0x7f00000000c0)=[0x0]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 40.942285808s ago: executing program 1 (id=305): r0 = socket$kcm(0x10, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000c35000/0x3000)=nil, 0x3000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000ffb000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000100)=0x1) ftruncate(r1, 0x1000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) setns(0xc9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 40.584658106s ago: executing program 1 (id=308): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8000000000000001, 0x401}, 0x10ecc8, 0x1224, 0xfdffffff, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) (async) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x9) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000480340001800c0001007061796c6f6164"], 0x94}, 0x1, 0x0, 0x0, 0x48046}, 0x0) 40.42928103s ago: executing program 1 (id=315): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x99f}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x80000007) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r2, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x9, 0x34, @random="09a9863093"}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="4ef675e28e47f9bdef3a09cee9a386b4171a76c4cd46f112"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x4}]}, 0x70}}, 0x4080) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) setns(0xc9, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x27, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x6, 0x9}, 0x0, 0x2080001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x7c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xe}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="25032abd7000fcdbdf251300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) 40.246883034s ago: executing program 1 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x4}, 0x0, 0xff6fbffffffffffe, 0xffffffffffffffff, 0x1) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b08"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x4014) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtclass={0x47, 0x28, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0x5}, {0xb, 0x8}, {0x1, 0xfff3}}, [@tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @tclass_kind_options=@c_mq={0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041810}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="32cd7d993b6b68b9deb723fe9127d3ef", 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='\x00', 0x1, 0x20040094, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 37.534159838s ago: executing program 1 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0184d08, 0x0) syz_clone3(&(0x7f0000000080)={0x500000080, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair(0x2a, 0x2, 0x7fff, &(0x7f00000000c0)) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x8910, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000005340)=[{{&(0x7f0000000040)=@phonet, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/19, 0x13}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/35, 0x23}], 0x4, &(0x7f0000000480)=""/223, 0xdf}, 0x8}, {{&(0x7f0000000580)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/41, 0x29}], 0x2, &(0x7f0000000740)=""/211, 0xd3}, 0x2cdb}, {{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f00000009c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/161, 0xa1}, {&(0x7f0000000ac0)=""/12, 0xc}, {&(0x7f0000000b00)=""/7, 0x7}, {&(0x7f0000000b40)=""/55, 0x37}], 0x6, &(0x7f0000000c00)=""/250, 0xfa}, 0x90e}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/212, 0xd4}, {&(0x7f0000000e00)=""/254, 0xfe}, {&(0x7f0000000f00)=""/75, 0x4b}, {&(0x7f0000000f80)=""/86, 0x56}], 0x4, &(0x7f0000001040)=""/42, 0x2a}, 0x200}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001080)=""/47, 0x2f}, {&(0x7f00000010c0)=""/126, 0x7e}, {&(0x7f0000001140)=""/183, 0xb7}, {&(0x7f0000001200)=""/112, 0x70}, {&(0x7f0000001280)=""/65, 0x41}, {&(0x7f0000001300)=""/198, 0xc6}], 0x6, &(0x7f0000001480)=""/165, 0xa5}, 0x1}, {{&(0x7f0000001540)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001640)=[{&(0x7f00000015c0)=""/96, 0x60}], 0x1, &(0x7f0000001680)=""/66, 0x42}, 0x4833}, {{&(0x7f0000001700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000001780)=""/106, 0x6a}, {&(0x7f0000001800)=""/17, 0x11}, {&(0x7f0000005640)=""/4112, 0x1010}, {&(0x7f0000002840)=""/255, 0xff}, {&(0x7f0000002940)=""/45, 0x2d}], 0x5, &(0x7f0000002a00)=""/37, 0x25}, 0x800}, {{&(0x7f0000002a40)=@isdn, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002ac0)=""/204, 0xcc}, {&(0x7f0000002bc0)=""/93, 0x5d}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/180, 0xb4}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000003e40)=""/102, 0x66}, 0xc}, {{&(0x7f0000003ec0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003f40)=""/167, 0xa7}, {&(0x7f0000004000)=""/120, 0x78}], 0x2, &(0x7f00000055c0)=""/79, 0x4f}, 0x1}, {{&(0x7f0000004100)=@qipcrtr, 0x80, &(0x7f0000005240)=[{&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/97, 0x61}, {&(0x7f0000005200)=""/55, 0x37}], 0x3, &(0x7f0000005280)=""/150, 0x96}}], 0xa, 0x123, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000100)={0x2d, 0x22, 0x0, 0x2, 0x8, 0xac, 0x5, 0x2, 0x1}) 36.5879875s ago: executing program 1 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x24000042) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x20) io_setup(0x20fe, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x65d00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 29.316548271s ago: executing program 5 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbdb, &(0x7f0000001f40)="$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") r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="7800000018002507b9409b14ffff00000220be040205fe050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460cc1d8f9800b718e5177f6afd93fa4d789b6ec0cff3959547f509058ba86c902000000404a32000400160005000a00000000", 0x78, 0x8884, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f0000000000)='gid_map\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x8012, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000080)="75a101010100188d9233a34871d600000000", 0x12, 0xfffffffffffffffe) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}, 0x4}}, 0x10, 0x0}, 0x4000040) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x20000090) accept(0xffffffffffffffff, &(0x7f0000000300)=@un=@abs, &(0x7f0000000380)=0x80) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40240, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000400)={0x7, 0x21, 0x1}, 0xffffffc0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/num_groups\x00', 0x2, 0x0) write(r7, &(0x7f00000004c0)='1', 0x1) read(0xffffffffffffffff, &(0x7f0000000940)=""/240, 0xf0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000100)=0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 28.868987601s ago: executing program 5 (id=430): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x3000, 0x2000003, 0x12, r0, 0x8000000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r1, 0x118, 0x2c, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0xa, 0x0, @thr={&(0x7f0000000100)="29fdd1fae6fcf8b642c2324d8c1d9f5183dd4aff970a8bc4189ecbc16c07d172702b75017414665c8df4e507947eeaa2f8a8acf7119bceacd28a170c5522b2809498ec318b9dcbe45e03cde8eb31741776b4ff75d601d34d5f6820714911e933a8269900ed74675f3d36a06fb7944e3e6eb5576734f9b8ee6670dabc75b9c20979628be20e286ca913835873de45", &(0x7f00000001c0)="35b92d1950bfdcbadacb317b101f81f03dfef87288d02a2400ae8e2c8a8250bb27311b48ff936ee70a27016f4a9bdb1390516275a5bc2186908121783e68b6a709ab544611881b9ffe1f0de1a264f396f721d6389f714197632ce11a2ea6a249fd0ef8a61b0117f0ffb57d1b68bfd92faf86697b0d80c01ee4ba512d4e0008f0027cfa4e7aa449969a807f7e32d11856b174a3d724534341"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) removexattr(0x0, 0x0) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x4110, 0x20000000, 0x0, 0x9, 0x401, 0x5}, 0x0, 0x0, r3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000000)=""/142, 0x8e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 27.893213544s ago: executing program 5 (id=435): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x6c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x802) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4734, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000600)="98e2a815325d16965a04d665912e3ae38e9264095421d18b72301ab25d9849a3631491688bebafa42c86c3d054e89731ed0a1cff124869a964126b8974e822dc", 0x40, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x38, 0x1403, 0x0, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f00000019c0)={0x18, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x0) 27.65536542s ago: executing program 5 (id=438): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x99f}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x80000007) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r2, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x9, 0x34, @random="09a9863093"}, @NL80211_ATTR_SSID={0x22, 0x34, @random="4ef675e28e47f9bdef3a09cee9a386b4171a76c4cd46f11244e9d7bf1091"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x4}]}, 0x78}}, 0x4080) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) setns(0xc9, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x27, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x6, 0x9}, 0x0, 0x2080001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x7c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xe}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="25032abd7000fcdbdf251300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) 27.276471809s ago: executing program 5 (id=440): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x9, 0xc4}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x37) close(0x3) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x180000, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x19e) mkdir(&(0x7f00000001c0)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_pauseparam={0x13, 0x7f, 0x4, 0x9}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x8, 0x1000000, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000408, &(0x7f0000000440)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) write$cgroup_int(r4, &(0x7f0000000140), 0x12) write$tun(r4, 0x0, 0x104a) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x5000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) accept4(r0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) 26.969083476s ago: executing program 5 (id=443): write(0xffffffffffffffff, &(0x7f0000001000)='-', 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) setresgid(0xee00, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000010c0)='pids.current\x00', 0x0, 0x0) 21.432597886s ago: executing program 35 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x24000042) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x20) io_setup(0x20fe, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x65d00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 11.692336865s ago: executing program 36 (id=443): write(0xffffffffffffffff, &(0x7f0000001000)='-', 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) setresgid(0xee00, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000010c0)='pids.current\x00', 0x0, 0x0) 3.979822546s ago: executing program 4 (id=640): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x400, 0x6, 0x7, 0x6, 0x778d, 0x7, 0x0, 0x0}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000300)={r4, 0x5, 0x30, 0xc2, 0x1}, &(0x7f0000000380)=0x18) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e15f1d4effe2a71fdf2501"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2a020480) io_setup(0x9, &(0x7f0000000200)=0x0) io_submit(r6, 0x4, &(0x7f0000009080)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x1000, 0x0, 0x1, r1}, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x2}, 0x0]) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x201, 0xd) setsockopt$MRT6_TABLE(r7, 0x29, 0xcf, &(0x7f0000000600)=0xffffffff, 0x4) pwrite64(r7, &(0x7f0000000100)="6f7403440861f6cb3819ba31896bddf1fc", 0x11, 0xfffe) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) fallocate(r8, 0x20, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x11, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000640), 0x4}, 0x1, 0x1224, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0x8, 0xffffffffffffffff, 0x8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x8, 0x200, &(0x7f0000000200)="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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r10, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r10, 0xc138fd09, &(0x7f0000000000)) 2.11149984s ago: executing program 9 (id=661): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x8100, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000340)={0xa1151dea05a18043, @remote, 0x4e24, 0x3, 'none\x00', 0x8, 0x3, 0x6b}, 0x2c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) dup2(r3, r3) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x48) getpid() r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x7e4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x7b8, 0x2, [@TCA_BPF_ACT={0x7b4, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1f4, 0x5, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036ca696f840b6fd058e9831b7d5556fc2ddb3310402db87ab3b0fb053ee9ec6a5623950d5c8c27e52368dee7c43591d3c28005b61db04d1f0e1"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xac, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x72, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x318, 0x13, 0x0, 0x0, {{0x7}, {0x1c4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc8509"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xbd, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a74a340b278cc3949b549385a407cd95c5697ed222bd3d4e4c2a0bf56c7937d87120b4f89a05bbde47670503d8a27ee2823502a90679b7fb497e236ea19c82fa844f28657c37f81f5"}}, @TCA_IPT_TARG={0x64, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5"}}]}, {0x12d, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x7e4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0xfc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) write(r6, &(0x7f0000000000)="9988819883d8f8ca16d35341862968587ae03a1be6c0f36eadfd9c6342ee2ebd276766513f5f7f63f0b9d035a0cb2624f9493430cedaf9c0bb6baccb85c5a3680d958047d96902d1bb188bb62bd593c750a092f9e86ae16b308208a59d9bdf4b3ae950617e0f7b20e31d142d5d8f638a553ba3fb834e2602a0627460ea829b43cc3904cfc9edfcce7617e945bf3f862d6100264e51ad1500e40a4e3d041a4fec8e8c7b3eeee7d6e776682b8f6aa94d108451dee8ffaed0bf9b34dffeec2e0a85b6e0c009648163", 0xc7) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x17, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28) 1.323407559s ago: executing program 4 (id=663): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000040)={&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001940)=""/4079, 0xfef}) close(r0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000240)=@filename='./file0/../file0\x00', 0x0, 0x0) 1.240421071s ago: executing program 8 (id=665): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x88004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xc}, 0x3204, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001d40)=@raw={'raw\x00', 0x64, 0x3, 0x310, 0x0, 0xffffffad, 0x190, 0x0, 0x190, 0x278, 0x268, 0x268, 0x278, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x178, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x7fffffff, 0x400, 'syz0\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x5a, &(0x7f0000000980)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x4a9544369168e754, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x81, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="c9bf23d420d006e266b2d4ebfd5f70c301885de51462a53d6d40736a", @ANYRES16=r2, @ANYBLOB="0d03ffffffffffdbdf2513000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000840)={[{@barrier}, {@journal_async_commit}, {@norecovery}, {@noinit_itable}, {@jqfmt_vfsv0}, {@data_err_abort}, {@usrjquota}, {@nobarrier}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@data_err_abort}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='check=relaxed,unhide\x00uid=', @ANYRESHEX, @ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="41757466382c686964652c757466382c6f76657272696465726f636b7065726d2c63727566742c6d61703d6e6f726d616c2c6e6f636f6d70726573732c636865636b3d72ed6c617865642c7375626a5f726f6c653d757466382c00"], 0x2, 0x6b8, &(0x7f0000000180)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f0000000400)='./file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.212278932s ago: executing program 7 (id=666): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a00", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r2, 0x25, 0x4, @void}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r4, &(0x7f0000001000)=""/61, 0x3d) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)='batadv0\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000016c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x4}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x87, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}}}}}}}, 0xfdef) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket(0x2b, 0x80801, 0x1) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000002c0)={0x1, 0x0, {0x29, 0x33, 0x14, 0x2, 0xc, 0x401, 0x4, 0xce, 0x1}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.056415145s ago: executing program 8 (id=667): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000800)="c0", 0x1, 0x20000044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25210000000a000100777061a363fff40009001f"], 0x2c}}, 0x800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = inotify_init() syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x588, &(0x7f0000000b40)="$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") r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x1, &(0x7f0000000480)=[{0x4002, 0x5}]}) dup(r5) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r6 = syz_open_pts(r5, 0x80480) dup3(r6, r5, 0x80000) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000300)=""/85, 0x55}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 1.015755336s ago: executing program 9 (id=668): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000000500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001000"/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x3, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f8680000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4db}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xd0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000001380)={[{@block_validity}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@orlov}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@inlinecrypt}, {@data_ordered}]}, 0x3, 0x57b, &(0x7f0000001440)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) creat(0x0, 0xdafbe5d6891b6e4) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000002, 0x2668}, 0x10edcc, 0x1224, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 920.418238ms ago: executing program 6 (id=669): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000dfff000002000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x1e, 0x4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000a81010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a3000000000280c048024000180090001006d65746100000000140002800800014000000012080002400000000000000000000000000000f7080000", @ANYRES16=r3], 0xc4}}, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000208004508001c0000000000029078ac1e0001ac1414bb170f9078ac14142f"], 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 857.0755ms ago: executing program 6 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x6, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000a00)={[0x8001]}, 0x0, &(0x7f0000000ac0)={0x0, 0x989680}, 0x8) 841.44516ms ago: executing program 8 (id=671): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x1, 0xb}, {0x5, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 826.265291ms ago: executing program 6 (id=672): io_uring_setup(0x589c, 0x0) kexec_load(0xd0ffbb, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a44000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000018000480140001800d00010073796e70726f787900000000140000001100010000000000000000000100000ac634fcd4c2e444832eeaf366680638524553e44e444b5c8bfc43e0f5bb15b108d25e83a3e1815c6b92fc9061111a0f8877f47203000000e5a6a75db59d1cf1c549751b2e"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000004a00030000000000000000000a008000", @ANYRES32, @ANYBLOB="ccbb0b7f"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8002}, 0x20040000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000140), &(0x7f0000000180)=0x4) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp775'}}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@numtail}, {@shortname_mixed}, {@utf8}, {@fat=@allow_utime}, {@utf8}, {@utf8}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@shortname_lower}]}, 0x1, 0x2a9, &(0x7f0000000500)="$eJzs3c9qK1UcB/DfpGmSq4tk4UoUB3Th6nJ7nyBF7oVidpKFulCxLUgThBYK/sHYleDKjUufQBC68yXc+AY+gODOLgpHJplp/pimDTStfz6fTU/POd85vzOZULLI6YevDI/28zg8+/K3aLWyqHWjGxdZdKIWla9jTve7AAD+zS5Sij/SxDq5LCJamysLANigtf/+n2+8JABgw9559723d3u91C4+zj8ffnPaLz7ZFz8n47uH8UkM4iCeRDsuI9KVSft5SmlUzwudeGM4Ou0XyeEHv5TX3/09YpzfiXZ0xl3z+b3es518YiY/Kup4oVy/W+SfRjteWrL+Xu/Z0yX56Dfizddn6n8c7fj14/g0BrE/LmKa/2onz99K3//5xftFeUU+G532m+N5U2nrnl8aAAAAAAAAAAAAAAAAAAAAAAD+wx6XZ+c0Y3x+T9FVnr+zdVn8sh15pTN/Ps8kn1UXWjgfaJTih+p8nSd5nqdy4jRfj5frUX+YXQMAAAAAAAAAAAAAAAAAAMA/y8lnnx99NBgcHN9JozoNoPpa//rXOR+nujM9r8XqVHO6Vq1srlgitqo5WcTKeopN3NFtuanx6Lqaf/xp3Qu2bp6zXazVusNdVC/3TE9UPdnye9i8mtyqHpKfq56UUmrELVdvXDeU1nr8GkuH2mvfjcaL48ZoxZzIrivs21en78tyKFvcRWPuPs81tsvGTHzh2Vj9PD9aeKf8Tea0DgAAAAAAAAAAAAAAAAAA2Kjp14CXDJ6tjNZSc2NlAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC9mv7//zUaozJ8i8mNOD554C0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/BXAAAA//+kUFzM") ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 807.897261ms ago: executing program 8 (id=673): connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5000002, 0x0, 0x100000) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xb8, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x4000000}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000800)=ANY=[], 0x100) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 799.092911ms ago: executing program 9 (id=674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000027c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x200, r1}, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x30, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x7, 0x5, 0x1f, 0xf, 0x1, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002700)=@newtfilter={0x18e4, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x3}, {0xffff, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18b4, 0x2, [@TCA_CGROUP_EMATCHES={0x94, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8d83}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x6}, {0x401, 0x1, 0xff, 0x1, 0x2, 0x1}}}, @TCF_EM_IPT={0x58, 0x3, 0x0, 0x0, {{0x48}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2d}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}, @TCA_CGROUP_ACT={0x1738, 0x1, [@m_connmark={0x140, 0x1a, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xb5, 0x10000000, 0x2, 0x24}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x20000000, 0x1, 0x7fffffff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xfffffc00, 0x10000000, 0x9, 0x5}, 0xcc9f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x0, 0x1, 0x3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x6, 0x29651d1d, 0x3}, 0x83c5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xfffffff6, 0x0, 0x7, 0x80}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x8, 0x4, 0xb, 0x6}, 0x5}}]}, {0x4c, 0x6, "ec1ac4ae30ac666dd2e4828c0e07c36a4b2055e104b4d5a6f3c80084bd387336a9378d15f3540a896488055f4f98147b9c9bf1e0fb587c0048267d6b9d289942ba7d66349cedf229"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0x1084, 0x16, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x7, 0x1, 0xffff4632, 0x4e50}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x0, 0x4, 0x9}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x14212cdc, 0x5, 0x8, 0x56ae, 0x8001}, 0x45}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x10c, 0x1c, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7fffffff, 0xffffffffffffffff, 0xc28, 0x63}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa7, 0x4572, 0x6, 0x1, 0x4}, 0xd347}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x55, 0x7d, 0x5, 0x80000000, 0x3ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x2, 0x3, 0x1, 0xf6}, 0xd6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6cd00960, 0x8, 0x6581dedd577201aa, 0x4, 0x9}, 0x4e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x5, 0x8, 0x80, 0x9f}, 0x56}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x101, 0x20000000, 0x7}, 0x7}}]}, {0x18, 0x6, "39f0f22d300daf469c001bb00406a1631531f08f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x9c, 0x9, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x246, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000001, 0x575, 0x20000000, 0x2120754, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x651, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x13f5, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x10000, 0x3, 0x9b1, 0x2}}]}, {0x1b, 0x6, "09335ea0bfcdf13cb4ae681fd7c0268bbd5b82e31be6a6"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0xfc, 0x7, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}]}, {0xba, 0x6, "249e98e41894e8b8148d9a577fc8585541993b1a94d7bd73f820463385e3061c0d107f85900cab609e26b7bc40e2b97d6db92faa5d07045b05dd683cf466d4a9eed5c4babcb1ba2c262ffcc20289f07245eb79d724d93b581dcd89de10da39d2bc35d59fe74f2269c4f3c912aae6fbfb018856a47d3658f9fb5a72b682327d30069ef7d0516865b5b8c1582fc22a2b9f8dd6927f5f1ee6395c69e711b4df2e2eee5730185db2fe920f77ad107f44a5d2253be5975fec"}, {0xc, 0x7, {0x0, 0xcc245f711961a39b}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xf4, 0x2, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0xa8f, 0x3, 0x7}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xc, 0x7, 0xffffffffffffffff, 0x3, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x4, 0x8, 0x5, 0x5}}]}, {0x65, 0x6, "52955e9a953d3ebd97b32b89a6dc77dcdb771872a0bea7ee3c5eea95e51c9e551f191864f45e8721f45f589672fb6673e062a8cff8ebb0578c0d3e5c80f8b5867b4db0c7241468cf398076dfb72b0d18beb720100b481778f3faf9d8fb04fdfde9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0xac, 0x1a, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffffff6, 0x5, 0x0, 0xfffff000, 0x5d1a}}]}, {0x68, 0x6, "4f24ba653ced850c8e91da062bc8c8facbf75d83bd5fa2646252140e5c8be409202160f8a7ef84af64b5421a38ae4640c2a1072ad2c6bacee7fb97f7dbcc0c006cb66cf13bd4a8f60264d1e05924fb1dbbd2b7942e9ab42915fb318fd471bd2cbf7ef9e8"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x12c, 0x13, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x1, 0x0, 0x7fff}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1ff, 0x10000000, 0x6, 0x4}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0xb4, 0x7, 0x2, 0xfffffffa}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7499, 0x8, 0x2, 0x2c74}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x10000000, 0xb, 0x10000}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xcf0a, 0xfb, 0xd94080d47f2bdbcd, 0x1, 0x7}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x8, 0xffff5584, 0xd}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x5, 0x8001, 0x340}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x9, 0xffffffffffffffff, 0x870, 0x2}, 0x5a}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0xe4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x2}, {0x3, 0x5, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x40, 0x2, 0x1}, {0x4, 0x5, 0x1, "cbf3ab6686"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x49}, {0x101, 0x5, 0x0, "76a66300ca"}}}, @TCF_EM_META={0x64, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x5, 0x1}, {0x5, 0x52, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x9e, 0x2}, {0x7, 0x81, 0x1}}}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="d81de60341", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="fc44a45b4f9491", @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xe9, 0x2}, {0x0, 0xa, 0x1}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x2000, 0x2, 0x6}, {0x5, 0x8, 0x0, "75a9f3f993c8833d"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}]}}]}, 0x18e4}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r3 = socket$packet(0x11, 0x3, 0x300) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r5 = getegid() setgroups(0x2, &(0x7f0000000480)=[0xee00, r5]) write$tcp_mem(r4, 0x0, 0xfffffeff) socket(0x200000000000011, 0x2, 0xd) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'rose0\x00'}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmmsg(r7, &(0x7f0000000180), 0x3ef, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r2}, 0x14) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000500)=0x10000000, 0x4) 798.120631ms ago: executing program 7 (id=675): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x43df, 0x9}, 0x0, 0x3ffffe, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @hyper}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000480)={{0x2, 0x4e24, @private=0xa010101}, {0x6, @link_local}, 0x20, {0x2, 0x4e20, @loopback}, 'team0\x00'}) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000082"], 0x10}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) listen(r2, 0x0) mmap(&(0x7f000044d000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x29cda000) setuid(0xee00) syz_io_uring_setup(0x52bc, &(0x7f0000000340)={0x0, 0x8f86, 0x4, 0x6, 0x132}, &(0x7f0000000500), &(0x7f0000000100), &(0x7f00000000c0)) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000002380)=[{&(0x7f0000000680)=""/216, 0xd8}], 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xfffffffe}, 0x10) r7 = accept4(r2, 0x0, 0x0, 0x80000) dup(r6) close(r4) sendto(r7, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) 735.973893ms ago: executing program 8 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') unlink(&(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000480)=""/135, 0x87, 0x20, &(0x7f0000000540)={0x11, 0x3, r4, 0x1, 0x1, 0x6, @local}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4048050) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000080)={0x4}) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240400c5}, 0x0) 690.923734ms ago: executing program 7 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010828bd7000ffdbdf250c000000200005800800010075647000140002800800010000d10300"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x101, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8404) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x80}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x51, 0x4000100}}], 0x18}, 0x24004804) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 667.111584ms ago: executing program 8 (id=677): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0x1b49b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x20, 0x4, 0x43a1bd76, 0x5, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000f40)={[{@commit={'commit', 0x3d, 0x7}}, {@nobarrier}, {@barrier}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x100000000002}}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@nombcache}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000001000)="$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") r0 = gettid() mkdir(&(0x7f0000000140)='./file2\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) r2 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, &(0x7f0000000240), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000001c0)=[@ioring_restriction_register_op={0x0, 0xc}], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0xd4108, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x5, 0x1}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xa7dc, 0x0, 0x40, 0x3aa}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) readlink(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, 0x0) pause() sendfile(r3, r4, 0x0, 0x20000023896) 461.295219ms ago: executing program 6 (id=678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40c882, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x4008, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, 0x0, 0x20000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x10280180, &(0x7f0000000100)="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", 0xfe, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x24c000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x91, "11a8293bd544b62b371e31926a3d77f151c0a3c8f50caff4271a61283b9e63982ed497a40db7521dcf99a7646497ece0f19fee14e26b56ec99eaf90b7d06fa7c91e68789d31c05e934dca207623e74269644bd98be9dc8d3185c0ae60ecb303e8ae8fcd88e10657660b0bc4979e57e8db4fa55173f86903352314f80c44ef031f4e32e5a5d0033a43402a382377acc9840"}, &(0x7f00000002c0)=0x99) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000300)={r3, 0x1}, &(0x7f0000000340)=0x8) socketpair(0x6, 0x2, 0x5, &(0x7f0000000040)) mlock2(&(0x7f0000599000/0x3000)=nil, 0x3000, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setresuid(0x0, 0xee00, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) 426.14976ms ago: executing program 4 (id=679): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000800)="c0", 0x1, 0x20000044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25210000000a000100777061a363fff40009001f"], 0x2c}}, 0x800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = inotify_init() r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x1, &(0x7f0000000480)=[{0x4002, 0x5}]}) dup(r5) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r6 = syz_open_pts(r5, 0x80480) dup3(r6, r5, 0x80000) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000300)=""/85, 0x55}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 425.63581ms ago: executing program 9 (id=680): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x300) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x38) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000024000000030a010400000000000000000100ffff040004800900010073797a310000000038000000050a01020000000000000000010020000c0002400000000000000001090001007379880bd38300000c0004800800014000000004140000001100010000000000000000"], 0xa4}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x8, 0x200, &(0x7f0000000200)="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"}) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 64) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) (async) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) (async) sendto$inet6(r4, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) sendmmsg$sock(r4, 0x0, 0x0, 0x20004081) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000180)) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000ac0)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000680)="b87e383fb9b3c4c3d6d6b826abc85adc88733ddf895e919c2a3562de2768eb30c8bf850adade5c28e601282112e68ad92b85a36065534dbd4c9eeaf81ff07a6a97c40716c338cafaad1f65b16c9bbfae11541679f0d85d3a847a48f68d31354d338ea1bb388feaa04ff6c5fd291efbcab89a456265b64f4701660a09da1f2a20c2819434f36c6478c7fb57882103676ea4662371c55979d2ef357a34f81a989ca6735413ff527bf10248230f5f3fa1236679c82057fcd0d2eac3f36e6088cf1447897e589de511", 0xc7}, {&(0x7f0000000840)="efd1fd9b4662c7858936bdea383f4ac5a259f4e414d9b48b60180b7c42f842b7b44ec2593ba9f9361ec6408f8a46dc7f3c63d6813d930eb94d983f03a12be8f27c638637a71ab72349eb645f68d532ff0d56d0400f9ca6552a232a65a7feae4fdac6524f9bbb17ee6aa01f87ab9a6d74f2087b1fd40baf8d894fed06e6f166f9412c7ccab4d31044e1b6840bdad0e6f822140f21c7539dca463f9d9e68209bac29161ad7a4246054c13ea7fb884a3a270c7abc9539dc586db2d47e758fa6fb220bbd763a961b925676f4", 0xca}, {&(0x7f0000000940)="d85b6d50e67724fa7cbb0c1705a3aad4a7a7c500f8810b1e3d477c7a0857d12aab6fd8977eed86aa9f9b0236b2421aec53369855e72e65d0341740c2f6c809ffdc01ece7ce16945eead8875b5f2fdc8d797f316406cdcf15bd5925c70e18db4026b0ba5d3adc256b3249fcbbf6dd01b17c3660b37d806e08576eba54683c51c5084bc3a1055d5ac802bc7ad3052824288f101d16bbf6b7e5055b7a6eb166dbcf0951205eb72ce9ba2421d67ac7c421b40dbf2fd0b68892e3a0a1aebf0a3cee70f45ee65768df8e916c5149839a6a48ceb0", 0xd1}], 0x3, &(0x7f0000000a80), 0x0, 0x4004000}}], 0x1, 0x0) 425.12091ms ago: executing program 7 (id=681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0xa0, '01234567890123456789'}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000006c0)={&(0x7f0000000000), 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000200)={&(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000003f00000092fc8cd8af2df90000000000000000"], 0x18}, 0x0) 344.102942ms ago: executing program 7 (id=682): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x6, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000a00)={[0x8001]}, 0x0, &(0x7f0000000ac0)={0x0, 0x989680}, 0x8) 343.607092ms ago: executing program 4 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x98, 0x0, 0x1, 0x505, 0x400f5ff, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 261.863184ms ago: executing program 4 (id=684): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000000500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001000"/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x3, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f8680000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4db}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xd0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000001380)={[{@block_validity}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@orlov}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@inlinecrypt}, {@data_ordered}]}, 0x3, 0x57b, &(0x7f0000001440)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) creat(0x0, 0xdafbe5d6891b6e4) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000002, 0x2668}, 0x10edcc, 0x1224, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 261.160594ms ago: executing program 7 (id=685): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x7, 0x7], 0x4, 0x5}, {0xffffffffffffffff, [0x7]}}}}, {{@ip={@multicast1, @empty, 0xffffffff, 0xffffffff, 'veth1_to_batadv\x00', 'batadv_slave_1\x00', {0xff}, {}, 0xcb, 0x2, 0x6c}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) getpid() bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1a08402, &(0x7f0000000700)={[{@delalloc}, {@nodioread_nolock}, {@norecovery}, {@stripe={'stripe', 0x3d, 0x1}}, {@discard}, {@usrjquota}, {@data_err_ignore}, {@data_ordered}, {@quota}, {@data_journal}, {@resuid}, {@errors_continue}]}, 0x1, 0x579, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbLJ9//2aQikqIoEerNRumsSXCh7qUbRa0HsNm2ko2XRLdlOaWLA92IsXKYKIvXjXe09SPHrxryhooUgJevASmc1sXprd7CbdNqn7+cC0zzMzO89895nvk2cyGzaAvjWc/VOIeDEivk4iDkdEkm8bjHzj8PJ+i4+ul7MliaWlT/5MGvtl9eaxmq87mFdeiIhfvow4WciPs0ZtfmF6olJJZ/P6SH3mykhtfuHUpZmJqXQqvTw2Pn7mzfGxd95+q2exvnb+7+8+vvf+ma+OL37704Mjt5M4G4fybWvjeAI31laGYzh/T4px9rEdR5f/60Wbu0Ky0yfAtgzkeV6MbAw4HAN51gP/fV9ExBLQpxL5D32qOQ9o3tv36D74ufHwveUboI3xDy7/biT2Ne6NDiwm6+6MsvvdoR60n7Vx9487t7Mlevd7CICObtyMiNODgxvHvyQf/1rY392xT3exz+NtGP/g2bmXzX9ebzX/KazMf6LF/Odgi9zdjs75X3jQg2bayuZ/77ac/648rxoayGv/a8z5isnFS5U0G9v+HxEnorg3q49u0saZxftL7batnf9ly2K2Mp8L5ufxYHDv+tdMTtQnniDkdR7ejHip5fw3Wen/pEX/Z+/H+S7bOJbeeaXdtg3xP7pevrsu/qdr6YeIV1v2/+oTrWTz55MjjethpHlVbPTXrWO/tWt/p+PP+v/A5vEPJWuf19a2cPDmQ899/6TtdlkXf7SKv/X1vyf5tFHek6+7NlGvz45G7Ek+3Lh+bPW1zXpz/yz+E8c3H/9Wr/+fV46TTYE+6/JtuHX0x5f3dRN/u/4//muXLW1dFv/klvp/64X7H3z+fbv2O8ef9f8bjdKJfE0341+H8yrG1q9mAAAAAAAA2PUKEXEokkJppVwolErLn+84GgcKlWqtfvJide7yZDT+VnYoioXmk+7Daz4PMZp/HrZZH3usPh4RRyLim4H9jXqpXK1M7nTwAAAAAAAAAAAAAAAAAAAAsEscbPP3/5nfB3b67ICnzld+Q//qmP+9+KYnYFfy8x/6l/yH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAAAOip8+fOZcvS4qPr5aw+eXV+brp69dRkWpsuzcyVS+Xq7JXSVLU6VUlL5epMp+NVqtUro2Mxd22kntbqI7X5hQsz1bnL9QuXPjo0lV5Ii88kKgAAAAAAAAAAAAAAAAAAAHi+1OYXpicqlXRWQWFbhcHdcRoKPS7s9MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKv+DQAA///gzTWJ") mq_open(&(0x7f0000000040)='\'&\x00', 0x2, 0x100, &(0x7f00000000c0)={0x5, 0x8, 0x0, 0x910}) 165.646456ms ago: executing program 9 (id=687): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timers\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000540)={0x18, 0x0, {0x4001, @multicast, 'veth1_to_hsr\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth0_to_bridge\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="2800128008000100687372001c00028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="0500070001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0xa0000012}) unshare(0x22020400) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7, 0x7b, 0x9, 0x9, 0x2, 0x6, 0xc, 0x176, 0x38, 0x2a2, 0x3, 0x8000, 0x20, 0x1, 0xfff8, 0x5, 0x1a65}, [{0x4, 0xffffffff, 0x6, 0x7, 0x3, 0x0, 0x9, 0x4}], "9db792ecb19c2258162ccf6cc11bd9cf1be76ea9e3f842947d57de1daba409004ccec9083ee266a013da7dbf65974e4b78c6e9645df2a4cb2b1fcfef5360535843ed21", ['\x00', '\x00', '\x00', '\x00']}, 0x49b) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) mknod$loop(0x0, 0x100000000000600d, 0x1) r6 = open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) readahead(r6, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0a000320f85630115fb5cc9b2d3a6e81000000001800168014f70180100002006f000000d302007312782b9855e2e7c35d50c9f43f374b4f18368d07d4af0000000000"], 0x40}}, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') getpid() 158.047536ms ago: executing program 6 (id=688): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') unlink(&(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000480)=""/135, 0x87, 0x20, &(0x7f0000000540)={0x11, 0x3, r4, 0x1, 0x1, 0x6, @local}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4048050) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000080)={0x4}) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240400c5}, 0x0) 76.904328ms ago: executing program 9 (id=689): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x24000052) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x1010051, &(0x7f0000000100), 0x1, 0x567, &(0x7f0000000ac0)="$eJzs3dFrJHcdAPDvTLJ3yV1qtupDLViLrdxVvc2l8drQh6og+lRQKz4JZ0w2IdwmeySb9hIOm+KrIIhowRd98kXwDxDkXnwXodC+i4oiNacPCm1HZne2l2x2kxzuZkry+RxzM7/57c73+9u9/e1vduZmAji3noyIqxExFhHPRMR0sT4tptjtTPnj7u/dXcynJLLs5XeSSIp13W1dLOaXi6dNRMQ3vxbxveRw3M3tnVsLjUZ9oyjPtNaSd7Ns59rq2sJKfaW+Pjc3+9z88/M35q8PpZ3ViHjxK3/96Y9+9dUXf/f5V/908+9Xv5+n9d8sey162jFMnaZX2q9F13hEbIwiWEnG2y3suFFyLgAAHC0f7380Ij7dHv9Px1h7NAcAAACcJdkXp+LdJCIDAAAAzqw0IqYiSWvF+b5TxRmrl2MsPh6X0kZzs/W55ebW+lJeF1GNSrq82qhfj4n2uQPVqCR5ebY4x7ZbfranPBcRj0bET6Yn2+XaYrOxVPaPHwAAAHBOXO7Z///3dJrWakXlbsnJAQAAAMNTLTsBAAAAYOTs/wMAAMDZV8363KHrsHT0mQAAAAAj8PWXXsqnrHv/66VXtrduNV+5tlTfvFVb21qsLTY3btdWms2V9jX71o7bXqPZvP2FWN+6M9Oqb7ZmNrd3bq41t9ZbN1cP3AIbAAAAOEWPfure20nkfyZj94XJ9roLRV0lIhvb/+DxMjIERuWhzun5y+jyAE7f/u/3yRLzAE6fIT2cX5WyEwBKd9x/ABp48s4fhp8LAAAwGlc+ce/tfOy/+8Lh4//vLJeaGjBixfH/5EQXAAHOlLGyEwBK0zn+937WUXY2wGmqHDUCsFMAZ146nOP/x5xKmOhQAACgZFPtKUlrxX7AVKRprRbxSPu2gJVkebVRvx4RH4mIt6YrF/PybPuZidE8AAAAAAAAAAAAAAAAAAAAAAAAAJxQliWRZVk2kQEAAABnVUT6t+6dua5MPz3V+/vAheQ/0+15RLz685d/dmeh1dqYzdf/84P1rTeK9c+W8QsGAAAA0Ku7n97djwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAYbq/d3fxfpZl2d7dxdOM+48vR0S1iF9MnZrxmGjPJ6ISEZf+lcT4vuclETE2hPi7r0fEY/3iJ3laUS2yOBD/QkQaEZPDih8PGT868S8PIT6cZ/fy/udL/T5/aTzZnvf//I0X0/9rcP+XftD/jQ3o/x4ZtNHKweLjb/5mZmD81yMeH+/f/3TjJ/n2+sR/6oRt/O63dnYG1WW/jLjSr/9LDsaaaa3dntnc3rm2urawUl+pr8/NzT43//z8jfnrM8urjXrxd98YP/7kb99/UHrvUPsvHdH/tts/4PV/+oTtf+/NO3sf6yz2vDNRiV9k2dWn+r//j+Wzzx6O3/3u+0zxPZCX89cwfePbfeM/8es/PjEot7z9SwPaP9HT/os97b96wvY/840f/PmEDwUATsHm9s6thUajvmFh/0JUPxRpDHkhHzQOaYP5uLPs5tSTSCJfeOtA1UL5iXUWXis+YwuN7qdtSFv+fbFzNKRU838Wh6qO7zoujqpPAgAARuPBoL+3JiknIQAAAAAAAAAAAAAAAAAAADiHjrtC2OELgxULaUQ8WPOdHx5xNbLemLvlNBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ej/CwAA///Cg9GB") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a3000000000090001007379"], 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x47, &(0x7f0000000240)={@random="b10d13d9eb32", @link_local={0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@x25={0x805, {0x0, 0xa, 0x17, "d57749ce9a2262475554c894ba0e59b83406550f9cd91c867f98d07a91d19d0d13c0d392c387a5ca887e16de4118"}}}}, 0x0) 10.08148ms ago: executing program 4 (id=690): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000000) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/10, 0xa) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r1 = timerfd_create(0x0, 0x80000) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) 0s ago: executing program 6 (id=691): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000240)={r4}, &(0x7f00000001c0)=0x8) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRES8, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f00000012c0)=""/4053, &(0x7f0000000000)=0xfd5) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000002c00)) syz_emit_ethernet(0xf, &(0x7f0000000080)={@multicast, @random="4a2dfcf6177a", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x57, 0x0, 0x6, 0x0, @empty, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x5, 0x2}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000003a00)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) getdents(r6, &(0x7f0000005cc0)=""/104, 0x68) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000225000103223d70df2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) clock_getres(0x2, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x28, 0x1, 0x7fffa, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) kernel console output (not intermixed with test programs): .842:974): avc: denied { ioctl } for pid=4691 comm="syz.5.215" path="socket:[8760]" dev="sockfs" ino=8760 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.014255][ T28] audit: type=1400 audit(1785928194.842:975): avc: denied { open } for pid=4691 comm="syz.5.215" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.018270][ T28] audit: type=1400 audit(1785928194.842:976): avc: denied { ioctl } for pid=4691 comm="syz.5.215" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.021659][ T28] audit: type=1326 audit(1785928194.842:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.5.215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f4cf4e019 code=0x0 [ 55.147497][ T28] audit: type=1400 audit(1785928194.972:978): avc: denied { write } for pid=4698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.219421][ T4697] loop1: detected capacity change from 0 to 512 [ 55.242100][ T4718] loop5: detected capacity change from 0 to 1024 [ 55.248326][ T4718] EXT4-fs: Ignoring removed bh option [ 55.250941][ T4697] ext4: Bad value for 'journal_ioprio' [ 55.261255][ T4718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.276528][ T4718] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.218: bg 0: block 408: padding at end of block bitmap is not set [ 55.282820][ T4718] EXT4-fs (loop5): Remounting filesystem read-only [ 55.283864][ T4718] EXT4-fs warning (device loop5): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.5.218: cleanup dec ref error -28 [ 55.766100][ T4728] FAULT_INJECTION: forcing a failure. [ 55.766100][ T4728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.768163][ T4728] CPU: 0 UID: 0 PID: 4728 Comm: syz.4.220 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.768190][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.768203][ T4728] Call Trace: [ 55.768208][ T4728] [ 55.768215][ T4728] __dump_stack+0x1d/0x30 [ 55.768265][ T4728] dump_stack_lvl+0x95/0xd0 [ 55.768284][ T4728] dump_stack+0x15/0x1b [ 55.768300][ T4728] should_fail_ex+0x25e/0x270 [ 55.768325][ T4728] should_fail+0xb/0x20 [ 55.768537][ T4728] should_fail_usercopy+0x1a/0x20 [ 55.768576][ T4728] _copy_from_iter+0xcc/0xe70 [ 55.768608][ T4728] ? __alloc_skb+0x511/0x6f0 [ 55.768635][ T4728] ? __alloc_skb+0x205/0x6f0 [ 55.768720][ T4728] netlink_sendmsg+0x4a4/0x6f0 [ 55.768787][ T4728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.768811][ T4728] sock_write_iter+0x2c5/0x2f0 [ 55.768838][ T4728] ? __pfx_sock_write_iter+0x10/0x10 [ 55.768861][ T4728] vfs_write+0x57d/0x990 [ 55.768895][ T4728] ksys_write+0xdc/0x1a0 [ 55.768917][ T4728] __x64_sys_write+0x40/0x50 [ 55.768938][ T4728] x64_sys_call+0x27e1/0x3020 [ 55.768962][ T4728] do_syscall_64+0x136/0x3c0 [ 55.769022][ T4728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.769094][ T4728] RIP: 0033:0x7f5c77dee019 [ 55.769116][ T4728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.769135][ T4728] RSP: 002b:00007f5c76847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.769156][ T4728] RAX: ffffffffffffffda RBX: 00007f5c78075fa0 RCX: 00007f5c77dee019 [ 55.769250][ T4728] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 55.769275][ T4728] RBP: 00007f5c76847090 R08: 0000000000000000 R09: 0000000000000000 [ 55.769289][ T4728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.769376][ T4728] R13: 00007f5c78076038 R14: 00007f5c78075fa0 R15: 00007ffca170add8 [ 55.769397][ T4728] [ 55.991671][ T4744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.228'. [ 56.070418][ T4759] loop4: detected capacity change from 0 to 512 [ 56.077745][ T4759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.079811][ T4759] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.082506][ T4759] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz.4.234: invalid size [ 56.139161][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.162196][ T4769] FAULT_INJECTION: forcing a failure. [ 56.162196][ T4769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.164163][ T4769] CPU: 0 UID: 0 PID: 4769 Comm: syz.4.238 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.164265][ T4769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.164278][ T4769] Call Trace: [ 56.164285][ T4769] [ 56.164293][ T4769] __dump_stack+0x1d/0x30 [ 56.164321][ T4769] dump_stack_lvl+0x95/0xd0 [ 56.164342][ T4769] dump_stack+0x15/0x1b [ 56.164361][ T4769] should_fail_ex+0x25e/0x270 [ 56.164415][ T4769] should_fail+0xb/0x20 [ 56.164440][ T4769] should_fail_usercopy+0x1a/0x20 [ 56.164468][ T4769] _copy_to_user+0x20/0xa0 [ 56.164487][ T4769] simple_read_from_buffer+0xb5/0x130 [ 56.164589][ T4769] proc_fail_nth_read+0x10e/0x150 [ 56.164609][ T4769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.164652][ T4769] vfs_read+0x18e/0x7c0 [ 56.164671][ T4769] ? __rcu_read_unlock+0x4e/0x70 [ 56.164708][ T4769] ? __fget_files+0x184/0x1c0 [ 56.164797][ T4769] ? mutex_lock+0x57/0x90 [ 56.164828][ T4769] ksys_read+0xdc/0x1a0 [ 56.164904][ T4769] __x64_sys_read+0x40/0x50 [ 56.164924][ T4769] x64_sys_call+0x2886/0x3020 [ 56.164948][ T4769] do_syscall_64+0x136/0x3c0 [ 56.165052][ T4769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.165075][ T4769] RIP: 0033:0x7f5c77dae84e [ 56.165092][ T4769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.165111][ T4769] RSP: 002b:00007f5c76846fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.165202][ T4769] RAX: ffffffffffffffda RBX: 00007f5c768476c0 RCX: 00007f5c77dae84e [ 56.165217][ T4769] RDX: 000000000000000f RSI: 00007f5c768470a0 RDI: 0000000000000004 [ 56.165231][ T4769] RBP: 00007f5c76847090 R08: 0000000000000000 R09: 0000000000000000 [ 56.165244][ T4769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.165257][ T4769] R13: 00007f5c78076038 R14: 00007f5c78075fa0 R15: 00007ffca170add8 [ 56.165277][ T4769] [ 56.202593][ T4767] loop6: detected capacity change from 0 to 512 [ 56.217045][ T4767] ext4: Bad value for 'journal_ioprio' [ 56.300839][ T4775] loop4: detected capacity change from 0 to 256 [ 56.306077][ T4775] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.312098][ T4775] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.463122][ T4798] xt_hashlimit: size too large, truncated to 1048576 [ 56.602355][ T4798] loop4: detected capacity change from 0 to 164 [ 56.603676][ T4798] iso9660: Unknown parameter 'syzkaller' [ 57.439728][ T4629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.467819][ T3651] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.712082][ T4851] loop7: detected capacity change from 0 to 512 [ 57.728462][ T4851] ext4: Bad value for 'mb_optimize_scan' [ 58.427303][ T4890] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.259'. [ 58.440189][ T4893] loop5: detected capacity change from 0 to 1024 [ 58.448677][ T4893] EXT4-fs: Ignoring removed bh option [ 58.492491][ T4893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.503633][ T4893] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.261: bg 0: block 408: padding at end of block bitmap is not set [ 58.511811][ T4893] EXT4-fs (loop5): Remounting filesystem read-only [ 58.512865][ T4893] EXT4-fs warning (device loop5): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.5.261: cleanup dec ref error -117 [ 58.587509][ T3651] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.693559][ T4929] loop1: detected capacity change from 0 to 512 [ 58.815746][ T4956] loop5: detected capacity change from 0 to 8192 [ 58.875576][ T4956] xt_hashlimit: max too large, truncated to 1048576 [ 58.881947][ T4956] No such timeout policy "syz1" [ 58.914537][ T4950] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 58.916375][ T4950] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 58.925063][ T4950] System zones: 0-1, 15-15, 18-18, 34-34 [ 58.935712][ T4950] EXT4-fs (loop7): orphan cleanup on readonly fs [ 58.943062][ T4950] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 58.958630][ T4950] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 58.969872][ T4950] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.269: bg 0: block 40: padding at end of block bitmap is not set [ 58.988190][ T4950] loop7: lost filesystem error report for type 5 error -117 [ 58.989593][ T4950] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 58.997490][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 58.997565][ C1] EXT4-fs (loop7): initial error at time 1785928198: ext4_validate_block_bitmap:441 [ 58.997633][ C1] EXT4-fs (loop7): last error at time 1785928198: ext4_validate_block_bitmap:441 [ 59.007589][ T4970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.013269][ T4950] loop7: lost filesystem error report for type 5 error -117 [ 59.044448][ T4970] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.069674][ T4950] EXT4-fs (loop7): 1 truncate cleaned up [ 59.078938][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.082035][ T4950] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.129514][ T4950] netlink: 44 bytes leftover after parsing attributes in process `syz.7.269'. [ 59.142949][ T4978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.171841][ T3852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.182028][ T4978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.196096][ T4978] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.261772][ T4988] EXT4-fs: Ignoring removed i_version option [ 59.278466][ T4988] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.289913][ T4990] netlink: 40 bytes leftover after parsing attributes in process `syz.6.277'. [ 59.306159][ T4988] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.275: Failed to acquire dquot type 1 [ 59.318671][ T4988] loop7: lost filesystem error report for type 5 error -117 [ 59.318896][ T4988] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, [ 59.326282][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 59.326300][ C0] EXT4-fs (loop7): initial error at time 1785928199: ext4_acquire_dquot:7041 [ 59.326325][ C0] EXT4-fs (loop7): last error at time 1785928199: ext4_acquire_dquot:7041 [ 59.358298][ T4988] block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 59.370032][ T4988] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #12: comm syz.7.275: corrupted inode contents [ 59.402165][ T4988] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 59.404857][ T4988] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #12: comm syz.7.275: mark_inode_dirty error [ 59.425687][ T4988] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 59.426598][ T4988] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #12: comm syz.7.275: corrupted inode contents [ 59.448664][ T4988] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 59.448963][ T4988] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #12: comm syz.7.275: mark_inode_dirty error [ 59.469913][ T4988] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 59.470195][ T4988] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #12: comm syz.7.275: corrupted inode contents [ 59.491293][ T4988] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 59.494737][ T4988] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 59.512761][ T4988] loop7: lost filesystem error report for type 5 error -117 [ 59.512960][ T4988] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #12: comm syz.7.275: corrupted inode contents [ 59.532444][ T4988] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 59.532583][ T4988] EXT4-fs error (device loop7): ext4_truncate:4691: inode #12: comm syz.7.275: mark_inode_dirty error [ 59.553574][ T4988] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 59.553769][ T4988] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 59.581056][ T4988] loop7: lost filesystem error report for type 5 error -117 [ 59.582062][ T4988] EXT4-fs (loop7): 1 truncate cleaned up [ 59.595942][ T4988] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.623445][ T3852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.647217][ T4996] EXT4-fs: Ignoring removed bh option [ 59.682104][ T4996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.697279][ T4996] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.278: bg 0: block 408: padding at end of block bitmap is not set [ 59.712088][ T4996] EXT4-fs (loop6): Remounting filesystem read-only [ 59.720979][ T4996] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.6.278: cleanup dec ref error -28 [ 59.963391][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 59.963404][ T28] audit: type=1400 audit(1785928199.792:1051): avc: denied { write } for pid=5018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.012504][ T28] audit: type=1400 audit(1785928199.842:1052): avc: denied { write } for pid=5030 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.043379][ T5035] FAULT_INJECTION: forcing a failure. [ 60.043379][ T5035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.057363][ T5035] CPU: 0 UID: 0 PID: 5035 Comm: syz.1.282 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.057387][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.057422][ T5035] Call Trace: [ 60.057429][ T5035] [ 60.057436][ T5035] __dump_stack+0x1d/0x30 [ 60.057460][ T5035] dump_stack_lvl+0x95/0xd0 [ 60.057475][ T5035] dump_stack+0x15/0x1b [ 60.057547][ T5035] should_fail_ex+0x25e/0x270 [ 60.057563][ T5035] should_fail+0xb/0x20 [ 60.057576][ T5035] should_fail_usercopy+0x1a/0x20 [ 60.057660][ T5035] _copy_to_user+0x20/0xa0 [ 60.057671][ T5035] simple_read_from_buffer+0xb5/0x130 [ 60.057686][ T5035] proc_fail_nth_read+0x10e/0x150 [ 60.057699][ T5035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.057815][ T5035] vfs_read+0x18e/0x7c0 [ 60.057825][ T5035] ? __rcu_read_unlock+0x4e/0x70 [ 60.057839][ T5035] ? __fget_files+0x184/0x1c0 [ 60.057853][ T5035] ? mutex_lock+0x57/0x90 [ 60.057878][ T5035] ksys_read+0xdc/0x1a0 [ 60.057949][ T5035] __x64_sys_read+0x40/0x50 [ 60.058035][ T5035] x64_sys_call+0x2886/0x3020 [ 60.058048][ T5035] do_syscall_64+0x136/0x3c0 [ 60.058096][ T5035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.058108][ T5035] RIP: 0033:0x7f2b9d11e84e [ 60.058125][ T5035] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.058136][ T5035] RSP: 002b:00007f2b9bbb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.058148][ T5035] RAX: ffffffffffffffda RBX: 00007f2b9bbb76c0 RCX: 00007f2b9d11e84e [ 60.058156][ T5035] RDX: 000000000000000f RSI: 00007f2b9bbb70a0 RDI: 0000000000000004 [ 60.058163][ T5035] RBP: 00007f2b9bbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.058170][ T5035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.058230][ T5035] R13: 00007f2b9d3e6038 R14: 00007f2b9d3e5fa0 R15: 00007ffec9620fd8 [ 60.058308][ T5035] [ 60.296834][ T5039] bond1: entered promiscuous mode [ 60.302123][ T5039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.327568][ T5039] veth3: entered promiscuous mode [ 60.333712][ T5039] bond1: (slave veth3): Enslaving as an active interface with an up link [ 60.401135][ T5046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.287'. [ 60.427896][ T28] audit: type=1400 audit(1785928200.262:1053): avc: denied { getopt } for pid=5045 comm="syz.7.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.447755][ T28] audit: type=1400 audit(1785928200.272:1054): avc: denied { create } for pid=5045 comm="syz.7.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 60.544749][ T5048] set_capacity_and_notify: 5 callbacks suppressed [ 60.544854][ T5048] loop1: detected capacity change from 0 to 512 [ 60.554334][ T5046] loop7: detected capacity change from 0 to 256 [ 60.566662][ T5048] ext4: Bad value for 'journal_ioprio' [ 60.586717][ T5046] vfat: Bad value for 'shortname' [ 60.762019][ T5051] loop7: detected capacity change from 0 to 512 [ 60.775104][ T5051] ext4: Bad value for 'journal_ioprio' [ 61.372501][ T5056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 61.473207][ T4906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.516804][ T28] audit: type=1400 audit(1785928201.342:1055): avc: denied { write } for pid=3301 comm="syz-executor" name="81" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 61.554533][ T3704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.569810][ T28] audit: type=1400 audit(1785928201.342:1056): avc: denied { remove_name } for pid=3301 comm="syz-executor" name="binderfs" dev="tmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 61.609064][ T3651] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.624759][ T5062] loop6: detected capacity change from 0 to 512 [ 61.631443][ T5063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 61.642696][ T28] audit: type=1400 audit(1785928201.342:1057): avc: denied { write } for pid=3301 comm="syz-executor" name="81" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 61.657774][ T5062] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 61.668666][ T28] audit: type=1400 audit(1785928201.342:1058): avc: denied { write } for pid=3301 comm="syz-executor" name="81" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 61.706061][ T28] audit: type=1400 audit(1785928201.342:1059): avc: denied { write } for pid=3301 comm="syz-executor" name="81" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 61.745023][ T28] audit: type=1400 audit(1785928201.342:1060): avc: denied { rmdir } for pid=3301 comm="syz-executor" name="81" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 61.804023][ T5062] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 61.891610][ T5062] loop6: detected capacity change from 0 to 1024 [ 61.937506][ T5062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 61.959650][ T5062] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.973533][ T5074] usb usb8: usbfs: process 5074 (syz.4.296) did not claim interface 0 before use [ 61.994536][ T5062] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.293: lblock 0 mapped to illegal pblock 0 (length 6) [ 62.075049][ T5074] loop4: detected capacity change from 0 to 512 [ 62.119155][ T5074] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 62.128247][ T5074] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a040e018, mo2=0002] [ 62.143568][ T5074] System zones: 0-1, 15-15, 18-18, 34-34 [ 62.149383][ T5062] syz.6.293 (5062) used greatest stack depth: 9216 bytes left [ 62.158277][ T5074] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.163927][ T3704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.174576][ T5074] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 62.192302][ T5074] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 62.211783][ T5074] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.296: bad orphan inode 16 [ 62.222262][ T5074] loop4: lost filesystem error report for type 5 error -117 [ 62.226028][ T5074] ext4_test_bit(bit=15, block=18) = 1 [ 62.226278][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 62.226348][ C0] EXT4-fs (loop4): initial error at time 1785928202: ext4_orphan_get:1425 [ 62.226430][ C0] EXT4-fs (loop4): last error at time 1785928202: ext4_orphan_get:1425 [ 62.265921][ T5074] is_bad_inode(inode)=0 [ 62.270472][ T5074] NEXT_ORPHAN(inode)=0 [ 62.275736][ T5074] max_ino=32 [ 62.281817][ T5074] i_nlink=2 [ 62.300274][ T5074] EXT4-fs (loop4): mounted filesystem 00000400-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.323296][ T5091] netlink: 20 bytes leftover after parsing attributes in process `syz.6.302'. [ 62.332597][ T5091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=5091 comm=syz.6.302 [ 62.353714][ T5091] sg_write: data in/out 266396/132 bytes for SCSI command 0x30-- guessing data in; [ 62.353714][ T5091] program syz.6.302 not setting count and/or reply_len properly [ 62.361172][ T5093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=5093 comm=syz.7.301 [ 62.404789][ T5095] loop6: detected capacity change from 0 to 1024 [ 62.431600][ T5095] EXT4-fs: Ignoring removed bh option [ 62.441505][ T5089] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 62.475455][ T5100] loop1: detected capacity change from 0 to 512 [ 62.490186][ T5100] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.305: iget: bad i_size value: 38620345925642 [ 62.490433][ T5095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.511873][ T5100] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.518909][ T5100] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.305: couldn't read orphan inode 15 (err -117) [ 62.528114][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 62.528132][ C0] EXT4-fs (loop1): initial error at time 1785928202: ext4_orphan_get:1399: inode 15 [ 62.528180][ C0] EXT4-fs (loop1): last error at time 1785928202: ext4_orphan_get:1399: inode 15 [ 62.570210][ T5100] loop1: lost filesystem error report for type 5 error -117 [ 62.570284][ T5095] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.303: bg 0: block 408: padding at end of block bitmap is not set [ 62.570818][ T5100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.585216][ T5098] netlink: 6 bytes leftover after parsing attributes in process `syz.7.304'. [ 62.596408][ T5095] EXT4-fs (loop6): Remounting filesystem read-only [ 62.622120][ T5098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.643269][ T5089] loop5: detected capacity change from 0 to 256 [ 62.643600][ T5095] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.6.303: cleanup dec ref error -117 [ 62.656831][ T5107] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2560 sclass=netlink_xfrm_socket pid=5107 comm=syz.7.304 [ 62.679295][ T5089] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.679547][ T5109] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.305: bg 0: block 5: invalid block bitmap [ 62.679696][ T5107] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2563 sclass=netlink_xfrm_socket pid=5107 comm=syz.7.304 [ 62.679808][ T5109] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 848 with error 28 [ 62.679832][ T5109] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.679832][ T5109] [ 62.679845][ T5109] EXT4-fs (loop1): Total free blocks count 0 [ 62.679933][ T5109] EXT4-fs (loop1): Free/Dirty block details [ 62.679946][ T5109] EXT4-fs (loop1): free_blocks=0 [ 62.679959][ T5109] EXT4-fs (loop1): dirty_blocks=850 [ 62.680025][ T5109] EXT4-fs (loop1): Block reservation details [ 62.680036][ T5109] EXT4-fs (loop1): i_reserved_data_blocks=850 [ 62.691926][ T5098] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=5098 comm=syz.7.304 [ 62.703145][ T5100] EXT4-fs (loop1): shut down requested (0) [ 62.839879][ T5116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8216 sclass=netlink_route_socket pid=5116 comm=syz.4.309 [ 62.906593][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 62.910814][ T5126] syzkaller0: entered promiscuous mode [ 62.920971][ T5126] syzkaller0: entered allmulticast mode [ 62.932135][ T5126] team_slave_0: entered promiscuous mode [ 62.934858][ T5130] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5974 sclass=netlink_xfrm_socket pid=5130 comm=syz.6.312 [ 62.987138][ T5135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5135 comm=syz.1.315 [ 63.015520][ T5133] loop6: detected capacity change from 0 to 512 [ 63.030923][ T5133] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 63.039289][ T5133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 63.048935][ T5123] team_slave_0: left promiscuous mode [ 63.055107][ T5133] System zones: 0-1, 15-15, 18-18, 34-34 [ 63.061669][ T5133] EXT4-fs (loop6): orphan cleanup on readonly fs [ 63.070900][ T5133] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 63.085751][ T5133] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 63.100693][ T5133] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.314: bg 0: block 40: padding at end of block bitmap is not set [ 63.125897][ T5133] loop6: lost filesystem error report for type 5 error -117 [ 63.126327][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 63.140515][ C0] EXT4-fs (loop6): initial error at time 1785928202: ext4_validate_block_bitmap:441 [ 63.150298][ C0] EXT4-fs (loop6): last error at time 1785928202: ext4_validate_block_bitmap:441 [ 63.164169][ T5133] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 63.173249][ T5133] loop6: lost filesystem error report for type 5 error -117 [ 63.175668][ T5133] EXT4-fs (loop6): 1 truncate cleaned up [ 63.314184][ T5142] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.333302][ T5142] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.317: bg 0: block 112: padding at end of block bitmap is not set [ 63.431274][ T5142] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 63.486174][ T5152] ext4: Bad value for 'journal_ioprio' [ 63.521260][ T5142] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.521260][ T5142] [ 63.585770][ T5142] EXT4-fs (loop4): Total free blocks count 0 [ 63.616624][ T5142] EXT4-fs (loop4): Free/Dirty block details [ 63.640869][ T5142] EXT4-fs (loop4): free_blocks=0 [ 63.651731][ T5157] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=5157 comm=syz.5.320 [ 63.675252][ T5142] EXT4-fs (loop4): dirty_blocks=64 [ 63.691424][ T5142] EXT4-fs (loop4): Block reservation details [ 63.708478][ T5158] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=5158 comm=syz.5.320 [ 63.724364][ T5142] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 63.763323][ T5142] syz.4.317 (5142) used greatest stack depth: 8760 bytes left [ 63.771671][ T3301] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 63.828472][ T5161] PM: suspend entry (deep) [ 63.922074][ T5162] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 63.936314][ T5162] EXT4-fs (loop4): 1 truncate cleaned up [ 63.943985][ T5162] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.321: invalid indirect mapped block 4294901760 (level 0) [ 63.958248][ T5162] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.321: invalid indirect mapped block 2185560079 (level 0) [ 63.972525][ T5162] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #13: comm syz.4.321: corrupted inode contents [ 63.977902][ T4104] Filesystems sync: 0.144 seconds [ 64.000467][ T5162] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #13: comm syz.4.321: mark_inode_dirty error [ 64.012544][ T5162] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.321: invalid indirect mapped block 65535 (level 2) [ 64.027791][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 64.037758][ T5162] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #13: comm syz.4.321: corrupted inode contents [ 64.050002][ T5162] EXT4-fs error (device loop4): ext4_truncate:4691: inode #13: comm syz.4.321: mark_inode_dirty error [ 64.061528][ T5162] EXT4-fs error (device loop4) in ext4_setattr:6172: Corrupt filesystem [ 64.081024][ T5161] Freezing user space processes [ 64.886344][ T3615] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.886344][ T5118] Bluetooth: hci0: command 0x1003 tx timeout [ 64.932281][ T5161] Freezing user space processes completed (elapsed 0.846 seconds) [ 64.940181][ T5161] OOM killer disabled. [ 64.944272][ T5161] Freezing remaining freezable tasks [ 64.952167][ T5161] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 64.960698][ T5161] printk: Suspending console(s) (use no_console_suspend to debug) [ 65.037982][ T5161] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 65.038294][ T5161] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 65.039103][ T5161] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 65.039190][ T5161] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 65.039262][ T5161] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 65.039481][ T5161] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 65.039570][ T5161] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 65.039720][ T5161] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 65.039833][ T5161] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 65.039892][ T5161] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 65.039993][ T5161] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 65.040051][ T5161] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 65.040150][ T5161] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 65.040282][ T5161] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 65.040373][ T5161] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 65.040441][ T5161] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 65.076877][ T3992] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 65.623865][ T5161] ACPI: PM: Preparing to enter system sleep state S3 [ 65.624213][ T5161] ACPI: PM: Saving platform NVS memory [ 65.624322][ T5161] Disabling non-boot CPUs ... [ 65.628293][ T5161] smpboot: CPU 1 is now offline [ 65.636513][ T5161] ACPI: PM: Low-level resume complete [ 65.636557][ T5161] ACPI: PM: Restoring platform NVS memory [ 65.647363][ T5161] Enabling non-boot CPUs ... [ 65.647974][ T5161] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 65.652685][ T5161] CPU1 is up [ 65.652933][ T5161] ACPI: PM: Waking up from system sleep state S3 [ 65.712510][ T3986] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 65.864312][ T5161] OOM killer enabled. [ 65.864990][ T5161] Restarting tasks: Starting [ 65.894976][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 65.894989][ T28] audit: type=1400 audit(1785928205.727:1090): avc: denied { read write } for pid=5186 comm="syz.1.322" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 65.896010][ T5161] Restarting tasks: Done [ 65.900243][ T5161] random: crng reseeded on system resumption [ 65.905207][ T5161] PM: suspend exit [ 65.908179][ T28] audit: type=1400 audit(1785928205.727:1091): avc: denied { open } for pid=5186 comm="syz.1.322" path="/74/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 65.921828][ T28] audit: type=1400 audit(1785928205.747:1092): avc: denied { ioctl } for pid=5186 comm="syz.1.322" path="/74/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 65.938206][ T28] audit: type=1400 audit(1785928205.747:1093): avc: denied { create } for pid=5186 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 65.944937][ T28] audit: type=1400 audit(1785928205.777:1094): avc: denied { accept } for pid=5190 comm="syz.7.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.961931][ T28] audit: type=1400 audit(1785928205.797:1095): avc: denied { setopt } for pid=5190 comm="syz.7.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.966597][ T28] audit: type=1400 audit(1785928205.797:1096): avc: denied { write } for pid=5190 comm="syz.7.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.994117][ T3301] EXT4-fs unmount: 8 callbacks suppressed [ 65.994132][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.049149][ T28] audit: type=1400 audit(1785928205.877:1097): avc: denied { mount } for pid=5198 comm="syz.4.325" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 66.064219][ T28] audit: type=1400 audit(1785928205.877:1098): avc: denied { mounton } for pid=5198 comm="syz.4.325" path="/90/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 66.075598][ T28] audit: type=1400 audit(1785928205.887:1099): avc: denied { search } for pid=5198 comm="syz.4.325" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 66.141737][ T5206] bond1: entered promiscuous mode [ 66.148403][ T5206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.179391][ T5203] set_capacity_and_notify: 3 callbacks suppressed [ 66.179429][ T5203] loop6: detected capacity change from 0 to 512 [ 66.192398][ T5212] netlink: 20 bytes leftover after parsing attributes in process `syz.7.332'. [ 66.195348][ T5203] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 66.196635][ T5203] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 66.198412][ T5203] System zones: 0-1, 15-15, 18-18, 34-34 [ 66.201119][ T5203] EXT4-fs (loop6): orphan cleanup on readonly fs [ 66.203012][ T5203] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 66.205322][ T5203] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 66.211415][ T5203] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.329: bg 0: block 40: padding at end of block bitmap is not set [ 66.218708][ T5203] loop6: lost filesystem error report for type 5 error -117 [ 66.221153][ T5203] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 66.224114][ T5203] loop6: lost filesystem error report for type 5 error -117 [ 66.226475][ T5203] EXT4-fs (loop6): 1 truncate cleaned up [ 66.228818][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 66.229801][ C0] EXT4-fs (loop6): initial error at time 1785928206: ext4_validate_block_bitmap:441 [ 66.231198][ C0] EXT4-fs (loop6): last error at time 1785928206: ext4_mb_clear_bb:6679 [ 66.239717][ T5203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.262821][ T5206] veth3: entered promiscuous mode [ 66.267333][ T5206] bond1: (slave veth3): Enslaving as an active interface with an up link [ 66.310928][ T3704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.363206][ T5220] loop6: detected capacity change from 0 to 512 [ 66.369370][ T5220] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.395288][ T5220] EXT4-fs (loop6): 1 orphan inode deleted [ 66.399451][ T5220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.402825][ T5220] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.409595][ T5182] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:159: Failed to release dquot type 1 [ 66.450026][ T5231] FAULT_INJECTION: forcing a failure. [ 66.450026][ T5231] name failslab, interval 1, probability 0, space 0, times 0 [ 66.453349][ T3704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.461741][ T5231] CPU: 1 UID: 0 PID: 5231 Comm: syz.7.337 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.461802][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.461847][ T5231] Call Trace: [ 66.461853][ T5231] [ 66.461865][ T5231] __dump_stack+0x1d/0x30 [ 66.461917][ T5231] dump_stack_lvl+0x95/0xd0 [ 66.461934][ T5231] dump_stack+0x15/0x1b [ 66.462053][ T5231] should_fail_ex+0x25e/0x270 [ 66.462077][ T5231] should_failslab+0x8c/0xb0 [ 66.462123][ T5231] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 66.462143][ T5231] ? do_getname+0x2e/0x1c0 [ 66.462162][ T5231] ? do_getname+0x2e/0x1c0 [ 66.462185][ T5231] ? __fget_files+0x184/0x1c0 [ 66.462279][ T5231] do_getname+0x2e/0x1c0 [ 66.462372][ T5231] user_path_at+0x28/0x100 [ 66.462398][ T5231] __x64_sys_umount+0x85/0xe0 [ 66.462415][ T5231] x64_sys_call+0x103b/0x3020 [ 66.462457][ T5231] do_syscall_64+0x136/0x3c0 [ 66.462563][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.462586][ T5231] RIP: 0033:0x7fd2417be019 [ 66.462603][ T5231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.462619][ T5231] RSP: 002b:00007fd240217028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 66.462792][ T5231] RAX: ffffffffffffffda RBX: 00007fd241a45fa0 RCX: 00007fd2417be019 [ 66.462849][ T5231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 66.462863][ T5231] RBP: 00007fd240217090 R08: 0000000000000000 R09: 0000000000000000 [ 66.462876][ T5231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.462889][ T5231] R13: 00007fd241a46038 R14: 00007fd241a45fa0 R15: 00007ffc8061c978 [ 66.462909][ T5231] [ 66.498655][ T5231] loop7: detected capacity change from 0 to 512 [ 66.517173][ T5231] EXT4-fs (loop7): 1 orphan inode deleted [ 66.522065][ T5231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.526794][ T5231] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.530422][ T5181] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:158: Failed to release dquot type 1 [ 66.555191][ T3852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.584514][ T5233] netlink: 4 bytes leftover after parsing attributes in process `syz.6.339'. [ 66.589694][ T5233] openvswitch: netlink: Flow key attr not present in new flow. [ 66.659306][ T5247] loop4: detected capacity change from 0 to 512 [ 66.661721][ T5247] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.728679][ T5250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.730236][ T5250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.784919][ T5249] loop5: detected capacity change from 0 to 512 [ 66.800009][ T5249] ext4: Bad value for 'journal_ioprio' [ 66.996525][ T5252] loop7: detected capacity change from 0 to 512 [ 67.025220][ T5252] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 67.029800][ T5252] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 67.032810][ T5252] System zones: 0-1, 15-15, 18-18, 34-34 [ 67.036990][ T5252] EXT4-fs (loop7): orphan cleanup on readonly fs [ 67.042693][ T5252] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 67.049542][ T5252] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 67.054358][ T5252] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.345: bg 0: block 40: padding at end of block bitmap is not set [ 67.056759][ T5252] loop7: lost filesystem error report for type 5 error -117 [ 67.059021][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 67.062510][ C1] EXT4-fs (loop7): initial error at time 1785928206: ext4_validate_block_bitmap:441 [ 67.063921][ C1] EXT4-fs (loop7): last error at time 1785928206: ext4_validate_block_bitmap:441 [ 67.072558][ T5252] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 67.083609][ T5252] loop7: lost filesystem error report for type 5 error -117 [ 67.093917][ T5252] EXT4-fs (loop7): 1 truncate cleaned up [ 67.146580][ T5252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.215360][ T3852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.358032][ T5247] lo speed is unknown, defaulting to 1000 [ 67.360937][ T5247] lo speed is unknown, defaulting to 1000 [ 67.362598][ T5247] lo speed is unknown, defaulting to 1000 [ 67.445586][ T5257] loop7: detected capacity change from 0 to 512 [ 67.451740][ T5257] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.452819][ T5257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.458242][ T5247] infiniband sz1: set active [ 67.459058][ T5247] infiniband sz1: added lo [ 67.460670][ T11] lo speed is unknown, defaulting to 1000 [ 67.463475][ T5257] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.475603][ T5247] RDS/IB: sz1: added [ 67.476324][ T5247] smc: adding ib device sz1 with port count 1 [ 67.477342][ T5247] smc: ib device sz1 port 1 has no pnetid [ 67.478887][ T5247] lo speed is unknown, defaulting to 1000 [ 67.529362][ T11] lo speed is unknown, defaulting to 1000 [ 67.543889][ T5257] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.347: Allocating blocks 41-42 which overlap fs metadata [ 67.545953][ T5257] loop7: lost filesystem error report for type 5 error -117 [ 67.546145][ T5257] EXT4-fs (loop7): Remounting filesystem read-only [ 67.548773][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 67.549746][ C0] EXT4-fs (loop7): initial error at time 1785928207: ext4_mb_mark_diskspace_used:4222 [ 67.551122][ C0] EXT4-fs (loop7): last error at time 1785928207: ext4_mb_mark_diskspace_used:4222 [ 67.589037][ T5247] lo speed is unknown, defaulting to 1000 [ 67.635977][ T5257] EXT4-fs (loop7): 1 truncate cleaned up [ 67.699419][ T5257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.702345][ T5247] lo speed is unknown, defaulting to 1000 [ 67.830584][ T5247] lo speed is unknown, defaulting to 1000 [ 67.912637][ T5264] loop5: detected capacity change from 0 to 512 [ 67.923008][ T5247] lo speed is unknown, defaulting to 1000 [ 67.929259][ T5264] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 67.932722][ T5266] loop6: detected capacity change from 0 to 512 [ 67.944195][ T5266] EXT4-fs: Ignoring removed nobh option [ 68.069391][ T5266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.072034][ T5266] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.111943][ T3852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.266361][ T5281] netlink: 28 bytes leftover after parsing attributes in process `syz.7.355'. [ 68.359008][ T5285] netlink: 132 bytes leftover after parsing attributes in process `syz.6.350'. [ 68.427971][ T5285] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 3: comm syz.6.350: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 68.531241][ T5287] loop7: detected capacity change from 0 to 512 [ 68.576016][ T5287] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 68.579848][ T5287] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 68.585454][ T5287] System zones: 0-1, 15-15, 18-18, 34-34 [ 68.593460][ T5287] EXT4-fs (loop7): orphan cleanup on readonly fs [ 68.599477][ T5287] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 68.610592][ T5287] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 68.616721][ T5287] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.357: bg 0: block 40: padding at end of block bitmap is not set [ 68.619891][ T5287] loop7: lost filesystem error report for type 5 error -117 [ 68.620267][ T5287] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 68.628771][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 68.629719][ C1] EXT4-fs (loop7): initial error at time 1785928208: ext4_validate_block_bitmap:441 [ 68.631039][ C1] EXT4-fs (loop7): last error at time 1785928208: ext4_validate_block_bitmap:441 [ 68.637916][ T5287] loop7: lost filesystem error report for type 5 error -117 [ 68.641271][ T5287] EXT4-fs (loop7): 1 truncate cleaned up [ 68.665390][ T5287] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.729354][ T3852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.833148][ T3704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.840917][ T5294] ext4: Bad value for 'journal_ioprio' [ 68.893782][ T5299] sctp: [Deprecated]: syz.7.361 (pid 5299) Use of int in maxseg socket option. [ 68.893782][ T5299] Use struct sctp_assoc_value instead [ 68.928811][ T5307] sctp: [Deprecated]: syz.7.361 (pid 5307) Use of int in maxseg socket option. [ 68.928811][ T5307] Use struct sctp_assoc_value instead [ 69.188616][ T5320] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.191947][ T5320] EXT4-fs: test_dummy_encryption option not supported [ 69.246887][ T5315] ext4: Bad value for 'journal_ioprio' [ 69.247445][ T5322] lo speed is unknown, defaulting to 1000 [ 69.961810][ T5338] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 69.965587][ T5338] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 69.969562][ T5338] System zones: 0-1, 15-15, 18-18, 34-34 [ 69.973608][ T5338] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.977211][ T5338] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.985470][ T5338] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 69.992584][ T5338] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.372: bg 0: block 40: padding at end of block bitmap is not set [ 69.997996][ T5338] loop4: lost filesystem error report for type 5 error -117 [ 69.998767][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 70.000769][ C1] EXT4-fs (loop4): initial error at time 1785928209: ext4_validate_block_bitmap:441 [ 70.002082][ C1] EXT4-fs (loop4): last error at time 1785928209: ext4_validate_block_bitmap:441 [ 70.004140][ T5338] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 70.005741][ T5338] loop4: lost filesystem error report for type 5 error -117 [ 70.008253][ T5338] EXT4-fs (loop4): 1 truncate cleaned up [ 70.014004][ T5338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.057807][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.155491][ T5342] selinux_netlink_send: 1 callbacks suppressed [ 70.155513][ T5342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=5342 comm=syz.5.374 [ 70.162263][ T5358] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.168380][ T5358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=284ec119, mo2=0002] [ 70.169718][ T5358] System zones: 1-12 [ 70.171575][ T5358] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.379: corrupted in-inode xattr: e_value size too large [ 70.174812][ T5358] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.175275][ T5358] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.379: couldn't read orphan inode 15 (err -117) [ 70.178842][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 70.179773][ C0] EXT4-fs (loop4): initial error at time 1785928210: ext4_iget_extra_inode:5180: inode 15 [ 70.181197][ C0] EXT4-fs (loop4): last error at time 1785928210: ext4_iget_extra_inode:5180: inode 15 [ 70.184404][ T5342] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20003 [ 70.188015][ T5358] loop4: lost filesystem error report for type 5 error -117 [ 70.191240][ T5358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.197165][ T5356] lo speed is unknown, defaulting to 1000 [ 70.200813][ T5361] ip_tables: iptables: counters copy to user failed while replacing table [ 70.226523][ T5364] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 12: comm syz.4.379: lblock 3 mapped to illegal pblock 12 (length 1) [ 70.236802][ T5358] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 12: comm syz.4.379: lblock 3 mapped to illegal pblock 12 (length 1) [ 70.297573][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.349903][ T5370] sctp: [Deprecated]: syz.4.381 (pid 5370) Use of int in max_burst socket option. [ 70.349903][ T5370] Use struct sctp_assoc_value instead [ 70.387959][ T5363] ext4: Bad value for 'journal_ioprio' [ 70.476127][ T5380] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 70.748939][ T5393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.768478][ T5393] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.389: corrupted inode contents [ 70.776771][ T5393] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.389: mark_inode_dirty error [ 70.787717][ T5393] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.389: corrupted inode contents [ 70.798939][ T5393] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.389: mark_inode_dirty error [ 70.807534][ T5393] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.389: corrupted inode contents [ 70.816991][ T5393] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.389: mark_inode_dirty error [ 70.828618][ T5393] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.389: corrupted inode contents [ 70.839236][ T5393] EXT4-fs error (device loop5): ext4_truncate:4691: inode #15: comm syz.5.389: mark_inode_dirty error [ 70.846861][ T5393] EXT4-fs error (device loop5) in ext4_setattr:6172: Corrupt filesystem [ 70.853651][ T5395] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.389: corrupted inode contents [ 70.897044][ T3651] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.014898][ T5388] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 71.020330][ T5388] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 71.025182][ T5388] System zones: 0-1, 15-15, 18-18, 34-34 [ 71.030287][ T5388] EXT4-fs (loop6): orphan cleanup on readonly fs [ 71.036868][ T5388] __quota_error: 58 callbacks suppressed [ 71.036894][ T5388] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 71.047382][ T5388] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 71.049905][ T5388] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 71.053128][ T5388] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.387: bg 0: block 40: padding at end of block bitmap is not set [ 71.055698][ T5388] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 71.058133][ T5388] EXT4-fs (loop6): 1 truncate cleaned up [ 71.059402][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 71.059443][ C1] EXT4-fs (loop6): initial error at time 1785928210: ext4_validate_block_bitmap:441 [ 71.059532][ C1] EXT4-fs (loop6): last error at time 1785928210: ext4_mb_clear_bb:6679 [ 71.068277][ T5388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.097134][ T3704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.149444][ T28] audit: type=1400 audit(1785928210.987:1148): avc: denied { read } for pid=5401 comm="syz.7.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.205974][ T28] audit: type=1400 audit(1785928211.037:1149): avc: denied { getopt } for pid=5401 comm="syz.7.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.208688][ T28] audit: type=1400 audit(1785928211.037:1150): avc: denied { write } for pid=5401 comm="syz.7.393" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.331435][ T28] audit: type=1326 audit(1785928211.167:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.4.395" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c77dee019 code=0x0 [ 71.592775][ T5426] netlink: 31 bytes leftover after parsing attributes in process `syz.5.401'. [ 71.746352][ T5428] set_capacity_and_notify: 8 callbacks suppressed [ 71.746395][ T5428] loop5: detected capacity change from 0 to 512 [ 71.783051][ T5428] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 71.786572][ T5428] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 71.791290][ T5428] System zones: 0-1, 15-15, 18-18, 34-34 [ 71.794835][ T5428] EXT4-fs (loop5): orphan cleanup on readonly fs [ 71.798263][ T5428] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 71.809237][ T5428] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 71.812001][ T5428] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 71.815419][ T5428] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.402: bg 0: block 40: padding at end of block bitmap is not set [ 71.817643][ T5428] fserror_report: 2 callbacks suppressed [ 71.817684][ T5428] loop5: lost filesystem error report for type 5 error -117 [ 71.820201][ T5428] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 71.822920][ T5428] loop5: lost filesystem error report for type 5 error -117 [ 71.823651][ T5428] EXT4-fs (loop5): 1 truncate cleaned up [ 71.829408][ T5428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.861954][ T3651] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.912515][ T5435] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 72.002980][ T28] audit: type=1400 audit(1785928211.837:1152): avc: denied { read } for pid=5436 comm="syz.6.405" name="h" dev="configfs" ino=10643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 72.296995][ T5459] loop6: detected capacity change from 0 to 512 [ 72.328202][ T5459] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 72.340492][ T5459] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 72.369089][ T5459] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 72.369168][ T5457] loop4: detected capacity change from 0 to 512 [ 72.401847][ T5457] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 72.404139][ T5457] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 72.405941][ T5457] System zones: 0-1, 15-15, 18-18, 34-34 [ 72.408598][ T5457] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.410354][ T5457] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 72.412404][ T5457] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 72.414915][ T5457] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 72.423738][ T5457] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.413: bg 0: block 40: padding at end of block bitmap is not set [ 72.426048][ T5457] loop4: lost filesystem error report for type 5 error -117 [ 72.428096][ T5457] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 72.429515][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 72.429543][ C1] EXT4-fs (loop4): initial error at time 1785928212: ext4_validate_block_bitmap:441 [ 72.429646][ C1] EXT4-fs (loop4): last error at time 1785928212: ext4_validate_block_bitmap:441 [ 72.435614][ T5457] loop4: lost filesystem error report for type 5 error -117 [ 72.438279][ T5457] EXT4-fs (loop4): 1 truncate cleaned up [ 72.472072][ T5457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.507077][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.536744][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.412'. [ 72.691908][ T5459] gretap0: entered promiscuous mode [ 72.697487][ T5459] macvlan0: entered allmulticast mode [ 72.702938][ T5459] gretap0: entered allmulticast mode [ 72.876177][ T5478] loop6: detected capacity change from 0 to 512 [ 72.905563][ T5478] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.418: corrupted in-inode xattr: invalid ea_ino [ 72.932914][ T5478] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.933099][ T5478] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.418: couldn't read orphan inode 15 (err -117) [ 72.938769][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 72.939712][ C1] EXT4-fs (loop6): initial error at time 1785928212: ext4_iget_extra_inode:5180: inode 15 [ 72.941061][ C1] EXT4-fs (loop6): last error at time 1785928212: ext4_iget_extra_inode:5180: inode 15 [ 72.967554][ T5478] loop6: lost filesystem error report for type 5 error -117 [ 72.969813][ T5478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.100930][ T28] audit: type=1400 audit(1785928212.937:1153): avc: denied { write } for pid=5477 comm="syz.6.418" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.229617][ T3704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.900330][ T28] audit: type=1400 audit(1785928213.727:1154): avc: denied { ioctl } for pid=5494 comm="syz.4.423" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=10919 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.069877][ T5492] loop6: detected capacity change from 0 to 8192 [ 74.100944][ T5501] lo speed is unknown, defaulting to 1000 [ 74.151112][ T5497] loop7: detected capacity change from 0 to 512 [ 74.160090][ T5503] loop5: detected capacity change from 0 to 4096 [ 74.184199][ T5503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.205317][ T5503] netlink: 24 bytes leftover after parsing attributes in process `syz.5.427'. [ 74.215699][ T5497] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 74.222575][ T5497] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 74.230335][ T5497] System zones: 0-1, 15-15, 18-18, 34-34 [ 74.231575][ T5497] EXT4-fs (loop7): orphan cleanup on readonly fs [ 74.237705][ T5497] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 74.246843][ T5497] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 74.255963][ T5497] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.424: bg 0: block 40: padding at end of block bitmap is not set [ 74.265871][ T5497] loop7: lost filesystem error report for type 5 error -117 [ 74.266413][ T5497] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 74.269053][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 74.269122][ C0] EXT4-fs (loop7): initial error at time 1785928214: ext4_validate_block_bitmap:441 [ 74.269201][ C0] EXT4-fs (loop7): last error at time 1785928214: ext4_validate_block_bitmap:441 [ 74.288013][ T5497] loop7: lost filesystem error report for type 5 error -117 [ 74.292332][ T5497] EXT4-fs (loop7): 1 truncate cleaned up [ 74.324047][ T5497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.385250][ T3852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.422688][ T5513] syzkaller0: entered promiscuous mode [ 74.423519][ T5513] syzkaller0: entered allmulticast mode [ 74.427248][ T3704] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 74.438425][ T3704] FAT-fs (loop6): Filesystem has been set read-only [ 74.451627][ T3651] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.757393][ T5529] loop4: detected capacity change from 0 to 512 [ 74.769660][ T5529] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 74.897604][ T5529] loop4: detected capacity change from 0 to 1024 [ 74.943702][ T5529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.946412][ T5529] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.958294][ T5529] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.432: lblock 0 mapped to illegal pblock 0 (length 6) [ 75.518446][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.861639][ T5552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5552 comm=syz.5.438 [ 76.363799][ T5560] netlink: 'syz.6.441': attribute type 1 has an invalid length. [ 76.388094][ T5560] bond1: entered promiscuous mode [ 76.397986][ T5560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.517554][ T5560] veth3: entered promiscuous mode [ 76.529379][ T5560] bond1: (slave veth3): Enslaving as an active interface with an up link [ 76.702557][ T5563] loop6: detected capacity change from 0 to 512 [ 76.704990][ T5563] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.733487][ T5563] rdma_rxe: rxe_newlink: failed to add lo [ 76.736497][ T5563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.738015][ T5563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.946612][ T5557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=5557 comm=syz.4.439 [ 76.959947][ T5557] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20003 [ 77.162584][ T5568] lo speed is unknown, defaulting to 1000 [ 77.491305][ T5582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5582 comm=syz.7.451 [ 77.588714][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 77.588727][ T28] audit: type=1400 audit(1785928217.417:1167): avc: denied { create } for pid=5588 comm="syz.6.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.361238][ T28] audit: type=1400 audit(1785928218.137:1168): avc: denied { create } for pid=5599 comm="syz.6.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 79.232302][ T5609] loop6: detected capacity change from 0 to 1024 [ 79.238293][ T5609] EXT4-fs: Ignoring removed bh option [ 79.253283][ T5609] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.266662][ T5609] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.458: bg 0: block 408: padding at end of block bitmap is not set [ 79.273262][ T5609] EXT4-fs (loop6): Remounting filesystem read-only [ 79.274329][ T5609] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.6.458: cleanup dec ref error -28 [ 79.381992][ T3704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.467148][ T5615] macvlan1: entered promiscuous mode [ 79.474969][ T5615] bridge0: entered promiscuous mode [ 79.684885][ T28] audit: type=1326 audit(1785928219.517:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.6.461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342169e019 code=0x7ffc0000 [ 79.703018][ T28] audit: type=1326 audit(1785928219.517:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.6.461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342169e019 code=0x7ffc0000 [ 79.718335][ T28] audit: type=1326 audit(1785928219.517:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.6.461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342169e019 code=0x7ffc0000 [ 79.736863][ T28] audit: type=1326 audit(1785928219.517:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.6.461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f342169e019 code=0x7ffc0000 [ 79.752267][ T28] audit: type=1326 audit(1785928219.517:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.6.461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342169e019 code=0x7ffc0000 [ 79.771849][ T28] audit: type=1326 audit(1785928219.527:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.6.461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342169e019 code=0x7ffc0000 [ 79.785551][ T28] audit: type=1326 audit(1785928219.527:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.6.461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342169e019 code=0x7ffc0000 [ 79.802213][ T28] audit: type=1326 audit(1785928219.527:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.6.461" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f342169e019 code=0x7ffc0000 [ 79.912371][ T5630] netlink: 'syz.6.464': attribute type 1 has an invalid length. [ 79.956733][ T5635] loop4: detected capacity change from 0 to 2048 [ 79.961042][ T5630] bond2: entered promiscuous mode [ 79.962073][ T5630] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.002899][ T5635] loop4: p1 < > p2 < > p3 p4 < > [ 80.003668][ T5635] loop4: partition table partially beyond EOD, truncated [ 80.010630][ T5635] loop4: p1 start 2305 is beyond EOD, truncated [ 80.011564][ T5635] loop4: p2 start 4294902784 is beyond EOD, truncated [ 80.021766][ T5635] loop4: p3 start 3724543488 is beyond EOD, truncated [ 80.085187][ T5630] veth5: entered promiscuous mode [ 80.106439][ T5630] bond2: (slave veth5): Enslaving as an active interface with an up link [ 80.238553][ T5640] loop4: detected capacity change from 0 to 8192 [ 80.366139][ T5646] loop6: detected capacity change from 0 to 1024 [ 80.378419][ T5646] EXT4-fs: Ignoring removed bh option [ 80.417587][ T5646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.465206][ T5646] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.471: bg 0: block 408: padding at end of block bitmap is not set [ 80.490145][ T5646] EXT4-fs (loop6): Remounting filesystem read-only [ 80.508565][ T5646] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.6.471: cleanup dec ref error -28 [ 80.607917][ T3704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.667801][ T5654] netlink: 'syz.6.473': attribute type 1 has an invalid length. [ 80.788471][ T5658] loop7: detected capacity change from 0 to 1024 [ 80.817978][ T5658] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.849135][ T5658] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 80.867991][ T5658] EXT4-fs (loop7): orphan cleanup on readonly fs [ 80.879719][ T5658] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #3: comm syz.7.474: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 80.949581][ T5658] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.949710][ T5658] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.474: Bad quota inode: 3, type: 0 [ 80.958899][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 80.958913][ C1] EXT4-fs (loop7): initial error at time 1785928220: ext4_ext_check_inode:521: inode 3 [ 80.958937][ C1] EXT4-fs (loop7): last error at time 1785928220: ext4_ext_check_inode:521: inode 3 [ 81.029006][ T5665] SELinux: Context ›Y is not valid (left unmapped). [ 81.111507][ T5658] loop7: lost filesystem error report for type 5 error -117 [ 81.111687][ T5658] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 81.140859][ T5658] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 81.173668][ T5658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.247201][ T5674] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 81.271750][ T3852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.282892][ T5674] bond2: entered promiscuous mode [ 81.301369][ T5674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.442049][ T5674] veth5: entered promiscuous mode [ 81.470572][ T5674] bond2: (slave veth5): Enslaving as an active interface with an up link [ 81.736257][ T5686] loop4: detected capacity change from 0 to 512 [ 81.763478][ T5686] EXT4-fs: Ignoring removed orlov option [ 81.798588][ T5686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.852222][ T5686] EXT4-fs warning (device loop4): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 81.949380][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.135370][ T5691] loop4: detected capacity change from 0 to 512 [ 82.145802][ T5691] ext4: Unknown parameter 'euid<00000000000000000000' [ 82.197260][ T5704] netlink: 'syz.7.490': attribute type 11 has an invalid length. [ 82.201274][ T5697] lo speed is unknown, defaulting to 1000 [ 82.214522][ T5706] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 82.302621][ T5709] lo speed is unknown, defaulting to 1000 [ 82.457855][ T5723] netlink: 'syz.6.495': attribute type 1 has an invalid length. [ 82.477434][ T5723] bond4: entered promiscuous mode [ 82.482967][ T5723] 8021q: adding VLAN 0 to HW filter on device bond4 [ 82.491523][ T5694] lo speed is unknown, defaulting to 1000 [ 82.591550][ T5723] veth7: entered promiscuous mode [ 82.600360][ T5723] bond4: (slave veth7): Enslaving as an active interface with an up link [ 82.729329][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 82.729344][ T28] audit: type=1400 audit(1785928222.567:1245): avc: denied { setopt } for pid=5730 comm="syz.6.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.836071][ T5737] loop4: detected capacity change from 0 to 128 [ 82.843428][ T5737] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.865198][ T5737] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.974195][ T28] audit: type=1400 audit(1785928222.807:1246): avc: denied { getopt } for pid=5736 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.042626][ T5694] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.058445][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.067533][ T4006] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.089099][ T5694] bridge_slave_0: entered allmulticast mode [ 83.108351][ T28] audit: type=1400 audit(1785928222.937:1247): avc: denied { listen } for pid=5746 comm="syz.4.501" lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.132093][ T5694] bridge_slave_0: entered promiscuous mode [ 83.414491][ T5694] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.439706][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.449772][ T28] audit: type=1400 audit(1785928223.277:1248): avc: denied { create } for pid=5756 comm="syz.4.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.477353][ T5694] bridge_slave_1: entered allmulticast mode [ 83.491824][ T28] audit: type=1400 audit(1785928223.277:1249): avc: denied { ioctl } for pid=5756 comm="syz.4.504" path="socket:[13344]" dev="sockfs" ino=13344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.517321][ T5694] bridge_slave_1: entered promiscuous mode [ 83.528134][ T28] audit: type=1400 audit(1785928223.287:1250): avc: denied { bind } for pid=5756 comm="syz.4.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.548843][ T28] audit: type=1400 audit(1785928223.327:1251): avc: denied { setopt } for pid=5756 comm="syz.4.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.577383][ T5765] netlink: 'syz.6.507': attribute type 1 has an invalid length. [ 83.603420][ T5765] bond5: entered promiscuous mode [ 83.608620][ T5765] 8021q: adding VLAN 0 to HW filter on device bond5 [ 83.636861][ T5694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.647839][ T5694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.705370][ T5767] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 83.746329][ T5768] bridge0: port 3(syz_tun) entered blocking state [ 83.754131][ T5768] bridge0: port 3(syz_tun) entered disabled state [ 83.779091][ T5768] syz_tun: entered allmulticast mode [ 83.803814][ T5768] syz_tun: entered promiscuous mode [ 83.809500][ T28] audit: type=1400 audit(1785928223.647:1252): avc: denied { write } for pid=5758 comm="syz.7.505" name="functions" dev="configfs" ino=4821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.825555][ T5768] bridge0: port 3(syz_tun) entered blocking state [ 83.838667][ T5768] bridge0: port 3(syz_tun) entered forwarding state [ 83.884170][ T5773] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 83.890787][ T5773] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.899068][ T5773] vhci_hcd vhci_hcd.0: Device attached [ 83.909729][ T5769] veth9: entered promiscuous mode [ 83.915504][ T5773] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 83.917386][ T5769] bond5: (slave veth9): Enslaving as an active interface with an up link [ 83.922062][ T5773] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.928888][ T5773] vhci_hcd vhci_hcd.0: Device attached [ 83.944779][ T5694] team0: Port device team_slave_0 added [ 83.952411][ T5776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.517'. [ 83.966079][ T5781] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(8) [ 83.972597][ T5781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.980958][ T5694] team0: Port device team_slave_1 added [ 83.991134][ T5781] vhci_hcd vhci_hcd.0: Device attached [ 84.000882][ T5773] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(7) [ 84.007450][ T5773] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.015350][ T5773] vhci_hcd vhci_hcd.0: Device attached [ 84.024560][ T5773] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 84.027100][ T5694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.039797][ T5694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.065901][ T5694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.065920][ T5773] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(13) [ 84.065942][ T5773] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.065974][ T5773] vhci_hcd vhci_hcd.0: Device attached [ 84.077215][ T5694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.103322][ T5694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.138832][ T23] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 84.139356][ T5694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.157183][ T5773] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(15) [ 84.163816][ T5773] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 84.173670][ T5773] vhci_hcd vhci_hcd.0: Device attached [ 84.205893][ T5791] program syz.4.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.222621][ T5791] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 84.262401][ T5781] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(22) [ 84.269045][ T5781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.286292][ T5781] vhci_hcd vhci_hcd.0: Device attached [ 84.295472][ T5694] hsr_slave_0: entered promiscuous mode [ 84.306904][ T5694] hsr_slave_1: entered promiscuous mode [ 84.313064][ T5694] debugfs: 'hsr0' already exists in 'hsr' [ 84.319016][ T5694] Cannot create hsr debugfs directory [ 84.351682][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 84.406002][ T5778] vhci_hcd: connection closed [ 84.406124][ T5786] vhci_hcd: connection closed [ 84.407288][ T5782] vhci_hcd: connection closed [ 84.411055][ T5799] vhci_hcd: connection closed [ 84.415734][ T5774] vhci_hcd: connection reset by peer [ 84.432902][ T5788] vhci_hcd: connection closed [ 84.433581][ T5784] vhci_hcd: connection closed [ 84.438297][ T4052] vhci_hcd vhci_hcd.7: stop threads [ 84.450533][ T4052] vhci_hcd vhci_hcd.7: release socket [ 84.458930][ T4052] vhci_hcd vhci_hcd.7: disconnect device [ 84.464803][ T4052] vhci_hcd vhci_hcd.7: stop threads [ 84.470435][ T4052] vhci_hcd vhci_hcd.7: release socket [ 84.477087][ T4052] vhci_hcd vhci_hcd.7: disconnect device [ 84.483620][ T4052] vhci_hcd vhci_hcd.7: stop threads [ 84.488954][ T4052] vhci_hcd vhci_hcd.7: release socket [ 84.495260][ T4052] vhci_hcd vhci_hcd.7: disconnect device [ 84.504727][ T4052] vhci_hcd vhci_hcd.7: stop threads [ 84.512023][ T4052] vhci_hcd vhci_hcd.7: release socket [ 84.517420][ T4052] vhci_hcd vhci_hcd.7: disconnect device [ 84.547525][ T4052] vhci_hcd vhci_hcd.7: stop threads [ 84.567979][ T4052] vhci_hcd vhci_hcd.7: release socket [ 84.588150][ T4052] vhci_hcd vhci_hcd.7: disconnect device [ 84.604000][ T4052] vhci_hcd vhci_hcd.7: stop threads [ 84.618187][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 84.621721][ T4052] vhci_hcd vhci_hcd.7: release socket [ 84.651216][ T4052] vhci_hcd vhci_hcd.7: disconnect device [ 84.672579][ T4052] vhci_hcd vhci_hcd.7: stop threads [ 84.676591][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 84.689008][ T4052] vhci_hcd vhci_hcd.7: release socket [ 84.695211][ T5694] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 84.703448][ T4052] vhci_hcd vhci_hcd.7: disconnect device [ 84.721320][ T5694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.727394][ T5813] netlink: 'syz.4.513': attribute type 1 has an invalid length. [ 84.738991][ T5694] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 84.759657][ T5694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.767294][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.819829][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.838943][ T5694] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 84.848487][ T5694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.867914][ T5694] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 84.878311][ T5694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.919773][ T28] audit: type=1400 audit(1785928224.747:1253): avc: denied { create } for pid=5823 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.986300][ T5694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.999789][ T5828] loop7: detected capacity change from 0 to 128 [ 85.012066][ T5828] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.025045][ T5694] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.032032][ T5828] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.047713][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.054796][ T4027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.087557][ T5833] loop6: detected capacity change from 0 to 4096 [ 85.101760][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.108885][ T4006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.130902][ T5833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.154799][ T5828] netlink: 16 bytes leftover after parsing attributes in process `syz.7.516'. [ 85.170256][ T5694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.183849][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 85.197957][ T5828] netlink: 16 bytes leftover after parsing attributes in process `syz.7.516'. [ 85.216557][ T3704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.229224][ T5828] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 85.296280][ T5844] capability: warning: `syz.6.521' uses deprecated v2 capabilities in a way that may be insecure [ 85.315356][ T5828] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #2: comm syz.7.516: No space for directory leaf checksum. Please run e2fsck -D. [ 85.348150][ T5828] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.516: checksumming directory block 0 [ 85.351873][ T5847] tc_dump_action: action bad kind [ 85.383225][ T4006] tipc: Subscription rejected, illegal request [ 85.386788][ T5847] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 85.445113][ T3852] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.518054][ T5861] netlink: 'syz.6.524': attribute type 2 has an invalid length. [ 85.532692][ T5694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.737277][ T5694] veth0_vlan: entered promiscuous mode [ 85.754055][ T5694] veth1_vlan: entered promiscuous mode [ 85.783548][ T5694] veth0_macvtap: entered promiscuous mode [ 85.798925][ T5694] veth1_macvtap: entered promiscuous mode [ 85.821358][ T5694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.845654][ T5694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.879906][ T4027] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.899702][ T4027] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.904168][ T28] audit: type=1400 audit(1785928225.737:1254): avc: denied { mounton } for pid=5694 comm="syz-executor" path="/root/syzkaller.pdJLK6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 85.908648][ T4027] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.945171][ T4027] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.026942][ T5888] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 86.033499][ T5888] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.062678][ T5888] vhci_hcd vhci_hcd.0: Device attached [ 86.081719][ T5892] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 86.088295][ T5892] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.117526][ T5892] vhci_hcd vhci_hcd.0: Device attached [ 86.132966][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 86.143540][ T5888] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(8) [ 86.150072][ T5888] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.170878][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 86.178796][ T5888] vhci_hcd vhci_hcd.0: Device attached [ 86.214363][ T5888] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(7) [ 86.220904][ T5888] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.245432][ T5888] vhci_hcd vhci_hcd.0: Device attached [ 86.270860][ T5888] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.296238][ T5888] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(13) [ 86.302861][ T5888] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.313709][ T3361] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 86.341341][ T5888] vhci_hcd vhci_hcd.0: Device attached [ 86.360556][ T5888] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(15) [ 86.367230][ T5888] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 86.383207][ T5888] vhci_hcd vhci_hcd.0: Device attached [ 86.425890][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.8.535'. [ 86.520216][ T5924] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(22) [ 86.526902][ T5924] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.534850][ T5924] vhci_hcd vhci_hcd.0: Device attached [ 86.616788][ T5909] vhci_hcd: connection closed [ 86.616911][ T5889] vhci_hcd: connection reset by peer [ 86.616949][ T4047] vhci_hcd vhci_hcd.6: stop threads [ 86.621680][ T5899] vhci_hcd: connection closed [ 86.627008][ T5893] vhci_hcd: connection closed [ 86.632552][ T5913] vhci_hcd: connection closed [ 86.636985][ T5901] vhci_hcd: connection closed [ 86.646207][ T5925] vhci_hcd: connection closed [ 86.657853][ T4047] vhci_hcd vhci_hcd.6: release socket [ 86.671115][ T4047] vhci_hcd vhci_hcd.6: disconnect device [ 86.676989][ T4047] vhci_hcd vhci_hcd.6: stop threads [ 86.682363][ T4047] vhci_hcd vhci_hcd.6: release socket [ 86.687862][ T4047] vhci_hcd vhci_hcd.6: disconnect device [ 86.693919][ T4047] vhci_hcd vhci_hcd.6: stop threads [ 86.699394][ T4047] vhci_hcd vhci_hcd.6: release socket [ 86.704839][ T4047] vhci_hcd vhci_hcd.6: disconnect device [ 86.759628][ T4047] vhci_hcd vhci_hcd.6: stop threads [ 86.767860][ T4047] vhci_hcd vhci_hcd.6: release socket [ 86.773331][ T4047] vhci_hcd vhci_hcd.6: disconnect device [ 86.787104][ T4047] vhci_hcd vhci_hcd.6: stop threads [ 86.797884][ T4047] vhci_hcd vhci_hcd.6: release socket [ 86.808637][ T4047] vhci_hcd vhci_hcd.6: disconnect device [ 86.815826][ T4047] vhci_hcd vhci_hcd.6: stop threads [ 86.821575][ T4047] vhci_hcd vhci_hcd.6: release socket [ 86.827171][ T4047] vhci_hcd vhci_hcd.6: disconnect device [ 86.833317][ T4047] vhci_hcd vhci_hcd.6: stop threads [ 86.839342][ T4047] vhci_hcd vhci_hcd.6: release socket [ 86.842584][ T5936] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3276800.0), cmd(1) [ 86.844884][ T4047] vhci_hcd vhci_hcd.6: disconnect device [ 87.132970][ T5945] loop8: detected capacity change from 0 to 1024 [ 87.155983][ T5945] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.496128][ T5694] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.558628][ T5959] loop7: detected capacity change from 0 to 1024 [ 87.630637][ T5959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.652234][ T5959] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.670239][ T5959] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.546: Freeing blocks not in datazone - block = 0, count = 16 [ 87.696540][ T5959] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.546: bg 0: block 112: padding at end of block bitmap is not set [ 87.713018][ T5959] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 2 with error 117 [ 87.727516][ T5959] EXT4-fs (loop7): This should not happen!! Data will be lost [ 87.727516][ T5959] [ 87.774748][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 87.774764][ T28] audit: type=1400 audit(1785928227.607:1282): avc: denied { write } for pid=5957 comm="syz.7.546" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.892767][ T5959] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz.7.546: data will be lost [ 87.909307][ T5959] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 87.911511][ T5979] loop8: detected capacity change from 0 to 512 [ 87.933029][ T5981] loop4: detected capacity change from 0 to 764 [ 87.978527][ T5983] FAULT_INJECTION: forcing a failure. [ 87.978527][ T5983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.001892][ T5979] ext4: Bad value for 'journal_ioprio' [ 88.038294][ T5983] CPU: 1 UID: 0 PID: 5983 Comm: syz.7.554 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.038343][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.038356][ T5983] Call Trace: [ 88.038364][ T5983] [ 88.038373][ T5983] __dump_stack+0x1d/0x30 [ 88.038515][ T5983] dump_stack_lvl+0x95/0xd0 [ 88.038537][ T5983] dump_stack+0x15/0x1b [ 88.038555][ T5983] should_fail_ex+0x25e/0x270 [ 88.038583][ T5983] should_fail+0xb/0x20 [ 88.038609][ T5983] should_fail_usercopy+0x1a/0x20 [ 88.038699][ T5983] _copy_from_user+0x1c/0xb0 [ 88.038719][ T5983] ___sys_sendmsg+0xc1/0x1e0 [ 88.038747][ T5983] __x64_sys_sendmsg+0xd4/0x160 [ 88.038814][ T5983] x64_sys_call+0x194c/0x3020 [ 88.038833][ T5983] do_syscall_64+0x136/0x3c0 [ 88.038914][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.038933][ T5983] RIP: 0033:0x7fd2417be019 [ 88.038946][ T5983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.038962][ T5983] RSP: 002b:00007fd240217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.038989][ T5983] RAX: ffffffffffffffda RBX: 00007fd241a45fa0 RCX: 00007fd2417be019 [ 88.039002][ T5983] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000005 [ 88.039013][ T5983] RBP: 00007fd240217090 R08: 0000000000000000 R09: 0000000000000000 [ 88.039080][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.039091][ T5983] R13: 00007fd241a46038 R14: 00007fd241a45fa0 R15: 00007ffc8061c978 [ 88.039107][ T5983] [ 88.322398][ T28] audit: type=1400 audit(1785928228.157:1283): avc: denied { bind } for pid=5988 comm="syz.6.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.702163][ T6012] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 88.772968][ T28] audit: type=1400 audit(1785928228.607:1284): avc: denied { ioctl } for pid=6019 comm="syz.6.565" path="socket:[13271]" dev="sockfs" ino=13271 ioctlcmd=0x6e82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.878118][ T28] audit: type=1400 audit(1785928228.707:1285): avc: denied { search } for pid=6027 comm="syz.6.568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 88.952527][ T28] audit: type=1400 audit(1785928228.737:1286): avc: denied { create } for pid=6029 comm="syz.8.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.995457][ T28] audit: type=1400 audit(1785928228.737:1287): avc: denied { ioctl } for pid=6029 comm="syz.8.569" path="socket:[13773]" dev="sockfs" ino=13773 ioctlcmd=0x583e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.023287][ T28] audit: type=1400 audit(1785928228.767:1288): avc: denied { read } for pid=6038 comm="syz.6.570" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 89.049157][ T28] audit: type=1400 audit(1785928228.767:1289): avc: denied { open } for pid=6038 comm="syz.6.570" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 89.074680][ T28] audit: type=1400 audit(1785928228.817:1290): avc: denied { ioctl } for pid=6038 comm="syz.6.570" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 89.100666][ T28] audit: type=1400 audit(1785928228.827:1291): avc: denied { getopt } for pid=6029 comm="syz.8.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.300679][ T23] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 89.334848][ T6057] loop7: detected capacity change from 0 to 256 [ 89.502763][ T6055] loop6: detected capacity change from 0 to 512 [ 89.530287][ T6055] ext4: Bad value for 'journal_ioprio' [ 89.811512][ T6067] xt_l2tp: wrong L2TP version: 0 [ 90.066241][ T6051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6051 comm=syz.8.572 [ 90.205447][ T6057] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 90.215386][ T6075] netlink: 'syz.6.578': attribute type 2 has an invalid length. [ 90.221946][ T6077] netlink: 'syz.6.578': attribute type 2 has an invalid length. [ 90.251265][ T6077] netlink: 'syz.6.578': attribute type 8 has an invalid length. [ 90.273462][ T6075] netlink: 'syz.6.578': attribute type 8 has an invalid length. [ 90.285594][ T6077] __nla_validate_parse: 3 callbacks suppressed [ 90.285610][ T6077] netlink: 132 bytes leftover after parsing attributes in process `syz.6.578'. [ 90.308918][ T6075] netlink: 132 bytes leftover after parsing attributes in process `syz.6.578'. [ 90.424387][ T6085] tmpfs: Bad value for 'nr_blocks' [ 90.598178][ T6091] netlink: 'syz.7.583': attribute type 1 has an invalid length. [ 90.774708][ T6091] bond1: entered promiscuous mode [ 90.864486][ T6091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.592255][ T6093] veth3: entered promiscuous mode [ 91.614531][ T6093] bond1: (slave veth3): Enslaving as an active interface with an up link [ 91.638821][ T3361] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 91.863990][ T6104] loop8: detected capacity change from 0 to 512 [ 91.902674][ T6104] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 91.932829][ T6104] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 91.944119][ T5182] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.954790][ T6104] System zones: 0-1, 15-15, 18-18, 34-34 [ 91.963977][ T6104] EXT4-fs (loop8): orphan cleanup on readonly fs [ 91.971463][ T6104] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 91.997933][ T6104] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 92.018689][ T6104] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.585: bg 0: block 40: padding at end of block bitmap is not set [ 92.035732][ T6104] loop8: lost filesystem error report for type 5 error -117 [ 92.036224][ T6104] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 92.043762][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 92.043794][ C1] EXT4-fs (loop8): initial error at time 1785928231: ext4_validate_block_bitmap:441 [ 92.043914][ C1] EXT4-fs (loop8): last error at time 1785928231: ext4_validate_block_bitmap:441 [ 92.081920][ T6104] loop8: lost filesystem error report for type 5 error -117 [ 92.082979][ T5182] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.104563][ T6104] EXT4-fs (loop8): 1 truncate cleaned up [ 92.113113][ T6104] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.180495][ T5182] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.199936][ T5694] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.223730][ T5182] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.241371][ T6111] loop7: detected capacity change from 0 to 512 [ 92.254709][ T6111] ext4: Bad value for 'journal_ioprio' [ 92.385676][ T6115] loop4: detected capacity change from 0 to 128 [ 92.416454][ T5182] bridge_slave_1: left allmulticast mode [ 92.422496][ T5182] bridge_slave_1: left promiscuous mode [ 92.428359][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.437097][ T6115] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.471906][ T5182] bridge_slave_0: left allmulticast mode [ 92.493584][ T5182] bridge_slave_0: left promiscuous mode [ 92.511161][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.520205][ T6115] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.572557][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.590'. [ 92.607600][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.590'. [ 92.627655][ T6115] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 92.702231][ T5182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.729439][ T5182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.745958][ T5182] bond0 (unregistering): Released all slaves [ 92.772511][ T3018] 8021q: adding VLAN 0 to HW filter on device eth14 [ 92.811020][ T6115] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.590: No space for directory leaf checksum. Please run e2fsck -D. [ 92.872325][ T6115] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.590: checksumming directory block 0 [ 92.893570][ T5182] hsr_slave_0: left promiscuous mode [ 92.900807][ T5182] hsr_slave_1: left promiscuous mode [ 92.907887][ T5182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.928185][ T5182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.954623][ T5182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.963001][ T5181] tipc: Subscription rejected, illegal request [ 92.972018][ T5182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.990051][ T5182] veth1_macvtap: left promiscuous mode [ 92.995705][ T5182] veth0_macvtap: left promiscuous mode [ 93.001607][ T5182] veth1_vlan: left promiscuous mode [ 93.006985][ T5182] veth0_vlan: left promiscuous mode [ 93.021424][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 93.021436][ T28] audit: type=1400 audit(1785928232.857:1298): avc: denied { write } for pid=6157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.088969][ T28] audit: type=1400 audit(1785928232.917:1299): avc: denied { write } for pid=6176 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.171311][ T5182] team0 (unregistering): Port device team_slave_1 removed [ 93.191888][ T5182] team0 (unregistering): Port device team_slave_0 removed [ 93.287808][ T6112] lo speed is unknown, defaulting to 1000 [ 93.294184][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.438664][ T6182] loop6: detected capacity change from 0 to 512 [ 93.511192][ T6182] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 93.528339][ T6182] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 93.550410][ T6182] System zones: 0-1, 15-15, 18-18, 34-34 [ 93.562941][ T6182] EXT4-fs (loop6): orphan cleanup on readonly fs [ 93.579744][ T6182] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 93.595733][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.603127][ T6182] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 93.619664][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.626953][ T6112] bridge_slave_0: entered allmulticast mode [ 93.633603][ T6112] bridge_slave_0: entered promiscuous mode [ 93.639767][ T6182] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 93.647876][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.659084][ T6182] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.599: bg 0: block 40: padding at end of block bitmap is not set [ 93.674475][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.681950][ T6112] bridge_slave_1: entered allmulticast mode [ 93.688013][ T6182] loop6: lost filesystem error report for type 5 error -117 [ 93.690037][ T6182] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 93.707129][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 93.707157][ C1] EXT4-fs (loop6): initial error at time 1785928233: ext4_validate_block_bitmap:441 [ 93.707338][ C1] EXT4-fs (loop6): last error at time 1785928233: ext4_validate_block_bitmap:441 [ 93.737553][ T6112] bridge_slave_1: entered promiscuous mode [ 93.756293][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.766680][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.777793][ T6182] loop6: lost filesystem error report for type 5 error -117 [ 93.784197][ T6182] EXT4-fs (loop6): 1 truncate cleaned up [ 93.807684][ T6112] team0: Port device team_slave_0 added [ 93.814445][ T6112] team0: Port device team_slave_1 added [ 93.833286][ T6182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.856298][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.901657][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.943995][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.964581][ T3018] 8021q: adding VLAN 0 to HW filter on device eth13 [ 93.975595][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.984179][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.010354][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.033812][ T6195] loop7: detected capacity change from 0 to 512 [ 94.043400][ T6195] ext4: Unknown parameter 'euid<00000000000000000000' [ 94.064071][ T6112] hsr_slave_0: entered promiscuous mode [ 94.075383][ T6112] hsr_slave_1: entered promiscuous mode [ 94.078244][ T3704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.081729][ T6112] debugfs: 'hsr0' already exists in 'hsr' [ 94.096109][ T6112] Cannot create hsr debugfs directory [ 94.256989][ T28] audit: type=1400 audit(1785928234.087:1300): avc: denied { write } for pid=6198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.312418][ T6221] loop8: detected capacity change from 0 to 512 [ 94.314975][ T6207] loop6: detected capacity change from 0 to 1024 [ 94.339882][ T28] audit: type=1400 audit(1785928234.127:1301): avc: denied { write } for pid=6219 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.359799][ T6207] EXT4-fs: Ignoring removed orlov option [ 94.367174][ T6112] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 94.376518][ T6207] EXT4-fs: Ignoring removed orlov option [ 94.385007][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.390162][ T6207] EXT4-fs: inline encryption not supported [ 94.403665][ T6221] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.416421][ T6221] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.420775][ T6207] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 94.437296][ T3018] 8021q: adding VLAN 0 to HW filter on device eth15 [ 94.444516][ T28] audit: type=1400 audit(1785928234.267:1302): avc: denied { read } for pid=6220 comm="syz.8.605" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.469273][ T6112] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 94.477821][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.486125][ T6112] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 94.502199][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.513772][ T6112] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 94.523437][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.530813][ T28] audit: type=1400 audit(1785928234.357:1303): avc: denied { ioctl } for pid=6205 comm="syz.6.602" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.568522][ T6228] netlink: 6 bytes leftover after parsing attributes in process `syz.4.607'. [ 94.591210][ T6228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.610678][ T28] audit: type=1400 audit(1785928234.427:1304): avc: denied { getopt } for pid=6227 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.634103][ T28] audit: type=1400 audit(1785928234.447:1305): avc: denied { write } for pid=6234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.673181][ T3390] lo speed is unknown, defaulting to 1000 [ 94.701187][ T28] audit: type=1400 audit(1785928234.467:1306): avc: denied { write } for pid=3704 comm="syz-executor" name="132" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 94.865257][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.881918][ T3018] 8021q: adding VLAN 0 to HW filter on device eth16 [ 94.918636][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.948932][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.956045][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.979578][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.986710][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.066637][ T5694] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.180090][ T6270] lo speed is unknown, defaulting to 1000 [ 95.292827][ T6266] loop4: detected capacity change from 0 to 512 [ 95.372249][ T6266] ext4: Bad value for 'journal_ioprio' [ 95.408651][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.664837][ T6301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6301 comm=syz.8.617 [ 95.818112][ T6112] veth0_vlan: entered promiscuous mode [ 95.849162][ T6112] veth1_vlan: entered promiscuous mode [ 95.891398][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.620'. [ 95.957825][ T6112] veth0_macvtap: entered promiscuous mode [ 95.971200][ T6112] veth1_macvtap: entered promiscuous mode [ 95.993780][ T6318] netlink: 28 bytes leftover after parsing attributes in process `syz.6.623'. [ 96.004563][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.018329][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.060797][ T6321] loop7: detected capacity change from 0 to 512 [ 96.109531][ T5181] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.118409][ T5181] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.123961][ T6321] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.187655][ T6321] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.189176][ T5180] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.233594][ T6322] loop4: detected capacity change from 0 to 512 [ 96.248637][ T6324] ext4: Bad value for 'journal_ioprio' [ 96.258447][ T5180] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.279113][ T6322] ext4: Bad value for 'journal_ioprio' [ 96.303285][ T6331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6331 comm=syz.6.627 [ 96.393109][ T6333] EXT4-fs (loop9): can't mount with journal_async_commit, fs mounted w/o journal [ 96.854843][ T3852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.047112][ T6365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6365 comm=syz.8.636 [ 99.386868][ T6336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.437273][ T6372] netlink: 52 bytes leftover after parsing attributes in process `syz.4.640'. [ 99.447476][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 99.447490][ T28] audit: type=1400 audit(1785928239.267:1315): avc: denied { write } for pid=3704 comm="syz-executor" name="138" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 99.481934][ T6374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6374 comm=syz.9.637 [ 99.534565][ T28] audit: type=1400 audit(1785928239.267:1316): avc: denied { write } for pid=3704 comm="syz-executor" name="138" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 99.567732][ T6387] gretap0: left allmulticast mode [ 99.579182][ T6387] gretap0: left promiscuous mode [ 99.627305][ T28] audit: type=1400 audit(1785928239.267:1317): avc: denied { write } for pid=3704 comm="syz-executor" name="138" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 99.782055][ T28] audit: type=1400 audit(1785928239.267:1318): avc: denied { write } for pid=3704 comm="syz-executor" name="138" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 100.366380][ T6401] set_capacity_and_notify: 2 callbacks suppressed [ 100.366398][ T6401] loop8: detected capacity change from 0 to 512 [ 100.527097][ T6401] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.647: inode has both inline data and extents flags [ 100.570128][ T6398] loop9: detected capacity change from 0 to 1024 [ 100.576676][ T6401] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.576790][ T6401] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.647: couldn't read orphan inode 15 (err -117) [ 100.576942][ T6395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6395 comm=syz.6.645 [ 100.586123][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 100.586141][ C1] EXT4-fs (loop8): initial error at time 1785928240: ext4_orphan_get:1399: inode 15 [ 100.586169][ C1] EXT4-fs (loop8): last error at time 1785928240: ext4_orphan_get:1399: inode 15 [ 100.586357][ T6401] loop8: lost filesystem error report for type 5 error -117 [ 100.599385][ T6398] EXT4-fs: quotafile must be on filesystem root [ 100.641940][ T6372] loop4: detected capacity change from 0 to 1024 [ 100.672924][ T6408] loop7: detected capacity change from 0 to 512 [ 100.680992][ T6401] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.695162][ T6408] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 100.757218][ T6408] loop7: detected capacity change from 0 to 164 [ 100.765683][ T6408] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 100.775912][ T6408] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 100.802614][ T6372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.802930][ T6408] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 100.811740][ T28] audit: type=1400 audit(1785928240.647:1319): avc: denied { write } for pid=6400 comm="syz.8.647" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.817559][ T6408] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 100.856463][ T6372] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.890348][ T6408] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 100.899303][ T6408] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 100.941741][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.7.653'. [ 100.944446][ T6372] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.640: Freeing blocks not in datazone - block = 0, count = 16 [ 100.966812][ T6421] netlink: 20 bytes leftover after parsing attributes in process `syz.7.653'. [ 100.995699][ T6423] loop6: detected capacity change from 0 to 1024 [ 101.002376][ T6421] loop7: detected capacity change from 0 to 512 [ 101.026271][ T5694] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.035920][ T6423] EXT4-fs: Ignoring removed orlov option [ 101.043079][ T6423] EXT4-fs: Ignoring removed orlov option [ 101.052140][ T6423] EXT4-fs: inline encryption not supported [ 101.066140][ T6372] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.640: bg 0: block 112: padding at end of block bitmap is not set [ 101.094248][ T6423] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 101.116830][ T6372] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 2 with error 28 [ 101.116879][ T6372] EXT4-fs (loop4): This should not happen!! Data will be lost [ 101.116879][ T6372] [ 101.116990][ T6372] EXT4-fs (loop4): Total free blocks count 0 [ 101.117078][ T6372] EXT4-fs (loop4): Free/Dirty block details [ 101.117110][ T6372] EXT4-fs (loop4): free_blocks=0 [ 101.117129][ T6372] EXT4-fs (loop4): dirty_blocks=32 [ 101.117170][ T6372] EXT4-fs (loop4): Block reservation details [ 101.117189][ T6372] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 101.139625][ T6439] loop7: detected capacity change from 0 to 128 [ 101.187897][ T28] audit: type=1400 audit(1785928241.017:1320): avc: denied { write } for pid=3704 comm="syz-executor" name="144" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 101.299600][ T28] audit: type=1400 audit(1785928241.017:1321): avc: denied { write } for pid=3704 comm="syz-executor" name="144" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 101.361162][ T6444] lo speed is unknown, defaulting to 1000 [ 101.371768][ T28] audit: type=1400 audit(1785928241.017:1322): avc: denied { write } for pid=3704 comm="syz-executor" name="144" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 101.435721][ T28] audit: type=1400 audit(1785928241.017:1323): avc: denied { write } for pid=3704 comm="syz-executor" name="144" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 101.486421][ T6459] netlink: 32 bytes leftover after parsing attributes in process `syz.7.660'. [ 101.641069][ T6372] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz.4.640: data will be lost [ 101.659680][ T28] audit: type=1400 audit(1785928241.017:1324): avc: denied { write } for pid=3704 comm="syz-executor" name="144" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 101.703891][ T6372] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.794179][ T6447] loop6: detected capacity change from 0 to 512 [ 101.862728][ T6447] ext4: Bad value for 'journal_ioprio' [ 102.148052][ T6453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6453 comm=syz.9.661 [ 102.219411][ T6476] loop8: detected capacity change from 0 to 512 [ 102.228030][ T6476] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 102.254892][ T6476] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 102.265686][ T6476] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 102.280805][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.666'. [ 102.291277][ T6476] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 102.299840][ T6476] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 102.310600][ T6476] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 102.319400][ T6476] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 102.410778][ T6480] EXT4-fs: Ignoring removed bh option [ 102.433228][ T6480] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.457314][ T6482] EXT4-fs: Ignoring removed orlov option [ 102.465748][ T6482] EXT4-fs: Ignoring removed orlov option [ 102.472120][ T6482] EXT4-fs: inline encryption not supported [ 102.510057][ T6482] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 102.552574][ T5694] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.627630][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.672'. [ 102.680195][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.7.686'. [ 102.753238][ T6497] vfat: Bad value for 'shortname' [ 102.814651][ T6511] ext4: Bad value for 'journal_ioprio' [ 103.183129][ T6532] EXT4-fs: Ignoring removed orlov option [ 103.199746][ T6534] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.215826][ T6532] EXT4-fs: Ignoring removed orlov option [ 103.221602][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.221720][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.235308][ T6532] EXT4-fs: inline encryption not supported [ 103.250139][ T6532] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 103.276928][ T6537] netlink: 32 bytes leftover after parsing attributes in process `syz.9.687'. [ 103.323029][ T6534] EXT4-fs (loop7): can't mount with both data=journal and delalloc [ 103.508915][ T2979] ================================================================== [ 103.517023][ T2979] BUG: KCSAN: data-race in dont_mount / path_lookupat [ 103.523787][ T2979] [ 103.526107][ T2979] read-write to 0xffff88811e90c600 of 4 bytes by task 3288 on cpu 1: [ 103.534165][ T2979] dont_mount+0x2a/0x40 [ 103.538323][ T2979] vfs_unlink+0x202/0x490 [ 103.542650][ T2979] filename_unlinkat+0x1dc/0x410 [ 103.547586][ T2979] __se_sys_unlink+0x2b/0xe0 [ 103.552178][ T2979] __x64_sys_unlink+0x1f/0x30 [ 103.556860][ T2979] x64_sys_call+0x2eb6/0x3020 [ 103.561544][ T2979] do_syscall_64+0x136/0x3c0 [ 103.566145][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.572039][ T2979] [ 103.574345][ T2979] read to 0xffff88811e90c600 of 4 bytes by task 2979 on cpu 0: [ 103.581872][ T2979] path_lookupat+0x19b/0x4c0 [ 103.586455][ T2979] filename_lookup+0x18f/0x390 [ 103.591205][ T2979] do_readlinkat+0x74/0x2f0 [ 103.595698][ T2979] __x64_sys_readlink+0x47/0x60 [ 103.600543][ T2979] x64_sys_call+0x2b51/0x3020 [ 103.605206][ T2979] do_syscall_64+0x136/0x3c0 [ 103.609786][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.615664][ T2979] [ 103.617967][ T2979] value changed: 0x00300080 -> 0x00004080 [ 103.623662][ T2979] [ 103.625970][ T2979] Reported by Kernel Concurrency Sanitizer on: [ 103.632101][ T2979] CPU: 0 UID: 0 PID: 2979 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 103.640934][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.650971][ T2979] ================================================================== [ 103.700066][ T6545] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 103.708245][ T6545] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 103.716775][ T6545] System zones: 0-1, 15-15, 18-18, 34-34 [ 103.723149][ T6545] EXT4-fs (loop9): orphan cleanup on readonly fs [ 103.730407][ T6545] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 103.745384][ T6545] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 103.755640][ T6545] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.689: bg 0: block 40: padding at end of block bitmap is not set [ 103.770127][ T6545] loop9: lost filesystem error report for type 5 error -117 [ 103.770326][ T6545] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 103.786714][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 103.786733][ C1] EXT4-fs (loop9): initial error at time 1785928243: ext4_validate_block_bitmap:441 [ 103.786782][ C1] EXT4-fs (loop9): last error at time 1785928243: ext4_validate_block_bitmap:441 [ 103.812188][ T6545] loop9: lost filesystem error report for type 5 error -117 [ 103.812593][ T6545] EXT4-fs (loop9): 1 truncate cleaned up [ 103.826655][ T6545] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.844385][ T6545] netlink: 44 bytes leftover after parsing attributes in process `syz.9.689'. [ 103.861640][ T6112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.728920][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 105.728935][ T28] audit: type=1400 audit(1785928245.567:1340): avc: denied { write } for pid=6552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.758254][ T28] audit: type=1400 audit(1785928245.577:1341): avc: denied { write } for pid=6563 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.724681][ T28] audit: type=1400 audit(1785928246.557:1342): avc: denied { write } for pid=6566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.747847][ T28] audit: type=1400 audit(1785928246.557:1343): avc: denied { write } for pid=6577 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.976534][ T28] audit: type=1400 audit(1785928246.807:1344): avc: denied { write } for pid=6580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.001814][ T28] audit: type=1400 audit(1785928246.827:1345): avc: denied { write } for pid=6591 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.119267][ T28] audit: type=1400 audit(1785928246.957:1346): avc: denied { write } for pid=6594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.142961][ T28] audit: type=1400 audit(1785928246.967:1347): avc: denied { write } for pid=6605 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.219862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)