last executing test programs: 6m48.494819093s ago: executing program 3 (id=343): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0080ffffff000000a900000000000000000000000000000000200000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000070000000000000000000000000000b1ef"], 0xfc}}, 0x0) 6m48.461596634s ago: executing program 3 (id=344): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000640)=0xcbb9, 0x2, 0x1) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x405, 0x0, 0x0, {0xa, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000040000a010101000000ffffffe00000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d0000000000080022"], 0x148}}, 0x20000000) getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x5, 0x20, 0x9c7c, 0xf}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x8800) ioctl$XFS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000140)) r6 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsmount(r6, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='gadgetfs\x06', &(0x7f0000000200)='({^)\x18\x00', 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000088000000060a010400000000000000000100000008000b40000000005c000480580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a300000"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f00000089c0)={0x0, 0x1, 0x8, 0x11, 0x6, &(0x7f00000085c0)="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"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) 6m48.288499886s ago: executing program 3 (id=348): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000340), 0x9}, 0x100, 0x20000, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, 0x0, 0x0) r4 = io_uring_setup(0x5e61, &(0x7f0000000000)={0x0, 0x7309, 0x40, 0x3, 0x2c3}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r3, 0x1f, &(0x7f0000000200)={0x28, 0x18, 0x0, r4, &(0x7f0000000140)="14dd4c1bfacbac737da01dad84b303c80f3282fb883f8d0b2b871a1fc4c6cbe083a55a4e42ba44e885a28ce5fad4cfe8452e8e716f6a5ce4ab94ec45bd026224dc5e47c742cb429548fe29b75f023cdc43b4f79fd0c9228a218d5a52d1eeb45d6cd56dd7ebd4d4d9d8c598aab5524bedfde90ea9d46b54dc0b0ece13eff0d84ab0adb89235ec474af04a937ee7d5d35f5b743a21581fdab45d55eaf7bbb8d69e4ef50597", 0x1, 0x8, 0x1, 0x1, {0x0, 0x0, r0, 0x1}}, 0x1) connect$nfc_raw(r2, &(0x7f0000000780)={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x10) 6m48.104804259s ago: executing program 3 (id=349): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00q'], 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40e}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0xc) r9 = socket(0x1e, 0x4, 0x0) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r6, @ANYRES16=r9], 0x14) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r4}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20ec00, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000280), 0x4) 6m47.888826172s ago: executing program 3 (id=354): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x6, 0xef, 0x3, 0x0, 0x0, 0x2, 0xf, 0x3, 0x1, 0x0, 0x7, 0x5, 0x6, 0x2}, 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000001c0)={0xffffffffffffffff, 0xb}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x7, r3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@private2, r3}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a050000000008000a40ffffff78080008401000000108000c40000000050800034000000010"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m47.701300605s ago: executing program 3 (id=356): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB=';'], 0x20) 6m47.637322656s ago: executing program 32 (id=356): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB=';'], 0x20) 3m17.530962945s ago: executing program 0 (id=2306): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r3 = memfd_create(&(0x7f0000000bc0)='\xff\x00l\x1e\xa00x0}, &(0x7f0000000480)=0xc) (async) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001280)=ANY=[@ANYBLOB="740000004900200028bd7000ff5bdf250a000800ec80ab3101b8b63c2a7c26b7a914d2c77111bf386b725ca3e7eb6b6a76f6df4179296fb3cbf0d1f563379d3c05aa223aac83ab27152c4716ff00d57c7016c878000000001e195ad5189ee5f2227c235b5680ae3c92939192016b47f5519c83dfd729f242a69d95422f97038feba96a43cfa4cb8a023ea2341100e8ac0f12f9315258082534e93f41b1572b1340349d18d7aad86d4ea882baabd3575ccedc8c87c908d4268ca3399b194588b4713ed81c4ff4b95a5c3bb074aaf2", @ANYRES32=0x0, @ANYBLOB="0b00000000000100ff020000000000000000000000000001abfd0100fc00000000000000000000000000000014000100fe8000000000000000000000000000bb1400010000000000000000000000ffff7f00000114000100ff020000000000000000000000000001"], 0x74}, 0x1, 0x0, 0x0, 0x24044800}, 0x20044004) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x844}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(0xffffffffffffffff, 0x0, 0x8e) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getscheduler(r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)=ANY=[@ANYRESOCT=r4, @ANYBLOB="f5f105d00868432052e96ccc870ce24801f5102aaec94c256efe411e06ff4e9f95fe33e4a0bb4d1126b567fa7d2eaf1158c57ab1126aceacb8269581adace8bcb0f22e3be102620a54bc513092a0", @ANYRESOCT=r7, @ANYRES16=r1], 0xec}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001100)={0x50, 0x0, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0xb}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x20024804) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) (async) r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r8, 0xc0481273, 0x0) (async) syz_open_dev$sg(&(0x7f0000000280), 0x1, 0x88003) (async) unshare(0x400) (async) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r9, 0x114, 0x2, &(0x7f00000011c0)={{0x0, 0x2}, 0x0, 0x24}, 0x20) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) 3m17.410767946s ago: executing program 0 (id=2313): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xffff}, 0x10040d, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) 3m17.311968438s ago: executing program 0 (id=2314): unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m17.227740629s ago: executing program 0 (id=2320): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80c20000000000001400030076657468305f746f5f626f6e6400c30008002900e19004000800280000"], 0x44}}, 0x0) 3m16.851055435s ago: executing program 0 (id=2324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000002000040426bd7000fddbdf25c3d91b63708a856df41d1002100001080000030100000008000b000a00000008000b0006"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xf3, 0x6}, 0x4580, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1, 0x4d1a}, 0x0, 0x1245, 0x6, 0x8, 0x9, 0x6, 0x3ff, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x25, 0x301, 0x670bd24, 0x25dfdbfb, {0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRESDEC=r1, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x400c4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xd, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x206}, 0x12f8a, 0x1, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0xd, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast1, 0xfffffeff}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000df250a4022fe", @ANYRES32, @ANYBLOB="140006"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0xff) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x24, 0x0, &(0x7f0000002000)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="080004006401018ae26ac100ac1e00ee403b280a9e60428d3cbc2f4fc55636080002000a01010208000900030000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4044814}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@bh}]}, 0x1, 0x50d, &(0x7f0000000d40)="$eJzs3c1vI2cZAPDHTpw4H23S0gMgaJe2sKDVOom3jaoeoJwQQpUQPYK0DYk3imLHUeyUJuwhPXNFYiVOcOQP4Lwn7lwQ3LgsByQ+ItAGiYPRjCdZb2Jvwiaxs/HvJ408M+/Ez/Nudt43fhL7DWBo3YiIvYgYi4iPI2ImO5/LtvigvSXXPd6/v3ywf385F63WR//Ipe3Juej4msRU9pzFiPjBdyJ+nDsZt7Gzu75UrVa2suO5Zm1zrrGze3uttrRaWa1slMuLC4vz7915t3xhfX2jNpbtffnR7/e+8dMkrensTGc/LlK764WjOInRiPjeZQQbgJGsP2ODToTnko+IVyPizfT+n4mR9LsJAFxnrdZMtGY6jwGA6y6f1sBy+VJWC5iOfL5UatfwXovJfLXeaN66V9/eWGnXymajkL+3Vq3MZ7XC2SjkkuOFdP/JcfnY8Z2IeCUifj4+kR6XluvVlUH+4AMAQ2zq2Pz/7/H2/A8AXHPFQScAAPSd+R8Aho/5HwCGj/kfAIZPe/6fGHQaAEAfef0PAMPn/5v/py4tDwCgL77/4YfJ1jrIPv965ZOd7fX6J7dXKo31Um17ubRc39osrdbrq+ln9tROe75qvb658E5sfzr7zc1Gc66xs3u3Vt/eaN5NP9f7bqWQXrXXh54BAL288sbDP+WSGfn9iXSLjrUcCgPNDLhs+UEnAAzMyKATAAbmnKt9GT7gBXaO1/jKA3BNdFmi9ynFbm8QarVarctLCbhkN7+g/g/DqqP+/+y/AjYYwLWjgAfD65z1f+AF1mrlzrrmf5z1QgDgalPWA3r8/v/V7PE32S8HfrRy/IoHl5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG2H6/+WsrXApyOfL5UiXoqI2Sjk7q1VK/MR8XJE/HG8MJ4cLww4ZwDgvPJ/zWXrf92ceXv6qabXp452xyLiJ7/86BefLjWbW3+IGMv9c/zwfPNBdr7c/+wBgNMdztPpY8cL+cf795cPt37m87dvR0SxHf9gfywOjuKPxmhahihGISIm/5VLjo/kOmoX57H3WUR8vlv/czGd1kDaK58ej5/Efqmv8fNPxc+nbe3H5N/icxeQCwybh8n480G3+y8fN9LH7vd/MR2hzi8b/5KnWj5Ix8An8UezSCM9xr8bZ43xzu++296bONn2WcQXRyMOYx90jD+H8XM94r99xvh//tLrb/Zqa/0q4mZ0j98Za65Z25xr7OzeXqstrVZWKxvl8uLC4vx7d94tz6U16rnes8Hf37/1cq+2pP+TPeIXT+n/V8/Y/1//9+MffuUZ8b/+Vrf4+XjtGfGTOfFrZ4y/NPnbYq+2JP5Kj/6f9v2/dcb4j/6ye2LZcABgcBo7u+tL1Wply46dq7+T/Je9Aml03flWv2KNpT+Jn2z62Vvte/rYV7VazxWr14hxEVU34Co4uukj4j+DTgYAAAAAAAAAAAAAAOiqH+9YGnQfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuL7+FwAA//8dbM2Y") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) fchown(r8, 0xee00, 0xee01) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m16.850609245s ago: executing program 33 (id=2324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000002000040426bd7000fddbdf25c3d91b63708a856df41d1002100001080000030100000008000b000a00000008000b0006"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xf3, 0x6}, 0x4580, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1, 0x4d1a}, 0x0, 0x1245, 0x6, 0x8, 0x9, 0x6, 0x3ff, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x25, 0x301, 0x670bd24, 0x25dfdbfb, {0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRESDEC=r1, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x400c4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xd, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x206}, 0x12f8a, 0x1, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0xd, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast1, 0xfffffeff}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000df250a4022fe", @ANYRES32, @ANYBLOB="140006"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0xff) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x24, 0x0, &(0x7f0000002000)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="080004006401018ae26ac100ac1e00ee403b280a9e60428d3cbc2f4fc55636080002000a01010208000900030000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4044814}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@bh}]}, 0x1, 0x50d, &(0x7f0000000d40)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) fchown(r8, 0xee00, 0xee01) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m27.564686445s ago: executing program 5 (id=2842): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x80000000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, @perf_config_ext={0x63f5, 0xfffffffffffffff7}, 0x2010, 0x0, 0x0, 0xf, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m26.079528356s ago: executing program 5 (id=2850): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) 2m25.916833369s ago: executing program 5 (id=2852): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000004000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2m25.773553281s ago: executing program 5 (id=2855): pipe2$watch_queue(0x0, 0x80) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x100000000}, 0x0, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r2}}, './file1\x00'}) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x10000004}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETS2(r4, 0x5434, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c0c0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r6) ioctl$TIOCCONS(r1, 0x541d) ptrace(0x4208, r6) ptrace(0x4207, r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b7000000001f0000bfa30000000000000703000018feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000630a00fe000000007933000000000000b504fdff000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fd21e3587b9d9e878c86ba9b66c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m24.564943018s ago: executing program 5 (id=2861): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000002c0)='./file1\x00', 0x2480444, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYBLOB="5e2606a1d171520e16b7c9e4ec15e25d80b3daf85d96f421cebf37e5c5da8c32071ed8def0ffb25e45954c8bf2f87fa14a4a8cfae085a775dbf46d9a85cd7d7d89becbe82a1ce55a28c1fe119b7ebd102f6df8d258130a01b9e06af6e43d07889be9ceebce3f3d6d88edbb9c4c8fd27912d334656e4ba6209033b5ba66d5a844af3b983dc6", @ANYRES32, @ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="a23b938eabd9436fab39ce57cea13a51c01bc66294352ad6bef3146e17bc31a3747487afeec021ffa241286224d8d7f7acaeb35caad3706b002845f7c1845411ea21248adb20921e0b92a930f3d70e26d279b8ee4a98ff473a41141674200dea402768967bc703cfef6f354f6770c8c9fde0d34d2072bd7ddcd262fbf1bbbf36045c00000000000000"], 0x1, 0x267, &(0x7f0000000740)="$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") alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x888) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="20000280", @ANYRES32=r6, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8800) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x471b}, {0xcda, 0x6, 0xde, 0x6, 0x9, 0x0, 0x2}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000001100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 2m23.940654517s ago: executing program 5 (id=2868): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x80000000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, @perf_config_ext={0x63f5, 0xfffffffffffffff7}, 0x2010, 0x0, 0x0, 0xf, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m23.909571828s ago: executing program 34 (id=2868): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x80000000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, @perf_config_ext={0x63f5, 0xfffffffffffffff7}, 0x2010, 0x0, 0x0, 0xf, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.337476361s ago: executing program 1 (id=3446): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x1, {0x4dd1068d, 0x2, "d0d39eb90880d417adf54ee593f8ab347a05c54ddda2ff19a85fed923359137501c0d32607079c2300dfc281d9a68c67c410f38e218065771a86b42cd187f4eb7002456a37a5695b3af14d5579e90533c0d58af2541eca900cf0946e156ce1fca57328d63f2fbcf700671aba1e2027debd5a6dacb9e8c33093976b64b6c63a69143922c7e6f49b541022017fe239b7327701ddbfda615403f0df8a60db38aef7e89ae72b2f9708a540ed83ea84d56fa20e8da8af9050d169a5c0ed84bf02a4d61d43cfd3ff260c633b783118783c5416588c3b4e907ba7891abbfa6df4d5014e68044fabd22d687468b8aefaa0c11904b6c4a9522a58d8ea9a952e622818bb54", 0xc, 0x0, 0x73, 0x8, 0x6, 0x3, 0x80}}}, 0x128) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00070004fcff", 0x58}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$tun(r2, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x4000, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c206}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={0x0, 0x7ff, 0x6, 0x1}) sendmsg$nl_route(r0, 0x0, 0x4000004) 3.260756262s ago: executing program 6 (id=3448): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x8, 0x1, 0x4, 0x4, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x1, 0x20, 0x0, 0x4, 0x19}, [], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x938) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pwrite64(r1, &(0x7f00000001c0)="3b0c73a616d061441c27e7cdd0b410d812515fffcb093b1343ca5befeca0b7e8c1b61fc12e77b638b7f4bf37ec8d4714f377acd5efe258773f77076138862c36a7282474d2c6e831e48db782f50f25477e66f000e09d3cf056e3eb18e5446eed696c3941c02512949ad1264a5a76097d0fbe4341e0d5a4105e00103a68e0d5474ff82d5aaab5c90ece5d4a8b82a8339ead30308a4478047d9947a7360efe409e135496345261678c", 0xa8, 0x9) socket$pppl2tp(0x18, 0x1, 0x1) listen(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket(0x80000000000000a, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f0000001f80)=""/4102, 0x1006) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0xd20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fcff00000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.260504742s ago: executing program 6 (id=3449): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdefffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000307944e23000c020000003c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080020000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000020000fd200000000000000048000300"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) 3.244336142s ago: executing program 6 (id=3450): r0 = socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x5c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40140}, 0x40000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1}, 0x1) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000240)="a905000000007464000100000000000000", 0x11}, {&(0x7f0000000540)="5a12c16ac9a50b033000000000008eff7a4b31", 0x13}], 0x2, 0x0, 0x1008}}], 0x1, 0x24004044) perf_event_open(&(0x7f0000000380)={0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfa, 0x3ff}, 0x180, 0xc8, 0x0, 0x0, 0x4000000000, 0x5, 0xfffd, 0x0, 0x0, 0x0, 0xffc}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x8e0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x1e, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7}}, 0x40) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x30f6, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000039000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x4000000) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, 0xfffffffffffffffe, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xbb3aaf912a9bca8a, 0x40) 3.225331043s ago: executing program 1 (id=3451): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1509e2f6ab86ff0b}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x151) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xc000) fallocate(r0, 0x0, 0x0, 0x8800000) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1b, 0x0, 0x0, 0x1) 3.092907735s ago: executing program 6 (id=3452): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000003fffffff01851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000007ffffffb702000020000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 3.078267725s ago: executing program 6 (id=3455): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2804400, &(0x7f0000000440)={[{@bh}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@audit}, {@euid_lt}, {@obj_user={'obj_user', 0x3d, '\\\xf2$\xe1?('}}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = signalfd(r0, &(0x7f00000000c0)={[0xb]}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000200)='ext4\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa2417c3f12b28202, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x84, 0x0, 0x10000, 0x0, 0x2, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x291a, &(0x7f0000000040)={0x0, 0xca6e, 0xc000, 0x1, 0x20002f7}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xc27, @empty, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.077790815s ago: executing program 1 (id=3456): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xe8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000063000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSSOFTCAR(r1, 0x5433, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000fa", 0x10, 0x8800, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x8, 0xe}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x40004) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x1d8], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000"/52], 0x0) 2.799667449s ago: executing program 6 (id=3458): unshare(0x20000400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7ff}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r3, &(0x7f00000001c0)='S', 0x1, 0x9690) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.74054222s ago: executing program 1 (id=3460): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x151) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xc000) fallocate(r0, 0x0, 0x0, 0x8800000) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1b, 0x0, 0x0, 0x1) 2.610435742s ago: executing program 1 (id=3465): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xaffffff7fffffffe, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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") sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004810}, 0x8082) fspick(0xffffffffffffffff, 0x0, 0x0) 2.472520534s ago: executing program 1 (id=3467): unshare(0x20000400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7ff}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r3, &(0x7f00000001c0)='S', 0x1, 0x9690) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.468871638s ago: executing program 4 (id=3480): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2804400, &(0x7f0000000440)={[{@bh}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@audit}, {@euid_lt}, {@obj_user={'obj_user', 0x3d, '\\\xf2$\xe1?('}}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) signalfd(r0, &(0x7f00000000c0)={[0xb]}, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x84, 0x0, 0x10000, 0x0, 0x2, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x291a, &(0x7f0000000040)={0x0, 0xca6e, 0xc000, 0x1, 0x20002f7}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xc27, @empty, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.096831474s ago: executing program 2 (id=3483): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) readv(0xffffffffffffffff, &(0x7f00000030c0)=[{&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000001f00)=""/4096, 0x1000}, {0x0}], 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x20000, 0x4) select(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000080)=[{r3, 0x3042}, {r4, 0x6048}, {r3, 0x404}, {r3, 0xa2e0}, {r3, 0x4358}], 0x5, 0x99) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) unshare(0x60480) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x480, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x0, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') socket$inet_sctp(0x2, 0x4, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x20001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 912.060636ms ago: executing program 4 (id=3484): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x8000001, 0x100, 0x100, 0x4, 0x0, 0x4}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 751.829149ms ago: executing program 4 (id=3486): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000c0000000a0000000000001104000000ffffaa32d1cb130f25999c5c0777cb1c40ea8ec298f9ffff000000000000000279d44f7a0a845a4c2200000000000000000000000b020000000b0000000000000e030000000000000001000000000000020300000000004fa4d8cbd2ddc0c4ad1375241ffe4c64474d78afddf432"], 0x0, 0x68}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044100}, 0x80) 675.10487ms ago: executing program 4 (id=3488): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000200000000000000f1000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 651.17379ms ago: executing program 4 (id=3489): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5401000010000100000000080000000000000000000000000000000000000000000080ffffff01000200004e200050000020001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aafffffffc33000000ac1414aa0000000000000000000000000000000000000000040000000000000001000000000000000400000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000001000000000001040000090000000000000000000000000000000a00010090000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x24000058) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)) 572.912471ms ago: executing program 4 (id=3490): unshare(0x20000400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7ff}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r3, &(0x7f00000001c0)='S', 0x1, 0x9690) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) write$nbd(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="6744669800000000010002000420000026fc626fa5b8caf6fc86ae1df6072bfef76899a2cac5606a4c38be8e814af4a49a0c3568fa2ae657ec7aa2c894ba548ca2b67ab554ffd710cfb0429b0f13709a3337c754913f6d5523a53e9d1bae5e09a036b8df5bdd905c8cb1ff493e18722e635edfb2a86dc6327eafe72dbf1a9ea8cc469282a497651e8207479eaf5a2ab785036e19894b73c7a08696e0a1a8b171ef99527de3dcf45884f3c4de8ce7a007a58e93d625eae7503469832bd1ede7480fba9c37652c78e859bbe384b1bf1ca5d54b3614dbf2d91470f653d8f14f318ada"], 0x72) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x14d142, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6ea) close_range(r0, 0xffffffffffffffff, 0x0) 553.731341ms ago: executing program 7 (id=3492): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@i_version}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1, 0x7}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r3, &(0x7f0000000140)="c8", 0x1, 0xe7c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000f00)={0x0, 0x7ff, 0x2, 0x401}) 413.780494ms ago: executing program 7 (id=3493): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x2a, 0x1, 0x6, 0x0) syz_open_procfs$namespace(0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 324.857045ms ago: executing program 7 (id=3494): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2804400, &(0x7f0000000440)={[{@bh}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@audit}, {@euid_lt}, {@obj_user={'obj_user', 0x3d, '\\\xf2$\xe1?('}}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x84, 0x0, 0x10000, 0x0, 0x2, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x291a, &(0x7f0000000040)={0x0, 0xca6e, 0xc000, 0x1, 0x20002f7}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xc27, @empty, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 173.346727ms ago: executing program 2 (id=3495): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xa, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), 0x0}, 0x20) 155.653728ms ago: executing program 2 (id=3496): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r2) sendmmsg$unix(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000000)="021f9a315f068338027759c81741bb732d4d", 0x12}, {&(0x7f0000000040)="c74168954bac89f82e9f6fcadcd0494132471e8f8fc113494da69d167bc4c09b34faf9df0e0fbf78c2d598a9d31f4b25285084f5286b6533ea1095862aae260c0341ac70e7e6ec4281c05d07", 0x4c}, {&(0x7f0000001180)="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", 0x10b0}], 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 124.366928ms ago: executing program 7 (id=3497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000009000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 97.946898ms ago: executing program 7 (id=3498): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000c00000000000000040300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) 97.728328ms ago: executing program 2 (id=3499): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x1100, @private}, 0x10) 36.614309ms ago: executing program 2 (id=3500): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xffff}, 0x10040d, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstatfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) 36.254149ms ago: executing program 7 (id=3501): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x1, 0x5, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380000001000010025bdf000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="001004000100000008001b0000000000080029000000010008"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 0s ago: executing program 2 (id=3502): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xa, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), 0x0}, 0x20) kernel console output (not intermixed with test programs): 010][T13213] team0: Port device team_slave_1 added [ 348.472228][T13244] loop6: detected capacity change from 0 to 512 [ 348.486416][T13244] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 348.509847][ T4850] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.532099][ T4850] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.543545][T13213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.550546][T13213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.576554][T13213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.612613][T13213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.620385][T13213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.647181][T13213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.680806][ T4850] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.694174][ T4850] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.727849][T13253] syzkaller0: entered promiscuous mode [ 348.733494][T13253] syzkaller0: entered allmulticast mode [ 348.756406][ T4850] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.768448][ T4850] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.803236][T13213] hsr_slave_0: entered promiscuous mode [ 348.814432][T13213] hsr_slave_1: entered promiscuous mode [ 348.879540][ T4850] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.893881][ T4850] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.143361][T13283] loop1: detected capacity change from 0 to 256 [ 349.163976][T13283] vfat: Unknown parameter '00000000000000000000000<7of9%2!ogLL]' [ 349.318964][T13274] loop6: detected capacity change from 0 to 512 [ 349.402431][T13290] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2880'. [ 349.707396][ T28] audit: type=1400 audit(1782539282.919:2100): avc: denied { write } for pid=13291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.773333][T13274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.778351][T13274] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.814031][ T28] audit: type=1400 audit(1782539282.993:2101): avc: denied { write } for pid=13307 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.857198][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 349.865219][ T4850] team0: left allmulticast mode [ 349.870200][ T4850] team0: left promiscuous mode [ 349.871328][T13274] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2877: corrupted xattr block 33: invalid ea_ino [ 349.874994][ T4850] gretap1: left promiscuous mode [ 349.875372][ T4850] bridge0: port 1(team0) entered disabled state [ 349.913286][T13274] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 349.924160][T13274] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2877: corrupted xattr block 33: invalid ea_ino [ 349.955271][T13274] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 349.967902][T13274] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2877: corrupted xattr block 33: invalid ea_ino [ 349.969687][T13316] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2877'. [ 350.169888][T13318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2884'. [ 350.198068][ T4850] team0: Port device gretap1 removed [ 350.208043][ T4850] bond2 (unregistering): (slave gre1): Releasing backup interface [ 350.230427][ T4850] bond0 (unregistering): Released all slaves [ 350.238611][ T4850] bond1 (unregistering): Released all slaves [ 350.250408][ T4850] bond2 (unregistering): Released all slaves [ 350.260357][ T4850] bond3 (unregistering): Released all slaves [ 350.273285][ T4850] bond4 (unregistering): Released all slaves [ 350.282856][ T4850] bond5 (unregistering): Released all slaves [ 350.292945][ T4850] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 350.303654][ T4850] bond6 (unregistering): Released all slaves [ 350.313575][ T4850] bond7 (unregistering): Released all slaves [ 350.345791][T13213] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.416436][T13213] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.446869][T11231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.516786][T13213] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.518446][T13323] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2886'. [ 350.567210][T13254] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.574631][T13254] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.582203][T13254] bridge_slave_0: entered allmulticast mode [ 350.589075][T13254] bridge_slave_0: entered promiscuous mode [ 350.596059][ T4850] tipc: Left network mode [ 350.603927][ T4850] hsr_slave_0: left promiscuous mode [ 350.609649][ T4850] hsr_slave_1: left promiscuous mode [ 350.621720][ T4850] veth1_macvtap: left promiscuous mode [ 350.710338][ T4850] veth0_macvtap: left promiscuous mode [ 350.721245][ T4850] veth1_vlan: left promiscuous mode [ 350.732255][ T4850] veth0_vlan: left promiscuous mode [ 350.818123][T13346] loop1: detected capacity change from 0 to 128 [ 350.911818][T13254] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.925745][T13254] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.933207][T13254] bridge_slave_1: entered allmulticast mode [ 350.944694][T13254] bridge_slave_1: entered promiscuous mode [ 350.951745][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 350.963507][T13356] netlink: 'syz.6.2893': attribute type 1 has an invalid length. [ 350.984463][T13356] netlink: 'syz.6.2893': attribute type 2 has an invalid length. [ 351.009988][T13213] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.065399][T13254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.084277][T13254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.135214][T13254] team0: Port device team_slave_0 added [ 351.151173][T13254] team0: Port device team_slave_1 added [ 351.188097][T13360] loop1: detected capacity change from 0 to 4096 [ 351.201043][T13254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.211715][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.259048][T13254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.260388][T13363] loop6: detected capacity change from 0 to 512 [ 351.291840][T13254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.314677][T13363] EXT4-fs: Ignoring removed bh option [ 351.316234][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.375328][T13254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.395552][T13213] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.456288][T13363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.471030][T13363] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.631947][T13213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.649052][T13213] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.667539][T13213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.677486][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 351.700095][T13213] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.729433][T13213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.737358][T13213] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 351.748447][T13213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 351.757742][ T4850] IPVS: stop unused estimator thread 0... [ 351.775016][T13254] hsr_slave_0: entered promiscuous mode [ 351.781406][T13254] hsr_slave_1: entered promiscuous mode [ 351.787911][T11231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.798396][T13254] debugfs: 'hsr0' already exists in 'hsr' [ 351.808140][T13254] Cannot create hsr debugfs directory [ 351.919171][T13213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.053783][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 352.053800][ T28] audit: type=1400 audit(1782539285.088:2106): avc: denied { write } for pid=13414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.113639][ T28] audit: type=1400 audit(1782539285.135:2107): avc: denied { write } for pid=13426 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.637285][T13213] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.654980][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.662119][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.675551][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 352.692799][T13431] loop1: detected capacity change from 0 to 128 [ 352.708614][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.715744][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.779873][T13254] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 352.789670][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.798249][T13254] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 352.811617][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.833933][T13435] loop1: detected capacity change from 0 to 512 [ 352.836181][T13254] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 352.862294][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.891485][T13254] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 352.912043][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.925202][T13435] loop1: detected capacity change from 0 to 1024 [ 352.934245][T13435] ext4: Unknown parameter 'noacl' [ 353.053147][T13254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.081386][T13254] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.139985][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.147092][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.156203][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.163342][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.188631][T13213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.201877][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2911'. [ 353.217234][T13462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2911'. [ 353.427588][T13254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.472137][T13213] veth0_vlan: entered promiscuous mode [ 353.486021][T13213] veth1_vlan: entered promiscuous mode [ 353.524506][T13213] veth0_macvtap: entered promiscuous mode [ 353.538324][T13497] loop1: detected capacity change from 0 to 256 [ 353.544963][T13213] veth1_macvtap: entered promiscuous mode [ 353.567285][T13213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.597009][T13213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.613531][T13497] 9p: Bad value for 'rfdno' [ 353.624768][ T4850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.637343][ T4850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.668816][ T4850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.700850][ T4850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.778719][T13512] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2919'. [ 353.809055][ T28] audit: type=1400 audit(1782539286.704:2108): avc: denied { getopt } for pid=13511 comm="syz.6.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 353.837947][T13254] veth0_vlan: entered promiscuous mode [ 353.844695][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2918'. [ 353.862350][T13254] veth1_vlan: entered promiscuous mode [ 353.974712][ T28] audit: type=1400 audit(1782539286.815:2109): avc: denied { node_bind } for pid=13513 comm="syz.4.2858" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 354.014584][T13254] veth0_macvtap: entered promiscuous mode [ 354.022241][T13254] veth1_macvtap: entered promiscuous mode [ 354.047351][T13254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.123073][T13254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.148357][ T4850] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.177912][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 354.193981][ T4850] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.275695][ T4850] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.294767][ T4850] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.668852][ T28] audit: type=1400 audit(1782539288.403:2110): avc: denied { write } for pid=13547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.734102][ T28] audit: type=1400 audit(1782539288.458:2111): avc: denied { write } for pid=13559 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.106525][T13564] set_capacity_and_notify: 2 callbacks suppressed [ 356.106557][T13564] loop6: detected capacity change from 0 to 512 [ 356.203509][T13564] EXT4-fs: Ignoring removed bh option [ 356.300903][T13564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.316064][T13564] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.396414][ T5950] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 356.413259][T13575] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2932'. [ 356.444470][T13575] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2932'. [ 356.451330][T11231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.520685][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2934'. [ 356.586073][T13592] loop6: detected capacity change from 0 to 1756 [ 356.595813][T13592] iso9660: Unknown parameter 'r82PhQq [ 361.602830][T13700] __dump_stack+0x1d/0x30 [ 361.602865][T13700] dump_stack_lvl+0x95/0xd0 [ 361.602894][T13700] dump_stack+0x15/0x1b [ 361.602924][T13700] should_fail_ex+0x25e/0x270 [ 361.603033][T13700] should_fail_alloc_page+0xf2/0x100 [ 361.603142][T13700] __alloc_frozen_pages_noprof+0x108/0x350 [ 361.603234][T13700] alloc_pages_mpol+0xa9/0x1d0 [ 361.603272][T13700] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 361.603384][T13700] handle_mm_fault+0x1020/0x2da0 [ 361.603429][T13700] ? _raw_spin_lock+0x52/0xa0 [ 361.603491][T13700] __get_user_pages+0x129c/0x1f10 [ 361.603566][T13700] __mm_populate+0x242/0x390 [ 361.603679][T13700] do_mlock+0x44d/0x510 [ 361.603711][T13700] ? mutex_unlock+0x4e/0x90 [ 361.603808][T13700] ? fput+0x8f/0xc0 [ 361.603836][T13700] ? ksys_write+0x194/0x1a0 [ 361.603866][T13700] __x64_sys_mlock+0x36/0x50 [ 361.603895][T13700] x64_sys_call+0x1ab3/0x3020 [ 361.604001][T13700] do_syscall_64+0x136/0x3c0 [ 361.604091][T13700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.604163][T13700] RIP: 0033:0x7fd98dd2ce59 [ 361.604184][T13700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.604258][T13700] RSP: 002b:00007fd98c787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 361.604287][T13700] RAX: ffffffffffffffda RBX: 00007fd98dfa5fa0 RCX: 00007fd98dd2ce59 [ 361.604315][T13700] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 361.604335][T13700] RBP: 00007fd98c787090 R08: 0000000000000000 R09: 0000000000000000 [ 361.604377][T13700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.604396][T13700] R13: 00007fd98dfa6038 R14: 00007fd98dfa5fa0 R15: 00007ffcfb300488 [ 361.604426][T13700] [ 361.889492][T13595] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.900570][T13595] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.968894][ T28] audit: type=1400 audit(1782539294.237:2116): avc: denied { write } for pid=13704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.977659][T13595] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.014429][T13595] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.037262][ T28] audit: type=1400 audit(1782539294.311:2117): avc: denied { write } for pid=13717 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.103130][T13715] loop7: detected capacity change from 0 to 8192 [ 362.112560][T13595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 362.125518][T13715] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 362.138524][T13595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.147167][T13595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 362.162408][T13595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.184061][T13595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 362.198656][T13595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.235914][T13595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 362.245543][T13729] netdevsim netdevsim7: Direct firmware load for ./file1 failed with error -2 [ 362.263879][T13595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.393233][T13595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.429605][T13595] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.446516][ T4850] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.453679][ T4850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.468293][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.475445][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.513364][T13595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.607234][T13751] loop7: detected capacity change from 0 to 8192 [ 362.643972][T13751] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 362.659211][ T3547] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 362.664860][ T5950] Bluetooth: hci0: command 0x1003 tx timeout [ 362.786266][T13595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.133629][T13595] veth0_vlan: entered promiscuous mode [ 363.151586][T13595] veth1_vlan: entered promiscuous mode [ 363.187328][T13595] veth0_macvtap: entered promiscuous mode [ 363.209370][T13595] veth1_macvtap: entered promiscuous mode [ 363.222517][T13595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.240334][T13595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.689690][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.698981][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.754492][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.766580][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.916078][ T28] audit: type=1400 audit(1782539296.028:2118): avc: denied { create } for pid=13780 comm="syz.7.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 364.004930][ T28] audit: type=1400 audit(1782539296.121:2119): avc: denied { kexec_image_load } for pid=13780 comm="syz.7.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 364.163869][T13790] xt_hashlimit: size too large, truncated to 1048576 [ 364.622186][T13795] netlink: 'syz.4.2979': attribute type 1 has an invalid length. [ 364.640890][T13795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.767944][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2981'. [ 364.804345][T13800] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2981'. [ 364.846546][T13800] geneve2: entered promiscuous mode [ 364.853358][T13800] geneve2: entered allmulticast mode [ 364.899705][T13804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2983'. [ 364.926060][T13804] vlan2: entered promiscuous mode [ 364.939485][T13804] gretap0: entered promiscuous mode [ 365.120703][T13815] loop6: detected capacity change from 0 to 164 [ 365.340357][T13824] loop4: detected capacity change from 0 to 512 [ 365.347959][T13824] ext4: Unknown parameter 'noacl' [ 365.452144][T13823] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2987'. [ 365.845259][T13832] loop7: detected capacity change from 0 to 512 [ 365.862544][T13832] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 365.952102][ T28] audit: type=1400 audit(1782539297.921:2120): avc: denied { write } for pid=13817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.012321][ T28] audit: type=1400 audit(1782539297.921:2121): avc: denied { write } for pid=13838 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.840361][T13827] loop6: detected capacity change from 0 to 1764 [ 366.880111][T13827] iso9660: Bad value for 'sbsector' [ 367.045681][ T28] audit: type=1400 audit(1782539298.927:2122): avc: denied { write } for pid=13850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.098121][T13827] loop6: detected capacity change from 0 to 512 [ 367.104778][T13827] ext4: Unknown parameter 'nolazyt' [ 367.165549][ T28] audit: type=1400 audit(1782539299.038:2123): avc: denied { write } for pid=13875 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.214221][T13842] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.238877][T13842] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.249223][T13842] bridge_slave_0: entered allmulticast mode [ 367.257478][T13842] bridge_slave_0: entered promiscuous mode [ 367.265557][T13842] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.272814][T13842] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.280131][T13842] bridge_slave_1: entered allmulticast mode [ 367.286971][T13842] bridge_slave_1: entered promiscuous mode [ 367.308042][T13842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.318838][T13842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.340844][T13842] team0: Port device team_slave_0 added [ 367.347767][T13842] team0: Port device team_slave_1 added [ 367.364912][T13842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.372072][T13842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.398126][T13842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.409854][T13842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.416827][T13842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.442820][T13842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.472281][T13842] hsr_slave_0: entered promiscuous mode [ 367.478534][T13842] hsr_slave_1: entered promiscuous mode [ 367.484797][T13842] debugfs: 'hsr0' already exists in 'hsr' [ 367.490581][T13842] Cannot create hsr debugfs directory [ 367.733476][T13842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.782606][T13889] loop1: detected capacity change from 0 to 256 [ 367.813461][T13842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.840580][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2998'. [ 367.864922][T13889] loop1: detected capacity change from 0 to 128 [ 367.885385][T13891] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 367.958949][T13904] netlink: 'syz.4.3003': attribute type 1 has an invalid length. [ 367.969743][T13904] loop4: detected capacity change from 0 to 512 [ 367.980687][T13904] EXT4-fs (loop4): invalid inodes per group: 0 [ 367.980687][T13904] [ 368.026227][T13842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.197203][T13842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.248555][T13911] loop4: detected capacity change from 0 to 512 [ 368.266101][T13911] EXT4-fs: Ignoring removed bh option [ 368.286715][T13905] loop1: detected capacity change from 0 to 32768 [ 368.298203][T13905] loop1: p1 p3 < > [ 368.374870][T13911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.388872][T13911] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.441482][T13842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.455775][T13842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.490915][T13842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.504841][T13842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.524895][T13842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.536602][ T28] audit: type=1400 audit(1782539300.303:2124): avc: denied { write } for pid=13917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.564073][T13842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.587424][T13842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 368.603118][T13842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 368.610256][ T28] audit: type=1400 audit(1782539300.367:2125): avc: denied { write } for pid=13943 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.641206][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 368.663205][ T3634] udevd[3634]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 368.681925][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.716363][T13951] loop7: detected capacity change from 0 to 1024 [ 368.738575][T13951] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.760349][T13951] ext4: Unknown parameter 'nouser_xattr' [ 368.823116][T13842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.858661][T13842] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.884222][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3013'. [ 368.896704][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.903926][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.924232][T10407] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.931354][T10407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.026938][ T28] audit: type=1400 audit(1782539300.746:2126): avc: denied { write } for pid=13954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.060252][T13985] loop4: detected capacity change from 0 to 1024 [ 369.073112][T13985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.094325][ T28] audit: type=1400 audit(1782539300.820:2127): avc: denied { write } for pid=13981 comm="syz.4.3018" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 369.122538][T13842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.177050][T13989] loop7: detected capacity change from 0 to 256 [ 369.374707][ T28] audit: type=1400 audit(1782539300.958:2128): avc: denied { write } for pid=13993 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.299248][ T28] audit: type=1400 audit(1782539302.611:2129): avc: denied { read append } for pid=13988 comm="syz.7.3019" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 371.579023][T14005] loop1: detected capacity change from 0 to 512 [ 372.392636][ T28] audit: type=1400 audit(1782539302.611:2130): avc: denied { open } for pid=13988 comm="syz.7.3019" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 372.665455][T14007] loop1: detected capacity change from 0 to 512 [ 372.982237][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.006922][T13979] wireguard0: entered promiscuous mode [ 373.012510][T13979] wireguard0: entered allmulticast mode [ 373.107855][T14013] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 373.119565][T14013] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 373.139982][T14013] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 373.159889][T14013] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 373.197160][T14022] FAULT_INJECTION: forcing a failure. [ 373.197160][T14022] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 373.207890][T14013] System zones: [ 373.214027][T14022] CPU: 0 UID: 0 PID: 14022 Comm: syz.6.3024 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 373.214128][T14022] Tainted: [W]=WARN [ 373.214138][T14022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.214157][T14022] Call Trace: [ 373.214166][T14022] [ 373.214176][T14022] __dump_stack+0x1d/0x30 [ 373.214206][T14022] dump_stack_lvl+0x95/0xd0 [ 373.214344][T14022] dump_stack+0x15/0x1b [ 373.214363][T14022] should_fail_ex+0x25e/0x270 [ 373.214399][T14022] should_fail_alloc_page+0xf2/0x100 [ 373.214431][T14022] __alloc_frozen_pages_noprof+0x108/0x350 [ 373.214500][T14022] alloc_pages_mpol+0xa9/0x1d0 [ 373.214531][T14022] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 373.214569][T14022] handle_mm_fault+0x1020/0x2da0 [ 373.214661][T14022] ? _raw_spin_lock+0x52/0xa0 [ 373.214807][T14022] __get_user_pages+0x129c/0x1f10 [ 373.214943][T14022] __mm_populate+0x242/0x390 [ 373.214986][T14022] do_mlock+0x44d/0x510 [ 373.215015][T14022] ? mutex_unlock+0x4e/0x90 [ 373.215053][T14022] ? fput+0x8f/0xc0 [ 373.215085][T14022] ? ksys_write+0x194/0x1a0 [ 373.215112][T14022] __x64_sys_mlock+0x36/0x50 [ 373.215145][T14022] x64_sys_call+0x1ab3/0x3020 [ 373.215199][T14022] do_syscall_64+0x136/0x3c0 [ 373.215240][T14022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.215299][T14022] RIP: 0033:0x7fe3de77ce59 [ 373.215315][T14022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.215339][T14022] RSP: 002b:00007fe3dd1cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 373.215364][T14022] RAX: ffffffffffffffda RBX: 00007fe3de9f5fa0 RCX: 00007fe3de77ce59 [ 373.215379][T14022] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 373.215427][T14022] RBP: 00007fe3dd1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 373.215445][T14022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.215459][T14022] R13: 00007fe3de9f6038 R14: 00007fe3de9f5fa0 R15: 00007fff751cbc08 [ 373.215514][T14022] [ 373.229591][T14013] 0-2, 18-18, 34-35 [ 373.450442][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3025'. [ 373.464733][T14013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.472493][T14027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3025'. [ 373.491634][T13842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.558075][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.625376][ T28] audit: type=1326 audit(1782539305.002:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.4.3026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053ea0ce59 code=0x7ffc0000 [ 373.660327][T13842] veth0_vlan: entered promiscuous mode [ 373.681470][T13842] veth1_vlan: entered promiscuous mode [ 373.711432][ T28] audit: type=1326 audit(1782539305.011:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.4.3026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053ea0ce59 code=0x7ffc0000 [ 373.737299][T13842] veth0_macvtap: entered promiscuous mode [ 373.748326][T13842] veth1_macvtap: entered promiscuous mode [ 373.762550][T13842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.780613][ T28] audit: type=1326 audit(1782539305.011:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.4.3026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053ea0ce59 code=0x7ffc0000 [ 373.807309][T14050] FAULT_INJECTION: forcing a failure. [ 373.807309][T14050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.826835][T13842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.850389][ T294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.858799][ T28] audit: type=1326 audit(1782539305.011:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.4.3026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053ea0ce59 code=0x7ffc0000 [ 373.865263][T14050] CPU: 1 UID: 0 PID: 14050 Comm: syz.4.3030 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 373.865405][T14050] Tainted: [W]=WARN [ 373.865433][T14050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.865476][T14050] Call Trace: [ 373.865496][T14050] [ 373.865524][T14050] __dump_stack+0x1d/0x30 [ 373.865617][T14050] dump_stack_lvl+0x95/0xd0 [ 373.865701][T14050] dump_stack+0x15/0x1b [ 373.865779][T14050] should_fail_ex+0x25e/0x270 [ 373.865878][T14050] should_fail+0xb/0x20 [ 373.866036][T14050] should_fail_usercopy+0x1a/0x20 [ 373.866306][T14050] _copy_from_iter+0xcc/0xe70 [ 373.866500][T14050] ? __alloc_skb+0x511/0x6f0 [ 373.866740][T14050] ? __alloc_skb+0x205/0x6f0 [ 373.866830][T14050] netlink_sendmsg+0x4a4/0x6f0 [ 373.866913][T14050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.867062][T14050] ____sys_sendmsg+0x532/0x580 [ 373.867227][T14050] ___sys_sendmsg+0x195/0x1e0 [ 373.867382][T14050] __x64_sys_sendmsg+0xd4/0x160 [ 373.867491][T14050] x64_sys_call+0x194c/0x3020 [ 373.867573][T14050] do_syscall_64+0x136/0x3c0 [ 373.867777][T14050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.867926][T14050] RIP: 0033:0x7f053ea0ce59 [ 373.867985][T14050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.868104][T14050] RSP: 002b:00007f053d467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.868168][T14050] RAX: ffffffffffffffda RBX: 00007f053ec85fa0 RCX: 00007f053ea0ce59 [ 373.868211][T14050] RDX: 0000000000040000 RSI: 0000200000000d40 RDI: 0000000000000003 [ 373.868259][T14050] RBP: 00007f053d467090 R08: 0000000000000000 R09: 0000000000000000 [ 373.868375][T14050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.868422][T14050] R13: 00007f053ec86038 R14: 00007f053ec85fa0 R15: 00007fff537bf428 [ 373.868560][T14050] [ 373.868710][ T294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.948878][ T28] audit: type=1326 audit(1782539305.011:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.4.3026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053ea0ce59 code=0x7ffc0000 [ 373.982189][ T294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.999498][ T28] audit: type=1326 audit(1782539305.011:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.4.3026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f053ea0cbc2 code=0x7ffc0000 [ 374.194341][ T28] audit: type=1326 audit(1782539305.011:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.4.3026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f053ea0cc57 code=0x7ffc0000 [ 374.235530][T14056] set_capacity_and_notify: 1 callbacks suppressed [ 374.235547][T14056] loop4: detected capacity change from 0 to 256 [ 374.245725][ T28] audit: type=1326 audit(1782539305.011:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.4.3026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f053ea0ce59 code=0x7ffc0000 [ 374.274427][ T28] audit: type=1326 audit(1782539305.011:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.4.3026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053ea0ce59 code=0x7ffc0000 [ 374.285543][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3032'. [ 374.332382][T14057] loop1: detected capacity change from 0 to 256 [ 374.631358][T14079] netlink: 'syz.4.3040': attribute type 1 has an invalid length. [ 374.670421][T14079] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3040'. [ 374.682118][T14081] loop7: detected capacity change from 0 to 256 [ 374.698545][T14081] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 374.919062][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3045'. [ 374.955703][T14090] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 375.053511][T14088] loop4: detected capacity change from 0 to 512 [ 375.123190][T14088] EXT4-fs: Ignoring removed bh option [ 375.221697][T14088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.270563][T14104] loop7: detected capacity change from 0 to 256 [ 375.288804][T14088] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.309884][ T28] audit: type=1326 audit(1782539305.011:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.4.3026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f053ea0ce59 code=0x7ffc0000 [ 375.335592][ T294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.339553][T14104] FAT-fs (loop7): Directory bread(block 64) failed [ 375.396676][T14104] FAT-fs (loop7): Directory bread(block 65) failed [ 375.433511][T14104] FAT-fs (loop7): Directory bread(block 66) failed [ 375.471690][T14104] FAT-fs (loop7): Directory bread(block 67) failed [ 375.515337][T14104] FAT-fs (loop7): Directory bread(block 68) failed [ 375.554027][T14104] FAT-fs (loop7): Directory bread(block 69) failed [ 375.584175][T14104] FAT-fs (loop7): Directory bread(block 70) failed [ 375.607412][T14104] FAT-fs (loop7): Directory bread(block 71) failed [ 375.626134][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.647149][T14104] FAT-fs (loop7): Directory bread(block 72) failed [ 375.670917][T14104] FAT-fs (loop7): Directory bread(block 73) failed [ 375.726772][T14104] syzkaller0: entered promiscuous mode [ 375.743431][T14104] syzkaller0: entered allmulticast mode [ 375.800730][T14113] loop2: detected capacity change from 0 to 512 [ 375.894229][T14113] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 376.110802][T14113] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.3051: Bad quota inum: 2, type: 1 [ 376.135026][T14113] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 376.332178][T14139] loop7: detected capacity change from 0 to 1024 [ 376.366896][T14139] ext4: Unknown parameter 'dont_measure' [ 376.750472][T14113] syzkaller0: entered promiscuous mode [ 376.767517][T14113] syzkaller0: entered allmulticast mode [ 376.928481][T14162] loop4: detected capacity change from 0 to 256 [ 376.954140][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 376.985766][T13842] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 377.001813][T10407] Bluetooth: hci0: Frame reassembly failed (-84) [ 377.198869][T14171] loop4: detected capacity change from 0 to 4096 [ 377.223854][T14171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.474663][T14179] loop2: detected capacity change from 0 to 128 [ 377.505926][T14179] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 377.548665][T14179] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.648413][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.663533][T13842] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 377.879138][T14190] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.928830][T14190] EXT4-fs: Invalid want_extra_isize 1288798782 [ 378.049242][T14188] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3079: bg 0: block 169: padding at end of block bitmap is not set [ 378.064112][T14188] loop2: lost filesystem error report for type 5 error -117 [ 378.069690][T14195] bridge1: entered promiscuous mode [ 378.082244][T14195] bridge1: entered allmulticast mode [ 378.089167][T14188] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.3079: Failed to acquire dquot type 0 [ 378.100553][T14188] loop2: lost filesystem error report for type 5 error -117 [ 378.113900][T14188] EXT4-fs (loop2): 1 truncate cleaned up [ 378.150021][T14188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.178062][T14188] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.234837][T14202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.243412][T14202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.284630][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.700451][T14210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.769017][T14210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 378.789556][T14210] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.886026][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 378.962315][ T126] IPVS: starting estimator thread 0... [ 379.068753][T14220] netlink: 780 bytes leftover after parsing attributes in process `syz.6.3089'. [ 379.096054][T14218] IPVS: using max 2448 ests per chain, 122400 per kthread [ 379.183740][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 379.189805][ T3547] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 379.221554][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3091'. [ 379.246391][T14226] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3092'. [ 379.259439][T14224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3091'. [ 379.481820][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 379.481838][ T28] audit: type=1400 audit(1782539310.412:2196): avc: denied { ioctl } for pid=14233 comm="syz.2.3088" path="socket:[41008]" dev="sockfs" ino=41008 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 379.598694][T14232] EXT4-fs: Invalid want_extra_isize 1969 [ 379.716668][T14232] netlink: 'syz.4.3095': attribute type 1 has an invalid length. [ 379.810262][T14238] set_capacity_and_notify: 4 callbacks suppressed [ 379.810331][T14238] loop2: detected capacity change from 0 to 1024 [ 379.867854][T14238] EXT4-fs: Ignoring removed i_version option [ 379.921192][T14238] EXT4-fs: Ignoring removed bh option [ 379.962608][T14238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.019199][ T28] audit: type=1400 audit(1782539310.910:2197): avc: denied { write } for pid=14237 comm="syz.2.3097" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.086798][T14232] 8021q: adding VLAN 0 to HW filter on device bond3 [ 380.305852][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.362278][T14253] loop4: detected capacity change from 0 to 256 [ 380.410220][T14258] loop7: detected capacity change from 0 to 512 [ 380.432184][T14258] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 380.433432][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3101'. [ 380.480262][T14248] loop1: detected capacity change from 0 to 512 [ 380.497061][ T28] audit: type=1400 audit(1782539311.344:2198): avc: denied { shutdown } for pid=14256 comm="syz.7.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.517457][T14259] wireguard0: entered promiscuous mode [ 380.523036][T14259] wireguard0: entered allmulticast mode [ 380.567737][T14231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.575414][T14248] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 380.585265][T14231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.645880][T14248] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 380.675229][T14271] FAULT_INJECTION: forcing a failure. [ 380.675229][T14271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 380.676232][T14248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 380.710568][T14271] CPU: 1 UID: 0 PID: 14271 Comm: syz.4.3107 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 380.710804][T14271] Tainted: [W]=WARN [ 380.710813][T14271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 380.710829][T14271] Call Trace: [ 380.710904][T14271] [ 380.710913][T14271] __dump_stack+0x1d/0x30 [ 380.710939][T14271] dump_stack_lvl+0x95/0xd0 [ 380.710966][T14271] dump_stack+0x15/0x1b [ 380.710985][T14271] should_fail_ex+0x25e/0x270 [ 380.711058][T14271] should_fail_alloc_page+0xf2/0x100 [ 380.711092][T14271] __alloc_frozen_pages_noprof+0x108/0x350 [ 380.711141][T14271] alloc_pages_mpol+0xa9/0x1d0 [ 380.711183][T14271] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 380.711269][T14271] handle_mm_fault+0x1020/0x2da0 [ 380.711311][T14271] ? _raw_spin_lock+0x52/0xa0 [ 380.711465][T14271] __get_user_pages+0x129c/0x1f10 [ 380.711518][T14271] __mm_populate+0x242/0x390 [ 380.711561][T14271] do_mlock+0x44d/0x510 [ 380.711643][T14271] ? mutex_unlock+0x4e/0x90 [ 380.711671][T14271] ? fput+0x8f/0xc0 [ 380.711703][T14271] ? ksys_write+0x194/0x1a0 [ 380.711801][T14271] __x64_sys_mlock+0x36/0x50 [ 380.711829][T14271] x64_sys_call+0x1ab3/0x3020 [ 380.711910][T14271] do_syscall_64+0x136/0x3c0 [ 380.711950][T14271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.711979][T14271] RIP: 0033:0x7f053ea0ce59 [ 380.711997][T14271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.712043][T14271] RSP: 002b:00007f053d467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 380.712098][T14271] RAX: ffffffffffffffda RBX: 00007f053ec85fa0 RCX: 00007f053ea0ce59 [ 380.712116][T14271] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 380.712132][T14271] RBP: 00007f053d467090 R08: 0000000000000000 R09: 0000000000000000 [ 380.712147][T14271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.712164][T14271] R13: 00007f053ec86038 R14: 00007f053ec85fa0 R15: 00007fff537bf428 [ 380.712250][T14271] [ 380.721962][T14263] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.3104: path /52/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 380.764868][ T28] audit: type=1400 audit(1782539311.529:2199): avc: denied { ioctl } for pid=14256 comm="syz.7.3104" path="socket:[41075]" dev="sockfs" ino=41075 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 380.799550][T13595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.049035][T14275] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3109'. [ 381.085340][ T28] audit: type=1107 audit(1782539311.889:2200): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='n2.QwkA;[9)RXVlsKnTO#|ϓM' [ 381.129493][ T28] audit: type=1400 audit(1782539311.926:2201): avc: denied { accept } for pid=14276 comm="syz.2.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 381.158152][T14277] loop2: detected capacity change from 0 to 128 [ 381.165740][T14277] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 381.201175][T14277] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 381.202122][T14279] ip6gretap1: entered promiscuous mode [ 381.213440][T14277] ext2 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.216841][ T28] audit: type=1400 audit(1782539311.963:2202): avc: denied { write } for pid=14276 comm="syz.2.3110" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.273640][T13842] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.357524][T13254] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 381.379592][T14292] loop7: detected capacity change from 0 to 256 [ 381.447370][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3116'. [ 381.527072][T14300] netlink: 'syz.6.3120': attribute type 1 has an invalid length. [ 381.550543][T14300] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3120'. [ 381.572645][T14300] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3120'. [ 381.581741][T14300] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3120'. [ 381.621033][T14298] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 381.642069][T14298] bond4 (unregistering): Released all slaves [ 381.816560][T14322] loop7: detected capacity change from 0 to 512 [ 381.981446][T14322] loop7: detected capacity change from 0 to 1764 [ 381.984824][T14328] syzkaller0: entered promiscuous mode [ 381.993581][T14328] syzkaller0: entered allmulticast mode [ 382.158076][T14332] loop2: detected capacity change from 0 to 256 [ 382.189311][T14332] FAT-fs (loop2): data area starts beyond volume (32 > 0) [ 382.196620][T14332] FAT-fs (loop2): Can't find a valid FAT filesystem [ 382.308981][T14337] loop4: detected capacity change from 0 to 128 [ 382.317404][T14337] EXT4-fs: Ignoring removed nobh option [ 382.336483][T14337] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 382.349319][T14337] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 382.362043][ T28] audit: type=1400 audit(1782539313.071:2203): avc: denied { write } for pid=14336 comm="syz.4.3131" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 382.399672][ T28] audit: type=1400 audit(1782539313.071:2204): avc: denied { map } for pid=14336 comm="syz.4.3131" path="/58/mnt/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 382.422780][ T28] audit: type=1400 audit(1782539313.071:2205): avc: denied { execute } for pid=14336 comm="syz.4.3131" path="/58/mnt/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 382.469982][T14339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.538810][T13213] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 382.698082][T14344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.711319][T14344] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.725470][T14344] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3133: corrupted xattr block 33: invalid ea_ino [ 382.740301][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 382.750723][T14344] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3133: corrupted xattr block 33: invalid ea_ino [ 382.764682][T14344] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 382.775930][T14344] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3133: corrupted xattr block 33: invalid ea_ino [ 382.795691][T13254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.844035][T14351] EXT4-fs: Ignoring removed oldalloc option [ 382.850803][T14351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 382.867350][T14351] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.880030][T14351] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.897460][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.979147][T13254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.073961][T14359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.110550][T13254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.143342][T14366] EXT4-fs: Ignoring removed orlov option [ 383.161985][T14366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.214707][T14372] ip6tnl1: entered allmulticast mode [ 383.225733][T14375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.238417][T14375] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.277597][T13254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.345666][T14379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.462889][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.530481][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.573379][T14391] xt_hashlimit: size too large, truncated to 1048576 [ 383.653545][T14392] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.679643][ T4850] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 383.687828][ T4850] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 383.695655][T14392] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.3149: Bad quota inum: 2, type: 1 [ 383.708870][T14392] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 383.724001][ T11] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 383.782926][T14389] syzkaller0: entered promiscuous mode [ 383.788497][T14389] syzkaller0: entered allmulticast mode [ 383.802497][T14401] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5129 sclass=netlink_xfrm_socket pid=14401 comm=syz.4.3151 [ 383.817581][T14401] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5127 sclass=netlink_xfrm_socket pid=14401 comm=syz.4.3151 [ 383.831397][T14400] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=14400 comm=syz.4.3151 [ 383.844188][T14400] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=14400 comm=syz.4.3151 [ 383.857075][T14400] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=14400 comm=syz.4.3151 [ 383.869844][T14400] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=14400 comm=syz.4.3151 [ 383.883007][T14400] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=14400 comm=syz.4.3151 [ 383.934558][T14407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.958741][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.968525][T13842] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 384.002962][ T3376] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.057049][ T126] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.147707][T14421] ext4: Unknown parameter 'fsmagic' [ 384.204732][T14423] gretap0: entered allmulticast mode [ 384.262901][ T6146] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.338228][T14432] EXT4-fs: Ignoring removed bh option [ 384.418376][T14435] tipc: Started in network mode [ 384.423308][T14435] tipc: Node identity 2007ff, cluster identity 4711 [ 384.429983][T14435] tipc: Node number set to 2099199 [ 384.440672][T14432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.469130][ T377] tipc: Subscription rejected, illegal request [ 384.549360][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.549779][T14452] netlink: 'syz.6.3167': attribute type 10 has an invalid length. [ 384.572921][T14452] team0 (unregistering): Port device team_slave_0 removed [ 384.583538][T14452] team0 (unregistering): Port device team_slave_1 removed [ 384.695762][T14459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.867125][T14472] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.923851][ T6146] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 385.032657][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 385.032672][ T28] audit: type=1400 audit(1782539315.499:2243): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.122707][ T28] audit: type=1400 audit(1782539315.554:2244): avc: denied { write } for pid=13842 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.145340][ T28] audit: type=1400 audit(1782539315.554:2245): avc: denied { write } for pid=13842 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.167830][ T28] audit: type=1400 audit(1782539315.554:2246): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.189960][ T28] audit: type=1400 audit(1782539315.554:2247): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.212546][T14474] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.3174: path /153/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 385.240362][ T28] audit: type=1400 audit(1782539315.554:2248): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.267353][ T28] audit: type=1400 audit(1782539315.554:2249): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.268710][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.293827][ T28] audit: type=1400 audit(1782539315.554:2250): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.320278][ T28] audit: type=1400 audit(1782539315.739:2251): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.412136][T14477] lo speed is unknown, defaulting to 1000 [ 385.436256][T14477] lo speed is unknown, defaulting to 1000 [ 385.457845][T14477] lo speed is unknown, defaulting to 1000 [ 385.467251][T14482] set_capacity_and_notify: 13 callbacks suppressed [ 385.467267][T14482] loop7: detected capacity change from 0 to 1024 [ 385.492271][T14482] EXT4-fs: Ignoring removed i_version option [ 385.530501][T14482] EXT4-fs: Ignoring removed bh option [ 385.553812][T14482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.584679][ T28] audit: type=1400 audit(1782539316.034:2252): avc: denied { write } for pid=14481 comm="syz.7.3178" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.653893][T13254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.664561][T14495] __nla_validate_parse: 8 callbacks suppressed [ 385.664607][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3183'. [ 385.718298][T14495] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3183'. [ 385.731583][T14498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.740117][T14498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.749872][T14495] geneve2: entered promiscuous mode [ 385.760008][T14495] geneve2: entered allmulticast mode [ 385.788004][T14477] infiniband sz1: set down [ 385.792601][T14477] infiniband sz1: added lo [ 385.801386][ T6144] lo speed is unknown, defaulting to 1000 [ 385.822181][T14477] RDS/IB: sz1: added [ 385.832026][T14477] smc: adding ib device sz1 with port count 1 [ 385.844040][T14502] netlink: 780 bytes leftover after parsing attributes in process `syz.2.3184'. [ 385.851673][T14477] smc: ib device sz1 port 1 has no pnetid [ 385.854441][T11231] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 385.871532][T14477] lo speed is unknown, defaulting to 1000 [ 385.896927][ T11] IPVS: starting estimator thread 0... [ 385.912723][ T6144] lo speed is unknown, defaulting to 1000 [ 385.948873][T14509] loop1: detected capacity change from 0 to 256 [ 385.966891][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3187'. [ 386.007601][T14505] IPVS: using max 1728 ests per chain, 86400 per kthread [ 386.034556][T14477] lo speed is unknown, defaulting to 1000 [ 386.260135][T14522] loop6: detected capacity change from 0 to 1024 [ 386.295818][T14522] EXT4-fs: Ignoring removed i_version option [ 386.328776][T14522] EXT4-fs: Ignoring removed bh option [ 386.387529][T14477] lo speed is unknown, defaulting to 1000 [ 386.398223][T14522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.445671][T14477] lo speed is unknown, defaulting to 1000 [ 386.507481][T11231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.699800][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3199'. [ 386.721044][T14550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.740993][T14550] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3199'. [ 386.741857][T14477] lo speed is unknown, defaulting to 1000 [ 386.764613][T14550] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3199'. [ 386.855924][T14550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.887016][T14559] loop2: detected capacity change from 0 to 512 [ 386.993632][T14559] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 387.001899][T14559] EXT4-fs (loop2): orphan cleanup on readonly fs [ 387.009258][T14559] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.3197: Failed to acquire dquot type 1 [ 387.020595][T14559] loop2: lost filesystem error report for type 5 error -5 [ 387.021826][T14559] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3197: bg 0: block 40: padding at end of block bitmap is not set [ 387.029228][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 387.029253][ C1] EXT4-fs (loop2): initial error at time 1782539317: ext4_acquire_dquot:7041 [ 387.029300][ C1] EXT4-fs (loop2): last error at time 1782539317: ext4_acquire_dquot:7041 [ 387.067315][T14559] loop2: lost filesystem error report for type 5 error -117 [ 387.083256][T14559] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 387.099364][T14559] loop2: lost filesystem error report for type 5 error -117 [ 387.100006][T14559] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.3197: data will be lost [ 387.118541][T14559] EXT4-fs (loop2): 1 truncate cleaned up [ 387.193959][T14477] lo speed is unknown, defaulting to 1000 [ 387.423917][T14572] loop6: detected capacity change from 0 to 256 [ 387.508405][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3202'. [ 387.520132][ T3019] veth0_vlan: left promiscuous mode [ 387.608551][ T23] veth0_vlan: entered promiscuous mode [ 387.723882][T14477] lo speed is unknown, defaulting to 1000 [ 387.761580][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 387.785887][T14559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 387.818641][T14571] loop1: detected capacity change from 0 to 512 [ 387.825352][T14571] EXT4-fs: Invalid want_extra_isize 1969 [ 388.043467][T14571] netlink: 'syz.1.3201': attribute type 1 has an invalid length. [ 388.385671][T14571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.449636][T14477] lo speed is unknown, defaulting to 1000 [ 388.462412][T14584] loop6: detected capacity change from 0 to 1024 [ 388.514323][T14584] EXT4-fs: Ignoring removed i_version option [ 388.605606][T14584] EXT4-fs: Ignoring removed bh option [ 388.697510][T14584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.876795][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3207'. [ 388.905581][T14597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3207'. [ 388.994629][T14609] netlink: 'syz.4.3211': attribute type 16 has an invalid length. [ 389.002869][T14608] netlink: 'syz.4.3211': attribute type 16 has an invalid length. [ 389.024552][T14609] netlink: 'syz.4.3211': attribute type 17 has an invalid length. [ 389.043995][T11231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.055450][T14608] netlink: 'syz.4.3211': attribute type 17 has an invalid length. [ 389.081374][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.095928][T14609] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.103704][T14609] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.218812][T14609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.227519][T14621] loop7: detected capacity change from 0 to 1764 [ 389.266007][T14609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.303354][T14614] netlink: 'syz.1.3212': attribute type 7 has an invalid length. [ 389.357928][T14614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.388112][T14614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.431614][T14609] geneve2: left promiscuous mode [ 389.436676][T14609] geneve2: left allmulticast mode [ 389.446553][T14609] ip6gretap1: left promiscuous mode [ 389.452253][T14609] ip6tnl1: left allmulticast mode [ 389.470535][T10407] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.479667][T10407] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.493793][T10407] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.505549][T10407] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.640867][T14641] loop2: detected capacity change from 0 to 1024 [ 389.662540][T14641] EXT4-fs: Ignoring removed i_version option [ 389.686967][T14641] EXT4-fs: Ignoring removed bh option [ 389.763493][T14641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.806052][T14661] loop4: detected capacity change from 0 to 128 [ 389.822346][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.837370][T14661] EXT4-fs: Ignoring removed nobh option [ 389.859203][T14661] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.903346][T14661] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 390.179555][T14690] netlink: 'syz.2.3224': attribute type 1 has an invalid length. [ 390.200459][T14690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.219680][T14689] bond1: (slave ip6gretap1): making interface the new active one [ 390.224210][T13213] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.236693][T14689] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 390.468164][T14711] EXT4-fs: Ignoring removed i_version option [ 390.474226][T14711] EXT4-fs: Ignoring removed bh option [ 390.499900][T14713] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 390.604592][T14715] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 390.626065][T14715] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 390.894044][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 390.894132][ T28] audit: type=1400 audit(1782539320.936:2266): avc: denied { write } for pid=14710 comm="syz.4.3232" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.109493][T14728] xt_hashlimit: size too large, truncated to 1048576 [ 391.167611][T14734] set_capacity_and_notify: 3 callbacks suppressed [ 391.167631][T14734] loop7: detected capacity change from 0 to 512 [ 391.181534][T14732] loop1: detected capacity change from 0 to 512 [ 391.203478][ T28] audit: type=1400 audit(1782539321.232:2267): avc: denied { read write } for pid=14733 comm="syz.7.3238" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 391.229821][ T28] audit: type=1400 audit(1782539321.232:2268): avc: denied { open } for pid=14733 comm="syz.7.3238" path="/74/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 391.398335][T14749] macvtap0: entered promiscuous mode [ 391.502022][T14755] loop2: detected capacity change from 0 to 256 [ 391.538004][T14755] __nla_validate_parse: 3 callbacks suppressed [ 391.538024][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3246'. [ 391.803239][T14773] loop2: detected capacity change from 0 to 256 [ 391.821040][T14773] vfat: Unknown parameter '' [ 391.901063][ T126] kernel write not supported for file /sg0 (pid: 126 comm: kworker/0:2) [ 391.915639][T14785] loop2: detected capacity change from 0 to 256 [ 391.930844][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'. [ 392.009322][T14787] loop6: detected capacity change from 0 to 128 [ 392.031424][T14787] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.135062][T14801] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len [ 392.163532][T14807] loop7: detected capacity change from 0 to 512 [ 392.171315][T14807] ext3: Unknown parameter 'nouser_xattr' [ 392.412753][T14816] loop1: detected capacity change from 0 to 256 [ 392.463702][T14817] loop7: detected capacity change from 0 to 512 [ 392.478465][ T28] audit: type=1400 audit(1782539322.358:2269): avc: denied { connect } for pid=14806 comm="syz.7.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 392.520883][T14816] vfat: Unknown parameter '' [ 392.532121][ T28] audit: type=1400 audit(1782539322.423:2270): avc: denied { prog_run } for pid=14813 comm="syz.6.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 392.716931][T14817] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.3267: corrupted in-inode xattr: invalid ea_ino [ 392.731758][T14817] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 392.737226][T14817] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3267: couldn't read orphan inode 15 (err -117) [ 392.758451][T14817] loop7: lost filesystem error report for type 5 error -117 [ 392.910835][ T28] audit: type=1400 audit(1782539322.644:2271): avc: denied { prog_load } for pid=14815 comm="syz.1.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 393.153758][ T28] audit: type=1400 audit(1782539322.644:2272): avc: denied { write } for pid=14806 comm="syz.7.3267" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 393.217608][T14829] No such timeout policy "syz0" [ 393.232323][ T28] audit: type=1400 audit(1782539322.644:2273): avc: denied { write } for pid=14806 comm="syz.7.3267" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 393.274360][T14829] loop1: detected capacity change from 0 to 512 [ 393.280986][ T28] audit: type=1400 audit(1782539322.644:2274): avc: denied { write } for pid=14806 comm="syz.7.3267" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 393.347974][ T28] audit: type=1400 audit(1782539322.644:2275): avc: denied { append } for pid=14806 comm="syz.7.3267" path="/83/file0/file0/cpuacct.usage_percpu_sys" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 393.618747][T14837] sctp: [Deprecated]: syz.4.3279 (pid 14837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.618747][T14837] Use struct sctp_sack_info instead [ 393.725875][T14841] uprobe: syz.1.3280:14841 failed to unregister, leaking uprobe [ 393.758596][T14841] uprobe: syz.1.3280:14841 failed to unregister, leaking uprobe [ 393.766470][T14845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3281'. [ 393.785294][T14843] lo speed is unknown, defaulting to 1000 [ 393.917336][T14848] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3282'. [ 394.193059][T14850] loop2: p3 < > p4 < > [ 394.197274][T14850] loop2: partition table partially beyond EOD, truncated [ 394.204461][T14850] loop2: p3 start 4284289 is beyond EOD, truncated [ 394.221592][T14850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3283'. [ 394.223951][ T2980] loop2: p3 < > p4 < > [ 394.235000][ T2980] loop2: partition table partially beyond EOD, truncated [ 394.252824][ T23] IPVS: starting estimator thread 0... [ 394.254804][ T2980] loop2: p3 start 4284289 is beyond EOD, truncated [ 394.434722][T14855] IPVS: using max 2448 ests per chain, 122400 per kthread [ 394.459138][T14850] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.466890][T14850] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.631791][T14850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.647744][T14850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.772503][T14875] EXT4-fs: Ignoring removed bh option [ 394.793411][T14875] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.7.3290: corrupted xattr block 95: invalid header [ 394.815889][T14875] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 394.816493][T14875] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3290: bg 0: block 7: invalid block bitmap [ 394.838481][T14875] loop7: lost filesystem error report for type 5 error -117 [ 394.838855][T14875] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 394.855311][T14875] loop7: lost filesystem error report for type 5 error -117 [ 394.855651][T14875] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2972: inode #11: comm syz.7.3290: corrupted xattr block 95: invalid header [ 394.863194][ C0] EXT4-fs (loop7): error count since last fsck: 3 [ 394.863224][ C0] EXT4-fs (loop7): initial error at time 1782539324: ext4_expand_extra_isize_ea:2810: inode 11 [ 394.863331][ C0] EXT4-fs (loop7): last error at time 1782539324: ext4_mb_clear_bb:6679 [ 394.905747][T14875] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 394.906089][T14875] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 394.924896][T14875] EXT4-fs (loop7): 1 orphan inode deleted [ 395.100865][T14864] syzkaller0: entered promiscuous mode [ 395.142398][T14864] syzkaller0: entered allmulticast mode [ 395.203257][T10405] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.212394][T10405] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.256191][T10405] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.276094][T10405] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.365506][T14821] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 395.519133][T14891] netlink: 'syz.1.3295': attribute type 1 has an invalid length. [ 395.602765][T14891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.780259][T14901] lo speed is unknown, defaulting to 1000 [ 396.008469][T14912] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.3301: path /98/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 396.090020][T14914] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.448639][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'. [ 396.448942][T14911] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 396.862287][T14935] FAULT_INJECTION: forcing a failure. [ 396.862287][T14935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 396.887941][T14935] CPU: 0 UID: 0 PID: 14935 Comm: syz.1.3307 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 396.887987][T14935] Tainted: [W]=WARN [ 396.887994][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 396.888007][T14935] Call Trace: [ 396.888064][T14935] [ 396.888071][T14935] __dump_stack+0x1d/0x30 [ 396.888107][T14935] dump_stack_lvl+0x95/0xd0 [ 396.888129][T14935] dump_stack+0x15/0x1b [ 396.888148][T14935] should_fail_ex+0x25e/0x270 [ 396.888233][T14935] should_fail_alloc_page+0xf2/0x100 [ 396.888260][T14935] __alloc_frozen_pages_noprof+0x108/0x350 [ 396.888322][T14935] alloc_pages_mpol+0xa9/0x1d0 [ 396.888354][T14935] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 396.888388][T14935] handle_mm_fault+0x1020/0x2da0 [ 396.888426][T14935] ? _raw_spin_lock+0x52/0xa0 [ 396.888470][T14935] __get_user_pages+0x129c/0x1f10 [ 396.888513][T14935] __mm_populate+0x242/0x390 [ 396.888620][T14935] do_mlock+0x44d/0x510 [ 396.888641][T14935] ? mutex_unlock+0x4e/0x90 [ 396.888662][T14935] ? fput+0x8f/0xc0 [ 396.888760][T14935] ? ksys_write+0x194/0x1a0 [ 396.888782][T14935] __x64_sys_mlock+0x36/0x50 [ 396.888804][T14935] x64_sys_call+0x1ab3/0x3020 [ 396.888830][T14935] do_syscall_64+0x136/0x3c0 [ 396.888922][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.888945][T14935] RIP: 0033:0x7efffb40ce59 [ 396.888963][T14935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.888983][T14935] RSP: 002b:00007efff9e5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 396.889005][T14935] RAX: ffffffffffffffda RBX: 00007efffb685fa0 RCX: 00007efffb40ce59 [ 396.889020][T14935] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 396.889091][T14935] RBP: 00007efff9e5f090 R08: 0000000000000000 R09: 0000000000000000 [ 396.889105][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.889190][T14935] R13: 00007efffb686038 R14: 00007efffb685fa0 R15: 00007ffe665978e8 [ 396.889211][T14935] [ 397.110094][T14939] netlink: 'syz.4.3308': attribute type 13 has an invalid length. [ 397.148252][T14943] set_capacity_and_notify: 5 callbacks suppressed [ 397.148274][T14943] loop2: detected capacity change from 0 to 4096 [ 397.224607][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 397.224626][ T28] audit: type=1400 audit(1782539326.771:2285): avc: denied { write } for pid=14942 comm="syz.2.3309" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.298915][T14947] loop4: detected capacity change from 0 to 4096 [ 397.310105][ T28] audit: type=1400 audit(1782539326.771:2286): avc: denied { write } for pid=14942 comm="syz.2.3309" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.427483][ T28] audit: type=1400 audit(1782539326.946:2287): avc: denied { write } for pid=14946 comm="syz.4.3311" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.467663][ T28] audit: type=1400 audit(1782539327.011:2288): avc: denied { write } for pid=14946 comm="syz.4.3311" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.604313][ T28] audit: type=1400 audit(1782539327.140:2289): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.669590][ T28] audit: type=1400 audit(1782539327.140:2290): avc: denied { write } for pid=13842 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.714097][ T28] audit: type=1400 audit(1782539327.140:2291): avc: denied { write } for pid=13842 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.744611][ T28] audit: type=1400 audit(1782539327.140:2292): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.766848][ T28] audit: type=1400 audit(1782539327.140:2293): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.788957][ T28] audit: type=1400 audit(1782539327.159:2294): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.923387][T14962] loop4: detected capacity change from 0 to 256 [ 397.961497][T14962] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 398.674975][T14971] loop4: detected capacity change from 0 to 4096 [ 399.337844][T14987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=14987 comm=syz.4.3324 [ 399.369074][T14978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.437932][T14978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.791370][T15002] FAULT_INJECTION: forcing a failure. [ 399.791370][T15002] name failslab, interval 1, probability 0, space 0, times 0 [ 399.804030][T15002] CPU: 0 UID: 0 PID: 15002 Comm: syz.7.3327 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 399.804068][T15002] Tainted: [W]=WARN [ 399.804076][T15002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.804089][T15002] Call Trace: [ 399.804096][T15002] [ 399.804105][T15002] __dump_stack+0x1d/0x30 [ 399.804225][T15002] dump_stack_lvl+0x95/0xd0 [ 399.804284][T15002] dump_stack+0x15/0x1b [ 399.804304][T15002] should_fail_ex+0x25e/0x270 [ 399.804337][T15002] should_failslab+0x8c/0xb0 [ 399.804366][T15002] __kmalloc_noprof+0xd4/0x4a0 [ 399.804395][T15002] ? io_cache_alloc_new+0x2a/0xb0 [ 399.804497][T15002] ? io_cache_alloc_new+0x2a/0xb0 [ 399.804662][T15002] io_cache_alloc_new+0x2a/0xb0 [ 399.804699][T15002] __io_prep_rw+0x121/0x740 [ 399.804718][T15002] ? __io_alloc_req_refill+0x176/0x1d0 [ 399.804806][T15002] io_prep_read+0x31/0xe0 [ 399.804847][T15002] ? blk_start_plug_nr_ios+0xc2/0xe0 [ 399.804878][T15002] io_submit_sqes+0x737/0x1180 [ 399.804904][T15002] __se_sys_io_uring_enter+0x25c/0xf90 [ 399.804967][T15002] ? mutex_unlock+0x4e/0x90 [ 399.805030][T15002] ? fput+0x8f/0xc0 [ 399.805066][T15002] __x64_sys_io_uring_enter+0x78/0x90 [ 399.805137][T15002] x64_sys_call+0x1e16/0x3020 [ 399.805230][T15002] do_syscall_64+0x136/0x3c0 [ 399.805342][T15002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.805369][T15002] RIP: 0033:0x7fd98dd2ce59 [ 399.805391][T15002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.805415][T15002] RSP: 002b:00007fd98c745028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 399.805452][T15002] RAX: ffffffffffffffda RBX: 00007fd98dfa6180 RCX: 00007fd98dd2ce59 [ 399.805480][T15002] RDX: 0000000000000003 RSI: 0000000000002219 RDI: 0000000000000000 [ 399.805492][T15002] RBP: 00007fd98c745090 R08: 0000000000000000 R09: 0000000000000000 [ 399.805506][T15002] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 399.805524][T15002] R13: 00007fd98dfa6218 R14: 00007fd98dfa6180 R15: 00007ffcfb300488 [ 399.805604][T15002] [ 400.021147][T15004] loop2: detected capacity change from 0 to 512 [ 400.031277][T15004] FAT-fs (loop2): data area starts beyond volume (199892 > 45184) [ 400.039508][T15004] FAT-fs (loop2): Can't find a valid FAT filesystem [ 400.529793][T15011] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3330'. [ 400.591612][T15013] loop1: detected capacity change from 0 to 256 [ 400.736608][T15019] xt_hashlimit: size too large, truncated to 1048576 [ 400.771908][T15021] loop4: detected capacity change from 0 to 256 [ 400.788434][T15021] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3334'. [ 400.798165][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3334'. [ 400.869543][T15026] loop1: detected capacity change from 0 to 512 [ 400.886782][T15024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=15024 comm=syz.2.3335 [ 401.158495][T15042] loop4: detected capacity change from 0 to 4096 [ 401.170643][T15042] EXT4-fs mount: 20 callbacks suppressed [ 401.170662][T15042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.178684][T15040] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3342'. [ 401.201788][T15044] loop2: detected capacity change from 0 to 4096 [ 401.211086][T15044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.356944][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.381080][T15055] EXT4-fs: inline encryption not supported [ 401.412717][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.471374][T15062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.518049][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.518667][T15066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=15066 comm=syz.2.3348 [ 401.602327][T15079] EXT4-fs: Ignoring removed bh option [ 401.641866][T15071] EXT4-fs: Ignoring removed i_version option [ 401.659729][T15071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.681853][T15089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 401.711401][T15089] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 401.719382][T15089] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 401.727466][T15089] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 401.737044][T15089] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 401.746661][T13595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 401.752719][T15089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 401.768388][T15079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.780906][T15079] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.803120][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3354'. [ 401.825778][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.859021][T15089] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.3354: dx entry: limit 65535 != root limit 120 [ 401.871694][T15089] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3354: Corrupt directory, running e2fsck is recommended [ 401.885296][T15089] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.3354: path /116/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 401.953316][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.098650][T15124] EXT4-fs: Ignoring removed nobh option [ 402.116555][T15124] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 402.129205][T15124] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 402.178911][T15131] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3363'. [ 402.236083][T15131] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 402.315206][T15131] EXT4-fs error (device loop6): ext4_quota_enable:7228: comm syz.6.3363: Bad quota inum: 2, type: 1 [ 402.324537][T13842] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 402.326857][T15131] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 402.391098][T15131] syzkaller0: entered promiscuous mode [ 402.396716][T15131] syzkaller0: entered allmulticast mode [ 402.410714][T15137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.475412][T15142] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 402.529036][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.538879][T11231] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 402.697251][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 402.697270][ T28] audit: type=1400 audit(1782539331.839:2360): avc: denied { write } for pid=15159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.754775][ T28] audit: type=1400 audit(1782539331.895:2361): avc: denied { write } for pid=15171 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.788049][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3368'. [ 402.797372][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3368'. [ 402.813788][T15152] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3368'. [ 402.965710][ T28] audit: type=1400 audit(1782539332.024:2362): avc: denied { write } for pid=15180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.998084][ T28] audit: type=1400 audit(1782539332.024:2363): avc: denied { write } for pid=15191 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.073653][T15199] set_capacity_and_notify: 9 callbacks suppressed [ 403.073673][T15199] loop4: detected capacity change from 0 to 512 [ 403.119455][T15199] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.144308][ T28] audit: type=1400 audit(1782539332.218:2364): avc: denied { write } for pid=15196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.177855][ T28] audit: type=1400 audit(1782539332.292:2365): avc: denied { write } for pid=15210 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.202302][T15212] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.3371: path /118/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 403.303626][T15216] loop1: detected capacity change from 0 to 512 [ 403.476310][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3373'. [ 403.977351][T13213] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 485.229652][T15249] __nla_validate_parse: 1 callbacks suppressed [ 485.229740][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3380'. [ 485.236339][T15253] loop6: detected capacity change from 0 to 256 [ 485.255832][T15253] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 485.272600][T15246] loop7: detected capacity change from 0 to 4096 [ 485.279006][T15249] vlan2: entered promiscuous mode [ 485.285821][T15249] gretap0: entered promiscuous mode [ 485.296101][T15246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.313879][ T28] audit: type=1400 audit(1782539408.114:2366): avc: denied { write } for pid=15242 comm="syz.7.3378" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.343225][ T28] audit: type=1400 audit(1782539408.142:2367): avc: denied { write } for pid=15242 comm="syz.7.3378" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.489314][ T28] audit: type=1400 audit(1782539408.280:2368): avc: denied { write } for pid=13254 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.530923][T13254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.540689][T15272] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 485.562130][ T28] audit: type=1400 audit(1782539408.280:2369): avc: denied { write } for pid=13254 comm="syz-executor" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.601771][T15283] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3391'. [ 485.602870][ T28] audit: type=1400 audit(1782539408.280:2370): avc: denied { write } for pid=13254 comm="syz-executor" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.633850][ T28] audit: type=1400 audit(1782539408.280:2371): avc: denied { write } for pid=13254 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.656030][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3391'. [ 485.665913][T15283] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 485.672459][ T28] audit: type=1400 audit(1782539408.280:2372): avc: denied { write } for pid=13254 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.708121][ T28] audit: type=1400 audit(1782539408.280:2373): avc: denied { write } for pid=13254 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.733770][ T28] audit: type=1400 audit(1782539408.280:2374): avc: denied { write } for pid=13254 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.771023][ T28] audit: type=1400 audit(1782539408.280:2375): avc: denied { write } for pid=13254 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.807969][T15294] loop6: detected capacity change from 0 to 1024 [ 485.814959][T15294] EXT4-fs: Ignoring removed orlov option [ 485.820894][T15294] ext4: Unknown parameter 'subj_user' [ 485.895585][T15299] loop6: detected capacity change from 0 to 1764 [ 485.918530][T15299] ISOFS: unable to read i-node block [ 485.936337][T15299] isofs_fill_super: get root inode failed [ 485.978080][T15299] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3396'. [ 485.996537][T15299] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15299 comm=syz.6.3396 [ 486.012750][T15302] lo speed is unknown, defaulting to 1000 [ 486.129464][T15312] loop6: detected capacity change from 0 to 1756 [ 486.147880][T15312] iso9660: Unknown parameter 'r82PhQq [ 486.860719][T15350] __dump_stack+0x1d/0x30 [ 486.860784][T15350] dump_stack_lvl+0x95/0xd0 [ 486.860851][T15350] dump_stack+0x15/0x1b [ 486.860879][T15350] should_fail_ex+0x25e/0x270 [ 486.860917][T15350] should_fail+0xb/0x20 [ 486.860961][T15350] should_fail_usercopy+0x1a/0x20 [ 486.861012][T15350] _copy_from_user+0x1c/0xb0 [ 486.861035][T15350] ___sys_sendmsg+0xc1/0x1e0 [ 486.861221][T15350] __x64_sys_sendmsg+0xd4/0x160 [ 486.861261][T15350] x64_sys_call+0x194c/0x3020 [ 486.861291][T15350] do_syscall_64+0x136/0x3c0 [ 486.861378][T15350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.861403][T15350] RIP: 0033:0x7f053ea0ce59 [ 486.861426][T15350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.861461][T15350] RSP: 002b:00007f053d467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.861489][T15350] RAX: ffffffffffffffda RBX: 00007f053ec85fa0 RCX: 00007f053ea0ce59 [ 486.861545][T15350] RDX: 0000000000004880 RSI: 0000200000000380 RDI: 0000000000000004 [ 486.861562][T15350] RBP: 00007f053d467090 R08: 0000000000000000 R09: 0000000000000000 [ 486.861601][T15350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.861619][T15350] R13: 00007f053ec86038 R14: 00007f053ec85fa0 R15: 00007fff537bf428 [ 486.861645][T15350] [ 487.063218][T15353] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3416: error while reading EA inode 32 err=-116 [ 487.076020][T15353] loop4: lost filesystem error report for type 5 error -117 [ 487.076742][T15353] EXT4-fs (loop4): 1 orphan inode deleted [ 487.084562][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 487.084604][ C0] EXT4-fs (loop4): initial error at time 1782539409: ext4_xattr_inode_iget:446 [ 487.084632][ C0] EXT4-fs (loop4): last error at time 1782539409: ext4_xattr_inode_iget:446 [ 487.115431][T15353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.129870][T15353] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.3416: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 487.151370][T15353] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.3416: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 487.173379][T15353] netlink: 'syz.4.3416': attribute type 21 has an invalid length. [ 487.181752][T15353] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3416'. [ 487.203634][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.236292][T15358] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3417'. [ 487.319215][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3421'. [ 487.400802][T15373] EXT4-fs: Ignoring removed bh option [ 487.407803][T15373] ext4: Unknown parameter 'func' [ 487.423047][T15376] EXT4-fs: Ignoring removed bh option [ 487.428762][T15376] EXT4-fs: test_dummy_encryption option not supported [ 487.541085][T15388] syzkaller0: entered promiscuous mode [ 487.546741][T15388] syzkaller0: entered allmulticast mode [ 487.811923][T15407] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 487.848700][ T294] Bluetooth: hci2: Frame reassembly failed (-84) [ 487.860952][T15407] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.3435: bad orphan inode 13 [ 487.889469][T15409] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 487.902378][T15407] loop7: lost filesystem error report for type 5 error -117 [ 487.906741][T15409] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.914414][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 487.914469][ C0] EXT4-fs (loop7): last error at time 1782539410: ext4_orphan_get:1425 [ 487.940908][T15407] ext4_test_bit(bit=12, block=18) = 1 [ 487.946542][T15407] is_bad_inode(inode)=0 [ 487.950732][T15407] NEXT_ORPHAN(inode)=0 [ 487.954824][T15407] max_ino=32 [ 487.958071][T15407] i_nlink=1 [ 487.961562][T15407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 488.043644][T15417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 488.053465][T15417] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 488.062738][T15417] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 488.088757][T15417] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.3438: Failed to acquire dquot type 1 [ 488.100610][T15417] loop4: lost filesystem error report for type 5 error -117 [ 488.100853][T15417] EXT4-fs (loop4): Remounting filesystem read-only [ 488.108330][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 488.108355][ C1] EXT4-fs (loop4): initial error at time 1782539410: ext4_acquire_dquot:7041 [ 488.108386][ C1] EXT4-fs (loop4): last error at time 1782539410: ext4_acquire_dquot:7041 [ 488.139938][T15417] EXT4-fs (loop4): 1 truncate cleaned up [ 488.145254][T15407] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 488.148287][T15417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.154766][T15407] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0008-000000000000. [ 488.174801][T15406] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 488.184952][T15406] EXT4-fs warning (device loop7): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop7. [ 488.207469][T13254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 488.226887][T13213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.275092][T15428] EXT4-fs: Ignoring removed bh option [ 488.280586][T15428] ext4: Unknown parameter 'func' [ 488.360334][T15438] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 488.368318][ T3547] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 488.372965][ T42] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 488.377660][ T3547] Bluetooth: hci1: command 0x1003 tx timeout [ 489.322784][T15475] EXT4-fs: Ignoring removed bh option [ 489.332277][T15475] ext4: Unknown parameter 'func' [ 489.341110][T15476] xt_hashlimit: size too large, truncated to 1048576 [ 489.496367][T15488] ext4: Unknown parameter 'fowner>00000000000000000000' [ 489.600805][ T4850] Bluetooth: hci0: Frame reassembly failed (-84) [ 489.636354][T15492] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 489.680453][T15492] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.787007][T15506] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 489.796413][T15507] vlan2: entered allmulticast mode [ 489.797977][T15506] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 489.801720][T15507] bridge1: entered allmulticast mode [ 489.810833][T15506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 489.830086][T15507] bridge1: port 1(erspan0) entered blocking state [ 489.836588][T15507] bridge1: port 1(erspan0) entered disabled state [ 489.843306][T15507] erspan0: entered allmulticast mode [ 489.850238][T15507] erspan0: entered promiscuous mode [ 489.856142][T15507] bridge1: port 1(erspan0) entered blocking state [ 489.862670][T15507] bridge1: port 1(erspan0) entered forwarding state [ 489.889745][T15507] lo speed is unknown, defaulting to 1000 [ 489.896142][T13595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.927470][ T294] Bluetooth: hci1: Frame reassembly failed (-84) [ 490.059768][T15518] EXT4-fs: Ignoring removed bh option [ 490.075365][T15518] ext4: Unknown parameter 'func' [ 490.102731][T15318] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 490.108915][T15412] Bluetooth: hci2: command 0x1003 tx timeout [ 490.416748][T15537] vfat: Unknown parameter '' [ 490.691824][T15547] set_capacity_and_notify: 20 callbacks suppressed [ 490.691891][T15547] loop4: detected capacity change from 0 to 1764 [ 490.694976][T13842] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 490.777448][T15549] loop2: detected capacity change from 0 to 4096 [ 490.805255][T15553] __nla_validate_parse: 4 callbacks suppressed [ 490.805323][T15553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3478'. [ 490.837553][T15549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.857711][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 490.857729][ T28] audit: type=1400 audit(1782539669.226:2382): avc: denied { write } for pid=15548 comm="syz.2.3476" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.899926][ T28] audit: type=1400 audit(1782539669.263:2383): avc: denied { write } for pid=15548 comm="syz.2.3476" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.905443][T15556] loop4: detected capacity change from 0 to 512 [ 490.983025][T15556] EXT4-fs: Ignoring removed bh option [ 491.015782][T15556] ext4: Unknown parameter 'func' [ 491.102766][ T28] audit: type=1400 audit(1782539669.456:2384): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.139870][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.153139][ T28] audit: type=1400 audit(1782539669.484:2385): avc: denied { write } for pid=13842 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.171991][T15560] syzkaller0: entered promiscuous mode [ 491.192170][T15560] syzkaller0: entered allmulticast mode [ 491.234626][ T28] audit: type=1400 audit(1782539669.484:2386): avc: denied { write } for pid=13842 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.277215][ T28] audit: type=1400 audit(1782539669.484:2387): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.306386][ T28] audit: type=1400 audit(1782539669.484:2388): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.345682][ T28] audit: type=1400 audit(1782539669.484:2389): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.367821][ T28] audit: type=1400 audit(1782539669.484:2390): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.402874][ T28] audit: type=1400 audit(1782539669.484:2391): avc: denied { write } for pid=13842 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.623406][T15583] netlink: 'syz.7.3487': attribute type 21 has an invalid length. [ 491.631425][T15583] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.640176][T15583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.647507][T15583] IPv6: NLM_F_CREATE should be set when creating new route [ 491.654850][T15583] IPv6: NLM_F_CREATE should be set when creating new route [ 491.662209][T15583] IPv6: NLM_F_CREATE should be set when creating new route [ 491.670196][T15583] netlink: 'syz.7.3487': attribute type 21 has an invalid length. [ 491.678699][T15583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.727273][T15583] vlan3: entered promiscuous mode [ 491.732830][T15583] bridge0: entered promiscuous mode [ 491.748561][T15318] Bluetooth: hci0: command 0x1003 tx timeout [ 491.754914][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 491.770223][ T4850] Bluetooth: hci2: Frame reassembly failed (-84) [ 491.776736][T15593] loop4: detected capacity change from 0 to 128 [ 491.799276][T15593] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 491.817979][T15593] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.832109][T15601] loop7: detected capacity change from 0 to 1024 [ 491.839006][T15601] EXT4-fs: Ignoring removed i_version option [ 491.845085][T15601] EXT4-fs: Ignoring removed bh option [ 491.863408][T15601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.951885][T13254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.004160][T15607] loop7: detected capacity change from 0 to 512 [ 492.011114][T15607] EXT4-fs: Ignoring removed bh option [ 492.016661][T15607] ext4: Unknown parameter 'func' [ 492.176884][ T3547] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 492.181576][T15318] Bluetooth: hci1: command 0x1003 tx timeout [ 492.216226][T15619] random: crng reseeded on system resumption [ 492.226534][T15619] Unrecognized hibernate image header format! [ 492.232669][T15619] PM: hibernation: Image mismatch: architecture specific data [ 492.319347][T15629] ================================================================== [ 492.327502][T15629] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 492.335382][T15629] [ 492.337745][T15629] write to 0xffff888103905f28 of 8 bytes by task 15628 on cpu 0: [ 492.345494][T15629] mas_wr_store_entry+0x33c0/0x5a90 [ 492.350737][T15629] mas_store_prealloc+0x421/0x670 [ 492.355805][T15629] commit_merge+0x69f/0x720 [ 492.360352][T15629] vma_expand+0x2ce/0x430 [ 492.364743][T15629] vma_merge_new_range+0x295/0x310 [ 492.369908][T15629] mmap_region+0x109c/0x20c0 [ 492.374567][T15629] do_mmap+0x970/0xbc0 [ 492.379030][T15629] vm_mmap_pgoff+0x183/0x2d0 [ 492.383672][T15629] ksys_mmap_pgoff+0xc1/0x310 [ 492.388400][T15629] x64_sys_call+0x14df/0x3020 [ 492.393116][T15629] do_syscall_64+0x136/0x3c0 [ 492.397753][T15629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.403683][T15629] [ 492.406035][T15629] read to 0xffff888103905f28 of 8 bytes by task 15629 on cpu 1: [ 492.413690][T15629] mtree_range_walk+0x210/0x480 [ 492.418579][T15629] mas_walk+0x1ac/0x340 [ 492.422777][T15629] lock_vma_under_rcu+0xc9/0x210 [ 492.427738][T15629] do_user_addr_fault+0x237/0x1060 [ 492.432863][T15629] exc_page_fault+0x62/0xa0 [ 492.437381][T15629] asm_exc_page_fault+0x26/0x30 [ 492.442244][T15629] [ 492.444570][T15629] value changed: 0x00007fd98c766fff -> 0x00007fd98c745fff [ 492.451778][T15629] [ 492.454120][T15629] Reported by Kernel Concurrency Sanitizer on: [ 492.460288][T15629] CPU: 1 UID: 0 PID: 15629 Comm: syz.7.3501 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 492.471234][T15629] Tainted: [W]=WARN [ 492.475133][T15629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.485210][T15629] ================================================================== [ 492.504822][T11231] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 494.000614][ T3547] Bluetooth: hci2: command 0x1003 tx timeout [ 494.001037][ T42] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 494.569387][T13213] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.