last executing test programs: 22m26.94246371s ago: executing program 32 (id=789): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffdeb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x10, 0x7f}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='msdos\x00', 0x18, &(0x7f0000000100)='debug') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000000206010800000000000000000a0000000c00078005001500020000000500010006000000050005000a00000005000400010000000900020073797a320000000010000300686173683a69702c6d6163000f54cffc867b6fd6717596b778920d2aba512a6db349c9cd7c6c27032c986e5cce39498c9a8971b99af344d86adbab4d85126844447030e6474f8665026c91d0fb590cdc62c2404f199cd038496a58bee804eefc0341ae1e6c8700e4502edc571216e73e6d6baf6ca046dc7e7ab2ef184d19f6567cca85a3d1ec27548cbda420160ff3bc967883f4745e51ae8a"], 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa1f0800450000200000000200119078000000080000000000004e2000bf8f96ac0b0001ec7a0f3d4edc760c4c9f8ba1e10a50c44e01be1e361d854b00ad476df9c22fa4c317a9cbab0ee070779a0cf03d872a36d0e43f07a277b70ae712898d8434389f6ccb036a37fdaea3c2ae2b8530f9a109cebcd48d433b8a38bc2668c9fa729118da83579d15809336d119b27d8fc53870274a1729aa98697696c815ef003ffe12a40912ab"], 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000040601020000e9ffffffe7000a0000050500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) read$char_usb(r6, &(0x7f0000000080)=""/245, 0xf5) 21m49.444269144s ago: executing program 33 (id=1117): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x4000040) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) 21m45.976362987s ago: executing program 34 (id=1134): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x20000010) 16m47.497657633s ago: executing program 35 (id=2129): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) recvmmsg$unix(r6, &(0x7f0000000100), 0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sched_setscheduler(r3, 0x1, &(0x7f0000000340)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a79000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000414000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) syz_clone3(&(0x7f00000009c0)={0x90000000, &(0x7f0000000180), &(0x7f0000000380), &(0x7f00000003c0), {0x35}, &(0x7f00000007c0)=""/143, 0x8f, &(0x7f0000000880)=""/221, &(0x7f0000000980)=[r3], 0x1, {r6}}, 0x58) 15m49.429993277s ago: executing program 36 (id=2273): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) recvmmsg$unix(r6, &(0x7f0000000100), 0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sched_setscheduler(r3, 0x1, &(0x7f0000000340)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a79000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000414000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$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") syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) syz_clone3(&(0x7f00000009c0)={0x90000000, &(0x7f0000000180), &(0x7f0000000380), &(0x7f00000003c0), {0x35}, &(0x7f00000007c0)=""/143, 0x8f, &(0x7f0000000880)=""/221, &(0x7f0000000980)=[r3], 0x1, {r6}}, 0x58) 9m47.215816801s ago: executing program 9 (id=3730): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000940)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000080}, 0x20000001) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m46.399251218s ago: executing program 9 (id=3733): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200"], 0xfdef) 9m46.205513992s ago: executing program 9 (id=3737): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 9m45.941351657s ago: executing program 9 (id=3742): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 9m45.33297613s ago: executing program 9 (id=3745): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x2b, 0xa, 0x80000000, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[], 0x0, 0x26}, 0x28) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89e1, &(0x7f00000005c0)={'bridge_slave_1\x00'}) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r3, r0, 0x4, r3}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4da1a}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91101f00000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x34, 0x0, 0x0, 0x100000000200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f0f3000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d35f3ff000000006507000002080000070700004c0000003e75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2726f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfda047bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded527a0bfe5504eb355cb0000000000000073be27152effbed9ed6a4e8f9c55a2ff11245f2c20856d491b80d749cf8917dbe01cc6c7b747923621bb16efb2025d19a1a27b0348135e32e442da8f26e05283ece8ad92c77f8141c7a2037380f28c9c638ee0151f4620b9b64185db0321a4e809a5438cdef28f7adac1735a50006fbae20d0930b55f0081db6fa0d14024cefa1611ef384de38787324bfb9f79a1e164c8fe80a2d9e4199960"], &(0x7f0000000100)='GPL\x00'}, 0x27) 9m45.043767176s ago: executing program 9 (id=3752): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x400}, 0x4408, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2390024, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') listen(r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) kexec_load(0x0, 0x0, &(0x7f00000002c0), 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000000)=0xa, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r3, r5, 0x11, 0x0, r3}, 0x11) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x8, 0x8, 0x6, 0x3}) 9m44.995373348s ago: executing program 37 (id=3752): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x400}, 0x4408, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2390024, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') listen(r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) kexec_load(0x0, 0x0, &(0x7f00000002c0), 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000000)=0xa, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r3, r5, 0x11, 0x0, r3}, 0x11) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x8, 0x8, 0x6, 0x3}) 4m3.31895709s ago: executing program 8 (id=6774): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000100)=0x7fff, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) writev(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='b 122'], 0xa) setreuid(0x0, 0xee01) r6 = inotify_init() close_range(r6, 0xffffffffffffffff, 0x0) 4m3.160623633s ago: executing program 8 (id=6776): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 4m1.836083121s ago: executing program 8 (id=6788): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r2, @ANYBLOB="04002bbd7000fddbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000a2008f00ff010000000000000c009000ffffffff000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000c008f002c010000000000000c0090005800000000000000080001007063690011000200303030303a30303a31302e300000000008008e00030000000c008f0024050000000000000c0090000000000000000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000c008f0003000000000000000c0090000024000000000000080001007063690011000200303030303a30303a31ac84300000000008008e00000000000c008f0001000000000000000c009000a4010000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0003000000000000000c0090000000000000000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000c008f0032000000000000000c0090000300000000000000"], 0x1c0}, 0x1, 0x0, 0x0, 0x4040040}, 0x4004001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xc, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff000000001fa100000000000007010000f8ffffffb702000008000000b703000000000028850000005e00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$sock(r0, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0xf0ff, {0xf0, @empty, 'lo\x00'}}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="d8000000180081064e81f782db4cb90402c051cc2a007c0541b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6f930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d956670700dcdf63951f215ce3bb9ad809d5e181ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392077ff9000000008af26c8b7b55f4d2a6823a45f28fcb1d54386230bb56b1d93553d851a3ddd79775", 0xd8}], 0x1}, 0x0) write$selinux_load(r9, &(0x7f0000000000)=ANY=[], 0x1103f) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) socket$can_j1939(0x1d, 0x2, 0x7) 4m0.276081963s ago: executing program 8 (id=6794): socket$netlink(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x21) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x721, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a00000004000000040000000200000034050000", @ANYRES32=0x1, @ANYBLOB="00000011b4f40600000000000000000059ae8f7d9dc0b863a22089d8e11da100000b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@nolazytime}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fa, &(0x7f0000001000)="$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") getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = accept(r5, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80) fallocate(r6, 0x2, 0x4, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x8000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x1a, r7, 0x0, &(0x7f0000000040)) 3m58.336395102s ago: executing program 8 (id=6803): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noinit_itable}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000300)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff69, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="580000001000010426bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000300012800e0001006970366772657461700000001c0002800800140016d7000006001800ff0f000008000d000201000008000500", @ANYRES32=r2, @ANYBLOB="ef65b8d72f7fbb7c914cd661979959260c7c4cdec7584164c8547ec16b05f80105de38071df0c44ee0b0973f73a731318267359c6cafba048de73b4b3bc15bd2e89d0eec85df1b91fe0b4dfe2661499b15465ba731ac8fef3da793b892bb8453ae2ef3e4af8105301a22685d0152ee2cf05a8bf731d2be26f4db80ff04ec5b1210c1cbf8262f88f91ce873a58ddd12e95d4fa17fadeb26a358179d6dd2cfc718e64f4f7870d5dfe5c9d56aec9daa3d5196b5b22ee5a997a18e0636ac9a97bfb31d3b9e2cae4ed607d4cc816d8fa78284b17022ba4b0c0c345cbc980fcdbf343b2f0e07e0d61614d0609797"], 0x58}, 0x1, 0x0, 0x0, 0xc4}, 0x24040810) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100f0ff00004300028005000100060000000c00030100008000000000000c0002"], 0xc0}}, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x8000000000000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x8094) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0xa200, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x5c}]}}, 0x0, 0x4e, 0x0, 0x0, 0x4}, 0x28) 3m56.919667642s ago: executing program 8 (id=6813): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x88064, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0xe1, 0x7f, 0x10001, 0x3, @loopback, @private2, 0x700, 0xc1, 0x4, 0x3}}) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r6, r7, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x40000000, 0x0, 0x3}}, 0x30) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000008000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000012c0)={r8, r9, 0x4, r6}, 0x10) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x16, &(0x7f0000000200), 0x4) recvmsg$kcm(r5, 0x0, 0x40012100) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1700d1bd", 0x33fe0}], 0x1}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r13 = gettid() rt_sigqueueinfo(r13, 0x20, &(0x7f00000002c0)={0xd, 0x4}) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) 3m56.811791394s ago: executing program 38 (id=6813): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x88064, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0xe1, 0x7f, 0x10001, 0x3, @loopback, @private2, 0x700, 0xc1, 0x4, 0x3}}) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r6, r7, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x40000000, 0x0, 0x3}}, 0x30) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000008000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000012c0)={r8, r9, 0x4, r6}, 0x10) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x16, &(0x7f0000000200), 0x4) recvmsg$kcm(r5, 0x0, 0x40012100) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1700d1bd", 0x33fe0}], 0x1}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r13 = gettid() rt_sigqueueinfo(r13, 0x20, &(0x7f00000002c0)={0xd, 0x4}) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) 3m48.629142443s ago: executing program 3 (id=6876): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 3m47.711949691s ago: executing program 3 (id=6886): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000005000b00"], &(0x7f0000000300)='GPL\x00', 0x6, 0x62, &(0x7f0000000540)=""/98, 0x40f00, 0x8, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xf, 0x1}, 0x10, 0x2d2b0, 0xffffffffffffffff, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) fsopen(0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00L\x00I\xa2l') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) read(r4, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000080)=0x4, 0x4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 3m45.876763069s ago: executing program 3 (id=6893): epoll_create(0x800) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x802, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000001940)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC], 0xfe, 0x122a, &(0x7f00000005c0)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x8, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x420, &(0x7f0000000800)={[{@usrjquota}, {@nodelalloc}, {@test_dummy_encryption_v1}, {@data_journal}]}, 0x2, 0x7b4, &(0x7f0000001740)="$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") r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x2382, &(0x7f0000000040)={0x0, 0xaebb, 0x40000, 0x20000a, 0x1aa, 0x0, r2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCGETA(r3, 0x5405, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000a4651c50e2031f7e032a0e26dda6dd55db017f27a81ef81fbc408f12929918d69bef49b3e67bd5c7d2f4c6220b8c437f8fa5ba79b2ff91d597e61e695fe96b7615fe2b20325d201a2c4b365f71aa45fab8002c893cfdcb11c6eba7746f5ceff5a55f3d59d5e4eede34c48b10a3e771af9cbefccb0fa6292909f2a8171da86cc522d49cabe19b49043df5c6d1e6ceb32c7bdd75b31e7120222072d24c45f5b2871f7c6f6e39610c4cfb22b07fe0eb71703e41c8b89216951d3a1b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = pidfd_getfd(r0, r1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f00)=@bpf_ext={0x1c, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}, [@exit, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x4e, &(0x7f0000000300)=""/78, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x3, 0xd6}, 0x10, 0xff52, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[r0], &(0x7f0000000580)=[{0x1, 0x5, 0xc}], 0x10, 0x6}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002080)={'syztnl2\x00', &(0x7f0000002000)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x0, 0x6, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x40, 0x80, 0x5, 0xc2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000021c0)={'ip_vti0\x00', &(0x7f00000020c0)={'ip_vti0\x00', 0x0, 0x10, 0x707, 0x5, 0x8000, {{0x32, 0x4, 0x1, 0x25, 0xc8, 0x68, 0x0, 0x4, 0x2f, 0x0, @empty, @local, {[@cipso={0x86, 0x35, 0x1, [{0x0, 0xc, "44aeccd16d1742fbfec0"}, {0x2, 0x7, "3032c275f3"}, {0x6, 0x3, "ae"}, {0x2, 0x7, "47e0122655"}, {0x5, 0x12, "0583b471d0ebbce82dbf6f0c78803659"}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x62, 0x3, 0x5, [{@multicast2, 0x2}, {@remote, 0x7}, {@rand_addr=0x64010100, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0x6}]}, @ra={0x94, 0x4}, @noop, @generic={0x86, 0x5, "d2150e"}, @ssrr={0x89, 0x17, 0x2e, [@multicast1, @loopback, @local, @private=0xa010100, @private=0xa010101]}, @lsrr={0x83, 0xf, 0x1e, [@multicast2, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x56, 0x1, 0x0, [{@local, 0x4}]}, @timestamp_addr={0x44, 0x14, 0xa0, 0x1, 0x9, [{@local, 0x9}, {@local, 0x800}]}]}}}}}) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f00000022c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x70, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x70}}, 0x4040840) 3m45.608530395s ago: executing program 3 (id=6898): socket$netlink(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x21) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x721, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a00000004000000040000000200000034050000", @ANYRES32=0x1, @ANYBLOB="00000011b4f40600000000000000000059ae8f7d9dc0b863a22089d8e11da100000b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@nolazytime}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fa, &(0x7f0000001000)="$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") getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = accept(r5, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80) fallocate(r6, 0x2, 0x4, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x8000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) 3m44.86241806s ago: executing program 3 (id=6904): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 3m42.611916426s ago: executing program 3 (id=6916): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x4000040) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x1) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) 3m42.591857807s ago: executing program 39 (id=6916): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x4000040) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x1) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) 3m42.176845055s ago: executing program 4 (id=6925): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x4040040}, 0x4004001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xc, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff000000001fa100000000000007010000f8ffffffb702000008000000b703000000000028850000005e00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$sock(r0, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0xf0ff, {0xf0, @empty, 'lo\x00'}}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) 3m41.695693755s ago: executing program 4 (id=6929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 3m40.777496094s ago: executing program 4 (id=6933): getresuid(&(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xd, 0x0, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x44004) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x4, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/119, 0x77}], 0x1, 0x4f, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x17, &(0x7f0000000240)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@lx, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) preadv(r0, &(0x7f0000002d00)=[{&(0x7f0000001500)=""/152, 0x98}], 0x1, 0x101, 0x9) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x10130}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x7}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040010}, 0x24004004) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000200)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}]}) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000200)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010184, 0x10000}, {@private=0xa010102}, {@local}, {@remote, 0xfffffffe}, {@rand_addr=0x64010100}, {@dev}, {@private=0xfffffffc}]}]}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000206010200003be4000000000000000805000100060000002c000780080017400000001618000000000000000000000000bb050007006b00"/72], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 3m38.634404088s ago: executing program 4 (id=6942): socket$netlink(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x21) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x721, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a00000004000000040000000200000034050000", @ANYRES32=0x1, @ANYBLOB="00000011b4f40600000000000000000059ae8f7d9dc0b863a22089d8e11da100000b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@nolazytime}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fa, &(0x7f0000001000)="$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") getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = accept(r5, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80) fallocate(r6, 0x2, 0x4, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x8000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) 3m37.407671233s ago: executing program 4 (id=6943): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000005000b00"], &(0x7f0000000300)='GPL\x00', 0x6, 0x62, &(0x7f0000000540)=""/98, 0x40f00, 0x8, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xf, 0x1}, 0x10, 0x2d2b0, 0xffffffffffffffff, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) fsopen(0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00L\x00I\xa2l') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) read(r4, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 3m36.281333007s ago: executing program 4 (id=6946): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) 3m36.221719518s ago: executing program 40 (id=6946): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) 2m44.048640183s ago: executing program 1 (id=7268): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 2m43.298718218s ago: executing program 1 (id=7272): socket$netlink(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x21) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x721, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a00000004000000040000000200000034050000", @ANYRES32=0x1, @ANYBLOB="00000011b4f40600000000000000000059ae8f7d9dc0b863a22089d8e11da100000b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x4, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x8000) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x1a, r5, 0x0, &(0x7f0000000040)) 2m43.115666252s ago: executing program 1 (id=7275): epoll_create(0x800) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x802, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000001940)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC], 0xfe, 0x122a, &(0x7f00000005c0)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x8, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x420, &(0x7f0000000800)={[{@usrjquota}, {@nodelalloc}, {@test_dummy_encryption_v1}, {@data_journal}]}, 0x2, 0x7b4, &(0x7f0000001740)="$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") r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x2382, &(0x7f0000000040)={0x0, 0xaebb, 0x40000, 0x20000a, 0x1aa, 0x0, r2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000a4651c50e2031f7e032a0e26dda6dd55db017f27a81ef81fbc408f12929918d69bef49b3e67bd5c7d2f4c6220b8c437f8fa5ba79b2ff91d597e61e695fe96b7615fe2b20325d201a2c4b365f71aa45fab8002c893cfdcb11c6eba7746f5ceff5a55f3d59d5e4eede34c48b10a3e771af9cbefccb0fa6292909f2a8171da86cc522d49cabe19b49043df5c6d1e6ceb32c7bdd75b31e7120222072d24c45f5b2871f7c6f6e39610c4cfb22b07fe0eb71703e41c8b89216951d3a1b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = pidfd_getfd(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002080)={'syztnl2\x00', &(0x7f0000002000)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x0, 0x6, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x40, 0x80, 0x5, 0xc2}}) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f00000022c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x70, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_LINK={0x8}]}, 0x70}}, 0x4040840) set_mempolicy(0x6005, 0x0, 0x4) 2m42.090674063s ago: executing program 1 (id=7278): socket$netlink(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x21) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x721, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a00000004000000040000000200000034050000", @ANYRES32=0x1, @ANYBLOB="00000011b4f40600000000000000000059ae8f7d9dc0b863a22089d8e11da100000b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@nolazytime}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fa, &(0x7f0000001000)="$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") getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) accept(r5, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x8000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x1a, r6, 0x0, &(0x7f0000000040)) 2m38.936720048s ago: executing program 1 (id=7285): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4db}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 2m37.253240632s ago: executing program 1 (id=7291): syz_emit_ethernet(0x86, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x37d}, 0x400, 0x0, 0x7, 0x4, 0x4, 0x8001, 0x8012}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800014000000014080002400000000108000340000000120900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @union]}}, 0x0, 0x3e}, 0x28) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m37.252922932s ago: executing program 41 (id=7291): syz_emit_ethernet(0x86, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x37d}, 0x400, 0x0, 0x7, 0x4, 0x4, 0x8001, 0x8012}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800014000000014080002400000000108000340000000120900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @union]}}, 0x0, 0x3e}, 0x28) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.794785262s ago: executing program 0 (id=9466): file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000) 2.756972472s ago: executing program 0 (id=9468): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x550, &(0x7f0000000500)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x82) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FITRIM(r0, 0xc0185879, 0x0) 2.354538831s ago: executing program 2 (id=9482): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2000, 0x0, 0x0, 0x0, 0xd2, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1ff}]}) socket(0x10, 0x80002, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 2.330507951s ago: executing program 0 (id=9484): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x601, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2003}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4400c04c}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.489002439s ago: executing program 2 (id=9496): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b00"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @in=@broadcast, 0x4e20, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x10401, 0x9141, 0x800, 0x0, 0xf42, 0x5, 0x4}, {0x0, 0x0, 0x0, 0x1000}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x100350b, 0x5, 0x0, 0x4, 0x0, 0x8, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c) 1.383819781s ago: executing program 2 (id=9499): r0 = timerfd_create(0x9, 0x0) unshare(0x20000400) timerfd_settime(r0, 0x1, &(0x7f0000000940)={{0x0, 0x989680}, {0x77359400}}, 0x0) 1.347528662s ago: executing program 0 (id=9500): r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x86, 0x1c9}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x80038c3, 0xc549, 0x1, 0x0, 0x0) 1.270784223s ago: executing program 2 (id=9501): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f0000001740)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESHEX, @ANYRESHEX=r0, @ANYRES16, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC=r0, @ANYRES16=r1, @ANYBLOB="db58a3e5f75188ab31bfd614c2df827cca3f4df60eaa4742d56aaf03459f1d7121fbadc79809dbcfabac986ca85ab32589dffa5d2109bb1039c1fba32231c9cd55cd0e000622c5294a06ef144f420f4864c60f684f60478a2b7132920137d1a8273d4b"], 0xb, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x191f4c2, 0x0, 0x42, 0x0, &(0x7f0000000140)) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0xd02) 1.226071984s ago: executing program 2 (id=9504): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 1.154691136s ago: executing program 0 (id=9505): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) 1.154498706s ago: executing program 7 (id=9506): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2000, 0x0, 0x0, 0x0, 0xd2, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1ff}]}) socket(0x10, 0x80002, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1.154318256s ago: executing program 6 (id=9507): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 1.150669176s ago: executing program 5 (id=9508): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$packet(0x11, 0x2, 0x300) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002d80)={0xe, {"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", 0x1000}}, 0x1006) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) 1.115144926s ago: executing program 2 (id=9509): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB, @ANYRES32=r1], 0x38}}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x84040, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) open(0x0, 0x200, 0xa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x7, &(0x7f0000001040)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0xc0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x2000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 1.066878598s ago: executing program 6 (id=9510): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x601, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2003}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4400c04c}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.066722098s ago: executing program 5 (id=9511): syz_open_dev$vcsu(0x0, 0x5, 0x30080) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 1.049079988s ago: executing program 5 (id=9512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 1.011462259s ago: executing program 5 (id=9513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 843.948922ms ago: executing program 5 (id=9514): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xfe5, &(0x7f0000001840)=""/4069, 0x0, 0x2}, 0x94) 773.204994ms ago: executing program 5 (id=9515): socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf255c00000008000300", @ANYRES32=r2, @ANYBLOB="08006b0078ec34004e122e98a59e2bee5687ea793fd9a322730c340ed651522bc455f8794058356f88e68bdf6883d818ccb8fd2057cd07f7538cfc1c84e1ebfa2aac1b105de8330c84049211e440a22a19f14f6c23aa62edcdc05b4862b301756bce706f4071a3fbfd115dc3ed8ebefa326b1d505c134f364a912cbe4e0805b55dc083991d7a5a828bf243f93770dc082ad8b6c33e4849d3b40a8f6476b8ab6f5639948100d16ae13b2093a6a47e6c0a4cdc06fb5962d4b82c8d9aaf9123b05693d3adce0af74dcd35b3962feba0e7c87c38"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008804) 144.592316ms ago: executing program 7 (id=9518): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, 0x0, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @void}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 127.358107ms ago: executing program 0 (id=9519): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) 102.420077ms ago: executing program 6 (id=9520): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f0000000200)=r4, 0x4) sendmsg$inet(r0, 0x0, 0x3406c096) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, 0x0, {0x1, 0xfff3}, {0xffff, 0xffff}, {0xffff, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc00c055}, 0x0) 101.958567ms ago: executing program 7 (id=9521): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x10012, r0, 0xbbf28000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) 42.964479ms ago: executing program 6 (id=9522): syz_open_dev$vcsu(0x0, 0x5, 0x30080) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 42.779748ms ago: executing program 7 (id=9523): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000100)="08001efbb0", 0x5}, {&(0x7f0000000140)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) syz_open_procfs(0x0, 0x0) 42.617788ms ago: executing program 6 (id=9524): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x300, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 0s ago: executing program 7 (id=9525): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xfe5, &(0x7f0000001840)=""/4069, 0x0, 0x2}, 0x94) kernel console output (not intermixed with test programs): 9][T32420] loop7: detected capacity change from 0 to 1024 [ 1350.673630][ T4651] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.698512][T32420] EXT4-fs: Ignoring removed bh option [ 1350.713989][T21954] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.730758][T32426] loop2: detected capacity change from 0 to 512 [ 1350.738764][T21954] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.779380][T32426] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1350.793595][ T28] audit: type=1400 audit(1782741666.128:4810): avc: denied { write } for pid=32419 comm="syz.7.7738" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1350.820892][T21954] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.841884][T21954] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.989783][T32441] __nla_validate_parse: 3 callbacks suppressed [ 1350.989814][T32441] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.7744'. [ 1351.025481][T32441] net_ratelimit: 16 callbacks suppressed [ 1351.025512][T32441] netlink: zone id is out of range [ 1351.048915][T32441] netlink: zone id is out of range [ 1351.060985][T32446] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7744'. [ 1351.086937][T32441] netlink: zone id is out of range [ 1351.092145][T32441] netlink: zone id is out of range [ 1351.097291][T32441] netlink: zone id is out of range [ 1351.102423][T32441] netlink: zone id is out of range [ 1351.107806][T32441] netlink: zone id is out of range [ 1351.112942][T32441] netlink: zone id is out of range [ 1351.118121][T32441] netlink: zone id is out of range [ 1351.123329][T32441] netlink: zone id is out of range [ 1351.129776][T32446] netlink: 67 bytes leftover after parsing attributes in process `syz.7.7744'. [ 1351.219136][T32453] syz.7.7749 (32453): /proc/32452/oom_adj is deprecated, please use /proc/32452/oom_score_adj instead. [ 1351.231338][ T28] audit: type=1400 audit(1782741666.548:4811): avc: denied { ioctl } for pid=32452 comm="syz.7.7749" path="socket:[114475]" dev="sockfs" ino=114475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1351.278718][T32453] netlink: 'syz.7.7749': attribute type 33 has an invalid length. [ 1351.279137][T32455] FAULT_INJECTION: forcing a failure. [ 1351.279137][T32455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.291010][T32453] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.7749'. [ 1351.317255][T32455] CPU: 1 UID: 0 PID: 32455 Comm: syz.2.7750 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1351.317298][T32455] Tainted: [W]=WARN [ 1351.317307][T32455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1351.317323][T32455] Call Trace: [ 1351.317332][T32455] [ 1351.317343][T32455] __dump_stack+0x1d/0x30 [ 1351.317375][T32455] dump_stack_lvl+0x95/0xd0 [ 1351.317470][T32455] dump_stack+0x15/0x1b [ 1351.317552][T32455] should_fail_ex+0x25e/0x270 [ 1351.317587][T32455] should_fail+0xb/0x20 [ 1351.317618][T32455] should_fail_usercopy+0x1a/0x20 [ 1351.317659][T32455] _copy_to_user+0x20/0xa0 [ 1351.317747][T32455] simple_read_from_buffer+0xb5/0x130 [ 1351.317773][T32455] proc_fail_nth_read+0x10e/0x150 [ 1351.317795][T32455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1351.317820][T32455] vfs_read+0x18e/0x7c0 [ 1351.317871][T32455] ? __rcu_read_unlock+0x4e/0x70 [ 1351.317904][T32455] ? __fget_files+0x184/0x1c0 [ 1351.317930][T32455] ? mutex_lock+0x57/0x90 [ 1351.318003][T32455] ksys_read+0xdc/0x1a0 [ 1351.318029][T32455] __x64_sys_read+0x40/0x50 [ 1351.318107][T32455] x64_sys_call+0x2886/0x3020 [ 1351.318147][T32455] do_syscall_64+0x136/0x3c0 [ 1351.318191][T32455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.318259][T32455] RIP: 0033:0x7f4e1c3ed68e [ 1351.318276][T32455] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1351.318296][T32455] RSP: 002b:00007f4e1ae86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1351.318320][T32455] RAX: ffffffffffffffda RBX: 00007f4e1ae876c0 RCX: 00007f4e1c3ed68e [ 1351.318334][T32455] RDX: 000000000000000f RSI: 00007f4e1ae870a0 RDI: 0000000000000003 [ 1351.318347][T32455] RBP: 00007f4e1ae87090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.318362][T32455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1351.318402][T32455] R13: 00007f4e1c6a6038 R14: 00007f4e1c6a5fa0 R15: 00007fff96b6ce08 [ 1351.318428][T32455] [ 1351.866154][T32474] loop5: detected capacity change from 0 to 512 [ 1351.879654][T32474] EXT4-fs: Ignoring removed orlov option [ 1351.890394][T32474] EXT4-fs: Ignoring removed mblk_io_submit option [ 1351.899613][T32468] loop2: detected capacity change from 0 to 1024 [ 1351.911258][T32468] EXT4-fs: Ignoring removed bh option [ 1351.914721][T32474] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.7757: corrupted in-inode xattr: e_value size too large [ 1351.935331][T32474] fserror_report: 9 callbacks suppressed [ 1351.935350][T32474] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1351.941571][T32474] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.7757: couldn't read orphan inode 15 (err -117) [ 1351.950800][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1351.950822][ C1] EXT4-fs (loop5): initial error at time 1782741667: ext4_iget_extra_inode:5180: inode 15 [ 1351.950864][ C1] EXT4-fs (loop5): last error at time 1782741667: ext4_iget_extra_inode:5180: inode 15 [ 1351.989504][ T28] audit: type=1400 audit(1782741667.318:4812): avc: denied { write } for pid=32467 comm="syz.2.7754" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1351.993532][T32474] loop5: lost filesystem error report for type 5 error -117 [ 1352.017084][ T28] audit: type=1400 audit(1782741667.348:4813): avc: denied { write } for pid=32473 comm="syz.5.7757" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1352.046229][ T28] audit: type=1400 audit(1782741667.368:4814): avc: denied { write } for pid=32473 comm="syz.5.7757" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1352.070188][ T28] audit: type=1400 audit(1782741667.368:4815): avc: denied { write } for pid=32473 comm="syz.5.7757" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1352.087155][T32474] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.7757: corrupted in-inode xattr: e_value size too large [ 1352.096514][ T28] audit: type=1400 audit(1782741667.418:4816): avc: denied { write } for pid=32473 comm="syz.5.7757" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1352.142590][T32483] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.7759'. [ 1352.154501][T32474] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.7757: corrupted in-inode xattr: e_value size too large [ 1352.191582][T32483] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7759'. [ 1352.227004][T32483] netlink: 67 bytes leftover after parsing attributes in process `syz.7.7759'. [ 1352.297295][T32474] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7757'. [ 1352.308129][T32474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7757'. [ 1352.324012][T32474] netlink: 31 bytes leftover after parsing attributes in process `syz.5.7757'. [ 1352.341166][T32474] netlink: 'syz.5.7757': attribute type 2 has an invalid length. [ 1352.561105][T32514] EXT4-fs: Ignoring removed bh option [ 1352.571606][T32513] set_capacity_and_notify: 1 callbacks suppressed [ 1352.571627][T32513] loop7: detected capacity change from 0 to 1024 [ 1352.635954][T32521] loop0: detected capacity change from 0 to 512 [ 1352.657521][T32513] EXT4-fs: Ignoring removed bh option [ 1352.752852][T32521] EXT4-fs: Ignoring removed nobh option [ 1352.791890][T32521] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1352.799738][T32521] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.7773: EA inode hash validation failed [ 1352.812361][T32521] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1352.825498][T32521] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.7773: corrupted inode contents [ 1352.837468][T32521] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1352.839333][T32521] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm syz.0.7773: mark_inode_dirty error [ 1352.859811][T32521] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1352.860060][T32521] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.7773: corrupted inode contents [ 1352.881079][T32521] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1352.881326][T32521] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.7773: mark_inode_dirty error [ 1352.904904][ C0] EXT4-fs (loop0): error count since last fsck: 3 [ 1352.905166][ C0] EXT4-fs (loop0): initial error at time 1782741668: ext4_do_update_inode:5742: inode 15 [ 1352.905704][ C0] EXT4-fs (loop0): last error at time 1782741668: ext4_do_update_inode:5742: inode 15 [ 1352.956979][T32521] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1352.960505][T32521] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.7773: mark inode dirty (error -117) [ 1352.982751][T32521] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1352.982925][T32521] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 1353.001222][T32521] EXT4-fs (loop0): 1 orphan inode deleted [ 1353.597873][T32544] netlink: 'syz.2.7782': attribute type 1 has an invalid length. [ 1353.678178][T32544] loop2: detected capacity change from 0 to 512 [ 1353.687762][T32547] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.782816][T32544] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1353.801146][T32549] loop0: detected capacity change from 0 to 4096 [ 1353.881794][T32549] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.7778: corrupted inode contents [ 1353.895504][T32554] loop7: detected capacity change from 0 to 512 [ 1353.899680][T32549] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1353.902191][T32549] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm syz.0.7778: mark_inode_dirty error [ 1353.905259][T32554] EXT4-fs: Ignoring removed orlov option [ 1353.911402][T32549] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1353.932043][T32554] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1353.951224][T32549] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.7778: corrupted inode contents [ 1353.963174][T32549] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1353.963346][T32549] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.7778: mark_inode_dirty error [ 1353.983749][T32549] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1353.984102][T32549] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.7778: corrupted inode contents [ 1354.030243][T32554] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1354.044649][T32547] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.076479][T32549] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.7778: mark_inode_dirty error [ 1354.088260][T32554] EXT4-fs (loop7): 1 truncate cleaned up [ 1354.215846][T32547] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.226920][T32549] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.7778: corrupted inode contents [ 1354.250988][T32549] EXT4-fs error (device loop0): ext4_truncate:4691: inode #15: comm syz.0.7778: mark_inode_dirty error [ 1354.274704][T32549] EXT4-fs error (device loop0): ext4_evict_inode:278: comm syz.0.7778: couldn't truncate inode 15 (err -117) [ 1354.583179][T32547] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.740289][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1354.740315][ T28] audit: type=1400 audit(1782741670.068:4824): avc: denied { write } for pid=32563 comm="syz.2.7787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1354.834060][ T30] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.876832][ T30] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.945126][ T4040] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.971815][T32573] loop6: detected capacity change from 0 to 512 [ 1354.980921][ T4040] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.047775][T32575] netlink: 'syz.7.7789': attribute type 1 has an invalid length. [ 1355.059157][T32573] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.7790: corrupted inode contents [ 1355.071360][T32575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1355.090780][T32573] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #16: comm syz.6.7790: mark_inode_dirty error [ 1355.102187][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1355.102221][ C1] EXT4-fs (loop6): initial error at time 1782741670: ext4_do_update_inode:5742: inode 16 [ 1355.102257][ C1] EXT4-fs (loop6): last error at time 1782741670: ext4_do_update_inode:5742: inode 16 [ 1355.141390][T32575] loop7: detected capacity change from 0 to 8192 [ 1355.155287][ T28] audit: type=1400 audit(1782741670.488:4825): avc: denied { remount } for pid=32574 comm="syz.7.7789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1355.230596][T32583] 9p: Bad value for 'rfdno' [ 1355.288630][T32573] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.7790: corrupted inode contents [ 1355.322535][ T28] audit: type=1400 audit(1782741670.628:4826): avc: denied { egress } for pid=21954 comm="kworker/u8:15" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1355.403283][T32575] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1355.430816][T32573] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.7790: mark_inode_dirty error [ 1355.568960][T32573] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.7790: corrupted inode contents [ 1355.591011][ T28] audit: type=1400 audit(1782741670.628:4827): avc: denied { sendto } for pid=21954 comm="kworker/u8:15" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1355.701197][ T28] audit: type=1400 audit(1782741670.748:4828): avc: denied { tracepoint } for pid=32584 comm="syz.5.7792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1355.736671][T32573] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1355.745592][T32573] loop6: lost filesystem error report for type 5 error -117 [ 1355.745770][T32573] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.7790: corrupted inode contents [ 1355.815729][T32591] loop5: detected capacity change from 0 to 1024 [ 1355.822837][T32591] EXT4-fs: Ignoring removed bh option [ 1355.831007][T32573] EXT4-fs error (device loop6): ext4_truncate:4691: inode #16: comm syz.6.7790: mark_inode_dirty error [ 1355.856053][T32573] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1356.026959][T32599] FAULT_INJECTION: forcing a failure. [ 1356.026959][T32599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.040242][T32599] CPU: 0 UID: 0 PID: 32599 Comm: syz.0.7797 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1356.040282][T32599] Tainted: [W]=WARN [ 1356.040289][T32599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1356.040302][T32599] Call Trace: [ 1356.040309][T32599] [ 1356.040352][T32599] __dump_stack+0x1d/0x30 [ 1356.040377][T32599] dump_stack_lvl+0x95/0xd0 [ 1356.040398][T32599] dump_stack+0x15/0x1b [ 1356.040424][T32599] should_fail_ex+0x25e/0x270 [ 1356.040525][T32599] should_fail+0xb/0x20 [ 1356.040555][T32599] should_fail_usercopy+0x1a/0x20 [ 1356.040637][T32599] _copy_from_user+0x1c/0xb0 [ 1356.040657][T32599] ___sys_sendmsg+0xc1/0x1e0 [ 1356.040708][T32599] __x64_sys_sendmsg+0xd4/0x160 [ 1356.040751][T32599] x64_sys_call+0x194c/0x3020 [ 1356.040830][T32599] do_syscall_64+0x136/0x3c0 [ 1356.040927][T32599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.040952][T32599] RIP: 0033:0x7f2e6a35ce59 [ 1356.040973][T32599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.040997][T32599] RSP: 002b:00007f2e68db7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1356.041023][T32599] RAX: ffffffffffffffda RBX: 00007f2e6a5d5fa0 RCX: 00007f2e6a35ce59 [ 1356.041063][T32599] RDX: 0000000000040090 RSI: 0000200000000540 RDI: 0000000000000004 [ 1356.041076][T32599] RBP: 00007f2e68db7090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.041092][T32599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.041108][T32599] R13: 00007f2e6a5d6038 R14: 00007f2e6a5d5fa0 R15: 00007ffd9a7df2e8 [ 1356.041131][T32599] [ 1356.244247][T32573] loop6: lost filesystem error report for type 5 error -117 [ 1356.282018][T32591] EXT4-fs mount: 59 callbacks suppressed [ 1356.282051][T32591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1356.374711][ T28] audit: type=1400 audit(1782741671.308:4829): avc: denied { create } for pid=32587 comm="syz.2.7793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1356.423185][T32573] EXT4-fs (loop6): 1 truncate cleaned up [ 1356.429657][T32573] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1356.442247][T32573] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1356.453125][ T28] audit: type=1400 audit(1782741671.308:4830): avc: denied { connect } for pid=32587 comm="syz.2.7793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1356.472752][ T28] audit: type=1400 audit(1782741671.308:4831): avc: denied { write } for pid=32587 comm="syz.2.7793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1356.492186][ T28] audit: type=1400 audit(1782741671.808:4832): avc: denied { write } for pid=32589 comm="syz.5.7794" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1356.538546][T32606] loop0: detected capacity change from 0 to 256 [ 1356.573721][T22313] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1356.585869][T22313] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:24: Failed to release dquot type 1 [ 1356.600592][T30055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.622095][T32606] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 1356.634623][T32610] loop6: detected capacity change from 0 to 512 [ 1356.641277][T32610] EXT4-fs: Ignoring removed orlov option [ 1356.647152][T32606] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1356.654555][T32610] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1356.687557][T32610] EXT4-fs (loop6): 1 truncate cleaned up [ 1356.693800][T32610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1356.784493][T32613] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.528940][T32617] 9p: Bad value for 'rfdno' [ 1357.557152][T28022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.610687][T32613] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.756661][T32626] __nla_validate_parse: 8 callbacks suppressed [ 1357.756681][T32626] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.7804'. [ 1357.772287][T32626] net_ratelimit: 93 callbacks suppressed [ 1357.772307][T32626] netlink: zone id is out of range [ 1357.783195][T32626] netlink: zone id is out of range [ 1357.788355][T32626] netlink: zone id is out of range [ 1357.793548][T32626] netlink: zone id is out of range [ 1357.798682][T32626] netlink: zone id is out of range [ 1357.803821][T32626] netlink: zone id is out of range [ 1357.809001][T32626] netlink: zone id is out of range [ 1357.814192][T32626] netlink: zone id is out of range [ 1357.819328][T32626] netlink: zone id is out of range [ 1357.824453][T32626] netlink: zone id is out of range [ 1357.853932][T32626] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7804'. [ 1357.863576][T32626] netlink: 67 bytes leftover after parsing attributes in process `syz.2.7804'. [ 1357.892160][T32631] netlink: 'syz.5.7803': attribute type 11 has an invalid length. [ 1357.908019][T30055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.934411][T32631] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7803'. [ 1357.975332][T32613] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.999066][T32628] netlink: 'syz.5.7803': attribute type 12 has an invalid length. [ 1358.024942][T32624] loop0: detected capacity change from 0 to 8192 [ 1358.121517][T32636] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7806'. [ 1358.133096][T32613] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.143313][T32624] loop0: p1 p2 p3 p4 [ 1358.150140][T32624] loop0: p3 start 117772289 is beyond EOD, truncated [ 1358.157561][T32624] loop0: p4 size 32769 extends beyond EOD, truncated [ 1358.236983][T32644] loop2: detected capacity change from 0 to 512 [ 1358.240570][ T4040] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.286645][T32644] EXT4-fs: Ignoring removed nobh option [ 1358.296360][ T4651] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.296485][ T4651] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.331684][ T4651] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.346981][T32644] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1358.370233][T32644] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.7810: EA inode hash validation failed [ 1358.382957][T32644] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1358.396036][T32644] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.7810: corrupted inode contents [ 1358.399019][T32636] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7806'. [ 1358.407900][T32644] fserror_report: 11 callbacks suppressed [ 1358.407921][T32644] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1358.435107][T32644] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.7810: mark_inode_dirty error [ 1358.446813][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1358.447262][ C0] EXT4-fs (loop2): initial error at time 1782741673: ext4_do_update_inode:5742: inode 15 [ 1358.447642][ C0] EXT4-fs (loop2): last error at time 1782741673: ext4_do_update_inode:5742: inode 15 [ 1358.472498][T32653] loop5: detected capacity change from 0 to 512 [ 1358.483753][T32644] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1358.503123][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1358.504959][T14090] udevd[14090]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1358.507058][ T4086] udevd[4086]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1358.515327][T32644] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.7810: corrupted inode contents [ 1358.515362][T32644] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1358.515501][T32644] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.7810: mark_inode_dirty error [ 1358.515543][T32644] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1358.515683][T32644] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.7810: mark inode dirty (error -117) [ 1358.515717][T32644] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1358.515879][T32644] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 1358.516039][T32644] EXT4-fs (loop2): 1 orphan inode deleted [ 1358.546005][T32653] EXT4-fs: Ignoring removed nobh option [ 1358.551591][T32644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1358.790101][T32653] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1358.823052][T23371] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.823151][T32653] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.7814: EA inode hash validation failed [ 1358.922372][T32664] 9p: Bad value for 'rfdno' [ 1358.935397][T32653] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.7814: corrupted inode contents [ 1358.947685][T32653] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1358.948342][T32653] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.7814: mark_inode_dirty error [ 1358.968858][T32653] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1358.969349][T32653] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.7814: corrupted inode contents [ 1358.990501][T32653] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1358.990871][T32653] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.7814: mark_inode_dirty error [ 1359.035894][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 1359.042381][ C0] EXT4-fs (loop5): initial error at time 1782741674: ext4_do_update_inode:5742: inode 15 [ 1359.052249][ C0] EXT4-fs (loop5): last error at time 1782741674: ext4_do_update_inode:5742: inode 15 [ 1359.068058][T32653] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1359.071471][T32653] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.7814: mark inode dirty (error -117) [ 1359.093242][T32653] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1359.093870][T32653] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 1359.112200][T32653] EXT4-fs (loop5): 1 orphan inode deleted [ 1359.119869][T32653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1359.409052][T32670] loop2: detected capacity change from 0 to 1024 [ 1359.417456][T32670] EXT4-fs: Ignoring removed bh option [ 1359.530710][T32670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1359.555665][T32670] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1359.686908][T32685] loop7: detected capacity change from 0 to 512 [ 1359.695800][T32685] EXT4-fs: Ignoring removed orlov option [ 1359.701563][T32685] EXT4-fs: Ignoring removed mblk_io_submit option [ 1359.710953][T32685] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.7823: corrupted in-inode xattr: e_value size too large [ 1359.727127][T32685] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.7823: couldn't read orphan inode 15 (err -117) [ 1359.739059][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1359.739081][ C0] EXT4-fs (loop7): initial error at time 1782741675: ext4_iget_extra_inode:5180: inode 15 [ 1359.739106][ C0] EXT4-fs (loop7): last error at time 1782741675: ext4_iget_extra_inode:5180: inode 15 [ 1359.765450][T32685] loop7: lost filesystem error report for type 5 error -117 [ 1359.767237][T32685] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1359.790110][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1359.790128][ T28] audit: type=1400 audit(1782741675.118:4837): avc: denied { write } for pid=32683 comm="syz.7.7823" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1359.835665][T32685] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.7823: corrupted in-inode xattr: e_value size too large [ 1359.878110][ T28] audit: type=1400 audit(1782741675.158:4838): avc: denied { write } for pid=32683 comm="syz.7.7823" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1359.899932][ T28] audit: type=1400 audit(1782741675.158:4839): avc: denied { write } for pid=32683 comm="syz.7.7823" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1359.921725][ T28] audit: type=1400 audit(1782741675.168:4840): avc: denied { write } for pid=32683 comm="syz.7.7823" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1359.937535][T32691] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.7823: corrupted in-inode xattr: e_value size too large [ 1359.974844][T28022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.996930][T32685] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7823'. [ 1360.028661][T32685] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7823'. [ 1360.053813][T32685] netlink: 31 bytes leftover after parsing attributes in process `syz.7.7823'. [ 1360.076061][T32685] netlink: 'syz.7.7823': attribute type 2 has an invalid length. [ 1360.094487][T32685] netlink: 31 bytes leftover after parsing attributes in process `syz.7.7823'. [ 1360.117644][T23371] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.159372][T28807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.188699][T32702] loop2: detected capacity change from 0 to 512 [ 1360.201403][T32702] EXT4-fs: Ignoring removed nobh option [ 1360.221893][T32702] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1360.240444][T32702] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.7829: EA inode hash validation failed [ 1360.253065][T32702] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1360.272875][T32702] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.7829: corrupted inode contents [ 1360.286053][T32702] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.7829: mark_inode_dirty error [ 1360.299921][T32702] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.7829: corrupted inode contents [ 1360.316629][T32702] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.7829: mark_inode_dirty error [ 1360.329231][T32702] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.7829: mark inode dirty (error -117) [ 1360.343130][T32702] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 1360.352233][T32702] EXT4-fs (loop2): 1 orphan inode deleted [ 1360.358531][T32702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1360.483668][T32712] FAULT_INJECTION: forcing a failure. [ 1360.483668][T32712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1360.512912][T32712] CPU: 0 UID: 0 PID: 32712 Comm: syz.5.7832 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1360.513012][T32712] Tainted: [W]=WARN [ 1360.513022][T32712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1360.513040][T32712] Call Trace: [ 1360.513047][T32712] [ 1360.513055][T32712] __dump_stack+0x1d/0x30 [ 1360.513093][T32712] dump_stack_lvl+0x95/0xd0 [ 1360.513183][T32712] dump_stack+0x15/0x1b [ 1360.513208][T32712] should_fail_ex+0x25e/0x270 [ 1360.513239][T32712] should_fail+0xb/0x20 [ 1360.513271][T32712] should_fail_usercopy+0x1a/0x20 [ 1360.513329][T32712] _copy_from_user+0x1c/0xb0 [ 1360.513355][T32712] io_register_clone_buffers+0x48/0x220 [ 1360.513398][T32712] __se_sys_io_uring_register+0xc4b/0x1330 [ 1360.513518][T32712] ? fput+0x8f/0xc0 [ 1360.513550][T32712] ? ksys_write+0x194/0x1a0 [ 1360.513577][T32712] __x64_sys_io_uring_register+0x55/0x70 [ 1360.513610][T32712] x64_sys_call+0x2be0/0x3020 [ 1360.513689][T32712] do_syscall_64+0x136/0x3c0 [ 1360.513727][T32712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.513755][T32712] RIP: 0033:0x7f5e9e9cce59 [ 1360.513775][T32712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.513795][T32712] RSP: 002b:00007f5e9d41f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1360.513880][T32712] RAX: ffffffffffffffda RBX: 00007f5e9ec45fa0 RCX: 00007f5e9e9cce59 [ 1360.513900][T32712] RDX: 0000200000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1360.513915][T32712] RBP: 00007f5e9d41f090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.513928][T32712] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1360.513941][T32712] R13: 00007f5e9ec46038 R14: 00007f5e9ec45fa0 R15: 00007ffe49087638 [ 1360.513960][T32712] [ 1360.730737][T23371] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.015882][ T28] audit: type=1400 audit(1782741676.348:4841): avc: denied { setopt } for pid=32732 comm="syz.5.7838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1361.454735][T32758] loop5: detected capacity change from 0 to 1024 [ 1361.486778][T32758] EXT4-fs: Ignoring removed bh option [ 1361.536229][T32758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.563192][ T28] audit: type=1400 audit(1782741676.888:4842): avc: denied { write } for pid=32750 comm="syz.5.7843" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1361.589308][T32752] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1361.698782][T28022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.067307][ T334] loop6: detected capacity change from 0 to 1024 [ 1362.111553][ T334] loop6: detected capacity change from 0 to 256 [ 1362.207683][ T28] audit: type=1400 audit(1782741677.538:4843): avc: denied { create } for pid=337 comm="syz.7.7858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1362.322695][ T28] audit: type=1400 audit(1782741677.588:4844): avc: denied { create } for pid=337 comm="syz.7.7858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1362.344229][ T28] audit: type=1400 audit(1782741677.588:4845): avc: denied { write } for pid=337 comm="syz.7.7858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1365.188168][ T340] netlink: 'syz.7.7858': attribute type 1 has an invalid length. [ 1365.196363][ T340] netlink: 'syz.7.7858': attribute type 2 has an invalid length. [ 1365.258646][ T349] loop5: detected capacity change from 0 to 512 [ 1365.295129][ T349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1365.333938][ T28] audit: type=1400 audit(1782741680.658:4846): avc: denied { write } for pid=348 comm="syz.5.7862" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1365.433915][T28022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.521705][ T374] loop6: detected capacity change from 0 to 512 [ 1365.579827][ T378] loop0: detected capacity change from 0 to 1024 [ 1365.589072][ T378] EXT4-fs: Ignoring removed bh option [ 1365.604874][ T372] loop5: detected capacity change from 0 to 512 [ 1365.634494][ T374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1365.647280][ T372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1365.662112][ T378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1365.673574][ T376] __nla_validate_parse: 2 callbacks suppressed [ 1365.673626][ T376] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7870'. [ 1365.693476][ T28] audit: type=1400 audit(1782741681.018:4847): avc: denied { write } for pid=371 comm="syz.5.7866" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1365.729082][ T28] audit: type=1400 audit(1782741681.048:4848): avc: denied { write } for pid=373 comm="syz.6.7869" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1365.753617][ T372] FAULT_INJECTION: forcing a failure. [ 1365.753617][ T372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1365.766902][ T372] CPU: 0 UID: 0 PID: 372 Comm: syz.5.7866 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1365.766961][ T372] Tainted: [W]=WARN [ 1365.766968][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1365.766984][ T372] Call Trace: [ 1365.766992][ T372] [ 1365.767002][ T372] __dump_stack+0x1d/0x30 [ 1365.767044][ T372] dump_stack_lvl+0x95/0xd0 [ 1365.767069][ T372] dump_stack+0x15/0x1b [ 1365.767158][ T372] should_fail_ex+0x25e/0x270 [ 1365.767201][ T372] should_fail_alloc_page+0xf2/0x100 [ 1365.767261][ T372] __alloc_frozen_pages_noprof+0x108/0x350 [ 1365.767300][ T372] alloc_pages_mpol+0xa9/0x1d0 [ 1365.767338][ T372] folio_alloc_noprof+0x96/0x150 [ 1365.767375][ T372] filemap_alloc_folio_noprof+0x92/0x220 [ 1365.767453][ T372] __filemap_get_folio_mpol+0x2a0/0x840 [ 1365.767556][ T372] ext4_load_tail_bh+0x4e/0x330 [ 1365.767626][ T372] ? ext4_block_zero_range+0x6d/0x710 [ 1365.767659][ T372] ext4_block_zero_range+0x7e/0x710 [ 1365.767693][ T372] ext4_zero_partial_blocks+0xdd/0x180 [ 1365.767765][ T372] ext4_punch_hole+0x1db/0x700 [ 1365.767795][ T372] ? file_update_time_flags+0x2ad/0x2e0 [ 1365.767837][ T372] ext4_fallocate+0x30b/0x320 [ 1365.767923][ T372] vfs_fallocate+0x3ac/0x400 [ 1365.767982][ T372] __x64_sys_fallocate+0x7a/0xd0 [ 1365.768125][ T372] x64_sys_call+0x298e/0x3020 [ 1365.768152][ T372] do_syscall_64+0x136/0x3c0 [ 1365.768187][ T372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.768214][ T372] RIP: 0033:0x7f5e9e9cce59 [ 1365.768233][ T372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.768254][ T372] RSP: 002b:00007f5e9d41f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1365.768276][ T372] RAX: ffffffffffffffda RBX: 00007f5e9ec45fa0 RCX: 00007f5e9e9cce59 [ 1365.768293][ T372] RDX: 0000000000080007 RSI: 0000000000000003 RDI: 0000000000000004 [ 1365.768308][ T372] RBP: 00007f5e9d41f090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.768332][ T372] R10: 0000000008000c60 R11: 0000000000000246 R12: 0000000000000001 [ 1365.768346][ T372] R13: 00007f5e9ec46038 R14: 00007f5e9ec45fa0 R15: 00007ffe49087638 [ 1365.768368][ T372] [ 1365.801997][T30055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.814287][T28022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.861497][ T28] audit: type=1400 audit(1782741681.198:4849): avc: denied { lock } for pid=377 comm="syz.0.7871" path="/117/file2/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1366.071242][ T395] loop6: detected capacity change from 0 to 1024 [ 1366.090547][ T395] EXT4-fs: Ignoring removed bh option [ 1366.130788][T30651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.176036][ T395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1366.193443][ T404] loop7: detected capacity change from 0 to 168 [ 1366.199827][ T28] audit: type=1400 audit(1782741681.528:4850): avc: denied { write } for pid=394 comm="syz.6.7873" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1366.241142][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1366.286709][ T404] loop7: detected capacity change from 0 to 168 [ 1366.309450][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1366.353508][ T404] loop7: detected capacity change from 0 to 168 [ 1366.380780][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1366.425798][ T404] loop7: detected capacity change from 0 to 168 [ 1366.453665][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1366.472001][T30055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.497383][ T404] loop7: detected capacity change from 0 to 168 [ 1366.533779][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1366.593117][ T414] EXT4-fs: Ignoring removed nobh option [ 1366.644343][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1366.653408][ T414] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1366.722621][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1366.730924][ T414] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.7880: EA inode hash validation failed [ 1366.750695][ T414] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1366.763804][ T414] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.7880: corrupted inode contents [ 1366.775837][ T414] fserror_report: 6 callbacks suppressed [ 1366.775853][ T414] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1366.782035][ T414] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.7880: mark_inode_dirty error [ 1366.802622][ T414] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1366.803337][ T414] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.7880: corrupted inode contents [ 1366.814033][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 1366.814243][ C0] EXT4-fs (loop2): initial error at time 1782741682: ext4_do_update_inode:5742: inode 15 [ 1366.814589][ C0] EXT4-fs (loop2): last error at time 1782741682: ext4_dirty_inode:6639: inode 15 [ 1366.865918][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1366.876815][ T429] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1366.896824][ T414] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1366.897535][ T414] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.7880: mark_inode_dirty error [ 1366.918847][ T414] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1366.962227][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1367.022435][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1367.052699][ T414] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.7880: mark inode dirty (error -117) [ 1367.099282][ T414] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1367.125938][ T414] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 1367.182374][ T414] EXT4-fs (loop2): 1 orphan inode deleted [ 1367.237912][ T414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1367.257366][ T429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1368.051613][ T442] 9p: Bad value for 'rfdno' [ 1368.080389][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1368.121583][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1368.134315][ T28] audit: type=1400 audit(1782741683.438:4851): avc: denied { connect } for pid=423 comm="syz.6.7883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1368.400259][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1368.429854][ T28] audit: type=1400 audit(1782741683.448:4852): avc: denied { getopt } for pid=423 comm="syz.6.7883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1368.451741][ T28] audit: type=1400 audit(1782741683.708:4853): avc: denied { read } for pid=423 comm="syz.6.7883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1368.489192][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1368.624964][ T445] FAULT_INJECTION: forcing a failure. [ 1368.624964][ T445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.639006][ T445] CPU: 0 UID: 0 PID: 445 Comm: syz.0.7886 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1368.639045][ T445] Tainted: [W]=WARN [ 1368.639052][ T445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1368.639070][ T445] Call Trace: [ 1368.639079][ T445] [ 1368.639089][ T445] __dump_stack+0x1d/0x30 [ 1368.639120][ T445] dump_stack_lvl+0x95/0xd0 [ 1368.639163][ T445] dump_stack+0x15/0x1b [ 1368.639184][ T445] should_fail_ex+0x25e/0x270 [ 1368.639220][ T445] should_fail+0xb/0x20 [ 1368.639252][ T445] should_fail_usercopy+0x1a/0x20 [ 1368.639290][ T445] _copy_from_user+0x1c/0xb0 [ 1368.639315][ T445] ___sys_sendmsg+0xc1/0x1e0 [ 1368.639568][ T445] __x64_sys_sendmsg+0xd4/0x160 [ 1368.639608][ T445] x64_sys_call+0x194c/0x3020 [ 1368.639640][ T445] do_syscall_64+0x136/0x3c0 [ 1368.639677][ T445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.639759][ T445] RIP: 0033:0x7f2e6a35ce59 [ 1368.639775][ T445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.639799][ T445] RSP: 002b:00007f2e68db7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1368.639826][ T445] RAX: ffffffffffffffda RBX: 00007f2e6a5d5fa0 RCX: 00007f2e6a35ce59 [ 1368.639845][ T445] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1368.639858][ T445] RBP: 00007f2e68db7090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.639918][ T445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.639934][ T445] R13: 00007f2e6a5d6038 R14: 00007f2e6a5d5fa0 R15: 00007ffd9a7df2e8 [ 1368.639954][ T445] [ 1368.886518][ T28] audit: type=1400 audit(1782741684.158:4854): avc: denied { ioctl } for pid=423 comm="syz.6.7883" path="socket:[116795]" dev="sockfs" ino=116795 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1368.955242][ T28] audit: type=1400 audit(1782741684.288:4855): avc: denied { write } for pid=423 comm="syz.6.7883" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1368.983130][ T404] isofs_fill_super: bread failed, dev=loop7, iso_blknum=42, block=84 [ 1369.174736][T30055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.274645][ T446] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1369.288435][T23371] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.728095][ T460] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7890'. [ 1370.148318][ T470] EXT4-fs: Ignoring removed orlov option [ 1370.155647][ T470] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1370.179076][ T470] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1370.180539][T28807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.193638][ T470] EXT4-fs (loop6): 1 truncate cleaned up [ 1370.207497][ T470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1370.262239][ T473] EXT4-fs: Ignoring removed bh option [ 1370.286460][ T473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1370.490924][ T478] set_capacity_and_notify: 15 callbacks suppressed [ 1370.490995][ T478] loop2: detected capacity change from 0 to 1024 [ 1370.504320][ T478] EXT4-fs: Ignoring removed orlov option [ 1370.510115][ T478] EXT4-fs: Ignoring removed nobh option [ 1370.618927][ T478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1370.635747][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1370.635862][ T28] audit: type=1400 audit(1782741685.968:4863): avc: denied { write } for pid=476 comm="syz.2.7897" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1371.156423][T28807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.184292][T30055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.222015][T23371] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.241037][ T28] audit: type=1400 audit(1782741686.568:4864): avc: denied { ioctl } for pid=483 comm="syz.5.7899" path="socket:[117797]" dev="sockfs" ino=117797 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1371.302050][ T486] syzkaller0: entered promiscuous mode [ 1371.307588][ T486] syzkaller0: entered allmulticast mode [ 1371.572656][ T28] audit: type=1400 audit(1782741686.898:4865): avc: denied { name_connect } for pid=514 comm="syz.0.7908" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1371.641309][ T529] sctp: [Deprecated]: syz.7.7914 (pid 529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1371.641309][ T529] Use struct sctp_sack_info instead [ 1371.656027][ T28] audit: type=1400 audit(1782741686.968:4866): avc: denied { read } for pid=530 comm="syz.0.7915" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1371.682550][ T532] netlink: 'syz.2.7912': attribute type 28 has an invalid length. [ 1371.691513][ T28] audit: type=1400 audit(1782741687.018:4867): avc: denied { read } for pid=528 comm="syz.7.7914" laddr=172.20.20.170 lport=41396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1371.723622][ T532] netlink: 'syz.2.7912': attribute type 29 has an invalid length. [ 1371.733201][ T532] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7912'. [ 1371.767494][ T537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.780230][ T537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.829103][ T543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.848269][ T543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.910544][ T551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.920329][ T551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.930228][ T551] xt_cgroup: invalid path, errno=-2 [ 1371.987648][ T557] capability: warning: `syz.5.7926' uses 32-bit capabilities (legacy support in use) [ 1371.999655][ T557] program syz.5.7926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1372.010145][ T557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.019669][ T557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.475248][ T571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.484622][ T571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.583673][ T579] syzkaller0: entered promiscuous mode [ 1372.589519][ T579] syzkaller0: entered allmulticast mode [ 1372.642052][ T582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.652724][ T583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.661658][ T582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.671864][ T583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.799983][ T28] audit: type=1400 audit(1782741688.128:4868): avc: denied { shutdown } for pid=584 comm="syz.5.7939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1373.235831][ T598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.243020][ T598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.258548][ T605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.297997][ T605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.298748][ T607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.322863][ T607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.322902][ T609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.339369][ T609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.370984][ T616] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1373.414607][ T620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.423374][ T620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.914955][ T630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.924542][ T630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.961868][ T632] netlink: 'syz.5.7959': attribute type 1 has an invalid length. [ 1373.981299][ T632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1374.022736][ T637] syzkaller1: entered promiscuous mode [ 1374.028357][ T637] syzkaller1: entered allmulticast mode [ 1374.075231][ T28] audit: type=1400 audit(1782741689.408:4869): avc: denied { read } for pid=640 comm="syz.2.7963" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1374.099946][ T28] audit: type=1400 audit(1782741689.408:4870): avc: denied { open } for pid=640 comm="syz.2.7963" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1374.126674][ T28] audit: type=1400 audit(1782741689.408:4871): avc: denied { ioctl } for pid=640 comm="syz.2.7963" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1374.345650][ T655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7969'. [ 1374.483363][ T665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.503417][ T665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.516196][ T665] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 1374.535917][ T665] tipc: Started in network mode [ 1374.545291][ T665] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1374.553533][ T665] tipc: Enabled bearer , priority 30 [ 1374.579712][ T28] audit: type=1326 audit(1782741689.908:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=666 comm="syz.6.7975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c5cbce59 code=0x7ffc0000 [ 1374.607227][ T694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.636481][ T694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.637585][ T697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.655356][ T697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.160697][ T710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.168114][ T710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.266912][ T710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1375.280775][ T710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1375.323041][ T710] vlan0: left promiscuous mode [ 1375.344550][ T710] xfrm1: left allmulticast mode [ 1375.363624][ T710] vlan2: left promiscuous mode [ 1375.368900][ T710] bond0: left promiscuous mode [ 1375.386677][ T710] bond_slave_0: left promiscuous mode [ 1375.392546][ T722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7988'. [ 1375.402384][ T710] bond_slave_1: left promiscuous mode [ 1375.413408][ T690] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.426587][ T690] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.440128][ T690] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.472672][ T690] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.492578][ T722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1375.534494][ T690] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.551426][ T690] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.571044][ T690] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.579951][ T690] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.621435][ T732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.631025][ T732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.674038][ T23] tipc: Node number set to 10005162 [ 1375.724387][ T734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.733217][ T734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.008847][ T740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7995'. [ 1376.018335][ T740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.025839][ T740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.181230][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 1376.181248][ T28] audit: type=1400 audit(1782741691.508:4901): avc: denied { read } for pid=746 comm="syz.2.7999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1376.299965][ T750] Cannot find add_set index 0 as target [ 1376.468259][ T754] TCP: TCP_TX_DELAY enabled [ 1376.676878][ T772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.709844][ T772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.755103][ T776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.765032][ T776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.781626][ T28] audit: type=1400 audit(1782741692.108:4902): avc: denied { setopt } for pid=775 comm="syz.0.8011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1377.012739][ T781] syzkaller0: entered promiscuous mode [ 1377.018328][ T781] syzkaller0: entered allmulticast mode [ 1377.086904][ T28] audit: type=1400 audit(1782741692.418:4903): avc: denied { read } for pid=784 comm="syz.6.8015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1377.112259][ T787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8016'. [ 1377.262797][ T28] audit: type=1400 audit(1782741692.588:4904): avc: denied { getopt } for pid=803 comm="syz.7.8024" lport=44804 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1377.435411][ T821] syzkaller0: entered promiscuous mode [ 1377.446254][ T821] syzkaller0: entered allmulticast mode [ 1377.484222][ T821] tipc: Enabled bearer , priority 0 [ 1377.498352][ T825] netlink: 'syz.0.8033': attribute type 2 has an invalid length. [ 1377.507075][ T820] tipc: Resetting bearer [ 1377.516171][ T827] kernel profiling enabled (shift: 0) [ 1377.550679][ T820] tipc: Disabling bearer [ 1377.800892][ T855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.809577][ T855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.819125][ T856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.831775][ T856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.840733][ T855] vhci_hcd vhci_hcd.4: invalid port number 255 [ 1377.850346][ T855] vhci_hcd vhci_hcd.4: invalid port number 255 [ 1377.859932][ T28] audit: type=1326 audit(1782741693.188:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.5.8046" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e9e9cce59 code=0x0 [ 1377.941782][ T28] audit: type=1400 audit(1782741693.268:4906): avc: denied { create } for pid=863 comm="syz.7.8051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1378.112388][ T862] loop7: detected capacity change from 0 to 16384 [ 1378.162691][ T862] loop7: detected capacity change from 16384 to 0 [ 1378.162859][ C0] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1378.339348][ T890] netlink: 'syz.0.8059': attribute type 4 has an invalid length. [ 1378.353491][ T890] netlink: 'syz.0.8059': attribute type 4 has an invalid length. [ 1378.383164][ T892] net_ratelimit: 15 callbacks suppressed [ 1378.383180][ T892] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1379.120531][ T938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.138163][ T938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.496245][ T967] tipc: Enabling of bearer rejected, failed to enable media [ 1379.651410][ T986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=986 comm=syz.2.8101 [ 1379.665910][ T28] audit: type=1400 audit(1782741694.998:4907): avc: denied { write } for pid=985 comm="syz.2.8101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1379.755968][ T28] audit: type=1400 audit(1782741695.088:4908): avc: denied { getopt } for pid=993 comm="syz.6.8105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1379.814781][ T999] syzkaller0: entered promiscuous mode [ 1379.820430][ T999] syzkaller0: entered allmulticast mode [ 1380.252144][ T1022] syzkaller0: entered promiscuous mode [ 1380.264006][ T1022] syzkaller0: entered allmulticast mode [ 1380.770368][ T1064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.780867][ T1064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.844263][ T1068] syzkaller0: entered promiscuous mode [ 1380.850038][ T1068] syzkaller0: entered allmulticast mode [ 1381.093135][ T1088] syzkaller0: entered promiscuous mode [ 1381.099493][ T1088] syzkaller0: entered allmulticast mode [ 1381.120655][ T1092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8149'. [ 1381.539301][ T1135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.548722][ T1135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.582421][ T1137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.592061][ T1137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.366738][ T1170] netlink: 'syz.7.8185': attribute type 4 has an invalid length. [ 1382.396313][ T1170] netlink: 'syz.7.8185': attribute type 4 has an invalid length. [ 1382.502555][ T1184] vlan3: entered promiscuous mode [ 1382.737937][ T1208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.764775][ T28] audit: type=1400 audit(1782741698.098:4909): avc: denied { bind } for pid=1209 comm="syz.5.8202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1382.785436][ T1208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.799244][ T28] audit: type=1400 audit(1782741698.128:4910): avc: denied { listen } for pid=1209 comm="syz.5.8202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1383.076749][ T1221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.086126][ T1221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.096881][ T1221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.108068][ T1221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.403088][ T1232] syzkaller0: entered promiscuous mode [ 1383.409231][ T1232] syzkaller0: entered allmulticast mode [ 1383.416237][ T1230] tipc: Started in network mode [ 1383.421425][ T1230] tipc: Node identity dac425d88efc, cluster identity 4711 [ 1383.429077][ T1230] tipc: Enabled bearer , priority 0 [ 1383.440119][ T1229] tipc: Disabling bearer [ 1383.688258][ T1251] netlink: 'syz.6.8221': attribute type 4 has an invalid length. [ 1383.727351][ T1251] netlink: 'syz.6.8221': attribute type 4 has an invalid length. [ 1383.777778][ T1269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.793358][ T1269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.811769][ T1269] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1383.824896][ T1269] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1383.939580][ T1295] netlink: 'syz.7.8237': attribute type 4 has an invalid length. [ 1383.950970][ T1295] netlink: 'syz.7.8237': attribute type 4 has an invalid length. [ 1384.251674][ T1326] netlink: 'syz.0.8251': attribute type 4 has an invalid length. [ 1384.264480][ T1326] netlink: 'syz.0.8251': attribute type 4 has an invalid length. [ 1384.296929][ T1330] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1384.303514][ T1330] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1384.310433][ T1330] hsr0: entered promiscuous mode [ 1384.316381][ T1330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8253'. [ 1384.325565][ T1330] hsr_slave_0: left promiscuous mode [ 1384.331490][ T1330] hsr_slave_1: left promiscuous mode [ 1384.340666][ T1330] hsr0 (unregistering): left promiscuous mode [ 1384.359048][ T28] audit: type=1326 audit(1782741699.688:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz.5.8254" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e9e9cce59 code=0x0 [ 1384.927574][ T1355] netlink: 'syz.6.8264': attribute type 4 has an invalid length. [ 1385.303702][ T1375] syzkaller0: entered promiscuous mode [ 1385.309234][ T1375] syzkaller0: entered allmulticast mode [ 1385.317751][ T1375] tipc: Enabled bearer , priority 0 [ 1385.327684][ T1374] tipc: Resetting bearer [ 1385.340524][ T1374] tipc: Disabling bearer [ 1385.372329][ T1379] netlink: 'syz.0.8275': attribute type 4 has an invalid length. [ 1385.424021][ T1383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.433329][ T1383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.496361][ T1387] syzkaller0: entered promiscuous mode [ 1385.502008][ T1387] syzkaller0: entered allmulticast mode [ 1385.547093][ T1388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.556717][ T1388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.611607][ T28] audit: type=1326 audit(1782741700.938:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1391 comm="syz.2.8281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e1c42ce59 code=0x0 [ 1385.784103][ T1400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.793369][ T1400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.867730][ T1404] syzkaller0: entered promiscuous mode [ 1385.873452][ T1404] syzkaller0: entered allmulticast mode [ 1385.880490][ T1404] tipc: Started in network mode [ 1385.885702][ T1404] tipc: Node identity 8649fbabbfdf, cluster identity 4711 [ 1385.893257][ T1404] tipc: Enabled bearer , priority 0 [ 1385.900764][ T1403] tipc: Resetting bearer [ 1385.907970][ T1403] tipc: Disabling bearer [ 1386.081942][ T1416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.091274][ T1416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.123943][ T1420] netlink: 'syz.7.8295': attribute type 4 has an invalid length. [ 1386.464685][ T1433] syzkaller0: entered promiscuous mode [ 1386.470239][ T1433] syzkaller0: entered allmulticast mode [ 1386.662464][ T1449] syzkaller0: entered promiscuous mode [ 1386.668199][ T1449] syzkaller0: entered allmulticast mode [ 1386.732018][ T1445] loop7: detected capacity change from 0 to 16384 [ 1386.819238][ T28] audit: type=1326 audit(1782741702.148:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1453 comm="syz.2.8310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e1c42ce59 code=0x0 [ 1387.179168][ T1466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8316'. [ 1387.188511][ T1466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8316'. [ 1387.271515][ T1468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.278786][ T1468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.439819][ T1473] loop7: detected capacity change from 0 to 16384 [ 1387.546355][ T1484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8324'. [ 1387.759056][ T1503] syzkaller1: entered promiscuous mode [ 1387.770062][ T1503] syzkaller1: entered allmulticast mode [ 1387.899367][ T1510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8335'. [ 1388.375799][ T1533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.388240][ T1533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.472032][ T1535] syzkaller0: entered promiscuous mode [ 1388.481380][ T1535] syzkaller0: entered allmulticast mode [ 1388.497715][ T1535] tipc: Enabled bearer , priority 0 [ 1388.513401][ T1534] tipc: Resetting bearer [ 1388.539383][ T1534] tipc: Disabling bearer [ 1388.948656][ T1571] syzkaller0: entered promiscuous mode [ 1388.955176][ T1571] syzkaller0: entered allmulticast mode [ 1388.984254][ T1571] tipc: Enabled bearer , priority 0 [ 1389.006763][ T1570] tipc: Resetting bearer [ 1389.022303][ T1570] tipc: Disabling bearer [ 1389.105815][ T1575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.115929][ T1575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.976895][ T1604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.985659][ T1604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.391376][ T1705] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8420'. [ 1391.401863][ T1705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.409289][ T1705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.478086][ T1715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.497183][ T1715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.530397][ T1717] loop5: detected capacity change from 0 to 7 [ 1391.540331][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1391.549683][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1391.561297][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1391.570801][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1391.579460][ T1717] loop5: unable to read partition table [ 1391.585655][ T1717] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 1391.594391][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1391.604004][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1391.617272][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1391.628762][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1391.640405][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1391.649917][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1391.658578][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1391.667902][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1391.676730][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1391.686057][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1391.705311][ T1727] syzkaller1: entered promiscuous mode [ 1391.711824][ T1729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8430'. [ 1391.722173][ T1727] syzkaller1: entered allmulticast mode [ 1391.733895][ T1729] vlan3: entered promiscuous mode [ 1392.200622][ T1766] syzkaller1: entered promiscuous mode [ 1392.214827][ T1766] syzkaller1: entered allmulticast mode [ 1392.332531][ T28] audit: type=1400 audit(1782741707.658:4914): avc: denied { read } for pid=1777 comm="syz.7.8451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1392.625802][ T1798] syzkaller1: entered promiscuous mode [ 1392.646031][ T1798] syzkaller1: entered allmulticast mode [ 1392.672783][ T1761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.683094][ T1761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.691538][ T1761] bridge_slave_0: entered allmulticast mode [ 1392.698623][ T1761] bridge_slave_0: entered promiscuous mode [ 1392.713558][ T1761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.722407][ T1761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.729989][ T1761] bridge_slave_1: entered allmulticast mode [ 1392.737087][ T1761] bridge_slave_1: entered promiscuous mode [ 1392.791645][ T1761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.802868][ T1761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.825456][ T1761] team0: Port device team_slave_0 added [ 1392.833993][ T1761] team0: Port device team_slave_1 added [ 1392.868772][ T1761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.877615][ T1761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.911026][ T1761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.927698][ T1761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.936793][ T1761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.963625][ T1761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.044885][ T1761] hsr_slave_0: entered promiscuous mode [ 1393.063607][ T1761] hsr_slave_1: entered promiscuous mode [ 1393.082957][ T1761] debugfs: 'hsr0' already exists in 'hsr' [ 1393.090335][ T1761] Cannot create hsr debugfs directory [ 1393.128133][ T4029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.209157][ T4029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.258597][ T1836] syzkaller1: entered promiscuous mode [ 1393.264918][ T1836] syzkaller1: entered allmulticast mode [ 1393.273220][ T4029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.314520][ T4029] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.448904][ T4029] bridge_slave_1: left allmulticast mode [ 1393.456093][ T4029] bridge_slave_1: left promiscuous mode [ 1393.462213][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.478058][ T4029] bridge_slave_0: left allmulticast mode [ 1393.489952][ T4029] bridge_slave_0: left promiscuous mode [ 1393.496999][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.531979][ T28] audit: type=1400 audit(1782741708.858:4915): avc: denied { create } for pid=1845 comm="syz.7.8480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1393.599501][ T28] audit: type=1400 audit(1782741708.858:4916): avc: denied { bind } for pid=1845 comm="syz.7.8480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1393.625005][ T28] audit: type=1400 audit(1782741708.858:4917): avc: denied { write } for pid=1845 comm="syz.7.8480" path="socket:[123049]" dev="sockfs" ino=123049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1393.938737][ T1867] netlink: 'syz.0.8488': attribute type 4 has an invalid length. [ 1393.952558][ T4029] batman_adv: batadv0: Interface deactivated: gretap1 [ 1394.015057][ T4029] batman_adv: batadv0: Removing interface: gretap1 [ 1394.059747][ T4029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1394.068895][ T4029] bond_slave_0: left promiscuous mode [ 1394.081728][ T4029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.091809][ T4029] bond_slave_1: left promiscuous mode [ 1394.099911][ T4029] bond0 (unregistering): Released all slaves [ 1394.123281][ T1864] syzkaller1: entered promiscuous mode [ 1394.129337][ T1864] syzkaller1: entered allmulticast mode [ 1394.160209][ T28] audit: type=1400 audit(1782741709.488:4918): avc: denied { write } for pid=1872 comm="syz.7.8489" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 1394.230257][ T4029] hsr_slave_0: left promiscuous mode [ 1394.237030][ T4029] hsr_slave_1: left promiscuous mode [ 1394.245665][ T4029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1394.254268][ T4029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.262299][ T4029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.279693][ T4029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.282656][ T28] audit: type=1400 audit(1782741709.608:4919): avc: denied { listen } for pid=1872 comm="syz.7.8489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1394.355979][ T4029] veth1_macvtap: left promiscuous mode [ 1394.387779][ T4029] veth0_macvtap: left promiscuous mode [ 1394.398843][ T4029] veth1_vlan: left promiscuous mode [ 1394.565741][ T4029] team0 (unregistering): Port device team_slave_1 removed [ 1394.577758][ T28] audit: type=1400 audit(1782741709.908:4920): avc: denied { write } for pid=1879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1394.603464][ T4029] team0 (unregistering): Port device team_slave_0 removed [ 1394.649937][ T28] audit: type=1400 audit(1782741709.978:4921): avc: denied { write } for pid=1904 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1394.691404][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1394.913955][ T1926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8496'. [ 1395.054715][ T28] audit: type=1400 audit(1782741710.368:4922): avc: denied { write } for pid=1909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1395.144195][ T1761] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1395.152366][ T4029] IPVS: stop unused estimator thread 0... [ 1395.206482][ T1761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1395.256275][ T1932] tipc: Enabling of bearer rejected, failed to enable media [ 1395.278174][ T1761] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1395.297862][ T28] audit: type=1400 audit(1782741710.618:4923): avc: denied { write } for pid=1933 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1395.340799][ T1761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1395.378269][ T1761] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1395.450173][ T1761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1395.468662][ T1761] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1395.494293][ T1761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1395.594771][ T1761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.611780][ T1761] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.631432][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.638624][ T685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.671666][ T691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.679073][ T691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.743366][ T1966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8502'. [ 1395.927950][ T1761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.029993][ T2002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 1396.130359][ T1761] veth0_vlan: entered promiscuous mode [ 1396.139085][ T1761] veth1_vlan: entered promiscuous mode [ 1396.156627][ T1761] veth0_macvtap: entered promiscuous mode [ 1396.164435][ T1761] veth1_macvtap: entered promiscuous mode [ 1396.176226][ T1761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.188829][ T1761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.201913][ T685] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.212200][ T685] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.235105][ T685] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.255473][ T685] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.367345][ T2036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.376929][ T2036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.589451][ T2035] loop7: detected capacity change from 0 to 16384 [ 1396.623010][ T2058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.642318][ T2058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.730505][ T2068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8539'. [ 1396.740781][ T2068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.748168][ T2068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.116286][ T2086] syzkaller0: entered promiscuous mode [ 1397.122111][ T2086] syzkaller0: entered allmulticast mode [ 1397.131052][ T2086] tipc: Enabled bearer , priority 0 [ 1397.139116][ T2085] tipc: Resetting bearer [ 1397.146660][ T2085] tipc: Disabling bearer [ 1397.324620][ T2100] syzkaller0: entered promiscuous mode [ 1397.330357][ T2100] syzkaller0: entered allmulticast mode [ 1397.342540][ T2100] tipc: Started in network mode [ 1397.349115][ T2100] tipc: Node identity 16a27bbfe566, cluster identity 4711 [ 1397.357201][ T2100] tipc: Enabled bearer , priority 0 [ 1397.367700][ T2099] tipc: Resetting bearer [ 1397.427846][ T2099] tipc: Disabling bearer [ 1397.812607][ T2132] syzkaller0: entered promiscuous mode [ 1397.828402][ T2132] syzkaller0: entered allmulticast mode [ 1397.850135][ T2134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8569'. [ 1397.852355][ T2132] tipc: Enabled bearer , priority 0 [ 1397.874361][ T2131] tipc: Resetting bearer [ 1397.884251][ T2131] tipc: Disabling bearer [ 1397.920858][ T2140] loop7: detected capacity change from 0 to 1764 [ 1397.938541][ T2142] syz_tun: entered allmulticast mode [ 1397.944745][ T2142] syz_tun (unregistering): left allmulticast mode [ 1398.040440][ T2151] syzkaller0: entered promiscuous mode [ 1398.046531][ T2151] syzkaller0: entered allmulticast mode [ 1398.055894][ T2151] tipc: Enabled bearer , priority 0 [ 1398.063525][ T2150] tipc: Resetting bearer [ 1398.070431][ T2150] tipc: Disabling bearer [ 1399.143505][ T2184] netlink: 'syz.6.8590': attribute type 4 has an invalid length. [ 1399.474969][ T2220] netlink: 'syz.6.8604': attribute type 4 has an invalid length. [ 1400.248995][ T2249] netlink: 'syz.2.8615': attribute type 4 has an invalid length. [ 1400.488212][ T2263] tipc: Enabling of bearer rejected, failed to enable media [ 1400.736540][ T2281] loop0: detected capacity change from 0 to 1024 [ 1400.761140][ T2281] EXT4-fs: inline encryption not supported [ 1400.878231][ T2281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1401.006221][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1401.006248][ T28] audit: type=1400 audit(1782741716.338:4927): avc: denied { write } for pid=2280 comm="syz.0.8625" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1401.171499][T30651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.383136][ T28] audit: type=1400 audit(1782741716.708:4928): avc: denied { getopt } for pid=2290 comm="syz.7.8629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1401.501773][ T2308] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8632'. [ 1401.845317][ T2318] No such timeout policy "syz1" [ 1403.113406][ T2329] syzkaller0: entered promiscuous mode [ 1403.138649][ T2329] syzkaller0: entered allmulticast mode [ 1403.212773][ T28] audit: type=1400 audit(1782741718.538:4929): avc: denied { bind } for pid=2330 comm="syz.2.8641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1403.258072][ T2338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8644'. [ 1403.334545][ T2348] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8648'. [ 1403.353311][ T2338] bond1 (unregistering): Released all slaves [ 1403.375035][ T2352] netlink: 'syz.5.8650': attribute type 4 has an invalid length. [ 1403.524055][ T2366] syzkaller0: entered promiscuous mode [ 1403.541943][ T2366] syzkaller0: entered allmulticast mode [ 1403.701053][ T2378] netlink: 'syz.6.8662': attribute type 4 has an invalid length. [ 1404.091270][ T2389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8666'. [ 1404.170858][ T2389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8666'. [ 1404.507795][ T2411] syzkaller0: entered promiscuous mode [ 1404.513868][ T2411] syzkaller0: entered allmulticast mode [ 1405.103112][ T2433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8681'. [ 1405.112268][ T2433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8681'. [ 1405.495176][ T2457] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8692'. [ 1405.509946][ T2457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8692'. [ 1405.592029][ T2471] loop5: detected capacity change from 0 to 128 [ 1405.603098][ T2471] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1405.618686][ T2471] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1405.633841][ T28] audit: type=1400 audit(1782741720.968:4930): avc: denied { write } for pid=2469 comm="syz.5.8698" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1405.669330][T28022] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1405.851440][ T2489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8706'. [ 1405.906181][ T2491] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8703'. [ 1406.053728][ T2491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1406.065484][ T2491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1406.266053][ T4029] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.361715][ T4029] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.559180][ T4029] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.568644][ T4029] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.520584][ T28] audit: type=1400 audit(1782741722.848:4931): avc: denied { connect } for pid=2540 comm="syz.5.8723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1407.939630][ T2568] bond3 (unregistering): Released all slaves [ 1408.146964][ T2581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.156454][ T2581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.498486][ T2594] syzkaller0: entered promiscuous mode [ 1408.499092][ T28] audit: type=1400 audit(1782741723.828:4932): avc: denied { ioctl } for pid=2593 comm="syz.6.8744" path="socket:[126352]" dev="sockfs" ino=126352 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1408.527064][ T2594] 0: reclassify loop, rule prio 0, protocol 700 [ 1408.583946][ T2600] syzkaller0: entered promiscuous mode [ 1408.590579][ T2600] syzkaller0: entered allmulticast mode [ 1409.211288][ T2637] netlink: 'syz.2.8759': attribute type 1 has an invalid length. [ 1409.228073][ T2637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1409.242094][ T2637] vlan2: entered allmulticast mode [ 1409.247730][ T2637] bridge0: entered allmulticast mode [ 1409.254634][ T2637] bond1: (slave vlan2): Opening slave failed [ 1409.309644][ T2640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.324607][ T2640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.654876][ T2666] syzkaller0: entered promiscuous mode [ 1409.660569][ T2666] syzkaller0: entered allmulticast mode [ 1409.669526][ T2666] tipc: Enabled bearer , priority 0 [ 1409.677016][ T2665] tipc: Resetting bearer [ 1409.685201][ T2665] tipc: Disabling bearer [ 1409.796130][ T4029] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x46 [ 1409.825254][ T2674] __nla_validate_parse: 3 callbacks suppressed [ 1409.825291][ T2674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8771'. [ 1410.744550][ T2706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8783'. [ 1410.874404][ T2717] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8788'. [ 1411.017302][ T2720] loop7: detected capacity change from 0 to 16384 [ 1411.358228][ T2738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8796'. [ 1411.895187][ T2763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.905745][ T2763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.957671][ T2766] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8807'. [ 1412.026860][ T2770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8809'. [ 1412.385289][ T2789] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8818'. [ 1412.451515][ T2797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8821'. [ 1413.213827][ T2814] loop0: detected capacity change from 0 to 1024 [ 1413.265937][ T2814] EXT4-fs: inline encryption not supported [ 1413.340499][ T2816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8829'. [ 1413.415631][ T2814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1413.540468][ T28] audit: type=1400 audit(1782741728.868:4933): avc: denied { write } for pid=2813 comm="syz.0.8828" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1413.596936][T30651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.707968][ T28] audit: type=1400 audit(1782741729.038:4934): avc: denied { read write } for pid=2833 comm="syz.5.8835" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1413.733222][ T2830] syzkaller0: entered promiscuous mode [ 1413.741506][ T3410] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1413.755130][ T2830] syzkaller0: entered allmulticast mode [ 1413.762749][ T28] audit: type=1400 audit(1782741729.038:4935): avc: denied { open } for pid=2833 comm="syz.5.8835" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1413.788297][ T3410] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1413.927470][ T2843] syzkaller0: entered promiscuous mode [ 1413.940137][ T2843] syzkaller0: entered allmulticast mode [ 1414.421546][ T2858] loop5: detected capacity change from 0 to 1024 [ 1414.498835][ T2858] EXT4-fs: dax option not supported [ 1414.628202][ T2858] loop5: detected capacity change from 0 to 512 [ 1414.636286][ T2858] EXT4-fs: Ignoring removed nobh option [ 1414.647280][ T2858] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 1414.656484][ T2858] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.8843: inode has both inline data and extents flags [ 1414.669981][ T2858] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1414.671068][ T2858] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.8843: couldn't read orphan inode 13 (err -117) [ 1414.680277][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1414.680314][ C1] EXT4-fs (loop5): initial error at time 1782741730: ext4_orphan_get:1399: inode 13 [ 1414.680343][ C1] EXT4-fs (loop5): last error at time 1782741730: ext4_orphan_get:1399: inode 13 [ 1414.718006][ T2858] loop5: lost filesystem error report for type 5 error -117 [ 1414.718927][ T2858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.767378][ T2858] EXT4-fs (loop5): shut down requested (2) [ 1414.907953][ T2863] netlink: 100 bytes leftover after parsing attributes in process `syz.5.8843'. [ 1415.037116][ T2870] EXT4-fs warning (device loop5): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 1415.061060][ T28] audit: type=1400 audit(1782741730.388:4936): avc: denied { write } for pid=2852 comm="syz.5.8843" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1415.187569][ T28] audit: type=1400 audit(1782741730.518:4937): avc: denied { read } for pid=2875 comm="syz.2.8851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1415.207302][ T2874] loop0: detected capacity change from 0 to 8192 [ 1415.214784][T28022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.301901][ T2882] syzkaller0: entered promiscuous mode [ 1415.310313][ T2882] syzkaller0: entered allmulticast mode [ 1415.325919][ T2884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8855'. [ 1415.353673][ T2886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8856'. [ 1415.453291][ T2892] loop7: detected capacity change from 0 to 128 [ 1415.695174][ T2892] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1415.849948][ T2892] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1415.981996][ T28] audit: type=1400 audit(1782741731.308:4938): avc: denied { write } for pid=2890 comm="syz.7.8858" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1416.209976][T28807] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1416.240969][ T2906] syzkaller0: entered promiscuous mode [ 1416.279800][ T2906] syzkaller0: entered allmulticast mode [ 1416.509819][ T2923] syzkaller0: entered promiscuous mode [ 1416.539699][ T2923] syzkaller0: entered allmulticast mode [ 1416.550637][ T2927] loop5: detected capacity change from 0 to 128 [ 1417.022382][ T2927] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1417.037462][ T2927] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1417.051869][ T28] audit: type=1400 audit(1782741732.378:4939): avc: denied { write } for pid=2926 comm="syz.5.8872" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1417.088551][T28022] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1417.156704][ T2940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8876'. [ 1417.305483][ T2952] netlink: 'syz.2.8880': attribute type 4 has an invalid length. [ 1417.326190][ T2950] syzkaller0: entered promiscuous mode [ 1417.343383][ T2950] syzkaller0: entered allmulticast mode [ 1417.360449][ T2950] tipc: Enabled bearer , priority 0 [ 1417.381736][ T2949] tipc: Resetting bearer [ 1417.410036][ T2949] tipc: Disabling bearer [ 1417.432339][ T28] audit: type=1400 audit(1782741732.758:4940): avc: denied { setopt } for pid=2958 comm="syz.6.8882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1417.482376][ T2969] syzkaller0: entered promiscuous mode [ 1417.488977][ T2969] syzkaller0: entered allmulticast mode [ 1417.494153][ T28] audit: type=1400 audit(1782741732.788:4941): avc: denied { ioctl } for pid=2958 comm="syz.6.8882" path="socket:[127532]" dev="sockfs" ino=127532 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1417.816889][ T2978] loop7: detected capacity change from 0 to 128 [ 1417.829074][ T28] audit: type=1400 audit(1782741733.158:4942): avc: denied { remount } for pid=2971 comm="syz.7.8887" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1418.436188][ T2990] netlink: 'syz.6.8893': attribute type 4 has an invalid length. [ 1418.567102][ T3003] syzkaller0: entered promiscuous mode [ 1418.575925][ T3003] syzkaller0: entered allmulticast mode [ 1418.588183][ T3003] tipc: Enabled bearer , priority 0 [ 1418.610976][ T2999] tipc: Resetting bearer [ 1418.619694][ T2999] tipc: Disabling bearer [ 1418.829623][ T3022] macvlan2: entered promiscuous mode [ 1418.836559][ T3022] bridge0: entered promiscuous mode [ 1420.202149][ T3052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.224430][ T3052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.250172][ T3056] netlink: 'syz.5.8920': attribute type 4 has an invalid length. [ 1420.798317][ T3072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8926'. [ 1420.838608][ T3074] syzkaller0: entered promiscuous mode [ 1420.844428][ T3074] syzkaller0: entered allmulticast mode [ 1421.038376][ T3084] netlink: 'syz.6.8931': attribute type 4 has an invalid length. [ 1421.119742][ T3088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8933'. [ 1421.519815][ T3099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8937'. [ 1421.685454][ T3101] syzkaller0: entered promiscuous mode [ 1421.705486][ T3101] syzkaller0: entered allmulticast mode [ 1421.754489][ T23] page_pool_release_retry() stalled pool shutdown: id 277, 48 inflight 60 sec [ 1421.861878][ T3110] netlink: 'syz.2.8942': attribute type 4 has an invalid length. [ 1421.945618][ T3118] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8945'. [ 1421.988450][ T3124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.997236][ T3124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.311010][ T3142] netlink: 'syz.7.8953': attribute type 4 has an invalid length. [ 1422.540494][ T3155] syzkaller0: entered promiscuous mode [ 1422.546570][ T3155] syzkaller0: entered allmulticast mode [ 1422.692122][ T3162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.705928][ T3162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.793613][ T3164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8961'. [ 1422.803163][ T3164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8961'. [ 1423.228928][ T3183] syzkaller0: entered promiscuous mode [ 1423.242045][ T3183] syzkaller0: entered allmulticast mode [ 1423.380386][ T28] audit: type=1400 audit(1782741738.708:4943): avc: denied { setattr } for pid=3200 comm="syz.0.8978" path="/dev/snd/timer" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1423.411174][ T3201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3201 comm=syz.0.8978 [ 1423.831754][ T3223] syzkaller0: entered promiscuous mode [ 1423.837480][ T3223] syzkaller0: entered allmulticast mode [ 1424.093110][ T3227] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8989'. [ 1424.114096][ T3227] bond2 (unregistering): Released all slaves [ 1424.479824][ T28] audit: type=1400 audit(1782741739.808:4944): avc: denied { setopt } for pid=3276 comm="syz.6.9010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1424.565397][ T3293] loop6: detected capacity change from 0 to 128 [ 1424.577294][ T3293] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1424.607011][ T3293] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1424.655858][ T4029] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1424.696341][ T3304] loop6: detected capacity change from 0 to 512 [ 1424.704039][ T3304] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1424.723663][ T3304] FAT-fs (loop6): codepage cp1250 not found [ 1424.835480][ T3312] syzkaller0: entered promiscuous mode [ 1424.841237][ T3312] syzkaller0: entered allmulticast mode [ 1425.166772][ T3318] netlink: 'syz.6.9024': attribute type 3 has an invalid length. [ 1425.614643][ T3322] loop7: detected capacity change from 0 to 16384 [ 1425.620338][ T3339] netlink: 'syz.7.9033': attribute type 4 has an invalid length. [ 1426.031973][ T3352] loop7: detected capacity change from 0 to 164 [ 1426.041931][ T3352] iso9660: Unknown parameter '' [ 1426.406738][ T3385] loop0: detected capacity change from 0 to 164 [ 1426.425829][ T3385] iso9660: Unknown parameter '' [ 1426.595418][ T3395] tipc: Enabled bearer , priority 0 [ 1426.658690][ T3394] tipc: Disabling bearer [ 1426.725278][ T3401] netlink: 'syz.5.9059': attribute type 4 has an invalid length. [ 1427.125642][ T3424] loop0: detected capacity change from 0 to 164 [ 1427.133304][ T3424] iso9660: Unknown parameter '' [ 1428.130265][ T28] audit: type=1400 audit(1782741743.458:4945): avc: denied { listen } for pid=3449 comm="syz.5.9078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1428.649543][ T3532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9105'. [ 1428.677582][ T3532] bond3 (unregistering): Released all slaves [ 1429.009517][ T3592] loop6: detected capacity change from 0 to 128 [ 1429.019328][ T3592] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1429.052465][ T3592] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1429.079294][ T691] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1429.375697][ T3653] netlink: 80 bytes leftover after parsing attributes in process `syz.7.9130'. [ 1429.660484][ T3680] loop7: detected capacity change from 0 to 8192 [ 1430.086275][ T3717] loop7: detected capacity change from 0 to 8192 [ 1430.526716][ T3730] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9163'. [ 1430.548688][ T3730] bond2 (unregistering): Released all slaves [ 1430.641545][ T3741] 9p: Bad value for 'rfdno' [ 1430.687560][ T3748] netlink: 80 bytes leftover after parsing attributes in process `syz.7.9169'. [ 1430.908382][ T3767] syzkaller0: entered promiscuous mode [ 1430.917998][ T3767] syzkaller0: entered allmulticast mode [ 1431.022061][ T3779] netlink: 80 bytes leftover after parsing attributes in process `syz.7.9186'. [ 1431.444170][ T3812] 9p: Bad value for 'wfdno' [ 1431.495930][ T3816] loop6: detected capacity change from 0 to 128 [ 1431.503541][ T3816] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1431.567833][ T3816] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1431.613901][ T680] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1431.914005][ T3834] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9212'. [ 1431.933855][ T3834] bond2 (unregistering): Released all slaves [ 1432.041944][ T3843] loop7: detected capacity change from 0 to 128 [ 1432.050942][ T3843] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1432.064948][ T3843] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1432.096866][T21247] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1432.436999][ T3856] loop5: detected capacity change from 0 to 8192 [ 1432.784749][ T3861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9224'. [ 1432.941343][ T3863] bond2 (unregistering): Released all slaves [ 1432.979837][ T3874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9229'. [ 1433.055420][ T3882] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9233'. [ 1433.083882][ T3883] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9232'. [ 1433.162207][ T3889] syzkaller0: entered promiscuous mode [ 1433.183001][ T3889] syzkaller0: entered allmulticast mode [ 1433.203485][ T3886] loop7: detected capacity change from 0 to 8192 [ 1433.623599][ T3935] loop6: detected capacity change from 0 to 512 [ 1433.691912][ T3935] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9259: bg 0: block 127: padding at end of block bitmap is not set [ 1433.727664][ T3935] loop6: lost filesystem error report for type 5 error -117 [ 1433.728541][ T3935] EXT4-fs (loop6): Remounting filesystem read-only [ 1433.737046][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1433.737075][ C1] EXT4-fs (loop6): initial error at time 1782741749: ext4_validate_block_bitmap:441 [ 1433.737107][ C1] EXT4-fs (loop6): last error at time 1782741749: ext4_validate_block_bitmap:441 [ 1433.775723][ T3935] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.6.9259: cleanup dec ref error -28 [ 1433.790914][ T3935] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 1433.803325][ T3935] EXT4-fs (loop6): 1 orphan inode deleted [ 1433.810331][ T3935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.945780][ T3935] __nla_validate_parse: 1 callbacks suppressed [ 1433.946242][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9259'. [ 1433.999754][ T3951] loop5: detected capacity change from 0 to 512 [ 1434.029409][ T3951] EXT4-fs: inline encryption not supported [ 1434.071654][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9259'. [ 1434.104129][ T3951] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1434.187223][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9259'. [ 1434.224928][ T3951] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1434.270127][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9259'. [ 1434.320900][ T3951] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1434.346198][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9259'. [ 1434.362513][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9259'. [ 1434.374172][ T3951] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9262: bg 0: block 248: padding at end of block bitmap is not set [ 1434.389173][ T3951] loop5: lost filesystem error report for type 5 error -117 [ 1434.389323][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9259'. [ 1434.395443][ T3951] Quota error (device loop5): write_blk: dquota write failed [ 1434.399540][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1434.427330][ C0] EXT4-fs (loop5): last error at time 1782741749: ext4_validate_block_bitmap:441 [ 1434.439003][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9259'. [ 1434.457344][ T3951] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1434.471688][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9259'. [ 1434.492201][ T3951] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.9262: Failed to acquire dquot type 1 [ 1434.505792][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9259'. [ 1434.519803][ T3951] loop5: lost filesystem error report for type 5 error -28 [ 1434.532150][ T3951] EXT4-fs (loop5): 1 truncate cleaned up [ 1434.547002][ T3951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1434.563189][T30055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1434.619112][T28022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1434.766579][ T3973] bond1 (unregistering): Released all slaves [ 1434.833312][ T3957] loop7: detected capacity change from 0 to 16384 [ 1435.390109][ T4042] 9p: Bad value for 'wfdno' [ 1435.482858][ T4054] netlink: 'syz.7.9307': attribute type 1 has an invalid length. [ 1435.520748][ T4060] loop7: detected capacity change from 0 to 256 [ 1435.549607][ T4060] FAT-fs (loop7): codepage cp936 not found [ 1435.641145][ T4071] 9p: Bad value for 'wfdno' [ 1436.142197][ T4107] loop5: detected capacity change from 0 to 512 [ 1436.151734][ T4107] EXT4-fs: Ignoring removed bh option [ 1436.247099][ T4107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1436.336207][ T4107] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1436.426396][ T28] audit: type=1326 audit(1782741751.748:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.6.9333" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03c5cbce59 code=0x0 [ 1436.487728][ T4107] EXT4-fs error (device loop5): ext4_resize_begin:60: comm syz.5.9332: resize_inode disabled but reserved GDT blocks non-zero [ 1436.598244][ T28] audit: type=1326 audit(1782741751.788:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.9334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6a35ce59 code=0x7ffc0000 [ 1436.636990][ T28] audit: type=1326 audit(1782741751.788:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.9334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6a35ce59 code=0x7ffc0000 [ 1436.680946][ T28] audit: type=1400 audit(1782741751.798:4949): avc: denied { write } for pid=4106 comm="syz.5.9332" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1436.768132][T28022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.778734][ T28] audit: type=1326 audit(1782741751.798:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.9334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f2e6a35ce59 code=0x7ffc0000 [ 1436.810064][ T28] audit: type=1326 audit(1782741751.798:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.9334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6a35ce59 code=0x7ffc0000 [ 1436.855979][ T28] audit: type=1326 audit(1782741751.798:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.9334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6a35ce59 code=0x7ffc0000 [ 1437.962279][ T4164] bond1 (unregistering): Released all slaves [ 1439.426142][ T4230] ieee802154 phy0 wpan0: encryption failed: -22 [ 1439.699306][ T4241] macvlan2: entered promiscuous mode [ 1439.721533][ T4241] bridge0: entered promiscuous mode [ 1439.993848][ T4247] loop0: detected capacity change from 0 to 512 [ 1440.045680][ T4247] EXT4-fs: inline encryption not supported [ 1440.151220][ T4247] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1440.183542][ T4247] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1440.227950][ T4247] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1440.277683][ T4247] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9389: bg 0: block 248: padding at end of block bitmap is not set [ 1440.294115][ T4247] loop0: lost filesystem error report for type 5 error -117 [ 1440.294464][ T4247] Quota error (device loop0): write_blk: dquota write failed [ 1440.310256][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1440.310285][ C1] EXT4-fs (loop0): last error at time 1782741755: ext4_validate_block_bitmap:441 [ 1440.328441][ T4247] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1440.339613][ T4247] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.9389: Failed to acquire dquot type 1 [ 1440.351727][ T4247] loop0: lost filesystem error report for type 5 error -28 [ 1440.352335][ T4247] EXT4-fs (loop0): 1 truncate cleaned up [ 1440.388796][ T4247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1440.443261][T30651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1441.608712][ T4303] program syz.2.9411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1441.711552][ T4293] loop7: detected capacity change from 0 to 16384 [ 1441.761086][ T4314] macvlan3: entered promiscuous mode [ 1443.303279][ T4346] __nla_validate_parse: 9 callbacks suppressed [ 1443.303301][ T4346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9427'. [ 1443.685738][ T4367] loop7: detected capacity change from 0 to 512 [ 1443.692840][ T4367] EXT4-fs: Ignoring removed bh option [ 1443.716640][ T4367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1443.730343][ T4367] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1443.755493][T28807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.778208][ T4373] loop7: detected capacity change from 0 to 764 [ 1443.983975][ T4378] loop7: detected capacity change from 0 to 16384 [ 1444.261335][ T4388] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9444'. [ 1444.489729][ T4421] loop5: detected capacity change from 0 to 512 [ 1444.497246][ T4421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1444.504331][ T4421] EXT4-fs: Ignoring removed mblk_io_submit option [ 1444.514100][ T4421] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1444.523626][ T4421] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0102] [ 1444.534573][ T4421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1444.591219][T28022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1444.750560][ T4442] loop0: detected capacity change from 0 to 512 [ 1444.762531][ T4442] EXT4-fs: inline encryption not supported [ 1444.779677][ T4442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1444.790601][ T4442] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1444.821278][ T4442] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1444.856840][ T28] audit: type=1400 audit(1782741760.188:4953): avc: denied { wake_alarm } for pid=4452 comm="syz.5.9472" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1444.879009][ T4442] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9468: bg 0: block 248: padding at end of block bitmap is not set [ 1444.913554][ T4442] loop0: lost filesystem error report for type 5 error -117 [ 1444.916680][ T4442] Quota error (device loop0): write_blk: dquota write failed [ 1444.924088][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1444.924113][ C1] EXT4-fs (loop0): last error at time 1782741760: ext4_validate_block_bitmap:441 [ 1444.977230][ T4442] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1444.998787][ T4442] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.9468: Failed to acquire dquot type 1 [ 1445.027730][ T4442] loop0: lost filesystem error report for type 5 error -28 [ 1445.031865][ T4442] EXT4-fs (loop0): 1 truncate cleaned up [ 1445.059739][ T4442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1445.096385][ T28] audit: type=1326 audit(1782741760.428:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4473 comm="syz.2.9482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff50d87ce59 code=0x0 [ 1445.136937][T30651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1445.159785][ T4479] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9485'. [ 1445.320367][ T4493] loop5: detected capacity change from 0 to 512 [ 1445.327983][ T4493] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1445.343609][ T4493] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.9490: corrupted in-inode xattr: invalid ea_ino [ 1445.376458][ T4493] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1445.376887][ T4493] EXT4-fs (loop5): Remounting filesystem read-only [ 1445.386273][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1445.386293][ C0] EXT4-fs (loop5): initial error at time 1782741760: ext4_iget_extra_inode:5180: inode 15 [ 1445.386326][ C0] EXT4-fs (loop5): last error at time 1782741760: ext4_iget_extra_inode:5180: inode 15 [ 1445.420475][ T4493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1445.508078][T28022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.644109][ T4501] loop6: detected capacity change from 0 to 512 [ 1445.671004][ T4501] EXT4-fs: inline encryption not supported [ 1445.750298][ T4501] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1445.785997][ T4501] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1445.855073][ T4501] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1445.911073][ T4501] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9494: bg 0: block 248: padding at end of block bitmap is not set [ 1445.945353][ T4501] loop6: lost filesystem error report for type 5 error -117 [ 1445.950536][ T4501] Quota error (device loop6): write_blk: dquota write failed [ 1445.957948][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1445.957973][ C0] EXT4-fs (loop6): last error at time 1782741761: ext4_validate_block_bitmap:441 [ 1445.997771][ T4509] loop7: detected capacity change from 0 to 512 [ 1446.005208][ T4509] EXT4-fs: Ignoring removed orlov option [ 1446.011265][ T4501] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1446.021672][ T4501] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.9494: Failed to acquire dquot type 1 [ 1446.057355][ T4501] loop6: lost filesystem error report for type 5 error -28 [ 1446.057867][ T4501] EXT4-fs (loop6): 1 truncate cleaned up [ 1446.098704][ T4501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1446.131868][ T4509] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1446.154064][ T4509] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1446.177313][ T4509] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1446.197475][T30055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1446.271630][T28807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.315502][ T28] audit: type=1326 audit(1782741761.648:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.7.9506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f411ccece59 code=0x0 [ 1446.454553][ T4541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.479833][ T28] audit: type=1400 audit(1782741761.688:4956): avc: denied { ioctl } for pid=4536 comm="syz.5.9508" path="socket:[134956]" dev="sockfs" ino=134956 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1446.505858][ T4541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.533349][ T4549] syzkaller0: entered promiscuous mode [ 1446.540880][ T4549] syzkaller0: entered allmulticast mode [ 1446.552164][ T4549] tipc: Enabling of bearer rejected, failed to enable media [ 1447.269219][ T4554] loop7: detected capacity change from 0 to 16384 [ 1447.615670][T14090] ================================================================== [ 1447.623944][T14090] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 1447.631366][T14090] [ 1447.633780][T14090] read-write to 0xffff8881076bdd90 of 8 bytes by interrupt on cpu 0: [ 1447.641964][T14090] __xa_clear_mark+0xf5/0x1e0 [ 1447.646679][T14090] __folio_end_writeback+0xf4/0x360 [ 1447.651937][T14090] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 1447.658244][T14090] folio_end_writeback+0x1c/0x70 [ 1447.663245][T14090] bh_end_async_write+0x1a6/0x250 [ 1447.668331][T14090] bio_endio+0x35b/0x3f0 [ 1447.672637][T14090] blk_update_request+0x338/0x710 [ 1447.677757][T14090] blk_mq_end_request+0x26/0x50 [ 1447.682686][T14090] lo_complete_rq+0x98/0x130 [ 1447.687358][T14090] blk_done_softirq+0x77/0xb0 [ 1447.692080][T14090] handle_softirqs+0xb9/0x280 [ 1447.696841][T14090] __irq_exit_rcu+0x42/0xd0 [ 1447.701376][T14090] sysvec_apic_timer_interrupt+0x74/0x80 [ 1447.707043][T14090] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1447.713076][T14090] __sanitizer_cov_trace_const_cmp4+0x0/0x90 [ 1447.719110][T14090] should_fail_alloc_page+0x6f/0x100 [ 1447.724428][T14090] __alloc_frozen_pages_noprof+0x108/0x350 [ 1447.730452][T14090] alloc_pages_mpol+0xa9/0x1d0 [ 1447.735350][T14090] folio_alloc_mpol_noprof+0x39/0x80 [ 1447.740702][T14090] shmem_get_folio_gfp+0x3ff/0xd90 [ 1447.745885][T14090] shmem_write_begin+0xfc/0x1f0 [ 1447.750813][T14090] generic_perform_write+0x186/0x490 [ 1447.756136][T14090] shmem_file_write_iter+0xc5/0xf0 [ 1447.761289][T14090] lo_rw_aio+0x6a9/0x760 [ 1447.765577][T14090] loop_process_work+0x567/0xac0 [ 1447.770562][T14090] loop_rootcg_workfn+0x22/0x30 [ 1447.775451][T14090] process_scheduled_works+0x4d4/0x9a0 [ 1447.780957][T14090] worker_thread+0x569/0x750 [ 1447.785597][T14090] kthread+0x221/0x270 [ 1447.789742][T14090] ret_from_fork+0x146/0x330 [ 1447.794378][T14090] ret_from_fork_asm+0x1a/0x30 [ 1447.799188][T14090] [ 1447.801549][T14090] read to 0xffff8881076bdd90 of 8 bytes by task 14090 on cpu 1: [ 1447.809278][T14090] xas_find_marked+0x211/0x650 [ 1447.814353][T14090] filemap_get_folios_tag+0xf7/0x400 [ 1447.819700][T14090] filemap_write_and_wait_range+0x1f5/0x370 [ 1447.825646][T14090] bdev_release+0xd4/0x3d0 [ 1447.830106][T14090] blkdev_release+0x15/0x20 [ 1447.834849][T14090] __fput+0x29e/0x630 [ 1447.838868][T14090] fput_close_sync+0xad/0x190 [ 1447.843596][T14090] __x64_sys_close+0x55/0xf0 [ 1447.848275][T14090] x64_sys_call+0x275d/0x3020 [ 1447.853166][T14090] do_syscall_64+0x136/0x3c0 [ 1447.857880][T14090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.863799][T14090] [ 1447.866143][T14090] value changed: 0xfffe000000000000 -> 0xffe0000000000000 [ 1447.873275][T14090] [ 1447.875621][T14090] Reported by Kernel Concurrency Sanitizer on: [ 1447.881803][T14090] CPU: 1 UID: 0 PID: 14090 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1447.892350][T14090] Tainted: [W]=WARN [ 1447.896169][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1447.906265][T14090] ================================================================== [ 1452.574944][ T690] bridge_slave_1: left allmulticast mode [ 1452.580703][ T690] bridge_slave_1: left promiscuous mode [ 1452.586911][ T690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.595428][ T690] bridge_slave_0: left allmulticast mode [ 1452.601265][ T690] bridge_slave_0: left promiscuous mode [ 1452.607132][ T690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.848243][ T690] batman_adv: batadv0: Interface deactivated: gretap1 [ 1452.890421][ T690] batman_adv: batadv0: Removing interface: gretap1 [ 1452.919726][ T690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1452.930263][ T690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1452.940035][ T690] bond0 (unregistering): Released all slaves [ 1452.969458][ T690] hsr_slave_0: left promiscuous mode [ 1452.977732][ T690] hsr_slave_1: left promiscuous mode [ 1452.984988][ T690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1452.995764][ T690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.005502][ T690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.015193][ T690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.026081][ T690] veth1_macvtap: left promiscuous mode [ 1453.032677][ T690] veth0_macvtap: left promiscuous mode [ 1453.081052][ T690] team0 (unregistering): Port device team_slave_1 removed [ 1453.092105][ T690] team0 (unregistering): Port device team_slave_0 removed [ 1453.356181][ T690] IPVS: stop unused estimator thread 0...