last executing test programs: 48.3155924s ago: executing program 2 (id=162): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6ac0, 0x100000000}, 0x8365, 0x0, 0xffffd304, 0x7, 0x40000204, 0x80, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x47f0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x1000004, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f00000001c0)=0x7, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0xb, 0x58, [@private=0xa010100, @multicast2]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x400000000000354, 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x8041) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20110, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x1074cc, 0x400, 0xfff7fffc, 0x0, 0x20000008, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000740)=[{r1, 0x8284}, {r3, 0x2401}], 0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x17f) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='bpf\x00', 0x41000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/mtrr\x00', 0x2, 0x0) statx(r6, &(0x7f0000000580)='./proc\x00', 0x400, 0x800, &(0x7f0000000640)) write(r6, 0x0, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000800)=@assoc_value={0x0}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000880)=@sack_info={r8, 0x0, 0x7fffffff}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000008c0)={0x0, 0x6, 0x0, 0x4, 0x4, 0x1ff, 0x7, 0xfffff0c6, r8}, 0x20) r9 = syz_pidfd_open(0x0, 0x0) setns(r9, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x8000, &(0x7f0000000140)={0x6, 0x8a, 0x20000, {r5}}, 0x20) 47.852250757s ago: executing program 2 (id=165): syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) personality(0x87bf5ac905ea0f7f) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x6, @perf_config_ext={0x3ff, 0x7}, 0x100004, 0x0, 0x10004, 0x3, 0x2, 0x7, 0x1000, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff358}, 0x0, 0x80000000, 0x0, 0x2, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000740)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000000780)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0xffff, @local, 0x3}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000400)={r3, 0xac}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000480)={r4}, &(0x7f00000004c0)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_bpf={0x9c, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x67, 0x6, "0111e5d16dbe1d682120708dd8dab0a554474ad149a69b3daa6e9fc43578cfe884cda6ffb7f1e46fff3fb72929ac0a06efa7b3d47fc982773d6b2599cc3da1245010cf3f375927332aa34b1f1218d59a702d6e770656e84134d5e0ca4a560611cba30e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2000}, 0x10) 46.379647317s ago: executing program 2 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000d40)={{r0}, r1, 0x0, @inherit={0x50, &(0x7f0000000380)={0x1, 0x1, 0x7fff, 0x3, {0x22, 0xe8b, 0xffffffffffff8294, 0x3, 0x300000000000}, [0x9]}}, @name="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"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000580), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r6 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x173) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000880)='10', 0x2) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000008c0)={0x42, 0xfffffbfc, 0x2}, 0x2e) socket$inet_udp(0x2, 0x2, 0x0) 45.401207686s ago: executing program 2 (id=174): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x2, @perf_config_ext={0x80000001, 0x1}, 0x200, 0x0, 0x7fff, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='enable_event:sched:sched_process_fo', 0x23) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) tkill(r2, 0x7) wait4(r2, 0x0, 0x0, 0x0) get_robust_list(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="60000000300005060100000000000000000000004c0001804800018007000100637400003c0002801800010001000000000000000300000000000000000000000600030008000000080010006674700005001100020000000500120006000000b3d62f8b7367b16efb94", 0x6a}], 0x1}, 0x800) r4 = io_uring_setup(0x1, &(0x7f0000000340)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r4, 0x20, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000440)={&(0x7f0000000480), 0x1000}, &(0x7f00000004c0)={&(0x7f0000000500), 0x1000, 0x1}}, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000600)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r4, 0x24, &(0x7f00000006c0)={0x0, 0x3}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000740)={@private2}, &(0x7f0000000780)=0x14) socket$kcm(0x10, 0x2, 0x4) 44.836232953s ago: executing program 2 (id=178): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3f}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280)}}], 0x1, 0x20008000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="02000000c76400"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x4000050}, 0xc000) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000380)=[{&(0x7f00000003c0)='\t', 0x1}], 0x1}, 0x41) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xe761}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000000c0)=0xfffefffd, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, 0x0, 0x8040) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000002280)=""/112, 0x70}], 0x1}, 0x121) 44.523201305s ago: executing program 2 (id=179): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x4}, 0x0, 0x0}) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x2, 0x4, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000140)="19", 0x1, 0x80, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x5}, 0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffff359}, 0x0, 0x80000000, 0xfffffffc, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x20000400) r3 = socket$inet(0x2, 0x2, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$kcm(r5, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x10400, 0x0) ioctl$KDDELIO(r6, 0x4b35, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2a}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x5}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffff7fff}]}}]}, 0x70}}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) iopl(0x3) 44.450192932s ago: executing program 32 (id=179): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x4}, 0x0, 0x0}) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x2, 0x4, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000140)="19", 0x1, 0x80, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x5}, 0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffff359}, 0x0, 0x80000000, 0xfffffffc, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x20000400) r3 = socket$inet(0x2, 0x2, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$kcm(r5, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x10400, 0x0) ioctl$KDDELIO(r6, 0x4b35, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a010400000000000000000a0004050900010073797a310000000008000940000000010900020073797a3200000000140000001100010000000000000000000100000a3f37041eb7f35f2438271fd1d5c040ef63efc425fc94c34cd719ffe637671f33b742d89bb7e35dee52cc395d4a116f1012b7678f49b0084004fba76d51c6df51a32b323e015e2b1f0c78cd1a40eb05d7c94e2d3394629de8254dbddcfff4b12033edb6a83d2219686684415af183bd6e9bb41d862d1abe28cd94ceae0293d78e58ee61f59a9209c5794d56163e082addfc7eb067c4018859208bd29e66e868a423eae3b61d4d9416ffd6fd919e7e819e9d4b87255e6abded248617ca"], 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2a}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x5}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffff7fff}]}}]}, 0x70}}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) iopl(0x3) 5.726688859s ago: executing program 1 (id=390): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x8001, 0x7, 0x4]}, 0xa) mq_open(&(0x7f0000000540)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) syz_open_dev$usbmon(0x0, 0x10000, 0x101002) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r3 = openat(r2, &(0x7f0000000140)='./file0/file0\x00', 0x42, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x5, 0x12) sendmsg$AUDIT_USER(r3, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)={0xe8, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfd, "34883d679799229244cc7d2412e4b89e90dd421b084ac411b4e18392b0cf72e8793a2375c3231ad8266569fb3b8796c24845acb8c6fb93952088164dba0cfb6a78ba11d7b569b528a504f869919079592f96a0bccc2d08dc61da20a27e4d935e1b0c89ebb9e49aff6224a99c4d6cd5b4d2a2efa0f15602f6e5060c6058a005f742682784ad62d0f4c86c8417caef2d3073a5524f1bf2a102ef72abeb298229ccde0c0f8f4da57696260f36f16dbb2b910d9f93d31aaec9950d1999e284ee34ed650e72e4f5e512cbb01aa22d0769e39f771b82475a"}, 0xe8}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000020) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, 0x0, r2, &(0x7f0000000480)='./file0\x00', 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) fsopen(0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x0, &(0x7f0000000880)={[{@acl}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@inlinecrypt}, {@noauto_da_alloc}]}, 0x7, 0x613, &(0x7f0000000900)="$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") 4.946404318s ago: executing program 0 (id=391): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x10001, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x21, 0x4a6, &(0x7f0000000c00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xa, 0xf, &(0x7f0000001240)=ANY=[], 0x0, 0xf, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r0, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRES8, @ANYRES16=r3], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x44080) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$nl_generic(0x10, 0x3, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mlock(&(0x7f00006e6000/0x2000)=nil, 0x2000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001280), 0x200) 4.576293636s ago: executing program 3 (id=392): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f0000000a40)=""/145, 0x91) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000007c0), 0x7, 0x180062) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000004c0)={0x0, 0x2, 0x2, 0x73e9}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000580), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@arena={0x21, 0x0, 0x0, 0x36, 0x20000, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xbd}}, &(0x7f0000000080)='syzkaller\x00', 0xffff, 0x48, &(0x7f0000000180)=""/72, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0x24, 0x9}, 0x10, 0x6529, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[r0, 0xffffffffffffffff, r4, r5, r6, r7, 0x1], &(0x7f00000006c0)=[{0x3, 0x5, 0x9, 0x7}], 0x10, 0xffff}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/pm_wakeup_irq', 0x20000, 0x1d2) ioctl$BLKRRPART(r3, 0x125f, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 4.573929446s ago: executing program 5 (id=393): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x10001, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x21, 0x4a6, &(0x7f0000000c00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xa, 0xf, &(0x7f0000001240)=ANY=[], 0x0, 0xf, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r0, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRES8, @ANYRES16=r3], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x44080) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$nl_generic(0x10, 0x3, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mlock(&(0x7f00006e6000/0x2000)=nil, 0x2000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) 4.53352676s ago: executing program 1 (id=394): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x14c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2000000000000216, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) setns(0xc9, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000100008f}, 0x0) io_setup(0x239f, &(0x7f0000000680)=0x0) r7 = eventfd2(0x1000006, 0x80800) io_submit(r6, 0x2, &(0x7f00000006c0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x6, r7, 0x0, 0x0, 0x800002, 0x0, 0x0, r7}, &(0x7f0000000740)={0x0, 0x0, 0x8000000, 0x1, 0x9841, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) sendto$inet6(r5, &(0x7f00000007c0)="1a", 0x1, 0x0, &(0x7f0000000800)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) 4.3399503s ago: executing program 0 (id=395): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) copy_file_range(r0, &(0x7f0000000280)=0x7, r1, 0x0, 0x8000000000000001, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEXC(0xb, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000c00)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x4000840) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2008759, &(0x7f0000000a00)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@bh, 0x0}, {@noauto_da_alloc}, {@data_writeback}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@resgid}, {@noblock_validity}, {@data_writeback}, {@bsdgroups}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}], 0x2c}, 0x0, 0x51b, &(0x7f00000004c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x401) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000340)=@file={0x1}, 0x6e) listen(r7, 0x78c) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f00000003c0)=@file={0x1}, 0x6e) connect$unix(r8, &(0x7f0000000440)=@file={0x1}, 0x6e) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x78, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000054}, 0x4004805) write$tun(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="000089142430", @ANYRES64=r5], 0xb2) 4.080159356s ago: executing program 4 (id=396): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x10001, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x21, 0x4a6, &(0x7f0000000c00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xa, 0xf, &(0x7f0000001240)=ANY=[], 0x0, 0xf, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r0, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRES8, @ANYRES16=r3], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x44080) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$nl_generic(0x10, 0x3, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mlock(&(0x7f00006e6000/0x2000)=nil, 0x2000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) 3.805608134s ago: executing program 5 (id=397): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000140)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000180)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x181042, 0x65) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000cc0)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000001080)={0x84, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6a, 0x3, "828995bc8998d708c8205980bc4ef99108712892d75d18a81438917add0ac38500be4cd69dbc10f98b1415256864f91b7b746a860b7fb8c1a0b88f1f54b5796ae443fdeacfd575c982678d1632b8d78bdafd7a8ed6d1804d895fffb35ac473145033876ac3c5"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4048944}, 0x4000004) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000034000000030a01020000000000000000020000060900010073797a300000000013000300fd02b21edf8b721e23f25f000a00000014000000110001000000000000000000"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x20d42, 0x4) r7 = openat(0xffffffffffffff9c, 0x0, 0xa0802, 0x4) readv(r7, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)=0x2) select(0x40, &(0x7f00000008c0)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000980)={0x2, 0x4e24, @loopback}, 0x10) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x65, 0x3e, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x49}, 0x4, 0x4000000000000008, 0x40, 0x5, 0x2, 0x9000000e, 0x0, 0x0, 0x5, 0x0, 0xc0}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@empty, @in=@broadcast, 0x4e20, 0xd, 0x4e23, 0x8, 0x2, 0x40, 0xc0, 0x21}, {0x6, 0x3, 0x80000000, 0x800, 0xe, 0x8000, 0x40, 0x5}, {0x1, 0x100000000, 0xfffffffffffeffff, 0x8}, 0xf4, 0x6e6bb8, 0x0, 0x0, 0x2, 0x2}, {{@in=@multicast2, 0x4d7, 0x6c}, 0x2, @in=@multicast2, 0x3503, 0x2, 0x0, 0xff, 0x0, 0x6, 0xffff}}, 0xe8) 3.608028165s ago: executing program 3 (id=398): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x8365, 0x0, 0xffffd304, 0x7, 0x40000204, 0x9, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000013c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x55}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x63dcbf62d8600606, r7, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) bind$packet(r5, &(0x7f0000000680)={0x11, 0x606, r7, 0x1, 0x40, 0x6, @broadcast}, 0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r8, 0x0, 0xa85, 0xf) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000001400)='.\x00', 0xa880, 0x97) fsopen(&(0x7f0000000040)='nfs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x92b, 0x0, 0x0, 0x40f00, 0x24, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 3.594083246s ago: executing program 4 (id=399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) r1 = perf_event_open(&(0x7f0000001280)={0x2, 0x80, 0x12, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1946}, 0x4, 0x4, 0x0, 0x8, 0x7ffd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file1\x00', 0x200000, &(0x7f0000001500)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESOCT], 0x1, 0x398, &(0x7f0000001540)="$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") openat(0xffffffffffffff9c, &(0x7f0000001900)='./file2\x00', 0x105042, 0x0) io_submit(0x0, 0x1, &(0x7f0000001940)=[0x0]) openat$zero(0xffffffffffffff9c, 0x0, 0x5036e94bcff318a, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001a00), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001a40)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000001a80)={&(0x7f0000001ac0)={0x1d, r4}, 0x10, &(0x7f0000001b00)={&(0x7f0000001b40)={0x2, 0x4, 0x7f, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "9b8c3031a6d45e3c"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004881}, 0x44000) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x4, 0xa, 0x2, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000080007000000", @ANYRES32=r6, @ANYBLOB="911302af"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0x710dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x13}, 0x4040, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000000002b400000000000000001800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x1, 0x8}]}, &(0x7f00000006c0)='GPL\x00', 0x5}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) socket$packet(0x11, 0x2, 0x300) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)}, 0x90) 3.491302276s ago: executing program 1 (id=400): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0xb99, {{0xa, 0x4e22, 0x9, @empty, 0x80000000}}}, 0x90) r1 = dup(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_config_ext={0x8ac, 0xffffffffffff60bb}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x4, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1146b5, 0x0, 0xfffffffe, 0x4, 0x7, 0xfffffff6, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) tee(r4, r7, 0x8f5, 0x100000000000000) write(r5, 0x0, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xd00001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000400)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x1, 0x0, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x9, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_INPUT(r1, &(0x7f0000000a00)={0xc, {"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", 0x7c4}}, 0x1006) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)={0x7c, r10, 0x301, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0x7}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4850}, 0x50) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000001c40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x610080}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, r10, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7a}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x61570780e2fcb664}, 0x400b0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) 3.472896228s ago: executing program 5 (id=401): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = creat(0x0, 0xe0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1042, 0x0) open(0x0, 0x44600, 0xe898d2275f5868d7) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x8800, 0xff, 0x0, 0x7, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x40) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002480)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0xfffffffffffffee5) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4c881, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) shutdown(r0, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000440)={r5, &(0x7f00000005c0), &(0x7f0000000600)=""/3, 0x2}, 0x20) sendmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x2000, &(0x7f0000000740)=[{&(0x7f0000000780)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.999704466s ago: executing program 5 (id=402): syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x8002) syz_io_uring_setup(0xec6, &(0x7f0000000000)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x101, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)='r', 0x1}], 0x1}}], 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0x2, &(0x7f00000002c0)) syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x3800813, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=cp1251,utf8,overriderockperm,nojoliet,nojoliet,overriderockperm,dmode=0x0000000000000003,dmode=0x0000000000000002,mode=0x0000000000000080,hide,block=0x0000000000000200,map=acorn,overriderockperm,check=relaxed,gid=', @ANYRESDEC, @ANYRESDEC=0x0], 0x3, 0xa5d, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f0000001ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000001140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001180)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000011c0), 0x0) close(0x3) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_ext={0x1a, 0xf, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001340)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000001380), 0x0) close(r5) close(0x3) perf_event_open(0x0, 0xffffffffffffffff, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000001b80)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x2, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$l2tp(0x2, 0x2, 0x73) 2.999398276s ago: executing program 3 (id=403): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./mysys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000440)="ff", 0xd00, 0xd) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) setxattr$security_capability(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f00000002c0)=@v1={0x1000000, [{0x5c3c}]}, 0xc, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x35c, 0x0) preadv(r5, &(0x7f0000000200)=[{0x0}], 0x1, 0x200005, 0x92874fa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x58080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x1, @perf_config_ext={0x7fffffffffffffff, 0x5}, 0x10c0e8, 0x0, 0x7, 0x4, 0x397, 0x8001, 0x5}, 0x0, 0xff6fbfffffffffff, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt/trace_pipe\x00', 0x0, 0x0) 2.997099316s ago: executing program 0 (id=412): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) lsm_get_self_attr(0x66, &(0x7f00000001c0)={0x0, 0x0, 0x1029, 0x1009, ""/4112}, &(0x7f0000001200)=0xfffffffffffffc84, 0x0) syz_mount_image$ext4(&(0x7f0000001240)='ext4\x00', &(0x7f0000001280)='./bus\x00', 0x321081a, &(0x7f00000012c0)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000001300)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001780), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x24, r1, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001880)={'wpan4\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000018c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r2, &(0x7f0000001900)={0x2, 0x4e21, @multicast1}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000001940)={0x77c, 0x8001, 0x9}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001980)='./file1\x00', 0x8a141, 0x59) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = fsopen(&(0x7f00000019c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000001a00)='fd', &(0x7f0000001a40)='\x00F\xaa\n5\x10\xa7\\GZ&\x7fd\xe7\x17\xec\xf9yf\x013', 0x0) sendmsg$kcm(r7, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x82e}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x22, 0x0) pwrite64(r6, &(0x7f0000001c40)="f6", 0x1, 0xe32d) r9 = open(&(0x7f0000001c80)='./file1\x00', 0x66842, 0x21) setxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=@known='system.advise\x00', &(0x7f0000001d40)='acl', 0x3, 0x2) r10 = open_tree(r9, &(0x7f0000001d80)='./file1\x00', 0x80000) stat(&(0x7f0000001dc0)='./bus\x00', &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001e80)='./file1\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r10, &(0x7f0000001f40)='./bus\x00', r11, r12, 0x800) 2.967616469s ago: executing program 4 (id=404): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000100), 0x10) sendmmsg$sock(r3, 0x0, 0x0, 0x20004090) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) close(0xffffffffffffffff) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x64) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8c, 0x2}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='attr/fscreate\x00') write$binfmt_script(r6, &(0x7f0000000440)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mount(0x0, &(0x7f0000001440)='./dev\x00', &(0x7f0000001480)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./mnt\x00', 0x1ff) chdir(&(0x7f0000001500)='./mnt\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001540)='cpuset.effective_mems\x00', 0x275a, 0x0) getresuid(&(0x7f0000001580)=0x0, 0x0, &(0x7f00000015c0)=0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./file1\x00', 0x141442, 0x40) fallocate(r9, 0x0, 0xfff, 0x9) setxattr$system_posix_acl(&(0x7f0000001640)='.\x00', &(0x7f0000001680)='system.posix_acl_default\x00', &(0x7f0000001880)=ANY=[@ANYBLOB="02000000010000000000000002000500", @ANYRES32=r7, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="216a8f832206307b14ade5a5001400", @ANYRES32=r7, @ANYBLOB="02000300", @ANYRES32=r8, @ANYBLOB="02000500", @ANYRES32=r7, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x4c, 0x1) mkdir(&(0x7f0000001740)='./control\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x40) sendto$packet(r0, &(0x7f0000000080)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.846428671s ago: executing program 0 (id=405): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x1, 0x0, 0x20, 0x0, 0x0, 0x6, 0x8100, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0xc}, 0x19142, 0x6, 0x2, 0x3, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000550000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000800)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) capset(&(0x7f0000000ac0)={0x20080522}, &(0x7f0000000b00)={0x1000, 0x10ffff, 0xfffffffd}) r4 = socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000bc0)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000c00), 0x4) sendmsg$nl_route(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x3, 0xfffffffffffffffd}) 2.779122198s ago: executing program 4 (id=406): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x10001, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x21, 0x4a6, &(0x7f0000000c00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xa, 0xf, &(0x7f0000001240)=ANY=[], 0x0, 0xf, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r0, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRES8, @ANYRES16=r3], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x44080) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$nl_generic(0x10, 0x3, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mlock(&(0x7f00006e6000/0x2000)=nil, 0x2000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001280), 0x200) 2.536540882s ago: executing program 1 (id=407): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x10001, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x21, 0x4a6, &(0x7f0000000c00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xa, 0xf, &(0x7f0000001240)=ANY=[], 0x0, 0xf, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r0, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRES8, @ANYRES16=r3], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x44080) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$nl_generic(0x10, 0x3, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mlock(&(0x7f00006e6000/0x2000)=nil, 0x2000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) 2.46119567s ago: executing program 5 (id=408): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) setns(0xc9, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) sendmmsg$sock(r6, &(0x7f0000001680), 0x0, 0x8015) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x4, @perf_bp={0x0, 0x6}, 0x100004, 0x0, 0x10004, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time\x00', 0x26e1, 0x0) splice(r7, 0x0, r8, 0x0, 0x87e, 0xd) 2.460773481s ago: executing program 3 (id=409): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x10001, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x21, 0x4a6, &(0x7f0000000c00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xa, 0xf, &(0x7f0000001240)=ANY=[], 0x0, 0xf, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r0, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRES8, @ANYRES16=r3], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x44080) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$nl_generic(0x10, 0x3, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mlock(&(0x7f00006e6000/0x2000)=nil, 0x2000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) 2.436684663s ago: executing program 4 (id=410): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2a, 0x2, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, &(0x7f0000000080)=0x8, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0xd, 0x800, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x9, 0x100}, 0xb45, 0x4, 0x1, 0x8, 0x109, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x552e1a7561534260, 0x0, 0x39, 0x0, &(0x7f0000000100)) getitimer(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xd07, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0x8200, 0x4602}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x40}}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x8ac, 0xffffffffffff60bb}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) 2.201796536s ago: executing program 0 (id=411): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000440)=0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000b48a0000850000001b0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x14, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) mmap(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) pipe(0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x1) r1 = perf_event_open(&(0x7f00000007c0)={0x4, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xc8, 0x3ff}, 0x100543, 0x0, 0x0, 0x9, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80000, 0x0) brk(0x9) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20000, 0x8c) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000fbe1e2790791d2d100ff070000000000000c00fbbfffffffffffff005f007da834859e729241eebb6b5d93b6e10970184aedd748602b2e"], 0x0, 0x34, 0x0, 0x0, 0x6b}, 0xfdab) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000700000000000000c000002f9500000000000000be"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$kcm(0x21, 0x2, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000040)={0x3, 0xf8, 0x5}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000000680)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX=r1, @ANYRES32=r2, @ANYRES16=r2, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r2, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x108) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xc, 0x12, r5, 0x0) r6 = syz_clone(0x4008400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r6) waitid(0x0, 0x0, 0x0, 0xe, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) 1.149711663s ago: executing program 1 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc0049364, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000440)=0xf) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000b00)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000240)={0xc, 0xffe, 0x9, 0x42000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4], 0x28}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000340)={0x1, 0x3}) connect$inet6(r3, &(0x7f0000000b40)={0xa, 0x4e23, 0x6, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x3c, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x1, 0x0, 0xe691, {[@timestamp={0x8, 0xa, 0x9, 0x3}, @sack={0x5, 0xa, [0x4800, 0x62]}]}}}}}}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000b80)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x9c, 0x11, 0x0, @local, @local, {[], {0x4ea3, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "9167922218d8d8cc829b5011f3aae7f76594125f3ca136e54c15ce81323407e7", "93f4e66f7c22b74c282620aa6762ac19bc005a86fc63c76eeb3c2f169ed59955bd1122095b61de86ebca601638f17770", "29191f62beac52934d0d5911e518ac3dc4f2410f881e19619f469606", {"ad0bd09706ed564b3a07165f761b51d1", "a61ea8fe60d866390eacc4e3188504a5"}}}}}}}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00', 0x40002, 0x128) sendfile(r5, r5, 0x0, 0x1) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4) ioctl$FICLONE(r1, 0x40049409, r6) 1.018967567s ago: executing program 3 (id=414): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x4b, 0x1, [0xffffffc0]}}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) setns(0xc9, 0x0) iopl(0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x0, &(0x7f0000001500)={[{@bsdgroups}, {@lazytime}, {@nodelalloc}, {@init_itable}, {@nobarrier}]}, 0x21, 0x4a6, &(0x7f0000000a40)="$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") r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) fadvise64(r6, 0x6, 0x100001, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x58b}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c041) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000f00)="b7308e7aadfddc4a8b33d934784e02ecb4a241e97f901683257d18edf9646d5f90d7277879aff4d3b53af1d9d4d55250a8b2e8024780e79dd90fc3ee0dbad6e2cde0b6bd6804ada34a799591f6523c42c870870e6f8493a04077c72642d774e9f0995e2763c566a91d16598e00389cd4bf93e29a188644080f56b5c8fe487644bddec765be210dcbbd095a48dcee37a7cc99fa3a699431dcd46d0d6e6118341f87594a6deeed68ad0908678405b77a0677b25947056840824b2894c3b668c1a8f3ac77205df8909385b17d8f14c31851253a161f27ca3c6ddcf692e7db661b778d164e8f325b", 0xe6) sendmmsg$sock(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) 942.364084ms ago: executing program 4 (id=415): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4bb, &(0x7f0000000f00)="$eJzs3cFvFF8dAPDvTFtaSqFVOahRQUSrIey2CzSEE14whpAYiScPUNulabrbbbpbpJVD+R9MJPGkf4IHEw8mnLx705sXPJigEg018bBmZrellG5bpO3+6H4+ycvMm8fu9z2WeW/3S7svgJ51MSLWI+JURDyMiNH29aRd4narZH/uzeunMxuvn84k0Wze/0eSt2fXYttjMmfazzkUET/8XsRPkvfj1lfXFqYrlfJyu15sVJeK9dW1q/PV6bnyXHmxVJqanJq4ee1G6dDGeqH6m1d35u/+6Pe/++rLP65/52dZt0babdvHcZhaQx/YipPpj4i7RxGsC/ra4znV7Y7wf0kj4vMRcSm//0ejL381AYCTrNkcjebo9joAcNKleQ4sSQvtXMBIpGmh0MrhnY/htFKrN648qq0szrZyZWMxkD6ar5Qn2rnCsRhIsvpkfv62XtpRvxYR43cifj54Oq8XZmqV2W6+8QGAHnZmx/r/78HW+g8AnHBD3e4AAHDsrP8A0Hs+eP1/cjT9AACOj8//ANB7rP8A0Hus/wDQe6z/ANBTfnDvXlaaG+3vv559vLqyUHt8dbZcXyhUV2YKM7XlpcJcrTaXf2dPdb/nq9RqS5PXY+VJsVGuN4r11bUH1drKYuNB/r3eD8oDxzIqAGAvn7vw4s9JRKzfOp2X2LaXg7UaTra02x0Auqav2x0AusZuX9C7fMYHdtmi9x0df0To+eH3BTge41+S/4deJf8PvUv+H3rXfvl/7w/g5Go2E3v+A0CPkeMH/P8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLiRvCRpob3X50ikaaEQcTYixmIgeTRfKU9ExLmI+NPgwGBWn+x2pwGAj5T+LWnv/zU+enlkZ+up5D+D+TEifvrL+794Mt1oLE9m1/+5db3xvH291I3+AwD72VynN9fxTW9eP53ZLMfZn1ffbW0umsXdaJdWS3/058ehGIiI4X8l7XpL9n6l7xDirz+LiC/uNv4kz42MtXc+3Rk/i332WOOn78RP87bWMfu7+MIh9AV6zYts/rm92/2XxsX8uPv9P5TPUB9vc/7beG/+S7fmv74O89/Fg8a4/ofvd2x7FvHl/t3iJ1vxkw7xLx8w/l++8rVLndqav4oYj93jb49VbFSXivXVtavz1em58lx5sVSampyauHntRqmY56iLm5nq9/391pVze41/uEP8oX3G/80Djv/X/33446/vEf/b39j99T+/R/xsTfzWAeNPD/+24/bdWfzZDuPf7/W/csD4L/+6Nru9PnjAxwEAR6O+urYwXamUl504+cRPms1mM/s3/Vnpz6d90u2ZCThqb2/6bvcEAAAAAAAAAAAAAADo5Dh+najbYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODk+l8AAAD//7p22po=") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000780)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000800)=0x1, 0x4) sendmsg$inet6(r4, &(0x7f0000000840)={&(0x7f0000000880)={0xa, 0x4e24, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000300000000000000000002000000000000000000"], 0x18}, 0xc4) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000900)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x1c, &(0x7f0000000980)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f00000009c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={0x0, 0x401}, &(0x7f0000000a40)=0x8) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x10, &(0x7f0000000ac0)=[@in={0x2, 0x10, @private=0xa010101}]}, &(0x7f0000000b00)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000b40)={0x1, [0x0]}, &(0x7f0000000b80)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000bc0)={r7, 0x1, 0x40, 0x4, 0x1000, 0x0, 0x1, 0x5, {r5, @in6={{0xa, 0x4e23, 0x7, @local, 0x4fe9}}, 0x3dd, 0xfffffffc, 0x8001, 0x4, 0xffffffff}}, &(0x7f0000000c80)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000cc0)={0x0, 0x60, "128897c20bdcbdbd4f4bcfd93c2472d8fc1ab9ec6a72f8ef71621109fc3cfe413e867bfc259d0f20395b39522d824ce9ce8a33b4b3d6b127fbb3690a138b0323568fb19f6c7477b46764ecd0d417984a285cc122c39d64da734cd128438852a5"}, &(0x7f0000000d40)=0x68) sendmmsg$inet_sctp(r3, &(0x7f0000000d80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x800}], 0x2, 0x80) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000e00)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000e80)={&(0x7f00000013c0)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000001440)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 724.111467ms ago: executing program 5 (id=416): symlink(0x0, 0x0) r0 = memfd_create(&(0x7f0000000c80)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc020000000000000000000000000001000107144e230000000000003a00", @ANYRES32=0x0, @ANYRES32=0x0], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000003c0), 0x4) sendto$inet(r7, &(0x7f0000000400), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000440)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xfffffffffffffe36, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$key(r8, &(0x7f0000000580)={0x900, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="020afc000700000028bdc16bafccdf2505001a0000000000000000000000000000000000ac14bf194c2f815114890000000000000a0049"], 0x38}}, 0x40408c0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000640)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000f00)={0x0, 0x1, 0x71f2, 0x1000007}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r9, &(0x7f0000000f80)='4', 0x1) 142.698256ms ago: executing program 1 (id=417): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) lsm_get_self_attr(0x66, &(0x7f00000001c0)={0x0, 0x0, 0x1029, 0x1009, ""/4112}, &(0x7f0000001200)=0xfffffffffffffc84, 0x0) syz_mount_image$ext4(&(0x7f0000001240)='ext4\x00', &(0x7f0000001280)='./bus\x00', 0x321081a, &(0x7f00000012c0)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000001300)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001780), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x24, r1, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001880)={'wpan4\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000018c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r2, &(0x7f0000001900)={0x2, 0x4e21, @multicast1}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000001940)={0x77c, 0x8001, 0x9}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001980)='./file1\x00', 0x8a141, 0x59) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = fsopen(&(0x7f00000019c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000001a00)='fd', &(0x7f0000001a40)='\x00F\xaa\n5\x10\xa7\\GZ&\x7fd\xe7\x17\xec\xf9yf\x013', 0x0) sendmsg$kcm(r7, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x82e}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x22, 0x0) pwrite64(r6, &(0x7f0000001c40)="f6", 0x1, 0xe32d) r9 = open(&(0x7f0000001c80)='./file1\x00', 0x66842, 0x21) setxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=@known='system.advise\x00', &(0x7f0000001d40)='acl', 0x3, 0x2) r10 = open_tree(r9, &(0x7f0000001d80)='./file1\x00', 0x80000) stat(&(0x7f0000001dc0)='./bus\x00', &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001e80)='./file1\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r10, &(0x7f0000001f40)='./bus\x00', r11, r12, 0x800) 141.117545ms ago: executing program 0 (id=427): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0x1, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xf}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x2, 0x0, 0xfffffffb}}) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000540)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x895, &(0x7f0000000680)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private2, 0x800, 0x0, 0x3, 0x1, 0x40, 0x120}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000780)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000007c0)={@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x810, 0x2, 0x3, 0x2, 0x108, 0x8c}, 0x20) r4 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000240)=0x100, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000800)={0x0, 0x2710}, 0x10) recvfrom$inet6(r5, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0001500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/209, 0xd1}], 0x1}, 0x0) 0s ago: executing program 3 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x10000000004}, 0x4, 0x9, 0x11000, 0x5, 0x2, 0x90000011, 0x4, 0x0, 0x0, 0x0, 0xa4}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x263f, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) fspick(r2, &(0x7f0000000000)='./file0\x00', 0x1) syz_clone3(&(0x7f0000000300)={0x2c2000100, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, &(0x7f0000000240)=""/112, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000400), 0x1000, 0x1) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r6, 0x0, 0x40) recvmmsg(r6, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/72, 0x48}, 0x81}], 0x2, 0x20000020, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000400)={0x7, 'ip_vti0\x00', {0x1}, 0x4}) kernel console output (not intermixed with test programs): ] loop1: p1 start 65792 is beyond EOD, truncated [ 60.470248][ T3933] loop1: p2 size 590592 extends beyond EOD, truncated [ 60.479703][ T3933] loop1: p3 start 524042 is beyond EOD, truncated [ 60.479821][ T3933] loop1: p4 start 131072 is beyond EOD, truncated [ 60.789314][ T3276] udevd[3276]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 61.331981][ T3961] loop4: detected capacity change from 0 to 4096 [ 61.360219][ T3961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.606353][ T3970] loop1: detected capacity change from 0 to 1024 [ 61.642195][ T3970] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 61.813547][ T3970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.880045][ T3967] xt_recent: Unsupported userspace flags (000000c5) [ 62.267960][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.475609][ T3992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.476038][ T3992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.595706][ T3997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.699195][ T3984] loop3: detected capacity change from 0 to 1024 [ 62.761434][ T3992] tipc: Started in network mode [ 62.761512][ T3992] tipc: Node identity ac1414aa, cluster identity 4711 [ 62.761736][ T3992] tipc: Enabling of bearer rejected, failed to enable media [ 62.829831][ T3984] EXT4-fs: Ignoring removed bh option [ 62.864955][ T3984] EXT4-fs: Ignoring removed i_version option [ 63.135691][ T3984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 63.193871][ T3970] capability: warning: `syz.1.103' uses 32-bit capabilities (legacy support in use) [ 63.239578][ T4003] loop2: detected capacity change from 0 to 256 [ 63.245348][ T4003] msdos: Bad value for 'uid' [ 63.245401][ T4003] msdos: Bad value for 'uid' [ 63.318434][ T4012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.109'. [ 63.318842][ T4012] netlink: 'syz.2.109': attribute type 1 has an invalid length. [ 63.319131][ T4012] netlink: 52 bytes leftover after parsing attributes in process `syz.2.109'. [ 63.357451][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.532370][ T4017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.111'. [ 63.532448][ T4017] sch_fq: defrate 0 ignored. [ 63.556792][ T4017] loop3: detected capacity change from 0 to 128 [ 63.565546][ T4017] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 63.568912][ T4017] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.569496][ T4017] ext2 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.591467][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 63.591506][ T30] audit: type=1400 audit(1794402846.030:1130): avc: denied { write } for pid=4016 comm="syz.3.111" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.597825][ T4017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.111'. [ 63.650889][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.669794][ T4020] loop3: detected capacity change from 0 to 512 [ 63.678782][ T4020] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 63.678855][ T4020] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 63.844132][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.950430][ T30] audit: type=1400 audit(1794402846.400:1131): avc: denied { getopt } for pid=4019 comm="syz.3.112" lport=253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.357183][ T4024] bond1: Unable to set up delay as MII monitoring is disabled [ 64.380496][ T4024] bond1 (unregistering): Released all slaves [ 64.527296][ T4037] loop1: detected capacity change from 0 to 512 [ 64.539096][ T4037] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 64.583806][ T4037] EXT4-fs (loop1): 1 orphan inode deleted [ 64.585220][ T4037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.586597][ T4037] ext4 filesystem being mounted at /23/. supports timestamps until 2038-01-19 (0x7fffffff) [ 64.621131][ T358] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.621158][ T358] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:6: Failed to release dquot type 1 [ 64.657219][ T30] audit: type=1400 audit(1794402847.120:1132): avc: denied { create } for pid=4036 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.678852][ T4037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.116'. [ 64.683875][ T30] audit: type=1400 audit(1794402847.120:1133): avc: denied { write } for pid=4036 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.749281][ T4044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.749953][ T4044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.030622][ T4048] loop3: detected capacity change from 0 to 512 [ 65.058291][ T4048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.091409][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.126554][ T30] audit: type=1400 audit(1794402847.580:1134): avc: denied { execute } for pid=4051 comm="syz.3.120" name="mnt" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.152764][ T30] audit: type=1400 audit(1794402847.590:1135): avc: denied { bind } for pid=4051 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.152802][ T30] audit: type=1400 audit(1794402847.590:1136): avc: denied { listen } for pid=4051 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.152835][ T30] audit: type=1400 audit(1794402847.590:1137): avc: denied { accept } for pid=4051 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.281927][ T4055] loop3: detected capacity change from 0 to 512 [ 65.293847][ T4055] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 65.294161][ T4055] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.303315][ T4055] EXT4-fs (loop3): 1 truncate cleaned up [ 65.307870][ T4034] pim6reg: entered allmulticast mode [ 65.332024][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.350751][ T4055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.529123][ T4062] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 65.529140][ T4062] block device autoloading is deprecated and will be removed. [ 65.553772][ T4063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.122'. [ 65.600411][ T4062] md: md0 stopped. [ 65.605497][ T30] audit: type=1400 audit(1794402847.980:1138): avc: denied { read write } for pid=4057 comm="syz.0.123" name="md0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.784295][ T4065] loop1: detected capacity change from 0 to 512 [ 65.842841][ T4065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.843452][ T4065] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.326346][ T4074] loop2: detected capacity change from 0 to 164 [ 66.331842][ T4055] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.121: bad entry in directory: inode out of bounds - offset=12, inode=2048, rec_len=12, size=1024 fake=1 [ 66.336810][ T4055] EXT4-fs (loop3): Remounting filesystem read-only [ 66.418325][ T4063] SELinux: policydb magic number 0x800 does not match expected magic number 0xf97cff8c [ 66.418357][ T4063] SELinux: failed to load policy [ 66.519498][ T4070] loop4: detected capacity change from 0 to 512 [ 66.562321][ T4070] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 66.567426][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.617033][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.646295][ T4074] tipc: Started in network mode [ 66.647065][ T4074] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 66.649335][ T4074] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 66.678570][ T4074] tipc: Enabled bearer , priority 10 [ 66.838424][ T4070] EXT4-fs (loop4): 1 orphan inode deleted [ 66.846614][ T4070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.022190][ T4085] ip6gretap1: entered allmulticast mode [ 67.094686][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 67.348534][ T33] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:1: Failed to release dquot type 1 [ 67.348569][ T33] loop4: lost filesystem error report for type 5 error -117 [ 67.350601][ T4070] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.640507][ T3413] tipc: Node number set to 1 [ 67.724814][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.730807][ T4101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.731341][ T4101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.760468][ T4099] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 67.947214][ T4108] loop2: detected capacity change from 0 to 512 [ 67.959921][ T4109] loop4: detected capacity change from 0 to 512 [ 67.986808][ T4108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.986881][ T4108] ext4 filesystem being mounted at /28/dev supports timestamps until 2038-01-19 (0x7fffffff) [ 68.031960][ T4109] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 68.059143][ T4109] EXT4-fs (loop4): 1 orphan inode deleted [ 68.059800][ T4109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.060305][ T4109] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.070783][ T33] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:1: Failed to release dquot type 1 [ 68.183073][ T4101] EXT4-fs error (device loop2): ext4_do_update_inode:6683: inode #2: comm syz.2.135: corrupted inode contents [ 68.189991][ T4101] EXT4-fs error (device loop2): ext4_dirty_inode:7655: inode #2: comm syz.2.135: mark_inode_dirty error [ 68.263267][ T4101] EXT4-fs error (device loop2): ext4_do_update_inode:6683: inode #2: comm syz.2.135: corrupted inode contents [ 68.265019][ T4101] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.135: mark_inode_dirty error [ 68.383354][ T4108] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.135: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 68.383354][ T4108] [ 68.383599][ T4108] EXT4-fs error (device loop2): ext4_do_update_inode:6683: inode #2: comm syz.2.135: corrupted inode contents [ 68.384127][ T4108] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.135: mark_inode_dirty error [ 68.384637][ T4108] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 68.441910][ T4121] EXT4-fs error (device loop2): ext4_do_update_inode:6683: inode #2: comm syz.2.135: corrupted inode contents [ 68.442452][ T4121] EXT4-fs error (device loop2): add_dirent_to_buf:2153: inode #2: comm syz.2.135: mark_inode_dirty error [ 68.597293][ T4122] device-mapper: table: 252:0: snapshot-merge: unknown target type [ 68.597334][ T4122] device-mapper: ioctl: error adding target to table [ 68.621950][ T4105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.674696][ T4119] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.975958][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 68.975987][ T30] audit: type=1400 audit(1794402851.430:1168): avc: denied { ioctl } for pid=4129 comm="syz.1.139" path="socket:[6583]" dev="sockfs" ino=6583 ioctlcmd=0x82307202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 69.027123][ T4137] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 69.027178][ T4137] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 69.027229][ T4137] vhci_hcd vhci_hcd.0: Device attached [ 69.133863][ T4143] cgroup: subsys name conflicts with all [ 69.444481][ T30] audit: type=1400 audit(1794402851.900:1169): avc: denied { listen } for pid=4140 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.444821][ T30] audit: type=1400 audit(1794402851.900:1170): avc: denied { accept } for pid=4140 comm="syz.4.142" lport=35498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.730412][ T30] audit: type=1400 audit(1794402852.160:1171): avc: denied { create } for pid=4140 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 69.858943][ T4138] vhci_hcd: connection closed [ 69.859545][ T358] vhci_hcd vhci_hcd.3: stop threads [ 69.859563][ T358] vhci_hcd vhci_hcd.3: release socket [ 69.859599][ T358] vhci_hcd vhci_hcd.3: disconnect device [ 69.930971][ T30] audit: type=1400 audit(1794402852.390:1172): avc: denied { shutdown } for pid=4154 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.067896][ T30] audit: type=1400 audit(1794402852.510:1173): avc: denied { mount } for pid=4151 comm="syz.0.144" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 70.121984][ T4157] loop1: detected capacity change from 0 to 1024 [ 70.138238][ T4157] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 70.234042][ T4157] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 2: comm syz.1.145: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.234170][ T4157] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 70.234249][ T4157] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 70.234344][ T4157] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 48: comm syz.1.145: lblock 0 mapped to illegal pblock 48 (length 1) [ 70.234384][ T4157] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 70.234535][ T4157] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 70.234551][ T4157] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.145: Failed to acquire dquot type 0 [ 70.234589][ T4157] loop1: lost filesystem error report for type 5 error -117 [ 70.234677][ T4157] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 70.234701][ T4157] loop1: lost filesystem error report for type 5 error -117 [ 70.234876][ T4157] EXT4-fs error (device loop1): ext4_evict_inode:336: inode #11: comm syz.1.145: mark_inode_dirty error [ 70.234907][ T4157] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.235051][ T4157] EXT4-fs warning (device loop1): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 70.235097][ T4157] EXT4-fs (loop1): 1 orphan inode deleted [ 70.251236][ T358] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.251371][ T358] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 70.251393][ T358] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:6: Failed to release dquot type 0 [ 70.260372][ T4162] loop2: detected capacity change from 0 to 128 [ 70.286199][ T30] audit: type=1400 audit(1794402852.730:1174): avc: denied { read } for pid=4151 comm="syz.0.144" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.355062][ T4152] netlink: 44 bytes leftover after parsing attributes in process `syz.0.144'. [ 70.422676][ T4164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 70.489606][ T4152] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.490896][ T4152] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.543743][ T4166] loop3: detected capacity change from 0 to 512 [ 70.554758][ T4166] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.147: missing EA_INODE flag [ 70.554831][ T4166] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 70.555090][ T4166] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.147: error while reading EA inode 12 err=-117 [ 70.555172][ T4166] loop3: lost filesystem error report for type 5 error -117 [ 70.556359][ T4166] EXT4-fs (loop3): 1 orphan inode deleted [ 70.639692][ T3295] EXT4-fs error (device loop1): __ext4_get_inode_loc:5709: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 70.639802][ T3295] loop1: lost filesystem error report for type 5 error -117 [ 70.639877][ T3295] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 70.639900][ T3295] loop1: lost filesystem error report for type 5 error -117 [ 70.640029][ T3295] EXT4-fs error (device loop1): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 70.640100][ T3295] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 70.640172][ T3295] EXT4-fs error (device loop1): __ext4_get_inode_loc:5709: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 70.640203][ T3295] loop1: lost filesystem error report for type 5 error -117 [ 70.950666][ T4173] netlink: 48 bytes leftover after parsing attributes in process `syz.3.147'. [ 71.332484][ T4169] sch_fq: defrate 4294934527 ignored. [ 71.561674][ T4185] loop2: detected capacity change from 0 to 512 [ 71.579069][ T4185] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 71.579084][ T4185] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.604682][ T4185] EXT4-fs (loop2): 1 truncate cleaned up [ 71.605183][ T4185] EXT4-fs mount: 4 callbacks suppressed [ 71.605200][ T4185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.639145][ T4185] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.687671][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.803093][ T4202] loop3: detected capacity change from 0 to 4096 [ 71.827278][ T4202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.136203][ T4213] xt_recent: Unsupported userspace flags (000000c5) [ 72.174280][ T4206] loop1: detected capacity change from 0 to 1024 [ 72.183070][ T4211] loop4: detected capacity change from 0 to 512 [ 72.195534][ T4211] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 72.195633][ T4211] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.206277][ T4211] EXT4-fs (loop4): 1 truncate cleaned up [ 72.209069][ T4211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.272007][ T4206] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 72.287893][ T4204] bridge_slave_0: left allmulticast mode [ 72.287916][ T4204] bridge_slave_0: left promiscuous mode [ 72.288027][ T4204] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.304151][ T4211] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.156: bad entry in directory: inode out of bounds - offset=12, inode=2048, rec_len=12, size=1024 fake=1 [ 72.306812][ T4211] EXT4-fs (loop4): Remounting filesystem read-only [ 72.345603][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.386329][ T4204] bridge_slave_1: left allmulticast mode [ 72.386356][ T4204] bridge_slave_1: left promiscuous mode [ 72.386508][ T4204] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.424573][ T4204] bond0: (slave bond_slave_0): Releasing backup interface [ 72.431411][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.459994][ T4204] bond0: (slave bond_slave_1): Releasing backup interface [ 72.481936][ T4204] team0: Port device team_slave_0 removed [ 72.525601][ T4204] team0: Port device team_slave_1 removed [ 72.526446][ T4204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.526465][ T4204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.651894][ T4204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.651919][ T4204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.673102][ T4204] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.212604][ T4246] loop4: detected capacity change from 0 to 8192 [ 73.251768][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.469556][ T4269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.472401][ T4269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.523862][ T4269] loop1: detected capacity change from 0 to 512 [ 73.666609][ T4269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.666692][ T4269] ext4 filesystem being mounted at /33/dev supports timestamps until 2038-01-19 (0x7fffffff) [ 73.775756][ T4269] EXT4-fs error (device loop1): ext4_do_update_inode:6683: inode #2: comm syz.1.161: corrupted inode contents [ 73.777878][ T4269] EXT4-fs error (device loop1): ext4_dirty_inode:7655: inode #2: comm syz.1.161: mark_inode_dirty error [ 73.801371][ T4269] EXT4-fs error (device loop1): ext4_do_update_inode:6683: inode #2: comm syz.1.161: corrupted inode contents [ 73.803035][ T4269] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.161: mark_inode_dirty error [ 73.810312][ T4290] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.161: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 73.810312][ T4290] [ 73.815556][ T4290] EXT4-fs error (device loop1): ext4_do_update_inode:6683: inode #2: comm syz.1.161: corrupted inode contents [ 73.816217][ T4290] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.161: mark_inode_dirty error [ 73.817912][ T4290] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 73.877305][ T4269] EXT4-fs error (device loop1): ext4_do_update_inode:6683: inode #2: comm syz.1.161: corrupted inode contents [ 73.880841][ T4269] EXT4-fs error (device loop1): add_dirent_to_buf:2153: inode #2: comm syz.1.161: mark_inode_dirty error [ 73.905412][ T4289] loop4: detected capacity change from 0 to 512 [ 73.907731][ T4289] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 73.907748][ T4289] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 74.050248][ T4269] device-mapper: table: 252:1: snapshot-merge: unknown target type [ 74.050323][ T4269] device-mapper: ioctl: error adding target to table [ 74.052709][ T4270] bond1: Unable to set up delay as MII monitoring is disabled [ 74.096345][ T4270] bond1 (unregistering): Released all slaves [ 74.112172][ T4297] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 74.268195][ T4304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.268339][ T4304] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.271368][ T4304] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 74.324330][ T4310] netlink: 108 bytes leftover after parsing attributes in process `syz.3.166'. [ 74.358679][ T4304] bond1: entered promiscuous mode [ 74.360367][ T4304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.488216][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.579316][ T4312] FAULT_INJECTION: forcing a failure. [ 74.579316][ T4312] name failslab, interval 1, probability 0, space 0, times 1 [ 74.579435][ T4312] CPU: 1 UID: 0 PID: 4312 Comm: syz.0.167 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.579604][ T4312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 74.579627][ T4312] Call Trace: [ 74.579672][ T4312] [ 74.579682][ T4312] __dump_stack+0x1d/0x30 [ 74.579715][ T4312] dump_stack_lvl+0x95/0xd0 [ 74.579744][ T4312] dump_stack+0x15/0x1b [ 74.579786][ T4312] should_fail_ex+0x259/0x270 [ 74.579899][ T4312] ? tipc_conn_alloc+0x37/0x240 [ 74.579930][ T4312] should_failslab+0x8c/0xb0 [ 74.580057][ T4312] __kmalloc_cache_noprof+0x5d/0x3e0 [ 74.580104][ T4312] ? tipc_conn_alloc+0x37/0x240 [ 74.580141][ T4312] tipc_conn_alloc+0x37/0x240 [ 74.580170][ T4312] tipc_topsrv_kern_subscr+0xef/0x1e0 [ 74.580206][ T4312] tipc_group_create+0x234/0x270 [ 74.580306][ T4312] tipc_sk_join+0x110/0x450 [ 74.580334][ T4312] ? lock_sock_nested+0x7f/0x110 [ 74.580367][ T4312] tipc_setsockopt+0x594/0x620 [ 74.580397][ T4312] ? __pfx_tipc_setsockopt+0x10/0x10 [ 74.580451][ T4312] __sys_setsockopt+0x184/0x200 [ 74.580483][ T4312] __x64_sys_setsockopt+0x64/0x80 [ 74.580506][ T4312] x64_sys_call+0x248f/0x2550 [ 74.580635][ T4312] do_syscall_64+0x116/0x380 [ 74.580661][ T4312] ? clear_bhb_loop+0x70/0xc0 [ 74.580693][ T4312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.580723][ T4312] RIP: 0033:0x7f55f5cd8f19 [ 74.580745][ T4312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.580802][ T4312] RSP: 002b:00007f55f46e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.580824][ T4312] RAX: ffffffffffffffda RBX: 00007f55f5f56180 RCX: 00007f55f5cd8f19 [ 74.580889][ T4312] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000009 [ 74.580905][ T4312] RBP: 00007f55f5d67f6d R08: 000000000000002e R09: 0000000000000000 [ 74.580923][ T4312] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 74.580940][ T4312] R13: 00007f55f5f56218 R14: 00007f55f5f56180 R15: 00007ffe89491638 [ 74.580962][ T4312] [ 74.590232][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 74.590268][ T30] audit: type=1400 audit(1794402857.030:1202): avc: denied { setopt } for pid=4305 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.919084][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.180762][ T4318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.273751][ T4328] set_capacity_and_notify: 2 callbacks suppressed [ 75.273804][ T4328] loop4: detected capacity change from 0 to 512 [ 75.299956][ T4328] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 75.299970][ T4328] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.409921][ T4332] xt_recent: Unsupported userspace flags (000000c5) [ 75.418971][ T30] audit: type=1400 audit(1794402857.870:1203): avc: denied { write } for pid=4317 comm="syz.1.168" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.445858][ T4328] EXT4-fs (loop4): 1 truncate cleaned up [ 75.446260][ T4328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.487461][ T4319] loop3: detected capacity change from 0 to 512 [ 75.621810][ T4337] FAULT_INJECTION: forcing a failure. [ 75.621810][ T4337] name failslab, interval 1, probability 0, space 0, times 0 [ 75.621838][ T4337] CPU: 0 UID: 0 PID: 4337 Comm: syz.2.182 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.621915][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 75.621928][ T4337] Call Trace: [ 75.621935][ T4337] [ 75.621946][ T4337] __dump_stack+0x1d/0x30 [ 75.622059][ T4337] dump_stack_lvl+0x95/0xd0 [ 75.622087][ T4337] dump_stack+0x15/0x1b [ 75.622107][ T4337] should_fail_ex+0x259/0x270 [ 75.622195][ T4337] ? tipc_nametbl_insert_publ+0x527/0x950 [ 75.622280][ T4337] should_failslab+0x8c/0xb0 [ 75.622342][ T4337] __kmalloc_cache_noprof+0x5d/0x3e0 [ 75.622426][ T4337] ? tipc_nametbl_insert_publ+0x527/0x950 [ 75.622522][ T4337] tipc_nametbl_insert_publ+0x527/0x950 [ 75.622559][ T4337] tipc_nametbl_publish+0x155/0x210 [ 75.622600][ T4337] tipc_sk_join+0x329/0x450 [ 75.622672][ T4337] tipc_setsockopt+0x594/0x620 [ 75.622697][ T4337] ? __pfx_tipc_setsockopt+0x10/0x10 [ 75.622735][ T4337] __sys_setsockopt+0x184/0x200 [ 75.622835][ T4337] __x64_sys_setsockopt+0x64/0x80 [ 75.622877][ T4337] x64_sys_call+0x248f/0x2550 [ 75.622984][ T4337] do_syscall_64+0x116/0x380 [ 75.623006][ T4337] ? clear_bhb_loop+0x70/0xc0 [ 75.623037][ T4337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.623104][ T4337] RIP: 0033:0x7fdf874d8f19 [ 75.623125][ T4337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.623150][ T4337] RSP: 002b:00007fdf85edd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 75.623193][ T4337] RAX: ffffffffffffffda RBX: 00007fdf87756180 RCX: 00007fdf874d8f19 [ 75.623208][ T4337] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000009 [ 75.623220][ T4337] RBP: 00007fdf87567f6d R08: 000000000000002e R09: 0000000000000000 [ 75.623241][ T4337] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 75.623300][ T4337] R13: 00007fdf87756218 R14: 00007fdf87756180 R15: 00007fff9f347d88 [ 75.623327][ T4337] [ 75.623373][ T4337] tipc: Failed to bind to 66,4294966268,4294966268 [ 75.765850][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.926528][ T4336] bridge_slave_0: left allmulticast mode [ 75.926637][ T4336] bridge_slave_0: left promiscuous mode [ 75.927068][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.929279][ T4336] bridge_slave_1: left allmulticast mode [ 75.929295][ T4336] bridge_slave_1: left promiscuous mode [ 75.930044][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.977915][ T4336] bond0: (slave bond_slave_0): Releasing backup interface [ 76.000142][ T4336] bond0: (slave bond_slave_1): Releasing backup interface [ 76.018707][ T4336] team0: Port device team_slave_0 removed [ 76.036556][ T4336] team0: Port device team_slave_1 removed [ 76.038747][ T4336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.098119][ T4319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.115224][ T4319] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.155357][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.262759][ T4325] cgroup: subsys name conflicts with all [ 76.292876][ T4347] loop1: detected capacity change from 0 to 512 [ 76.321345][ T4347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.321420][ T4347] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.326432][ T4347] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 76.384645][ T4352] netlink: 108 bytes leftover after parsing attributes in process `syz.1.184'. [ 76.391446][ T4347] bond1: entered promiscuous mode [ 76.391788][ T4347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.513725][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.558134][ T30] audit: type=1326 audit(1794402859.010:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.1.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679e538f19 code=0x7ffc0000 [ 76.558177][ T30] audit: type=1326 audit(1794402859.010:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.1.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679e538f19 code=0x7ffc0000 [ 76.566941][ T30] audit: type=1326 audit(1794402859.020:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.1.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679e538f19 code=0x7ffc0000 [ 76.567494][ T30] audit: type=1326 audit(1794402859.020:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.1.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f679e538f19 code=0x7ffc0000 [ 76.567593][ T30] audit: type=1326 audit(1794402859.020:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.1.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679e538f19 code=0x7ffc0000 [ 76.567715][ T30] audit: type=1326 audit(1794402859.020:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.1.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679e538f19 code=0x7ffc0000 [ 76.568032][ T30] audit: type=1326 audit(1794402859.020:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.1.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679e538f19 code=0x7ffc0000 [ 76.569652][ T30] audit: type=1326 audit(1794402859.020:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.1.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679e538f19 code=0x7ffc0000 [ 76.631844][ T4356] netlink: 104 bytes leftover after parsing attributes in process `syz.0.187'. [ 76.651123][ T4356] ip_tables: iptables: counters copy to user failed while replacing table [ 76.806287][ T4357] RDS: rds_bind could not find a transport for f2ff:ffff:f2ff:ffff:f2ff:ffff:f2ff:ffff, load rds_tcp or rds_rdma? [ 76.820827][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.830763][ T4364] loop1: detected capacity change from 0 to 512 [ 76.883339][ T4368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 77.069128][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.069172][ T4370] bridge0: port 2(bridge_slave_1) entered listening state [ 77.069383][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.069508][ T4370] bridge0: port 1(bridge_slave_0) entered listening state [ 77.118679][ T415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.123743][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 77.145786][ T4371] ip6gretap0: entered promiscuous mode [ 77.145838][ T4371] macvlan2: entered allmulticast mode [ 77.145853][ T4371] ip6gretap0: entered allmulticast mode [ 77.198965][ T415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.241286][ T415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.354149][ T415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.378836][ T4379] loop4: detected capacity change from 0 to 128 [ 77.395088][ T4376] loop1: detected capacity change from 0 to 512 [ 77.430711][ T4376] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.181: missing EA_INODE flag [ 77.430750][ T4376] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 77.431612][ T4376] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.181: error while reading EA inode 12 err=-117 [ 77.431648][ T4376] loop1: lost filesystem error report for type 5 error -117 [ 77.431857][ T4376] EXT4-fs (loop1): 1 orphan inode deleted [ 77.432301][ T4376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.562975][ T415] pim6reg: left allmulticast mode [ 77.648260][ T4386] loop3: detected capacity change from 0 to 512 [ 77.659069][ T4386] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 77.659090][ T4386] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.671729][ T4386] EXT4-fs (loop3): 1 truncate cleaned up [ 77.672657][ T4386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.802328][ T415] bond0 (unregistering): Released all slaves [ 77.928287][ T415] tipc: Disabling bearer [ 77.928334][ T415] tipc: Left network mode [ 78.012527][ T4376] netlink: 48 bytes leftover after parsing attributes in process `syz.1.181'. [ 78.060312][ T4394] bridge_slave_0: left allmulticast mode [ 78.060427][ T4394] bridge_slave_0: left promiscuous mode [ 78.060671][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.093396][ T4394] bridge_slave_1: left allmulticast mode [ 78.093422][ T4394] bridge_slave_1: left promiscuous mode [ 78.093602][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.115261][ T4394] bond0: (slave veth0_to_bond): Releasing backup interface [ 78.117837][ T4394] bond0: (slave bond_slave_0): Releasing backup interface [ 78.121103][ T4394] bond0: (slave bond_slave_1): Releasing backup interface [ 78.139014][ T4394] team0: Port device team_slave_0 removed [ 78.146815][ T4394] team0: Port device team_slave_1 removed [ 78.148833][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.148915][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.154222][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.154274][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.162211][ T4394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.300102][ T4374] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.307888][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.346549][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.359906][ T4405] device-mapper: table: 252:2: striped: Target length not divisible by chunk size (-EINVAL) [ 78.359996][ T4405] device-mapper: ioctl: error adding target to table [ 78.481612][ T4409] loop1: detected capacity change from 0 to 8192 [ 78.487282][ T4418] loop3: detected capacity change from 0 to 512 [ 78.507284][ T4399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.510297][ T4409] loop1: p1 p2 p3 p4 [ 78.510517][ T4409] loop1: p1 start 65792 is beyond EOD, truncated [ 78.510539][ T4409] loop1: p2 size 590592 extends beyond EOD, truncated [ 78.540315][ T4418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.540571][ T4418] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.541248][ T4409] loop1: p3 start 524042 is beyond EOD, truncated [ 78.541267][ T4409] loop1: p4 start 131072 is beyond EOD, truncated [ 78.542329][ T415] hsr_slave_0: left promiscuous mode [ 78.559761][ T4418] netlink: 108 bytes leftover after parsing attributes in process `syz.3.189'. [ 78.599346][ T4399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.608497][ T415] hsr_slave_1: left promiscuous mode [ 78.620827][ T415] veth1_macvtap: left promiscuous mode [ 78.620853][ T415] veth0_macvtap: left promiscuous mode [ 78.620988][ T415] veth1_vlan: left promiscuous mode [ 78.621035][ T415] veth0_vlan: left promiscuous mode [ 78.761268][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 78.860658][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.932273][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 78.960838][ T4444] loop3: detected capacity change from 0 to 512 [ 78.979105][ T4444] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.979124][ T4444] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 78.985073][ T4444] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 78.986330][ T4444] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 78.986494][ T4444] System zones: 0-2, 18-18, 34-34 [ 78.988371][ T4444] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.190: bad orphan inode 15 [ 78.988446][ T4444] loop3: lost filesystem error report for type 5 error -117 [ 78.991804][ T4444] ext4_test_bit(bit=14, block=18) = 1 [ 78.991927][ T4444] is_bad_inode(inode)=0 [ 78.991949][ T4444] NEXT_ORPHAN(inode)=2264924160 [ 78.991979][ T4444] max_ino=32 [ 78.992000][ T4444] i_nlink=0 [ 78.992546][ T4444] EXT4-fs error (device loop3): ext4_do_update_inode:6683: inode #15: comm syz.3.190: corrupted inode contents [ 78.992622][ T4444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.995009][ T4444] EXT4-fs error (device loop3): ext4_dirty_inode:7655: inode #15: comm syz.3.190: mark_inode_dirty error [ 78.995114][ T4444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.997524][ T4444] EXT4-fs error (device loop3): ext4_do_update_inode:6683: inode #15: comm syz.3.190: corrupted inode contents [ 78.997662][ T4444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.000311][ T4444] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.190: mark_inode_dirty error [ 79.000627][ C1] EXT4-fs (loop3): error count since last fsck: 4 [ 79.000679][ C1] EXT4-fs (loop3): initial error at time 1794402861: ext4_orphan_get:1430 [ 79.000742][ C1] EXT4-fs (loop3): last error at time 1794402861: ext4_do_update_inode:6683: inode 15 [ 79.001701][ T4444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.007761][ T4444] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2965: inode #15: comm syz.3.190: mark inode dirty (error -117) [ 79.007881][ T4444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.017324][ T4444] EXT4-fs warning (device loop3): ext4_evict_inode:355: xattr delete (err -117) [ 79.018410][ T4444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.050468][ T4446] netlink: 104 bytes leftover after parsing attributes in process `syz.4.192'. [ 79.065233][ T4446] ip_tables: iptables: counters copy to user failed while replacing table [ 79.298983][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.378118][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.378179][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.378237][ T4374] bridge_slave_0: entered allmulticast mode [ 79.378806][ T4374] bridge_slave_0: entered promiscuous mode [ 79.381069][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.381137][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.383047][ T4374] bridge_slave_1: entered allmulticast mode [ 79.384544][ T4374] bridge_slave_1: entered promiscuous mode [ 79.425633][ T4374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.431122][ T4374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.475434][ T4374] team0: Port device team_slave_0 added [ 79.478784][ T4374] team0: Port device team_slave_1 added [ 79.509980][ T4374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.510000][ T4374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.510038][ T4374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.554525][ T4374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.554543][ T4374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.554632][ T4374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.617002][ T30] kauditd_printk_skb: 425 callbacks suppressed [ 79.617021][ T30] audit: type=1400 audit(1794402862.070:1637): avc: denied { write } for pid=4479 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.653273][ T4374] hsr_slave_0: entered promiscuous mode [ 79.653699][ T4374] hsr_slave_1: entered promiscuous mode [ 79.653981][ T4374] debugfs: 'hsr0' already exists in 'hsr' [ 79.653996][ T4374] Cannot create hsr debugfs directory [ 79.686327][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 79.798305][ T30] audit: type=1400 audit(1794402862.250:1638): avc: denied { tracepoint } for pid=4485 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 79.806731][ T4464] macvlan3: entered allmulticast mode [ 79.806792][ T4464] bridge0: entered allmulticast mode [ 79.806895][ T4464] bridge0: entered promiscuous mode [ 79.811939][ T4464] bridge0: port 1(macvlan3) entered blocking state [ 79.812035][ T4464] bridge0: port 1(macvlan3) entered disabled state [ 79.827669][ T4464] bridge0: left allmulticast mode [ 79.898104][ T29] bridge0: left promiscuous mode [ 79.907448][ T4489] pimreg: entered allmulticast mode [ 79.907583][ T4486] pimreg: left allmulticast mode [ 79.930690][ T30] audit: type=1400 audit(1794402862.390:1639): avc: denied { write } for pid=4483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.974748][ T30] audit: type=1400 audit(1794402862.430:1640): avc: denied { write } for pid=4497 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.021089][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 80.061662][ T4374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.066872][ T4374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.067410][ T4374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.071836][ T4374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.075354][ T4374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.082243][ T4374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.084123][ T4374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.096140][ T4374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.226192][ T4374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.253871][ T4374] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.259133][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.259169][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.271206][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.271315][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.377042][ T4511] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 80.451008][ T4521] loop3: detected capacity change from 0 to 128 [ 80.464637][ T4518] loop4: detected capacity change from 0 to 512 [ 80.478861][ T4518] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.200: missing EA_INODE flag [ 80.478896][ T4518] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 80.479050][ T4518] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.200: error while reading EA inode 12 err=-117 [ 80.479140][ T4518] loop4: lost filesystem error report for type 5 error -117 [ 80.479319][ T4518] EXT4-fs (loop4): 1 orphan inode deleted [ 80.479823][ T4518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.611412][ T4527] loop1: detected capacity change from 0 to 512 [ 80.625446][ T4527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.625529][ T4527] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.630787][ T4527] netlink: 108 bytes leftover after parsing attributes in process `syz.1.201'. [ 80.698837][ T4374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.734493][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.986179][ T4518] netlink: 48 bytes leftover after parsing attributes in process `syz.4.200'. [ 81.068570][ T4374] veth0_vlan: entered promiscuous mode [ 81.076634][ T4374] veth1_vlan: entered promiscuous mode [ 81.110169][ T4551] loop3: detected capacity change from 0 to 256 [ 81.162133][ T4374] veth0_macvtap: entered promiscuous mode [ 81.165707][ T4374] veth1_macvtap: entered promiscuous mode [ 81.185625][ T4374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.193885][ T4374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.234792][ T30] audit: type=1400 audit(1794402863.690:1641): avc: denied { mounton } for pid=4374 comm="syz-executor" path="/root/syzkaller.EejPhl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 81.240821][ T358] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.241008][ T358] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.241110][ T358] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.241215][ T358] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.280973][ T30] audit: type=1400 audit(1794402863.730:1642): avc: denied { mount } for pid=4374 comm="syz-executor" name="/" dev="gadgetfs" ino=5153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 81.394920][ T4557] loop5: detected capacity change from 0 to 512 [ 81.395328][ T4557] EXT4-fs: dax option not supported [ 81.478421][ T4559] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 81.478528][ T4559] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 81.478567][ T4559] vhci_hcd vhci_hcd.0: Device attached [ 81.602160][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.676160][ T30] audit: type=1400 audit(1794402864.130:1643): avc: denied { create } for pid=4563 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 81.722321][ T4557] loop5: detected capacity change from 0 to 1024 [ 81.740452][ T3376] usb 2-1: SetAddress Request (2) to port 0 [ 81.740486][ T3376] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 81.774057][ T4557] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.774578][ T4557] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 81.799143][ T4564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 81.844163][ T4557] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.845321][ T4557] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 82.061463][ T4566] ªªªªª»: renamed from vlan0 (while UP) [ 82.143686][ T30] audit: type=1400 audit(1794402864.600:1644): avc: denied { write } for pid=4556 comm="syz.5.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 82.148023][ T4575] loop5: detected capacity change from 0 to 736 [ 82.148618][ T30] audit: type=1400 audit(1794402864.600:1645): avc: denied { mounton } for pid=4556 comm="syz.5.180" path="/0/file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.332778][ T4560] vhci_hcd: connection reset by peer [ 82.434876][ T4537] pim6reg: entered allmulticast mode [ 82.459094][ T358] vhci_hcd vhci_hcd.0: stop threads [ 82.459118][ T358] vhci_hcd vhci_hcd.0: release socket [ 82.459145][ T358] vhci_hcd vhci_hcd.0: disconnect device [ 82.589322][ T4582] FAULT_INJECTION: forcing a failure. [ 82.589322][ T4582] name failslab, interval 1, probability 0, space 0, times 0 [ 82.589480][ T4582] CPU: 1 UID: 0 PID: 4582 Comm: syz.3.217 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.589588][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 82.589604][ T4582] Call Trace: [ 82.589612][ T4582] [ 82.589622][ T4582] __dump_stack+0x1d/0x30 [ 82.589722][ T4582] dump_stack_lvl+0x95/0xd0 [ 82.589754][ T4582] dump_stack+0x15/0x1b [ 82.589781][ T4582] should_fail_ex+0x259/0x270 [ 82.589820][ T4582] ? tipc_nametbl_insert_publ+0x527/0x950 [ 82.589935][ T4582] should_failslab+0x8c/0xb0 [ 82.590023][ T4582] __kmalloc_cache_noprof+0x5d/0x3e0 [ 82.590101][ T4582] ? tipc_nametbl_insert_publ+0x527/0x950 [ 82.590153][ T4582] tipc_nametbl_insert_publ+0x527/0x950 [ 82.590211][ T4582] tipc_nametbl_publish+0x155/0x210 [ 82.590249][ T4582] tipc_sk_join+0x329/0x450 [ 82.590273][ T4582] tipc_setsockopt+0x594/0x620 [ 82.590411][ T4582] ? __pfx_tipc_setsockopt+0x10/0x10 [ 82.590498][ T4582] __sys_setsockopt+0x184/0x200 [ 82.590520][ T4582] __x64_sys_setsockopt+0x64/0x80 [ 82.590551][ T4582] x64_sys_call+0x248f/0x2550 [ 82.590587][ T4582] do_syscall_64+0x116/0x380 [ 82.590616][ T4582] ? clear_bhb_loop+0x70/0xc0 [ 82.590647][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.590692][ T4582] RIP: 0033:0x7fd04c608f19 [ 82.590708][ T4582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.590734][ T4582] RSP: 002b:00007fd04b015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.590762][ T4582] RAX: ffffffffffffffda RBX: 00007fd04c886180 RCX: 00007fd04c608f19 [ 82.590782][ T4582] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000009 [ 82.590838][ T4582] RBP: 00007fd04c697f6d R08: 000000000000002e R09: 0000000000000000 [ 82.590850][ T4582] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 82.590867][ T4582] R13: 00007fd04c886218 R14: 00007fd04c886180 R15: 00007fffbec0ca68 [ 82.590921][ T4582] [ 82.590973][ T4582] tipc: Failed to bind to 66,4294966268,4294966268 [ 82.942348][ T4586] loop1: detected capacity change from 0 to 512 [ 82.945250][ T4586] ext4: Unknown parameter 'subj_user' [ 83.081816][ T4580] loop5: detected capacity change from 0 to 512 [ 83.102108][ T30] audit: type=1400 audit(1794402865.560:1646): avc: denied { create } for pid=4585 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.192052][ T4596] batman_adv: batadv0: Adding interface: dummy0 [ 83.192066][ T4596] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.192101][ T4596] batman_adv: batadv0: Interface activated: dummy0 [ 83.234713][ T4586] batadv0: mtu less than device minimum [ 83.236696][ T4586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 83.237935][ T4586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 83.239571][ T4586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 83.241247][ T4586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 83.243682][ T4586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 83.245364][ T4586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 83.247137][ T4586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 83.249189][ T4586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 83.250797][ T4586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 83.274190][ T4580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.274503][ T4580] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.698938][ T4603] loop3: detected capacity change from 0 to 512 [ 83.733974][ T4603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.734078][ T4603] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.770671][ T4603] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 83.771999][ T4603] netlink: 108 bytes leftover after parsing attributes in process `syz.3.222'. [ 83.813870][ T4606] bridge_slave_1: default FDB implementation only supports local addresses [ 83.842365][ T4599] iso9660: Unknown parameter 'ªªªªª' [ 83.849320][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.219106][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.387425][ T4635] netlink: 'syz.5.214': attribute type 10 has an invalid length. [ 84.387656][ T4635] netlink: 168 bytes leftover after parsing attributes in process `syz.5.214'. [ 84.694124][ T4642] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 84.733247][ T4642] EXT4-fs (loop1): 1 orphan inode deleted [ 84.733665][ T4642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.733892][ T4642] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.897230][ T39] __quota_error: 3 callbacks suppressed [ 84.897246][ T39] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.897276][ T39] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:2: Failed to release dquot type 1 [ 84.969411][ T4635] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 84.986810][ T4654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.218'. [ 85.007599][ T30] audit: type=1400 audit(1794402867.460:1650): avc: denied { write } for pid=4648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.034562][ T4642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.069968][ T4635] EXT4-fs (loop5): 1 orphan inode deleted [ 85.087166][ T39] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 85.087263][ T39] EXT4-fs error (device loop5): ext4_release_dquot:7156: comm kworker/u8:2: Failed to release dquot type 1 [ 85.087286][ T39] loop5: lost filesystem error report for type 5 error -117 [ 85.117606][ T4635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.119767][ T4635] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.199355][ T4667] FAT-fs (loop3): IO charset euc-jp not found [ 85.216118][ T4668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.216219][ T4668] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.228240][ T30] audit: type=1400 audit(1794402867.680:1651): avc: denied { write } for pid=4638 comm="syz.4.218" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.239905][ T30] audit: type=1400 audit(1794402867.690:1652): avc: denied { write } for pid=4669 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.294316][ T30] audit: type=1400 audit(1794402867.750:1653): avc: denied { write } for pid=4638 comm="syz.4.218" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.504437][ T30] audit: type=1400 audit(1794402867.960:1654): avc: denied { write } for pid=4676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.544660][ T4674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.572654][ T30] audit: type=1400 audit(1794402868.030:1655): avc: denied { write } for pid=4691 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.760067][ T4654] SELinux: policydb magic number 0x800 does not match expected magic number 0xf97cff8c [ 85.760174][ T4654] SELinux: failed to load policy [ 85.781503][ T4666] ptp ptp0: new virtual clock ptp1 [ 85.781526][ T4666] ptp ptp0: guarantee physical clock free running [ 85.897475][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.971527][ T4706] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 86.008630][ T4706] bond1: entered promiscuous mode [ 86.008976][ T4706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.023212][ T4706] netlink: 108 bytes leftover after parsing attributes in process `syz.0.226'. [ 86.078509][ T4712] set_capacity_and_notify: 6 callbacks suppressed [ 86.078609][ T4712] loop3: detected capacity change from 0 to 512 [ 86.294578][ T4707] loop5: detected capacity change from 0 to 164 [ 86.296585][ T4707] rock: directory entry would overflow storage [ 86.296594][ T4707] rock: sig=0x66, size=4, remaining=3 [ 86.527206][ T4716] loop4: detected capacity change from 0 to 1024 [ 86.541810][ T4716] EXT4-fs: Ignoring removed bh option [ 86.573322][ T4716] EXT4-fs: Ignoring removed i_version option [ 86.599593][ T4716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 86.608652][ T4712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.611229][ T4712] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.650170][ T4712] netlink: 108 bytes leftover after parsing attributes in process `syz.3.228'. [ 86.767415][ T4727] loop5: detected capacity change from 0 to 1024 [ 86.769244][ T4727] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 86.816411][ T4727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.820613][ T3376] usb 2-1: device descriptor read/8, error -110 [ 86.847912][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.864452][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.911715][ T4734] pimreg: entered allmulticast mode [ 86.914931][ T4734] pimreg: left allmulticast mode [ 86.930956][ T3376] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 86.952836][ T3376] usb 2-1: enqueue for inactive port 0 [ 86.952861][ T3376] usb 2-1: enqueue for inactive port 0 [ 86.952876][ T3376] usb 2-1: enqueue for inactive port 0 [ 87.197378][ T4735] loop4: detected capacity change from 0 to 512 [ 87.199352][ T4735] vfat: Unknown parameter '' [ 87.347441][ T30] audit: type=1400 audit(1794402875.808:1656): avc: denied { ioctl } for pid=4749 comm="syz.3.237" path="socket:[8042]" dev="sockfs" ino=8042 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.453770][ T30] audit: type=1400 audit(1794402875.918:1657): avc: denied { bind } for pid=4747 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.495930][ T4753] loop4: detected capacity change from 0 to 1764 [ 87.609560][ T4753] process 'syz.4.236' launched '/dev/fd/12' with NULL argv: empty string added [ 87.895018][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 87.958472][ T4759] loop3: detected capacity change from 0 to 128 [ 87.983897][ T3376] usb usb2-port1: attempt power cycle [ 88.051946][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.150134][ T4759] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 88.150167][ T4759] FAT-fs (loop3): Filesystem has been set read-only [ 88.163254][ T4757] tipc: Started in network mode [ 88.163333][ T4757] tipc: Node identity ac1414aa, cluster identity 4711 [ 88.163673][ T4757] tipc: New replicast peer: 172.20.20.187 [ 88.167080][ T4757] tipc: Enabled bearer , priority 10 [ 88.203979][ T4762] loop5: detected capacity change from 0 to 512 [ 88.244761][ T4762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.244956][ T4762] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.273568][ T4762] netlink: 'syz.5.241': attribute type 1 has an invalid length. [ 88.296312][ T4762] bond1: entered promiscuous mode [ 88.296936][ T4762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.316201][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 88.317738][ T4762] netlink: 108 bytes leftover after parsing attributes in process `syz.5.241'. [ 88.340550][ T4763] ip6gretap0: entered promiscuous mode [ 88.340605][ T4763] macvlan2: entered allmulticast mode [ 88.351994][ T4763] ip6gretap0: entered allmulticast mode [ 88.398017][ T4768] netlink: 132 bytes leftover after parsing attributes in process `syz.4.242'. [ 88.408924][ T4768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.242'. [ 88.454014][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.515948][ T4771] loop1: detected capacity change from 0 to 512 [ 88.541098][ T4771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.541371][ T4771] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.641089][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.698773][ T4781] loop1: detected capacity change from 0 to 512 [ 88.737244][ T4781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.737389][ T4781] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.932384][ T4794] net_ratelimit: 10 callbacks suppressed [ 88.932403][ T4794] ip_tables: iptables: counters copy to user failed while replacing table [ 88.936028][ T4792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.936135][ T4792] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.938353][ T4792] __nla_validate_parse: 1 callbacks suppressed [ 88.938412][ T4792] netlink: 28 bytes leftover after parsing attributes in process `syz.5.248'. [ 88.938870][ T4792] netlink: 108 bytes leftover after parsing attributes in process `syz.5.248'. [ 89.077723][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.116907][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.140097][ T4783] vfat: Unknown parameter '' [ 89.174468][ T4801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.174596][ T4801] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.202109][ T4801] netlink: 'syz.5.250': attribute type 1 has an invalid length. [ 89.211694][ T4801] netlink: 108 bytes leftover after parsing attributes in process `syz.5.250'. [ 89.255421][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.280408][ T3384] tipc: Node number set to 2886997162 [ 89.343228][ T4808] EXT4-fs: Ignoring removed nobh option [ 89.347259][ T4808] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 89.347287][ T4808] loop3: lost filesystem error report for type 5 error -12 [ 89.347569][ T4808] EXT4-fs (loop3): 2 truncates cleaned up [ 89.348006][ T4808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.363998][ T4808] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.252: bg 0: block 5: invalid block bitmap [ 89.535181][ T4808] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 45 with max blocks 1 with error 28 [ 89.535222][ T4808] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.535222][ T4808] [ 89.535240][ T4808] EXT4-fs (loop3): Total free blocks count 0 [ 89.535258][ T4808] EXT4-fs (loop3): Free/Dirty block details [ 89.535274][ T4808] EXT4-fs (loop3): free_blocks=0 [ 89.535290][ T4808] EXT4-fs (loop3): dirty_blocks=2 [ 89.535302][ T4808] EXT4-fs (loop3): Block reservation details [ 89.535315][ T4808] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 89.683879][ T4815] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 89.684320][ T4815] netlink: 108 bytes leftover after parsing attributes in process `syz.0.254'. [ 90.234148][ T4821] EXT4-fs: Ignoring removed orlov option [ 90.238277][ T3376] usb usb2-port1: unable to enumerate USB device [ 90.376703][ T4821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.419083][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.472450][ T4822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.472584][ T4822] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.488244][ T4822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 90.488783][ T4822] netlink: 108 bytes leftover after parsing attributes in process `syz.1.257'. [ 90.668698][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.814480][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.115295][ T4841] set_capacity_and_notify: 6 callbacks suppressed [ 91.115365][ T4841] loop4: detected capacity change from 0 to 512 [ 91.144021][ T4841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.144139][ T4841] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.164297][ T4848] loop3: detected capacity change from 0 to 128 [ 91.185993][ T4838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.260'. [ 91.186289][ T4838] netlink: 108 bytes leftover after parsing attributes in process `syz.4.260'. [ 91.352286][ T4843] bridge_slave_1: default FDB implementation only supports local addresses [ 91.531082][ T4859] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 91.559538][ T4859] netlink: 108 bytes leftover after parsing attributes in process `syz.0.273'. [ 91.570799][ T4865] bond0: (slave dummy0): Error: Slave does not support XDP [ 91.624901][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 91.624917][ T30] audit: type=1400 audit(1794402880.088:1668): avc: denied { write } for pid=4851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.629799][ T4843] loop1: detected capacity change from 0 to 512 [ 91.692296][ T4848] netlink: 'syz.3.262': attribute type 9 has an invalid length. [ 91.699990][ T4857] ptp ptp0: guarantee physical clock free running [ 91.712000][ T4860] loop5: detected capacity change from 0 to 512 [ 91.721518][ T4860] vfat: Unknown parameter '' [ 91.742643][ T30] audit: type=1400 audit(1794402880.208:1669): avc: denied { write } for pid=4871 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.039799][ T30] audit: type=1400 audit(1794402880.498:1670): avc: denied { write } for pid=4879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.057227][ T4882] netlink: 'syz.4.267': attribute type 10 has an invalid length. [ 92.057303][ T4882] netlink: 168 bytes leftover after parsing attributes in process `syz.4.267'. [ 92.100597][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 92.100680][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 92.158623][ T4894] loop4: detected capacity change from 0 to 512 [ 92.158694][ T30] audit: type=1400 audit(1794402880.618:1671): avc: denied { write } for pid=4896 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.252638][ T4885] loop5: detected capacity change from 0 to 164 [ 92.291841][ T4894] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 92.338407][ T4894] EXT4-fs (loop4): 1 orphan inode deleted [ 92.348197][ T4894] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.350439][ T358] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 92.350471][ T358] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:6: Failed to release dquot type 1 [ 92.351504][ T4878] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.351666][ T4878] block device autoloading is deprecated and will be removed. [ 92.474263][ T30] audit: type=1400 audit(1794402880.938:1672): avc: denied { write } for pid=4900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.542668][ T30] audit: type=1400 audit(1794402881.008:1673): avc: denied { write } for pid=4914 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.681349][ T30] audit: type=1400 audit(1794402881.148:1674): avc: denied { write } for pid=4922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.726632][ T30] audit: type=1400 audit(1794402881.188:1675): avc: denied { write } for pid=4934 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.141366][ T30] audit: type=1400 audit(1794402881.598:1676): avc: denied { cpu } for pid=4941 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 93.405487][ T4943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4943 comm=syz.4.271 [ 93.582327][ T4949] bond2: Unable to set up delay as MII monitoring is disabled [ 93.589072][ T4949] bond2 (unregistering): Released all slaves [ 93.709678][ T4945] loop1: detected capacity change from 0 to 1024 [ 93.718071][ T4950] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 93.718087][ T4950] netlink: 'syz.4.271': attribute type 2 has an invalid length. [ 93.767233][ T4945] EXT4-fs: Ignoring removed bh option [ 93.768637][ T4945] EXT4-fs: Ignoring removed i_version option [ 93.855307][ T4954] ip6gretap0: entered promiscuous mode [ 93.855391][ T4954] macvlan2: entered allmulticast mode [ 93.855410][ T4954] ip6gretap0: entered allmulticast mode [ 94.037729][ T4961] loop5: detected capacity change from 0 to 512 [ 94.076220][ T4961] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.078634][ T4961] netlink: 'syz.5.276': attribute type 1 has an invalid length. [ 94.079107][ T4961] __nla_validate_parse: 3 callbacks suppressed [ 94.079123][ T4961] netlink: 108 bytes leftover after parsing attributes in process `syz.5.276'. [ 94.255942][ T4964] loop4: detected capacity change from 0 to 512 [ 94.306877][ T4964] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.769843][ T4988] loop1: detected capacity change from 0 to 512 [ 94.778674][ T4988] vfat: Unknown parameter '' [ 95.358495][ T39] IPVS: starting estimator thread 0... [ 95.440438][ T5004] IPVS: using max 2256 ests per chain, 112800 per kthread [ 95.512453][ T5006] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.551007][ T5009] bridge0: port 1(gretap0) entered blocking state [ 95.551045][ T5009] bridge0: port 1(gretap0) entered disabled state [ 95.551214][ T5009] gretap0: entered allmulticast mode [ 95.551795][ T5009] gretap0: entered promiscuous mode [ 95.552868][ T5009] bridge0: port 1(gretap0) entered blocking state [ 95.552899][ T5009] bridge0: port 1(gretap0) entered forwarding state [ 96.300241][ T5017] loop1: detected capacity change from 0 to 512 [ 96.389313][ T5017] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -ENXIO [ 96.544630][ T5025] loop3: detected capacity change from 0 to 512 [ 96.546945][ T5025] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 96.603413][ T5025] EXT4-fs (loop3): 1 orphan inode deleted [ 96.604095][ T5025] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.617699][ T5017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.618230][ T5017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.622578][ T53] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 1 [ 96.827591][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 96.827612][ T30] audit: type=1400 audit(1794402885.288:1803): avc: denied { lock } for pid=5015 comm="syz.1.287" path="socket:[9484]" dev="sockfs" ino=9484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.836309][ T5018] loop4: detected capacity change from 0 to 512 [ 96.863228][ T5033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.863571][ T5033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.919547][ T5026] Set syz1 is full, maxelem 6117 reached [ 97.157475][ T5018] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.248659][ T30] audit: type=1400 audit(1794402885.708:1804): avc: denied { write } for pid=5016 comm="syz.4.286" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.258312][ T5038] loop5: detected capacity change from 0 to 1024 [ 97.264720][ T5038] EXT4-fs: Ignoring removed bh option [ 97.264963][ T5038] EXT4-fs: Ignoring removed i_version option [ 97.290583][ T5041] netlink: 40 bytes leftover after parsing attributes in process `syz.3.293'. [ 97.292877][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.469434][ T5046] loop3: detected capacity change from 0 to 512 [ 97.483508][ T5046] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.487558][ T30] audit: type=1400 audit(1794402885.948:1805): avc: denied { write } for pid=5039 comm="syz.3.293" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.522743][ T30] audit: type=1400 audit(1794402885.968:1806): avc: denied { write } for pid=5039 comm="syz.3.293" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.525906][ T5043] iso9660: Unknown parameter 'ªªªªª' [ 97.667742][ T5054] loop4: detected capacity change from 0 to 512 [ 97.693062][ T5054] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.697035][ T5054] netlink: 'syz.4.294': attribute type 1 has an invalid length. [ 97.722032][ T5054] bond1: entered promiscuous mode [ 97.722702][ T5054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.729410][ T5054] netlink: 108 bytes leftover after parsing attributes in process `syz.4.294'. [ 97.773143][ T5041] SELinux: policydb magic number 0x800 does not match expected magic number 0xf97cff8c [ 97.773173][ T5041] SELinux: failed to load policy [ 97.968421][ T30] audit: type=1400 audit(1794402886.428:1807): avc: denied { read } for pid=5062 comm="syz.1.298" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.055482][ T5061] loop4: detected capacity change from 0 to 512 [ 98.555093][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 98.706316][ T5081] FAULT_INJECTION: forcing a failure. [ 98.706316][ T5081] name failslab, interval 1, probability 0, space 0, times 0 [ 98.706475][ T5081] CPU: 1 UID: 0 PID: 5081 Comm: syz.3.302 Not tainted syzkaller #0 PREEMPT(lazy) [ 98.706509][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 98.706539][ T5081] Call Trace: [ 98.706548][ T5081] [ 98.706558][ T5081] __dump_stack+0x1d/0x30 [ 98.706623][ T5081] dump_stack_lvl+0x95/0xd0 [ 98.706645][ T5081] dump_stack+0x15/0x1b [ 98.706673][ T5081] should_fail_ex+0x259/0x270 [ 98.706778][ T5081] ? tipc_nametbl_insert_publ+0x527/0x950 [ 98.706860][ T5081] should_failslab+0x8c/0xb0 [ 98.706899][ T5081] __kmalloc_cache_noprof+0x5d/0x3e0 [ 98.706937][ T5081] ? tipc_nametbl_insert_publ+0x527/0x950 [ 98.706995][ T5081] tipc_nametbl_insert_publ+0x527/0x950 [ 98.707043][ T5081] tipc_nametbl_publish+0x155/0x210 [ 98.707176][ T5081] tipc_sk_join+0x329/0x450 [ 98.707207][ T5081] tipc_setsockopt+0x594/0x620 [ 98.707237][ T5081] ? __pfx_tipc_setsockopt+0x10/0x10 [ 98.707303][ T5081] __sys_setsockopt+0x184/0x200 [ 98.707326][ T5081] __x64_sys_setsockopt+0x64/0x80 [ 98.707348][ T5081] x64_sys_call+0x248f/0x2550 [ 98.707380][ T5081] do_syscall_64+0x116/0x380 [ 98.707408][ T5081] ? clear_bhb_loop+0x70/0xc0 [ 98.707498][ T5081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.707522][ T5081] RIP: 0033:0x7fd04c608f19 [ 98.707543][ T5081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.707631][ T5081] RSP: 002b:00007fd04b015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.707653][ T5081] RAX: ffffffffffffffda RBX: 00007fd04c886180 RCX: 00007fd04c608f19 [ 98.707672][ T5081] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 98.707686][ T5081] RBP: 00007fd04c697f6d R08: 000000000000002e R09: 0000000000000000 [ 98.707724][ T5081] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 98.707743][ T5081] R13: 00007fd04c886218 R14: 00007fd04c886180 R15: 00007fffbec0ca68 [ 98.707764][ T5081] [ 98.707927][ T5081] tipc: Failed to bind to 66,4294966268,4294966268 [ 99.381592][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 99.388066][ T5083] macvlan2: entered allmulticast mode [ 99.388090][ T5083] ip6gretap0: entered allmulticast mode [ 99.395840][ T5085] xt_hashlimit: size too large, truncated to 1048576 [ 99.430827][ T5090] syz_tun: entered allmulticast mode [ 99.449117][ T5090] pimreg: entered allmulticast mode [ 99.515669][ T5088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.304'. [ 99.582693][ T5094] loop4: detected capacity change from 0 to 1764 [ 99.639677][ T5093] loop1: detected capacity change from 0 to 512 [ 99.696078][ T5093] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 99.696229][ T5093] EXT4-fs (loop1): orphan cleanup on readonly fs [ 99.696415][ T5093] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 99.696517][ T5093] EXT4-fs warning (device loop1): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.696665][ T5093] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 99.697368][ T5093] EXT4-fs (loop1): 1 truncate cleaned up [ 99.734255][ T5087] syz_tun: left allmulticast mode [ 99.734355][ T5087] pimreg: left allmulticast mode [ 99.741378][ T30] audit: type=1400 audit(1794402888.188:1808): avc: denied { recv } for pid=5091 comm="syz.3.315" saddr=10.128.0.163 src=30036 daddr=10.128.0.155 dest=56906 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 99.791317][ T53] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.791862][ T53] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.791905][ T53] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.791946][ T53] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.094943][ T5104] loop1: detected capacity change from 0 to 128 [ 100.110014][ T5104] EXT4-fs: Invalid want_extra_isize 1686723270 [ 101.033192][ T5121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'. [ 101.519725][ T5121] SELinux: policydb magic number 0x800 does not match expected magic number 0xf97cff8c [ 101.519756][ T5121] SELinux: failed to load policy [ 101.574231][ T5104] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.655283][ T5130] set_capacity_and_notify: 1 callbacks suppressed [ 101.655476][ T5130] loop4: detected capacity change from 0 to 512 [ 101.773067][ T30] audit: type=1400 audit(1794402890.238:1809): avc: denied { getopt } for pid=5135 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.809109][ T30] audit: type=1400 audit(1794402890.268:1810): avc: denied { create } for pid=5139 comm="syz.5.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.884243][ T5130] EXT4-fs mount: 22 callbacks suppressed [ 101.884265][ T5130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.904237][ T5104] netlink: 44 bytes leftover after parsing attributes in process `syz.1.307'. [ 101.904893][ T5130] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.966911][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 101.979082][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.984581][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.104257][ T5136] loop3: detected capacity change from 0 to 1024 [ 102.132715][ T5136] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.151967][ T5136] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.171526][ T5136] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 102.290242][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.367305][ T30] audit: type=1400 audit(1794402890.788:1811): avc: denied { watch watch_reads } for pid=5135 comm="syz.3.313" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 102.374312][ T30] audit: type=1400 audit(1794402890.798:1812): avc: denied { setopt } for pid=5145 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.377151][ T30] audit: type=1400 audit(1794402890.838:1813): avc: denied { bind } for pid=5145 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.383478][ T30] audit: type=1400 audit(1794402890.848:1814): avc: denied { write } for pid=5145 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.385272][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 102.482239][ T5136] loop3: detected capacity change from 0 to 512 [ 102.965730][ T5154] ªªªªª»: renamed from vlan0 (while UP) [ 103.031968][ T30] audit: type=1400 audit(1794402891.498:1815): avc: denied { name_bind } for pid=5160 comm="syz.4.322" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 103.035678][ T5162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.322'. [ 103.062032][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 103.144129][ T5161] loop5: detected capacity change from 0 to 512 [ 103.182608][ T5161] EXT4-fs: Ignoring removed bh option [ 103.224262][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 103.348607][ T5171] batman_adv: batadv0: Interface deactivated: dummy0 [ 103.386095][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.389773][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.440833][ T5171] ip6gretap0: left allmulticast mode [ 103.469652][ T39] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.469786][ T39] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.469929][ T39] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.470105][ T39] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.546874][ T5161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.548867][ T5161] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.711267][ T30] audit: type=1400 audit(1794402892.118:1816): avc: denied { write } for pid=5158 comm="syz.5.320" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.720640][ T5159] loop3: detected capacity change from 0 to 512 [ 103.761626][ T5159] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 103.776608][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 103.817515][ T30] audit: type=1400 audit(1794402892.278:1817): avc: denied { write } for pid=5158 comm="syz.5.320" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.833789][ T5159] EXT4-fs (loop3): 1 orphan inode deleted [ 103.838053][ T5159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.841459][ T5159] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.852730][ T39] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 103.852803][ T39] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:2: Failed to release dquot type 1 [ 103.893286][ T30] audit: type=1400 audit(1794402892.348:1818): avc: denied { write } for pid=5158 comm="syz.5.320" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.910628][ T30] audit: type=1400 audit(1794402892.358:1819): avc: denied { mounton } for pid=5158 comm="syz.5.320" path="/26/file0/myproc" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.948413][ T5164] ip6gretap0: entered promiscuous mode [ 103.948472][ T5164] macvlan2: entered allmulticast mode [ 103.948485][ T5164] ip6gretap0: entered allmulticast mode [ 104.065415][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.079004][ T5178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.227878][ T5190] loop4: detected capacity change from 0 to 512 [ 104.257682][ T5190] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 104.269942][ T5182] netlink: 'syz.4.325': attribute type 10 has an invalid length. [ 104.284416][ T5190] EXT4-fs (loop4): 1 orphan inode deleted [ 104.284826][ T5190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.285105][ T5190] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.302187][ T39] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:2: Failed to release dquot type 1 [ 104.843486][ T5182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.887877][ T5202] loop4: detected capacity change from 0 to 512 [ 104.901198][ T5193] sctp: [Deprecated]: syz.0.326 (pid 5193) Use of int in max_burst socket option deprecated. [ 104.901198][ T5193] Use struct sctp_assoc_value instead [ 104.919337][ T5202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.923253][ T5202] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.948993][ T5202] netlink: 'syz.4.329': attribute type 1 has an invalid length. [ 104.951602][ T5202] __nla_validate_parse: 2 callbacks suppressed [ 104.953342][ T5202] netlink: 108 bytes leftover after parsing attributes in process `syz.4.329'. [ 105.001104][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.039518][ T5208] netlink: 40 bytes leftover after parsing attributes in process `syz.4.331'. [ 105.042143][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 105.444919][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 106.050633][ T5232] loop1: detected capacity change from 0 to 512 [ 106.163211][ T5232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.163300][ T5232] ext4 filesystem being mounted at /66/proc supports timestamps until 2038-01-19 (0x7fffffff) [ 106.282646][ T5239] loop3: detected capacity change from 0 to 128 [ 106.466073][ T5240] netlink: 'syz.3.337': attribute type 4 has an invalid length. [ 106.467251][ T5240] netlink: 17 bytes leftover after parsing attributes in process `syz.3.337'. [ 106.775228][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.078620][ T5247] loop1: detected capacity change from 0 to 256 [ 107.080239][ T5248] loop4: detected capacity change from 0 to 512 [ 107.120500][ T5248] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 107.120566][ T5248] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.137053][ T5248] EXT4-fs (loop4): 1 truncate cleaned up [ 107.153343][ T5248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.394879][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.460449][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.460472][ C1] bridge0: topology change detected, propagating [ 107.460577][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.460594][ C1] bridge0: topology change detected, propagating [ 107.643856][ T5263] loop4: detected capacity change from 0 to 128 [ 107.727230][ T5263] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.727563][ T5263] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.855685][ T5263] xt_hashlimit: size too large, truncated to 1048576 [ 107.920393][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 107.920410][ T30] audit: type=1400 audit(1794402902.355:1843): avc: denied { map } for pid=5266 comm="syz.3.345" path="socket:[9809]" dev="sockfs" ino=9809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.920481][ T30] audit: type=1400 audit(1794402902.365:1844): avc: denied { read accept } for pid=5266 comm="syz.3.345" path="socket:[9809]" dev="sockfs" ino=9809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.990209][ T5270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.345'. [ 108.311153][ T30] audit: type=1400 audit(1794402902.765:1845): avc: denied { create } for pid=5271 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.314884][ T30] audit: type=1400 audit(1794402902.775:1846): avc: denied { write } for pid=5271 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.552449][ T5285] ªªªªª»: renamed from vlan0 (while UP) [ 108.740965][ T30] audit: type=1400 audit(1794402903.205:1847): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 108.741005][ T30] audit: type=1400 audit(1794402903.205:1848): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 108.828972][ T30] audit: type=1400 audit(1794402903.285:1849): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 108.848307][ T53] IPVS: starting estimator thread 0... [ 108.855132][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.930476][ T5295] IPVS: using max 1680 ests per chain, 84000 per kthread [ 109.160257][ T5306] loop5: detected capacity change from 0 to 512 [ 109.185760][ T5306] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.353: bg 0: block 385: padding at end of block bitmap is not set [ 109.185865][ T5306] loop5: lost filesystem error report for type 5 error -117 [ 109.188826][ T5306] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 109.188851][ T5306] loop5: lost filesystem error report for type 5 error -117 [ 109.189338][ T5306] EXT4-fs (loop5): 2 truncates cleaned up [ 109.189949][ T5306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.256976][ T30] audit: type=1400 audit(1794402903.715:1850): avc: denied { read } for pid=5296 comm="syz.5.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.271460][ T5297] netlink: set zone limit has 4 unknown bytes [ 109.348781][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.433328][ T5294] ip_tables: iptables: counters copy to user failed while replacing table [ 109.514645][ T30] audit: type=1400 audit(1794402903.895:1851): avc: denied { create } for pid=5312 comm="syz.5.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.552863][ T5299] bonding: no command found in bonding_masters - use +ifname or -ifname [ 109.732878][ T5319] loop5: detected capacity change from 0 to 1024 [ 109.746175][ T30] audit: type=1400 audit(1794402904.205:1852): avc: denied { mounton } for pid=5312 comm="syz.5.356" path="/file0" dev="ramfs" ino=9928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 109.746395][ T5319] EXT4-fs: inline encryption not supported [ 109.747998][ T5319] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.752321][ T5319] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #3: block 2: comm syz.5.356: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.752418][ T5319] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 109.752725][ T5319] EXT4-fs error (device loop5): __ext4_get_inode_loc:5709: comm syz.5.356: Invalid inode table block 1 in block_group 0 [ 109.752773][ T5319] loop5: lost filesystem error report for type 5 error -117 [ 109.752943][ T5319] EXT4-fs error (device loop5) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 109.753040][ T5319] loop5: lost filesystem error report for type 5 error -117 [ 109.753136][ T5319] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.356: mark_inode_dirty error [ 109.753215][ T5319] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 109.753438][ T5319] EXT4-fs error (device loop5): ext4_acquire_dquot:7120: comm syz.5.356: Failed to acquire dquot type 0 [ 109.753474][ T5319] loop5: lost filesystem error report for type 5 error -117 [ 109.753795][ T5319] EXT4-fs error (device loop5) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 109.753862][ T5319] loop5: lost filesystem error report for type 5 error -117 [ 109.753941][ T5319] EXT4-fs error (device loop5): ext4_evict_inode:336: inode #11: comm syz.5.356: mark_inode_dirty error [ 109.754021][ T5319] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.754335][ T5319] EXT4-fs warning (device loop5): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 109.754426][ T5319] EXT4-fs (loop5): 1 orphan inode deleted [ 109.766492][ T5319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.768051][ T415] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.768704][ T415] EXT4-fs error (device loop5): ext4_release_dquot:7156: comm kworker/u8:7: Failed to release dquot type 0 [ 109.864828][ T5319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.917549][ T5319] EXT4-fs error (device loop5): __ext4_get_inode_loc:5709: comm syz.5.356: Invalid inode table block 1 in block_group 0 [ 109.917589][ T5319] loop5: lost filesystem error report for type 5 error -117 [ 109.917931][ T5319] EXT4-fs error (device loop5) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 109.917948][ T5319] loop5: lost filesystem error report for type 5 error -117 [ 109.938907][ T5319] EXT4-fs error (device loop5): ext4_quota_off:7404: inode #3: comm syz.5.356: mark_inode_dirty error [ 109.938933][ T5319] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 109.946969][ T5319] EXT4-fs error (device loop5): __ext4_get_inode_loc:5709: comm syz.5.356: Invalid inode table block 1 in block_group 0 [ 109.946996][ T5319] loop5: lost filesystem error report for type 5 error -117 [ 110.192877][ T5324] netlink: 68 bytes leftover after parsing attributes in process `syz.4.359'. [ 110.242809][ T5324] netlink: 40 bytes leftover after parsing attributes in process `syz.4.359'. [ 110.293588][ T5327] loop4: detected capacity change from 0 to 512 [ 110.330263][ T5327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.330377][ T5327] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.453647][ T5333] loop3: detected capacity change from 0 to 512 [ 110.475042][ T5334] loop1: detected capacity change from 0 to 512 [ 110.492789][ T5333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.493101][ T5334] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 110.494849][ T5333] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.514464][ T5333] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 110.518950][ T5333] netlink: 108 bytes leftover after parsing attributes in process `syz.3.362'. [ 110.535944][ T5334] EXT4-fs (loop1): 1 orphan inode deleted [ 110.536882][ T5334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.537605][ T5334] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.567780][ T415] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:7: Failed to release dquot type 1 [ 110.686987][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.788961][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.818226][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'. [ 110.903253][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.998476][ T5346] loop3: detected capacity change from 0 to 512 [ 111.004972][ T5350] netlink: 104 bytes leftover after parsing attributes in process `syz.1.366'. [ 111.006622][ T5350] ip_tables: iptables: counters copy to user failed while replacing table [ 111.053316][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.364'. [ 111.066184][ T5344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.066269][ T5344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.076145][ T5344] netlink: 'syz.5.364': attribute type 2 has an invalid length. [ 111.091667][ T5346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.094796][ T5346] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.234334][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.267731][ T5363] zero sized request [ 111.280147][ T5363] loop4: detected capacity change from 0 to 512 [ 112.629885][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 112.659895][ T70] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.660088][ T70] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.660129][ T70] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.680965][ T415] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.375232][ T5399] loop4: detected capacity change from 0 to 512 [ 114.452978][ T5399] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 114.454660][ T5399] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.457284][ T5399] EXT4-fs warning (device loop4): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 114.458646][ T5399] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 114.460686][ T5399] EXT4-fs error (device loop4): __ext4_iget:6466: inode #16: block 127754: comm syz.4.379: invalid block [ 114.460952][ T5399] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 114.465587][ T5399] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.379: couldn't read orphan inode 16 (err -117) [ 114.465741][ T5399] loop4: lost filesystem error report for type 5 error -117 [ 114.477208][ T5399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.508694][ T5399] netlink: 48 bytes leftover after parsing attributes in process `syz.4.379'. [ 114.652895][ T5402] loop5: detected capacity change from 0 to 512 [ 114.660446][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 114.660464][ T30] audit: type=1400 audit(1794402909.035:1873): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file1" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.735642][ T5402] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 114.767388][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.767864][ T5402] EXT4-fs (loop5): 1 orphan inode deleted [ 114.768465][ T5402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.768612][ T5402] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.781448][ T53] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 114.781589][ T53] EXT4-fs error (device loop5): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 1 [ 115.030347][ T30] audit: type=1400 audit(1794402909.485:1874): avc: denied { bind } for pid=5411 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 115.059657][ T30] audit: type=1400 audit(1794402909.495:1875): avc: denied { connect } for pid=5411 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 115.080682][ T30] audit: type=1400 audit(1794402909.525:1876): avc: denied { bind } for pid=5411 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 115.080780][ T30] audit: type=1400 audit(1794402909.535:1877): avc: denied { write } for pid=5411 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 115.167012][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.169250][ T5412] loop1: detected capacity change from 0 to 512 [ 115.181145][ T5414] syz.3.382 (5414): /proc/5413/oom_adj is deprecated, please use /proc/5413/oom_score_adj instead. [ 115.193616][ T5412] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 115.239276][ T5414] loop3: detected capacity change from 0 to 512 [ 115.239667][ T5414] EXT4-fs: Ignoring removed oldalloc option [ 115.257557][ T5414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.282765][ T30] audit: type=1400 audit(1794402909.745:1878): avc: denied { remount } for pid=5409 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 115.352520][ T5413] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.359091][ T5420] loop5: detected capacity change from 0 to 512 [ 115.375356][ T5420] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 115.375393][ T5420] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 115.376787][ T5420] EXT4-fs (loop5): 1 truncate cleaned up [ 115.380624][ T5420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.410616][ T30] audit: type=1400 audit(1794402909.865:1879): avc: denied { write } for pid=5419 comm="syz.5.384" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.432440][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 115.492608][ T5414] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 115.508878][ T5412] EXT4-fs (loop1): 1 orphan inode deleted [ 115.526048][ T100] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 115.526089][ T100] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 1 [ 115.526164][ T100] loop1: lost filesystem error report for type 5 error -117 [ 115.543267][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.549223][ T5412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.553767][ T5412] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.622466][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.706686][ T5422] loop4: detected capacity change from 0 to 512 [ 115.719518][ T5431] lo: entered allmulticast mode [ 115.742173][ T5430] loop5: detected capacity change from 0 to 512 [ 115.812011][ T5422] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 115.905386][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.984776][ T30] audit: type=1400 audit(1794402910.445:1880): avc: denied { watch watch_reads } for pid=5429 comm="syz.5.387" path="/37/file0" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 115.988356][ T5430] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 115.988470][ T5430] FAT-fs (loop5): Filesystem has been set read-only [ 116.078241][ T5422] EXT4-fs (loop4): 1 orphan inode deleted [ 116.128182][ T53] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 1 [ 116.128218][ T53] loop4: lost filesystem error report for type 5 error -117 [ 116.248368][ T5443] loop1: detected capacity change from 0 to 1024 [ 116.266940][ T5443] EXT4-fs: inline encryption not supported [ 116.269630][ T5443] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.292170][ T5443] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 2: comm syz.1.390: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.292331][ T5443] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 116.292637][ T5443] EXT4-fs error (device loop1): __ext4_get_inode_loc:5709: comm syz.1.390: Invalid inode table block 1 in block_group 0 [ 116.292662][ T5443] loop1: lost filesystem error report for type 5 error -117 [ 116.292933][ T5443] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 116.292962][ T5443] loop1: lost filesystem error report for type 5 error -117 [ 116.293061][ T5443] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.390: mark_inode_dirty error [ 116.293185][ T5443] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 116.293302][ T5443] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.390: Failed to acquire dquot type 0 [ 116.293444][ T5443] loop1: lost filesystem error report for type 5 error -117 [ 116.293664][ T5443] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 116.293707][ T5443] loop1: lost filesystem error report for type 5 error -117 [ 116.293889][ T5443] EXT4-fs error (device loop1): ext4_evict_inode:336: inode #11: comm syz.1.390: mark_inode_dirty error [ 116.293912][ T5443] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.294049][ T5443] EXT4-fs warning (device loop1): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 116.294196][ T5443] EXT4-fs (loop1): 1 orphan inode deleted [ 116.295358][ T5443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.870617][ T5422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.898151][ T53] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.898279][ T53] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 0 [ 116.899269][ T5443] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.899911][ T5443] EXT4-fs error (device loop1): __ext4_get_inode_loc:5709: comm syz.1.390: Invalid inode table block 1 in block_group 0 [ 116.899941][ T5443] loop1: lost filesystem error report for type 5 error -117 [ 116.900020][ T5443] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7435: Corrupt filesystem [ 116.900160][ T5443] loop1: lost filesystem error report for type 5 error -117 [ 116.900364][ T5443] EXT4-fs error (device loop1): ext4_quota_off:7404: inode #3: comm syz.1.390: mark_inode_dirty error [ 116.900393][ T5443] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 116.900890][ T5443] EXT4-fs error (device loop1): __ext4_get_inode_loc:5709: comm syz.1.390: Invalid inode table block 1 in block_group 0 [ 116.900975][ T5443] loop1: lost filesystem error report for type 5 error -117 [ 116.988421][ T5422] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.069446][ T5450] netlink: 'syz.0.391': attribute type 1 has an invalid length. [ 117.069779][ T5450] netlink: 108 bytes leftover after parsing attributes in process `syz.0.391'. [ 117.242768][ T5457] loop5: detected capacity change from 0 to 512 [ 117.261338][ T5457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.261410][ T5457] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.455126][ T5457] netlink: 'syz.5.393': attribute type 1 has an invalid length. [ 117.469373][ T5457] netlink: 108 bytes leftover after parsing attributes in process `syz.5.393'. [ 117.490466][ T5422] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.685826][ T5464] sg_write: data in/out 864256/136 bytes for SCSI command 0x0-- guessing data in; [ 117.685826][ T5464] program syz.0.395 not setting count and/or reply_len properly [ 117.762776][ T5470] loop4: detected capacity change from 0 to 512 [ 117.809934][ T5470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.810032][ T5470] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.841748][ T5469] netlink: 'syz.4.396': attribute type 1 has an invalid length. [ 117.843223][ T5469] netlink: 108 bytes leftover after parsing attributes in process `syz.4.396'. [ 117.845393][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.897948][ T5474] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 117.897969][ T5474] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.903225][ T5474] EXT4-fs (loop5): 1 truncate cleaned up [ 117.903996][ T5474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.069693][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.156026][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.449559][ T5487] netlink: 'syz.5.401': attribute type 39 has an invalid length. [ 118.757273][ T5498] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 118.901743][ T5508] netlink: 104 bytes leftover after parsing attributes in process `syz.0.405'. [ 119.075471][ T5507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.075646][ T5507] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.079362][ T5507] netlink: 'syz.4.406': attribute type 1 has an invalid length. [ 119.080821][ T5507] netlink: 108 bytes leftover after parsing attributes in process `syz.4.406'. [ 119.165788][ T5513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.165928][ T5513] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.184123][ T5513] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 119.188822][ T5513] netlink: 108 bytes leftover after parsing attributes in process `syz.1.407'. [ 119.213137][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.278742][ T5505] ip_tables: iptables: counters copy to user failed while replacing table [ 119.393397][ T5523] set_capacity_and_notify: 5 callbacks suppressed [ 119.393439][ T5523] loop3: detected capacity change from 0 to 512 [ 120.392639][ T5523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.392713][ T5523] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.424193][ T5520] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 120.424604][ T5520] netlink: 108 bytes leftover after parsing attributes in process `syz.3.409'. [ 120.462143][ T5522] ip6tnl2: entered allmulticast mode [ 120.499721][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.623452][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.841939][ T5542] loop4: detected capacity change from 0 to 512 [ 120.903603][ T5549] netlink: 108 bytes leftover after parsing attributes in process `syz.5.416'. [ 120.905198][ T5542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.905315][ T5542] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.055944][ T5554] loop3: detected capacity change from 0 to 512 [ 121.123243][ T39] IPVS: starting estimator thread 0... [ 121.167421][ T5554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.167752][ T5554] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.464254][ T5557] IPVS: using max 2208 ests per chain, 110400 per kthread [ 121.539804][ T5552] ================================================================== [ 121.539844][ T5552] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 121.539890][ T5552] [ 121.539897][ T5552] read-write to 0xffffc90001637cc0 of 8 bytes by task 5549 on cpu 0: [ 121.539920][ T5552] shmem_writeout+0x2db/0x970 [ 121.539954][ T5552] shrink_folio_list+0x1a81/0x2720 [ 121.539995][ T5552] evict_folios+0x1dac/0x2980 [ 121.540022][ T5552] try_to_shrink_lruvec+0x833/0x9a0 [ 121.540045][ T5552] shrink_node+0x943/0x3a90 [ 121.540069][ T5552] do_try_to_free_pages+0x310/0xb70 [ 121.540110][ T5552] try_to_free_mem_cgroup_pages+0x201/0x420 [ 121.540154][ T5552] mem_cgroup_resize_max+0x13d/0x2d0 [ 121.540190][ T5552] mem_cgroup_write+0x132/0x1c0 [ 121.540215][ T5552] cgroup_file_write+0x197/0x350 [ 121.540241][ T5552] kernfs_fop_write_iter+0x1d2/0x2e0 [ 121.540277][ T5552] vfs_write+0x57a/0x990 [ 121.540310][ T5552] ksys_write+0xdc/0x1a0 [ 121.540357][ T5552] __x64_sys_write+0x40/0x50 [ 121.540398][ T5552] x64_sys_call+0x154e/0x2550 [ 121.540435][ T5552] do_syscall_64+0x116/0x380 [ 121.540463][ T5552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.540492][ T5552] [ 121.540498][ T5552] read to 0xffffc90001637cc0 of 8 bytes by task 5552 on cpu 1: [ 121.540517][ T5552] shmem_fallocate+0x5e2/0x8f0 [ 121.540558][ T5552] vfs_fallocate+0x3ac/0x400 [ 121.540582][ T5552] file_ioctl+0x4e1/0x5b0 [ 121.540606][ T5552] do_vfs_ioctl+0x7fc/0xe80 [ 121.540629][ T5552] __se_sys_ioctl+0x82/0x140 [ 121.540674][ T5552] __x64_sys_ioctl+0x43/0x50 [ 121.540714][ T5552] x64_sys_call+0x239d/0x2550 [ 121.540740][ T5552] do_syscall_64+0x116/0x380 [ 121.540765][ T5552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.540794][ T5552] [ 121.540800][ T5552] value changed: 0x0000000000000349 -> 0x000000000000035d [ 121.540815][ T5552] [ 121.540821][ T5552] Reported by Kernel Concurrency Sanitizer on: [ 121.540855][ T5552] CPU: 1 UID: 0 PID: 5552 Comm: syz.5.416 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.540888][ T5552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 121.540906][ T5552] ================================================================== [ 121.585921][ T5565] loop1: detected capacity change from 0 to 512 [ 121.603860][ T5565] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 121.603887][ T5565] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.641627][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.709861][ T5565] EXT4-fs (loop1): 1 truncate cleaned up [ 121.732787][ T5565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.916347][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 121.916363][ T30] audit: type=1400 audit(1794402916.375:1902): avc: denied { setopt } for pid=5564 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.926400][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.991740][ T30] audit: type=1400 audit(1794402916.455:1903): avc: denied { read } for pid=5569 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.024913][ T30] audit: type=1400 audit(1794402916.485:1904): avc: denied { ioctl } for pid=5564 comm="syz.0.427" path="socket:[11343]" dev="sockfs" ino=11343 ioctlcmd=0x40047459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.061738][ T30] audit: type=1400 audit(1794402916.525:1905): avc: denied { write } for pid=5563 comm="syz.1.417" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.129804][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.