last executing test programs: 3m56.306129636s ago: executing program 2 (id=52): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) setresgid(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket(0x6, 0x5, 0x800) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x2, 0x80, 0xfffffff9, 0x80eaa}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r4, 0x1, 0x1, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}, 0x40) pread64(r3, &(0x7f0000000300)=""/174, 0xae, 0x47b) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@quota}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000001300)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000200)=""/42, 0x2a) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x6, 0x5509, &(0x7f0000000d80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) write$FUSE_DIRENTPLUS(r7, &(0x7f00000089c0)={0xb0, 0x0, 0x0, [{{0x2, 0x3, 0x2, 0xc, 0x6, 0x80, {0x2, 0x80000001, 0x6, 0x7, 0x8, 0x6, 0x7ff, 0x9, 0x7, 0x8000, 0x9, 0x0, 0x0, 0x4, 0x1ff}}, {0x1, 0x6d, 0x1, 0x1000, '\''}}]}, 0xb0) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xb, 0x1e}) getdents64(r6, 0xfffffffffffffffe, 0x29) getresgid(&(0x7f0000000580), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x2, 0x0, [{0x490, 0xec000000, 0x3}, {0x40000095, 0x0, 0x1}]}) 3m55.709841605s ago: executing program 2 (id=54): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901"], 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x5d, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x812}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x5}, 'Z'}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x7f}, {0x9, 0x0, 0x1}}}]}]}]}}]}, 0x74}}, 0x40000) 3m54.349706127s ago: executing program 0 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109d02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x6) (async) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x232, &(0x7f0000000640)="$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") (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) (async) r3 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8814}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000140)={0xde, 0x2, 0xa0, 0xffffffff, 0x6, "104640f5b14ed32af574ddf499ca6011e61af1"}) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000040)=0x5) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000100)={0xffffffdb, 0x0, 0x0, 0x0, 0x0, "f1217b23e66820def72308f181785fb4aa6af1"}) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001ae2be000100feffffff0000000002000000ff0200000000000005001b003a00"], 0x24}}, 0x24008800) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, r7, 0x0, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3e}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40880) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="00000000000000005225cf11d75b28665d6b13774fd68d6f66db011756dc67f0f822bf97341a46f4c4cebc574ba837f0c40b79825093e02d252b358c5e2e8bed2c1113f6e354f6022e6eed48afc5f0d77d08031c0ea67e7c697f7824cc029fe5ec0b1af2eebf412297317431ac6ebdcaef290ed4f52d475072b94fa4eb01d20adf4b6aed23870dca2e0bd83507b80d74a792c3549e2c06f58e3a4877560cb3c0fc097212370af39fec1cc3af408114523e208d6583445af16b7c642470e30ae759e3050d1212c33cd5003e572f82c64567c5d1b8ce2d6e3dc7e7c661db5f74e1d0ee0692f39d3fb49aa0936dae342ce449d5f5b75b154ccba5f0b3dfd125f0512bcdcb024c78ab36babf7dac8fe1d3a3dd256a56514cb08f329af9fc97", @ANYRES32=r6, @ANYBLOB="89040400000000001800328008000100736974000c00028008000100", @ANYRES16=r7, @ANYRES64=r2], 0x38}}, 0x4004014) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x439, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0xe403, r6}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) ioctl$FIBMAP(r10, 0x1, &(0x7f0000000040)=0x6) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x800006, &(0x7f0000000b00)=ANY=[], 0x1, 0x1066e, &(0x7f0000010240)="$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") 3m54.221644001s ago: executing program 0 (id=62): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) pivot_root(0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900), &(0x7f0000000940)=0xc) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000640), &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0002000000", @ANYRES16=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303134303030302c757365725f69643d38e57185952ccf11141eb0a61bdfb2025d14e57cfcfc58a97be46d6a087a28b022f47a6a46975ba01b8605006d4dfa7782c8d37c6c5392817935618f0399c45ab94a238bc43cd91324edc882a86865a611e9f743ceb5d17346411be08be347e8a1eed2febdba5f8832c63492951528605fb3e8610f24976e6a3bc932c861657d9df76e700614536ff826fd11d63228a0bd", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r2, @ANYRES16=r2, @ANYRESDEC=r1, @ANYBLOB=',appraise,fowner>', @ANYBLOB="74bbff17f6738192322fc53ccc96b70861b26d5a927c5bed91a97680eba625a19f4236fabb9f4dfc52de2d599cc1a069dd14a5655e6a35a7a76a16", @ANYRES32=r3, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x0, 0x258, 0xfeffffff, 0x258, 0x0, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000, 0xff000000, 'wg1\x00', 'bridge0\x00', {0xff}, {}, 0x88, 0x0, 0x41}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@ecn={{0x28}, {0x0, 0x0, 0x8, 0x3}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @port=0x4e21, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x258}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x847, 0x7, [0x3a, 0x5, 0x3e, 0x1a, 0x3, 0x16, 0x2d, 0x35, 0x1, 0x4, 0x3b, 0x3f, 0x28, 0x33, 0x3f, 0x5], 0x0, 0x2, 0x4}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x6c}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3735d29e2530a11, @empty, @empty, @icmp_id=0x67, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[], 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x3c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3m54.216427381s ago: executing program 0 (id=63): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'veth0_to_batadv\x00', {0x2, 0x4e22, @private=0xa010101}}) syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES8], 0x0) 3m53.891378531s ago: executing program 2 (id=66): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@bridge_getneigh={0x20, 0x1e, 0xd15, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x48010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) (async) times(0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r6, 0x16, 0x0, @void}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000280), 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) (async) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01fa28bd7000fcdbdf6e7b3aae5d53236299676c450000000100137564703a73797a3000"/49], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4044004) 3m53.361671818s ago: executing program 2 (id=68): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x2b5, &(0x7f0000000380)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fa203c", 0x3, 0xfffffffffffffffc) syz_clone(0x48000, &(0x7f0000000880)="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", 0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)="40fd476fca6970c7e88afbb4183524cb9ba508646913fc0879c89cd338797e6a6870e0da293699435f5b9b691699902fc9b443722da334dfed722533473f9595916397259c73b5ce5895acc4408391340c9a8664ec41a2b40b139880df8e5b4520795240d8c1f5e7ce1990045840f1296399d3cc90a7f9c47ab483e95d0d41b5081a") ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000300)=0x4) fadvise64(r1, 0x2, 0x0, 0x4) close_range(r1, r0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x2b5, &(0x7f0000000380)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fa203c", 0x3, 0xfffffffffffffffc) (async) syz_clone(0x48000, &(0x7f0000000880)="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", 0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)="40fd476fca6970c7e88afbb4183524cb9ba508646913fc0879c89cd338797e6a6870e0da293699435f5b9b691699902fc9b443722da334dfed722533473f9595916397259c73b5ce5895acc4408391340c9a8664ec41a2b40b139880df8e5b4520795240d8c1f5e7ce1990045840f1296399d3cc90a7f9c47ab483e95d0d41b5081a") (async) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000300)=0x4) (async) fadvise64(r1, 0x2, 0x0, 0x4) (async) close_range(r1, r0, 0x0) (async) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) (async) 3m53.350959718s ago: executing program 2 (id=69): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async, rerun: 32) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}}, 0x20}}, 0x0) (rerun: 32) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x52c, &(0x7f0000000c00)="$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") 3m53.205605472s ago: executing program 2 (id=70): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x0, 0x19, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000380)='./file0\x00') chdir(&(0x7f00000001c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 3m53.186011903s ago: executing program 32 (id=70): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x0, 0x19, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000380)='./file0\x00') chdir(&(0x7f00000001c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 3m51.145770406s ago: executing program 0 (id=77): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e20, 0x389c, 0x2}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x2, 0x0, 0xa}, {0x0, 0x1400000000, 0x9dc, 0x90}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$eJzs3V9oHHkdAPDvbJOY6+W6FQ7U49Cg4B2eJm2T63kcyB34j3optfFFGyhJu01CN9mQbLSJoBWLFHzxSYRK0T4oiGJ87JuKoMWiD4WiL6VIQS20harPkdnd6YVk02zbdCdJPx+Yzm9+2+zvO/PNbGZ+O/ObAJ5ZvRHxdkTsiojXIqLYqC80pjhbn9L/NzawNJFOSSwvD99LIomIQwNLE9l7JY358403eDUift+ZxNi5te3OLSyeHi2XS7ON5f7q1Ez/3MLipyanRsdL46XpgTff+PTBgdcHDw5s2rreHD029cvK0Fs/u334Nx/++CfuJfF29DReW7kem6U3ehvbpDNeWPlCEvH1zW4sZ90ryklHjoHQsj+/8fIP844BAGi/QuPYv6N2/F+MXVE/eOu+NnK/GLf+st7PHRq5+O92xgkAAAA8vuXljzTmAAAAwM6VOPcHAACAHS67DuDQwNJENrXr2oPbX2hXS6znzjsRsbee/+z+7vorHY17erujMyJ2/yeJlbf1Jqvu+X0c1c9F9MY3/lg9+4NT6RRP6T5stqalf+QdAXnqGsw7AvL00pfzjoA8/fV83hGQp2t38o6APB0dzjsC8nT4YN4RkKcL9/KOgN++Ux8AcG3/X6E25l/Wy7O6/yctP/eEbd8tRPRG969W1un/aa+s/29sTf9f4UH/3651+v/2tNjG5a9d/1Cz+i9+Nc3/8FjW//fJkR+X0vbT+ROvGC25852Ilzqa5T95kP9knfwXW2zjD1cHm/b0/25Pmv+f/yLNdzbJf3st/zTilWie/0zy8PFZ+09Nlkv76v82beOj9//5v2b1039L83/lM9n+n05p+9l3ATx96f6/e538b/T5v7fFNi5N3mra0zvck+b/lW89PP+F213JV2q/jF2NmjOj1ers/oiu5N219QcedQs8W7JtlG3DNP+vfqz53/8P1ubNP//T34n3t9jmu8cKbzWrH/x1mv/vf97+n580/yc32P/X+/v/YqttXL852qx+4rNp/o9ekn8AAAAAAAAAeDKFiOiJpND3oFwo9PXVn+H9YuwulCtz1ddOVeanT0btWdl7o7OQXelVrC8n6fL+xvVA2fKBVcsDjetFzhefqy33naiUT+a98gAAALDD9UTcOPbdyx94ftX5/7+K9fN/AAAAYPtLz/9f/snFC2n5v60O5AMAAABsK+n5//3v3b0Szv8BAABgx+rpdv4PAAAAO132/f+RoaE4MjS0nD33b7oyPnl6YubNA/v6puZP9J2ozM70jVcq47UR+6Y2ft9ypTKz//WYP9NfLc1V++cWFo9PVeanq8drz409Xupsw7oBGzv398sjeccAAAC0T8864/+/sGLs/n0RsScirhY735eN9Q8AAABsfT0RN770o2/+aW5h8fRouVyaVXjUwvK3I7ZAGAprCtlFJlslnm1ZyPkDCgAA2HTvHfTnHQkAAAAAAAAAAAAAAAAAAAA8u9oxnFje6wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD28f8AAAD//0FW/Wk=") r2 = inotify_init() r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = dup(r4) r7 = syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x612, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000000)="16", 0x1}], 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m50.951353652s ago: executing program 0 (id=78): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x4401, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010003b37c0a40c41007821d690102030109022d00010bc0000009044505030300004309050d10200005490909050301000201510109050e0b000209017f"], &(0x7f0000000200)={0x0, 0x0, 0x5, 0x0}) close(0xffffffffffffffff) faccessat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000200), 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xb4, 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r2, 0xee01, r3) keyctl$setperm(0x5, r2, 0x2001193c) keyctl$KEYCTL_MOVE(0x3, r2, r2, r2, 0x0) r4 = socket(0x1a, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@private2, 0x0}, &(0x7f0000000140)=0x14) sendto$packet(r4, &(0x7f0000000080)="37de42ce006874cf66", 0x9, 0x44000, &(0x7f0000000240)={0x11, 0x8, r5, 0x1, 0xf8, 0x6, @remote}, 0x14) 3m50.449329448s ago: executing program 0 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x141) 3m50.398755509s ago: executing program 33 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x141) 3m47.948104255s ago: executing program 5 (id=109): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x100) write$selinux_user(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x27) 3m47.881743197s ago: executing program 5 (id=110): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r2}, 0xc) 3m47.880894597s ago: executing program 5 (id=111): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xb000, 0xa000, 0x8, 0x9, 0xfd, 0xe4, 0x40, 0x0, 0x0, 0x2b, 0x16}, {0x3000, 0x10000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x7, 0x3, 0xb5}, {0x0, 0xf000, 0x0, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0x5000, 0xf, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xe000, 0x8, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x7, 0xb1, 0x8, 0x21, 0x81, 0x80, 0x40, 0x1}, {0xf000, 0x40000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x6, 0x81, 0x1, 0x70}, {0x3000, 0x1000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x40040010, 0x0, 0x8000000, 0x2024, 0x8, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) 3m47.734559852s ago: executing program 5 (id=113): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) unshare(0x64000600) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7c2) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004500)=@getae={0x11fc, 0x1f, 0x200, 0x70bd25, 0x25dfdbfc, {{@in6=@local, 0x404d6, 0x2, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff2, 0x3503}, [@replay_thresh={0x8, 0xb, 0x4ea}, @lifetime_val={0x24, 0x9, {0x4, 0x7, 0x8000000000000001, 0x4}}, @algo_aead={0x104c, 0x12, {{'aegis256-aesni\x00'}, 0x8000, 0x200, "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"}}, @tmpl={0x144, 0x5, [{{@in=@private=0xa010102, 0x4d3, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x0, 0x0, 0x10, 0x6, 0x1, 0x4a812ce8}, {{@in6=@loopback, 0x4d4, 0xff}, 0xa, @in=@private=0xa010101, 0x3504, 0x1, 0x0, 0x9, 0x7, 0x8, 0x7}, {{@in=@empty, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3506, 0x2, 0x0, 0x9, 0x3, 0x37, 0x5d0}, {{@in=@private=0xa010102, 0x4d3, 0x33}, 0x2, @in6=@private1, 0x3506, 0xd9e4f8f6ed7710c8, 0x2, 0x7, 0x8, 0x1, 0xfffff801}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3504, 0x1, 0x3, 0xf, 0x60f5ff6a, 0x4, 0x1}]}]}, 0x11fc}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) r5 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000380)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffffff000000000600000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=r9, @ANYBLOB="715a0300231a05002000128019000100736974001400028008000200c0000200060008002b0000007cee7f68f92404fa5161c4617f9cccafe43613f9330012c3343d8fb198e25957a4b4fc1aa3a389375bb512639b639dc93bc9850c19b8478f7a1a0f087524"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) setns(r10, 0x24020000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x100}) (async) fsmount(r5, 0x0, 0x1) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) 3m47.539966358s ago: executing program 5 (id=116): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x200008c1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000006c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@nodelalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000002080)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x80) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r2) 3m47.335262794s ago: executing program 5 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000380)=0x80000041, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4004, &(0x7f0000000780), 0x1, 0x43c, &(0x7f0000000280)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_netdev_private(r5, 0x8991, &(0x7f00000001c0)="58a34d3a") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername(r6, 0x0, 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x404ffa1, 0x100000001}) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x99, 0x0, @void}}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r12, r11, 0x0, 0x1951) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28010000", @ANYRES16=r8, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x20}, 0x800) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 3m47.312503645s ago: executing program 34 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000380)=0x80000041, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4004, &(0x7f0000000780), 0x1, 0x43c, &(0x7f0000000280)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_netdev_private(r5, 0x8991, &(0x7f00000001c0)="58a34d3a") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername(r6, 0x0, 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x404ffa1, 0x100000001}) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x99, 0x0, @void}}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r12, r11, 0x0, 0x1951) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c8}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28010000", @ANYRES16=r8, @ANYBLOB="00012bbd7000fddbdf25040000000c00038008000200ff030000280007800800010003000002000000000008000100380000000c0004000500000000000000140007800800010003000000080001000080000028000580080001007564700008000100657468000800010065746800040002800700010069620000580006800400020050000300fad49cf5f0df830d99875b86685190b138f46f381dcf2f8cc5d4949c991d70c6cff19769d06b30eef8c194ef5dfe1ee3ebf21fc0c7acca2ea1cab07545dd00d5a898893aba9ce6d3e6f23602100006800400050008000100400000001400098008000100010000000800020000000018280007800800020002000000080002000900000008000200080000000c0003000600000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20}, 0x800) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 28.73730769s ago: executing program 6 (id=1436): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x2, 0x1, 0x23, 0x0, 0x1, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000200000000002000000181100000000008a61", @ANYRES32=r3, @ANYBLOB="00000000e0b00faccfa33b8734a70000000000a208000000000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085c956ca48c53c84d2721d23a2630efe395d9cd06b105a8d8bb792ae34cd9cdf37a00dcbe520d7521ed41ba470d7ac0a25052d5524f9a6cf8ebdcb2091e9c509f1129c13b91889d8fc8de0789083d1310721646d45d1eabdaa9ba9a0c8b3b9344b98dc0f0e9dbe9f14aa90ebf1771918fa2eb454c9a2d05867ff19f3c255bc353afb665c8e713cc6de76d5a5cc205db37c826c2ef8117c0ef0ec6dc149f0ce50e0284df227295becc0037b048dd9490489f4e4e39326d37fdea2", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000040000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x2, 0x0) getdents64(r5, 0x0, 0x22) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r7, 0x80000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 28.601879124s ago: executing program 6 (id=1439): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) (async) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x408) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) 28.600704555s ago: executing program 6 (id=1441): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x3004009, &(0x7f00000001c0)=ANY=[], 0xfd, 0x551f, &(0x7f0000005a40)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x14c98, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) fchdir(r1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x800, 0x4, 0x400, 0x101]}, &(0x7f0000000080)=0x78) 28.176527868s ago: executing program 6 (id=1453): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x400000, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x3, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x10000, 0xf, 0x80000001, 0x7, 0xffffffff, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x4, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000008, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x10001, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0xff, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0x100, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xc504, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x0, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x4, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x6, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x3ffffff, 0x8003, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x0, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0x9, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000040, &(0x7f0000000140), 0x1, 0x5aa, &(0x7f0000000680)="$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") ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x4, 0x3000, 0xb, 0x6, 0x1, 0x8, 0x40, 0x13, 0x0, 0x2e, 0x19}, {0x1, 0xd000, 0xf, 0x8, 0x22, 0x5, 0x79, 0x1, 0x5, 0xb4, 0x3}, {0xeeef0003, 0xa000, 0xc, 0x5, 0x3, 0x3, 0x0, 0x19, 0x1, 0x5, 0xa, 0x81}, {0x25000, 0x58000, 0xe, 0x1, 0x8, 0x42, 0xb, 0x3, 0x6, 0x7, 0x10}, {0x11f6593269eab9dc, 0x126000, 0x9, 0x3, 0x15, 0x19, 0xab, 0x80, 0x7, 0x83, 0x8, 0x83}, {0x8000000, 0x0, 0xc, 0x9f, 0xad, 0x8, 0x6, 0xf7, 0x8, 0x5, 0xff}, {0x0, 0x2fffe, 0x4, 0x7, 0xd1, 0x5, 0x9, 0x5, 0x5, 0x81, 0xff, 0x8}, {0x41000, 0x1, 0xe, 0x4, 0xb, 0x7, 0x0, 0x34, 0x2, 0x99, 0x3, 0x9}, {0xa003, 0x30}, {0x25000, 0x2}, 0x80000031, 0x0, 0xeeef0000, 0x1200d, 0xc, 0x8000, 0x1000, [0x6800010000000000, 0x4, 0x61, 0xf]}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) setpgid(r6, r6) ioctl$KVM_RUN(r5, 0xae80, 0x0) listen(r2, 0x3fd) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_TIOCINQ(r8, 0x8905, &(0x7f00000001c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r2}, 0x30) 27.949772895s ago: executing program 6 (id=1454): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d"], 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x5d, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x5}, 'Z'}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x7f}, {0x9, 0x0, 0x1}}}]}]}]}}]}, 0x6c}}, 0x40000) 27.901924326s ago: executing program 6 (id=1456): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000200), &(0x7f00000009c0)=r0}, 0x20) syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r1, &(0x7f00000000c0)="8d8ca19e", 0x0}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x4c}, {0x4d}, {0x6}]}) mkdir(0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r9, &(0x7f00000004c0)=[{&(0x7f0000000140)='55', 0x2}], 0x1) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) getdents64(r6, 0x0, 0x22) getdents64(r3, 0x0, 0x0) 27.877880667s ago: executing program 35 (id=1456): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000200), &(0x7f00000009c0)=r0}, 0x20) syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r1, &(0x7f00000000c0)="8d8ca19e", 0x0}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x4c}, {0x4d}, {0x6}]}) mkdir(0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r9, &(0x7f00000004c0)=[{&(0x7f0000000140)='55', 0x2}], 0x1) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) getdents64(r6, 0x0, 0x22) getdents64(r3, 0x0, 0x0) 18.645496813s ago: executing program 1 (id=1550): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4603100702000000000000000003003e"], 0xb0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={'pimreg\x00', {0x2, 0x4e20, @loopback}}) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000440)=@file={0x1}, 0x6e) fcntl$setstatus(r2, 0x4, 0x2400) close(0x3) 18.578940825s ago: executing program 8 (id=1552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="540100001800010027bd7000fddbdf251d0104001e01060003f80302ff71ec6d721744cd5200080000f8cfcad4e4ec6511ec028c5028564abce83afe14c93e152e14c2baed7f893fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b12c301f47f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbe95f1cfe93cff41a9630802f9650529827c5e301953a8abaafa1f121e590f74e28233f4129d4577eee87ec5d42c3ef0619022c000000000000000000000000000000000000005c8d03000000000000002a5e15c8a95d29e5b2ea0000080005002538f50215000300030000200502000054831bdbae1d82b307"], 0x154}}, 0x240448c8) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000228bd7000fadbdf252b0000000c0005000202aaaaaaaa27f62bc752006264483593de3593cafe5f0abc863d42d7220a4cc74115f2037c2772c3043ca13e2f7e2c85763808904417a39438b8772ef536366769b9e07bc61ee2f7b1132fb93d21ba97a94d1808a057e7bb5534881ebfef36caa477a3f6e97a9cec620352a32ffb0610b7e499b1f106bc9cbfa2980948412b1515c08a96a0df3fb3dc560e146413babf903f64fa6c61343d448638ea35339a6b781b1f5604a7fb8f9526ac4db4336d4fa3cc8a33bb0257cf6eaebf77bf194f899ce7934771a26d5813c856"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24000804) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x153d, &(0x7f0000001840)="$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") r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x70bd27, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xea, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x2004c090) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xa4}, 0x800, 0x0, 0x1, 0x9, 0x3}, 0x20) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41044}, 0x4004804) 18.547121046s ago: executing program 7 (id=1556): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x5ba, &(0x7f0000001080)="$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") syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "3c57a26e0aac76b801b559f394cfee0e818a3cee35455b464cdf675cb89650c1", "3f8cc7fa893047a1e623dc7c86a4017fafda3fb092365af07eadd088cad1c826", "b4d30f7e5058df81b033a0d7db7ec82ac818616ec4d6154cf5af827a1f5f6be6", "3773a2d65effffffff000000000010c95c00", "22563d0b0676714f7620f3815cb9167ebb38e866735be9586a5516e90e7ac8f2", "d44c18965a7a598be9603f1d", 0x9, 0x1, 0x4, 0x96, 0x5}}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 18.437742479s ago: executing program 7 (id=1557): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f", @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x2fe, &(0x7f0000000080)="$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") sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in=@remote, 0x0, 0x19}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xbda, 0x4014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x20, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xff, {0xa, 0x25, 0x25, 0x7, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xba, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x4800}}}}}}}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x57, 0x0}) 18.389525351s ago: executing program 3 (id=1560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069199a000000000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000280)=""/210) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0, 0x4f}], 0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x36f, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "d9349c", 0x339, 0x21, 0xfc, @loopback, @ipv4={'\x00', '\xff\xff', @local}, {[@routing={0x3b, 0x6, 0x0, 0x20, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast2]}, @hopopts={0x16, 0x2b, '\x00', [@hao={0xc9, 0x10, @remote}, @pad1, @ra={0x5, 0x2, 0x6}, @generic={0xb, 0xf9, "264c1bf76ccc86ba096b204efaa2b7da2b3532e0eb33884acfd90cb5246384780375b0102a839560fff2b70c17d96e4288f715b9320ce4102f4069a9dc4c8b3b1bcd798a87cf2d5fe0e998ef536533579e90ffdbe551675803bdd6a9cc11b19da8eb44d9105c41e1f594ceb10eda57ab9a8ce4b9e7b5df41df97325b61199bc7f3a14adf14e64a3be12dd2a0a2796920c15c6b21af9856876805743a34643d49b789a0e60833b7df93d2d96be84ef71fe4163e2a8177cf4e20f98afbee7319639d5b4394ae366ded26174305ce853b291fd2247ba53c79541786e758892df565bf6372c53813120aff9f504784cb0476a143fb6c62a31ddacd"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x38, {0x2, 0xc, 0xa, 0x4, [0x2, 0x9, 0x288000000000000, 0x8, 0x5, 0x10001000000]}}]}, @hopopts={0x87, 0x8, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3ff}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0xcde3}, @jumbo={0xc2, 0x4, 0x8}]}, @routing={0xc, 0xa, 0x0, 0x40, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}, @hopopts={0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}]}, @srh={0x6c, 0x14, 0x4, 0xa, 0x8, 0x0, 0x200, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @local, @mcast2, @private2, @empty, @private2]}], {{0x4e23, 0x4e22, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1, 0x4, "ab7b8b", 0xe, "de5970"}, "7df56bec2e4a5bf2accfb7d64b23f6419618241c6350408f0fe791e0b6b382eb60016295b95cb9de0e"}}}}}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x6, 0x5, 0xe, 0x4e9, 0x7, 0x1, 0x5dc, 0xc000000000000000, 0xd, 0x8, 0x1ff, 0x7, 0x8, 0x3, 0x7fffffff, 0x3], 0xfec00000, 0x84000}) 18.333694842s ago: executing program 3 (id=1561): syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x32}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x1, 0x83) r5 = dup2(r4, r3) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000002700)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r8, 0x16, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000200)={0x1f, 0x0, 0x2}, 0x6) setsockopt$inet6_udp_int(r9, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendto$inet6(r5, &(0x7f0000000280)="9e4feb453348f4806e76ca8cfaf6d712af3e63536beb5c918b9702c36ca235917a479320e9db0b704061199833e317a080d4701d4459975f66a003b654bfe9ae2e1bbfe3c5c1af3411d61330ba7f7e73657ee71ce10124ca3fe981dafad755b7226d1d6b402164b8c863218f4b25f1781da302dedae55681b1d55f1e0c2e66fcbdf9934817d7fb1001a2281fc63c18564711b0d1bdcf301db2d9", 0x9a, 0x4000, &(0x7f00000000c0)={0xa, 0x4e21, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c) 18.125487759s ago: executing program 8 (id=1564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80005, 0x80000000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, [@RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2b}}, @RTA_NH_ID={0x8, 0x1e, 0xa163}]}, 0x2c}}, 0x40) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)={0x30000014}) ppoll(&(0x7f0000000400)=[{r4, 0x401}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x290) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x50}}, 0x0) 18.121539789s ago: executing program 4 (id=1567): syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0xc9d5, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300), 0x1e, &(0x7f0000000000)=ANY=[@ANYBLOB="f3ab4dbddc2ecf706e3db9772ba015f7642c071a1994d3fc23a7264496b25b4a563f237c73cce36112f47ba767abbd6b8ef79424cdb91a80367b411e636b6cb3dbee88b1f07690aef3e542bf7dd5cc67ed333097abd2911f0bbef13f46219df6331e5fd437bdc4e8817a7e6b4cb03060e31b1364a66deb5a80f78c62b259b4dc4b63708977d0438bf415c5a546", @ANYRESHEX=r1, @ANYRESHEX=r1], 0x1f8}, 0x20040000) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0xc9d5, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmsg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300), 0x1e, &(0x7f0000000000)=ANY=[@ANYBLOB="f3ab4dbddc2ecf706e3db9772ba015f7642c071a1994d3fc23a7264496b25b4a563f237c73cce36112f47ba767abbd6b8ef79424cdb91a80367b411e636b6cb3dbee88b1f07690aef3e542bf7dd5cc67ed333097abd2911f0bbef13f46219df6331e5fd437bdc4e8817a7e6b4cb03060e31b1364a66deb5a80f78c62b259b4dc4b63708977d0438bf415c5a546", @ANYRESHEX=r1, @ANYRESHEX=r1], 0x1f8}, 0x20040000) (async) 18.07773479s ago: executing program 8 (id=1568): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0002}]}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x21, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x0, 0x0, 0x4, 0x9, 0x0, 0xfffffffffffffff8, 0x4}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @generic={0x82, 0x7, 0xd, 0x5, 0xfffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async, rerun: 64) symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00') 18.07712459s ago: executing program 8 (id=1569): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000005900)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x4001}}], 0x1, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x18) symlinkat(&(0x7f0000000040)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') openat2(r7, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000380)={0x8c000, 0x0, 0x11}, 0x18) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) socket$nl_route(0x10, 0x3, 0x0) 18.064640591s ago: executing program 4 (id=1570): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0x5, 0x2, {{0x37, 0x4, 0x3, 0x31, 0xdc, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x23, 0x89, [@loopback, @empty, @broadcast, @remote, @rand_addr=0x64010102, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @cipso={0x86, 0x10, 0x1, [{0x1, 0xa, "edba6688924e811f"}]}, @noop, @noop, @timestamp_addr={0x44, 0x1c, 0x18, 0x1, 0x9, [{@rand_addr=0x64010102, 0x6}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}]}, @cipso={0x86, 0x5b, 0x1, [{0x0, 0x6, "7ea22ad7"}, {0x7, 0x12, "bd0f137829a6745e7a952e7c888c7741"}, {0x2, 0xc, "611f27db864f49f33645"}, {0x1, 0x3, '\t'}, {0x0, 0x9, "c3638f80d27069"}, {0x5, 0xf, "48081c09b91fd69e785fcf0c8a"}, {0x0, 0x8, "960310ce1d16"}, {0x1, 0xe, "1a0cd2ca48b0d9ad5e4da261"}]}, @timestamp={0x44, 0x14, 0xe9, 0x0, 0xd, [0x3, 0x2, 0x3, 0x1]}, @lsrr={0x83, 0x7, 0xd6, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f00000003c0)='./file1/../file0\x00', 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0xfffffffffffffffe, 0x3) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/vmstat\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000080)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd1c2}}], &(0x7f0000000100)='GPL\x00', 0x400, 0x39, &(0x7f0000000140)=""/57, 0x41000, 0xc, '\x00', r2, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x80, 0x2, 0x5, 0x9}, 0x10, 0x0, r3, 0x1, &(0x7f0000000440)=[r4, r5, r6, r7, r8], &(0x7f0000000500)=[{0x2, 0x4, 0xd, 0x3}], 0x10, 0x8000}, 0x94) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) flock(r9, 0x2) read$rfkill(r9, &(0x7f0000000040), 0x8) flock(r9, 0x2) ioctl$TIOCGSERIAL(r9, 0x541e, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) keyctl$chown(0x4, r0, r10, 0xee01) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000000)={[{@sysvgroups}, {}]}, 0x2, 0x53c, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszet/34rx5nhfZL4CRdSMidiPiWkS8HRGzef5kRCTpwd32ll730dOHK3tPH64k0Wq99c8kO5/m7ZeV5Ptn8jLTMn74vYifJMfjNrZ3Npar1cpWnp5v1jbnG9s7t9cLeU55aXFp4dU7r5TPra0v1H775Lvrb/zo97/7yod/2v32z9Jqzfz8enausx2HimeOmeTlzHTkjUfEG2cu+eIYz/9+uHzS3va5iHgx6/+zMZa9mgDAVdZqzUZrtjMNAFx16fP/TCSFUj4XMBOFQqnUnsN7PqYL1XqjeWu2/uD+amRzWHNRLLyzXq0s5HOFc1FM0vRidnyYLn8s/V7lTkQ8FxHvTUxl50sr9erqMN/4AMAIe+bI+P+fifb43+ns/wUDAC6cyWFXAAAYuI7xf26Y9QAABsfzPwCMnk8w/vt0IABcEZ7/AWD0GP8BYPScOv4/Gkw9AICB+MGbb6Zba6/9/df739R9e7XS2CjVHqyUVupbm6W1en2tWimttFqnlVet1zcXXz5INrZ37tXqD+43763Xltcq9yq+SwAAhu+5F97/Szro7742lW3RsZaDsRqutsKwKwAMzdiwKwAMjc/zwOjq4xnfNABccV2W6G3LJwiSXhc8tvgrXFY3v2j+H0bVWeb/zR3A5fbp5v+/c+71AAbPGA6jq9VKrPkPACPGHD/Q8///uZ5fEfK4j8LvfvL6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGUwk21JoZStBb6b/iyUShHXI2Iuisk769XKQkQ8GxF/nihOpOnFYVcaADijwt+TfP2vm7MvzRw9ey3570S2j4if/vKtX7y73GxuLab5/zrIbz5O86eaW+Vrw2gAANBpf93NDw6zsvG7nO87HuQ/evpwZX8bZBWfvB4Rk1NZ/L18a58Zj/FsPxnFiJj+d5Kn29L3K2PnEH/3UUR8Yb/9k/FuR4SZbA6kvfLp0fhp7OvnHr/z9380fuFj7S1k59J9MftdfD6OVA441fuvt++Ted9Lu3je/wpxI9t37/+T2R3q7NL7X9pd947d/woH97+xY/GTrM/fOEifXJMnL//h+8cyW7Ptc48ivjTeLX5yED/pfv8tvtRnGz/48ldf7HWu9auIm13bv78idS27zc43a5vzje2d2+u15bXKWuV+uby0uLTw6p1XyvPZHHX75x+7xfjHa7ee7RU/bf90j/iTJ7c/vtFn+3/9v7d//LUT4n/r691f/+dPiJ+Oid/sM/7y9N2ey3en8Vd7tP+U1z9u9Rn/w7/trPZ5KQAwAI3tnY3larWydcpB+l7ztGsc9H+QPttfgGpkB7EbcV4FZpMSEdH1mvQd9cVo8md1kAwt+m/Ou8Bh35mAz9php+99zV8HWSEAAAAAAAAAAAAAAOCYxvbOxkT3T2ud28Gw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDV9f8AAAD//zvRxlc=") 18.064291091s ago: executing program 4 (id=1571): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) 18.063864441s ago: executing program 4 (id=1572): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_open_procfs(0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35b]}}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 17.950437264s ago: executing program 7 (id=1573): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25020000cb", @ANYRES32, @ANYBLOB="08000400640101010800080010000000080001007f"], 0x48}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 17.789209519s ago: executing program 3 (id=1574): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) (async) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1, 0x3) (async) syz_usb_connect$cdc_ecm(0x2, 0x5b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x1, 0x20, 0x8, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x80, {{0xa, 0x24, 0x6, 0x0, 0x0, "98b9626c80"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x104, 0xc0, 0x1}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x8, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x38, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x6, 0xc}}}}}]}}]}}, &(0x7f0000002640)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="41dd6970e581304bee767cb34fc5a2277be3b3deb1aca1bbd3c4d223c889ffb88bc0871e3186d5da97d9beb27e1df98b5f3dabdc6107c247796662c5641e52c252a1a4617c67a4f1e9082ad8b470eebf8970e279760bd60919f11a5788545519c61be82b525e465298eafe05ed8a2b6d816dae4ef68c48fbe556a0f8b5b8", @ANYRESHEX, @ANYBLOB="19ba59c7db97f1c03455cbc3708d478daa747c217e2cc49746654fd4e477dbbf68ceee6ac7a0b707861d4db656d0052008617f300f18081121f952d1c6a17b161189730a5e38f2f9ae3779d2572f2b7461c3613dd17cdcd8476a456f052f0c2cd85bc369e9cce636f04775a6c9b05c5493de27429de8dd44c5bb99d9821d25143f5c1e618314cfed5c"]}) 17.78164157s ago: executing program 1 (id=1575): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x1, 0x0, 0x2, 0x2}, {0x7, 0x21, 0x9}, {0x80, 0x3, 0x4, 0x100}, {0x7, 0x7, 0xfd, 0xfffffffa}, {0x200, 0xf3, 0x1, 0x4}, {0xc, 0xf, 0x7, 0x128}, {0x1b, 0x3, 0x2, 0xfff}, {0x6, 0x4, 0x4, 0x6}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x1, 0x0, 0x2, 0x2}, {0x7, 0x21, 0x9}, {0x80, 0x3, 0x4, 0x100}, {0x7, 0x7, 0xfd, 0xfffffffa}, {0x200, 0xf3, 0x1, 0x4}, {0xc, 0xf, 0x7, 0x128}, {0x1b, 0x3, 0x2, 0xfff}, {0x6, 0x4, 0x4, 0x6}]}) r0 = socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000240)={0x34, {{0x29, 0x0, 0x43000000, @mcast1, 0x8}}}, 0x88) 17.78057393s ago: executing program 3 (id=1576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x358, 0xd0, 0x440, 0x0, 0x1b8, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @loopback, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1000}, 0x20) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x8631, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000180)={0x2c, 0x8, r4}, 0x10) r7 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x8001, 0x2000004}}], 0x18}) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="410027bd70ffdb5ae8242d7b0d000300006d17b22e31bc452904775d0d59183d96bd861b0cecb6622b55864e62666beaaefe0c50c201b421666bd5000c948d7d09c168caf66ebef7d9e72b5ff3cec85dba491a42af912489906e1b39077ce67646b4422e85f7056ab6c803934096863f70123e4dd1cde0833853ba2f3e2c44c1aa5694895773a8a84a91e3af4cba7772ae21eb8b21cd87d0495b832e54ba5a755f2c", @ANYRES32=0x0, @ANYBLOB="0c009900040000001b00000008006b000a00000008006b00b400000008006b003c000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000100)={0x45}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_connect$midi(0x2, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000403e13150840000102030109021f00010109100409040000010103000b090505", @ANYRES8], 0x0) inotify_init() 17.721025401s ago: executing program 7 (id=1577): r0 = syz_clone(0x0, &(0x7f0000000180)="5d5a32801ff7e13150b0ef5d8216c9a97263f46b489a941d61d5c11eea1fa59f95ab836cd514239f7b", 0x29, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340)) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000c000000000000"], 0x0, 0x44}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b87}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4) 17.712508712s ago: executing program 4 (id=1578): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x4}]}]}}, 0x0, 0x2e}, 0x28) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c58001008018000008001b00000400"], 0x28}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001200)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @struct={0x3, 0x8, 0x0, 0x4, 0x1, 0x5, [{0x0, 0x1, 0x2}, {0xc, 0x3}, {0x6, 0x3, 0x4}, {0x5, 0x3, 0x5}, {0xe, 0x1, 0x100}, {0x3, 0x0, 0x7f}, {0x2, 0x0, 0x35}, {0x5, 0x0, 0x5}]}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/4096, 0x93, 0x1000, 0x0, 0x0, 0x10000, @value=r1}, 0x28) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x4}]}]}}, 0x0, 0x2e}, 0x28) (async) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c58001008018000008001b00000400"], 0x28}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000001200)={0x0, r0}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @struct={0x3, 0x8, 0x0, 0x4, 0x1, 0x5, [{0x0, 0x1, 0x2}, {0xc, 0x3}, {0x6, 0x3, 0x4}, {0x5, 0x3, 0x5}, {0xe, 0x1, 0x100}, {0x3, 0x0, 0x7f}, {0x2, 0x0, 0x35}, {0x5, 0x0, 0x5}]}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/4096, 0x93, 0x1000, 0x0, 0x0, 0x10000, @value=r1}, 0x28) (async) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) (async) 17.653756063s ago: executing program 4 (id=1579): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) personality(0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x140301, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x30000019}) dup2(r5, r4) r6 = fsopen(&(0x7f0000000180)='befs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r7 = fsmount(r6, 0x0, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet6(0xa, 0x4, 0xfffdfff8) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0xa4e3, 0xfffc, 0x4e23, 0x0, 0xa, 0x0, 0x30, 0xff}, {0x100000000, 0xa, 0x9, 0x0, 0xffffffffffffffff, 0x6, 0x6, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x5, 0x10000000009}, 0xffff7ff9, 0x9, 0x2, 0x1, 0x2, 0x1}, {{@in=@multicast2, 0x210000, 0x33}, 0x0, @in6=@mcast2, 0x1034ff, 0x0, 0x0, 0x7, 0x4, 0x0, 0x1002}}, 0xe8) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0xffe0) mkdirat(0xffffffffffffff9c, 0x0, 0x108) 17.206755377s ago: executing program 8 (id=1580): sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008805}, 0x4001) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4881) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_usb_connect$uac2(0x0, 0x97, &(0x7f0000003180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x44, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x6, 0xc0, 0x40, {0x8, 0xb, 0x1, 0x1, 0x1, 0x8, 0x20, 0x10}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8000, 0x7, 0x25, 0x50}, [@processing_unit={0x7, 0x24, 0x8, 0x4, 0x6, [0x1]}, @effect_unit={0x9, 0x24, 0x7, 0x1, 0x3, 0x2, [0x1]}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x1fb, 0x52, 0x1, 0x1, 0x7ff, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x71, 0x5, {0x8, 0x25, 0x1, 0x0, 0xc, 0xb, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x660, 0xb, 0x6, 0x2, {0x8, 0x25, 0x1, 0x1, 0x30, 0x7, 0x3}}}}}}}}]}}, &(0x7f0000003440)={0xa, &(0x7f0000003280)={0xa, 0x6, 0x0, 0x1, 0x9, 0x4, 0x20, 0xb}, 0x0, 0x0}) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x4) 17.094818511s ago: executing program 3 (id=1581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000ff7f000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffe0}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x92}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x40000) 17.021661513s ago: executing program 3 (id=1582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0x5, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0xcb9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x46ed}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40d0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000f}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_emit_ethernet(0x72, &(0x7f0000000300)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x8, 0x4, 0x0, 0x7, 0x64, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x8, 0x1, [{0x1, 0x2}]}, @ra={0x94, 0x4, 0x2000}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x1}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x98, 0x2, 0x1, 0x0, 0x1, 0x9}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x3, {{0xa, 0x2, 0x5, 0x0, 0x1, 0x0, 0x7, 0x10}, 0x2, {0xd, 0xac1, 0x2, 0x0, 0x1, 0x1}}}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000540), 0x6, 0x42201) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000600)={0x2, 0x400, 0x4, 0x8, 0x1ff, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={r5, 0xee01}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)={0x7d, {{0x29, 0x0, 0x3000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x89) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 16.943207405s ago: executing program 1 (id=1583): ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@user_xattr}]}, 0x81, 0x633, &(0x7f0000000600)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_connect$cdc_ecm(0x0, 0x115, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/402], 0x0) 16.823442939s ago: executing program 7 (id=1584): timer_create(0x1, &(0x7f0000002240)={0x0, 0x25, 0x2, @thr={&(0x7f0000001140)="004b575e5e15284159fdc43623956e7f39059534b0e4080508b4b00bb70d549be2ba2db95bb3eb3b5b6c756fd76ad226eedfd48b4928c104a91ff76e491ea63413c2ab3b3fc64d43e8f6d7d497478633485114d1dc7a3a5311c5c8d8c6b6caf5229c4aadccea196ad6ba2edf2f69b215a641ef65cbf2d73d5e22a4c5a9530c8de423c4271933da777dfb5cb8ff155701d474953a71f693475f4de37839ebdcecfcb2a4254a746fe6e051e9c9fab01be686ecac27230fad9539b5244c1621718382215c3d6080d5bac9f6899c904137605d6ebb2f3e8314abee", &(0x7f0000001240)="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"}}, &(0x7f0000002280)=0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet(0x2, 0x802, 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) write(r2, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0xfc82, 0x0}, 0xffffff01}], 0x1, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x10002}}, 0x2e) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) timer_settime(r0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r7, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f00000000c0)=0x5, 0x4) timer_getoverrun(r7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) write$UHID_INPUT(r8, &(0x7f0000000100)={0x8, {"aae6194c79ff10b20d4a5f04329bc17c9861f8e2298e3dbb70cb9377921ab1490f0b9c0dabd383f8415557fdc246941ed183d805935873abf2b68a6416e83ab183b4f2dd9f2e0733592f9a71c7a50cdfd6501d509fb0d363710243caf8cd1422748fb4d175581ad55f9578c40532918a3a01114982879d257b9fe9e8bbd2c77d31449741218b12fc3fa4abbe6c31530ae62977f85c6cb01941eba7d19ad86b97742e8126e160f12e40c94fc35b4279192ebb7bf0268adb1029b01170223e3e93364134f9f681885ef1b772a837df79be95150b4358f37ba47f21678b265827625275b8f61ccd53bde8816bdc58ea09ed256d4f1b708af3ff54d50902860c5e24bc24245133e1454ca8969741782e2962180e44eb40e0fddd99f1e5ec97422f1061feb05905a69b8deb81700a64fb7f74da2470c1b8a06bc2b6bc2ebad39f942e18e73252fcf69c0e6ee7e57a6a81924f9a224a3bfc2cb6e72d0e1d783d8aea7cfd0650fb8bc8fb2c1466c0be1b82ad567f6b48684b73d49ae78114d83fa565b48e74c311c7d4fb3a5dd21021c9caf7a6e37494a22ab2d6029246cc7eb0a2c60309799015192ea53ec17102cc0d9a4898e271c55aa154de79e598dea4739d6c5f05ac994845e08ce9686d21c64439fb0727b742e5c1908b51b55b4d424e342ab2e96d2242780a1bd3c4f15ccee3f9d329572628c043fbf6b8dc65a9a5653f9051ecacd025e19a4d4664fa42a5deaccdb3bdb8055aae31bc0aa54047242b7b7863ef8b282853cd581fa15e72adbe6de3133260d90b6f52bb9a56e7cb4d942b6b01e6a2c47b0f34d66104666704bc818716e318b8b8b56f3e155197e9dbcab3203d36b46fc43b0cdec3318c124f14ff0682def6e87a89c9836bf8a7de53d8cdccbc621c78f43bcf6b16f03e7ed61fd4c33637667956693a7feef1e8362709037b7b5bd55133d031e630322db89423bd829d5326c92fc6ed911641053cfb9921bdbd2797423ab2bc2a3e0f5e5ce3d60527a66116f51cd0e20608895156dd990cb62c4bbff96371d38ccaf66119b974a13f11dc60667fae28245dbf6bc3f7a64e914858d84d0a20352936822b2805e7de58bf0c689df6b0bdab76f6766a65e31d4003f5f1b2fcdb368faec118e97f04a43a0e78fbce801bce71d74108e99906e5d03589eb57f6d9c310a41cc2c424389e18916e35bd350602332a370e68ed101ba6433a076aeb9afbbbe7ace8d86109f416384b7a9fafa438ea77b51779aa92431067818f50ee2025566eed69b2424e5741a6e1d2dd3094a79122d21ef95276b303dc1e6ab9764c0649edd5d662a1a89c53159ea6114d608718133e4fa5f61e0e3980a3a42155f8c11aa67c01c3577e46773c2870ff8ead875711bf23369c893cb9b51a2428bdf0cc1d63da99721fa791b399a0df62231648d61f11c3dfca5c3aa5488b6c767fad5367e5cfc237d092efe773ba1d33ee5effae0fce60d09ba2543e5e6ba5b1e3d73da613e4183daf9edf2468bb38d7748c678845090e5a37b32f56237b9b3e478b37a236c99dd6cc93da0f275cb1ab9af1cf7cec09c6672963c9ef053e3e5b9fcf534898257ab3479adecf63fc3f62181d57056027f40d03dd825706c474a3f27cfd588bd628c53718755642c85a9ac040dbc0ad56b9b6466eba592849a64dec656a0996883a23b5d3fdc9e6f4d6236ee58b1c9a85beb12d55c9d989c90d6a4c5a3e4a4a9f519ebaf6259018768b1eaa1e7b2d124e5a549c254a03d959a0643b5d199d47503efa55714d73f01c947a91f770ba0e4c11c07c23220c0f6ff2133355fc78084cca570387ded8f96e559b3c6d3f69a8ea0bbdd0f14fac0e0afd58e5ab893dbe6d2b44a7a0c9fb9f7561c282c5dd452f653af5d6bc550c7028b49c484719317fa723c8ced9f2403284e11aed70b09561a18c957d1b24236800a9bccbd01a05fe1832cb4f08bc88fb6edc350b5d7bca3f0e8fe09765dbe2c455af3c3e4fad05c678107312a71790d00293f4bec1eed59993c0c1cc1de8abe02e1f5073845180dc6f1addeee4864cc85e07db53ef989540a4f02834d0794104ed5ec2bd69a072c8835d1fbb216c02240468bd0e8544b6ff6218fc31fd068c12a7c7793ed075ea1a7b009da3f466f1e5ac36d1f9e2ef3b706649907009742a925ad50bc698415e90e5aeb368187638aab5803f73ba6e10b757f1c17611c15e7b9e90aa93fe87e5e6aaae633c17698cd57e0a8b056c039afde1a4c8cee35a7f16c39d1eb24fe34120c9d7599c676fefad4f8ad8b3911e39434286ed24097e3bcb9efa61c740d7966424d95c276d0297dd8533981bca7f29d45fe8ce6ea3461af4a11fbf0c49048eae574b3f7e768a449dfd2c23c9a5d8f20ed5d3472641fe3b0c6b40da80f663249f376a8c55a62c0f0792d9ba4243003e89a3d74341b8d38b8a07b9a7aba73731baba5838c3129fdd3e434f77e0146e0199bc9161fc3e7872c698a75b390cddd08c27275014a75448556c4187ba1a902240d332470b5e4d8f3a8bfa233663eb86c3aa8aff646ed35a1e687e44f151b4dbe34e97db0932f10001b81fcd9ab204b8af09f6acb79ba2d9d507bc3ac80f2b9a3441ff4a88871b43e576e345e91f0a4beb3bdbfa391b574b9cab3e2f16230af18e3289537dbf747f5e9f63bd2daf0926850d998a7503e178aa203a37ce06aa80816fe2aa4e771a11a2dadd1944a4083d97ffa3906f379fe68f5663a285ea8f33f3e94d22fcd382fa6c5299756be2d75799329da220198230c0ed862d4a308bc5c62ccce8a779c99410b04ea58a5c48ff56bc6f264cfe41cff9663cc5042671763f4a9bef9e9ef56432ed808dc78d1a357aaa30a30914cf48745a8d661c27e277644ce9f36dfc52347675bdb50b0c9a6d925bb1212c92aa15ed41664d12cff92c2ab4d3becfddb0d7477d2b3bad92c47d5f416e53fd753516046a752e52de68041ac80528a9bd28b4819c81fb0b3dfa461635dfa33eef7801ef1c48dc28d85a7bb134cc4c03ad45e9a572b604c857819ad73ce6f26bf3f71f34dfdfd6789bbfc17e77cf0f9b37625d163acbce3656ec912a2fd21ec2b703ef90ac65e385473f051e3bc77173c9b7b5aa2d7516f1682caffccb43ea896bc32f4af72a4c06891b1a99201fc2ab9f554dcfbb4e4d6e21c7efe99f89f355aa11a61a434869700a861c5e3f8addca931835701925490e08b420ce8a89196628e293615e114932a080290a4ef257e50750dbb4b4340e5c7f4c81aeced93e9a9a0c5ac65030fff80b4a2410699ff3d9001e351ca7e812f54a00b3e783ed96d16fbbee1b97f50b501c945e3af1a36b9175e7fcafacc5ae3a2faff52b42181acffe067d21c2233c169b603b19487deb018c7eb28ce9407f40145e1e253b3331bbd607645223b6a8567c3365e96e18ef245df3f9d753ac79897c546fcb752386ab3e113764d37593dd61f021d22a7a5ba5defbe96673f24f0390932a40fa35008dcb145460e85c8c39fc5abae2861fc0a9feeb21ceadb558fc10b0a12833aa95c58d17ff6e0af21d5419a2485ecb4ad76b6fbbb381f85c8d0e78471d1c02cff9156979a88cd3bcaa339e3ca8091cac85ede8224fe5fad47c2b0af81a5ba8f01370673810c83ae27e3fe74413ad7ab681b8632f1d0b15f5ba5c410ba0e07f90ebf11acf179c596dec3866c140fd82728b34c6d4eddc9b25bd996b520e086a95ac8060be5c563d12e2d61da613411535861721337df3df782e48b108f296ca69a97daca26bf4f337534e394089d3f8fa030f6bae4fe27d5f633a1bfa93a658c115645973f8644c81ff58f1806e38d09dcd44d3f392d3e6ce80d1d7a70757b2cdb84a1ddfea06ae4f1a275d0b445e0d4739aed3b4bac617ed24e3ba9631f7c9788bb4a11d1f01ad842df3bcd22e18f74346cc27ea2d393ad8297441aacd7731ea0c8f6e5e4b60e7dbe2d44d7d6659e47343c2cc1f23d501e9ae13604d38734d0636f1b0186c461047da054724923a7b6a9cb2c5b508cb178850a006d62eb2376e0c2bca0a4960547e65c4e35d69e06b5c5b7e09503f31c2a27cf5ed8790cb879cd8b31759354cede4585d19945c5dfac17ab4d03c72108a4b6f62239f55e21b54d020237cfacd23df713a92d6195c35bd42a99be2be13dd052c9d4fec270cc08fcb73ca5ac9e7d789b080ce7934854ac3538b4c5523a52afbbc2e07e6acb150eb6ccb4a511455f722e51b3112c14fd49dcf45c9d06cd4462d8f2e867c3180923e0210b63706de7cbf43a1171f80a010b89ce8a89bf572ad270daa472b9da43c7dee85de5f4f01aecdb68a65627df7f18c8fea8a58c4bf5236de736777bd608fe4010ed720800b328e22aa6d1b30be930db035dcd2e719fb6843ebb5e94cc5e5103029cac42412be35dd69434e35f9fd0ed97be77e8c41bde18ddd0c017a6baf6471c5f7b2dc13ee6dd61a319591ac780d89c1d6663f30206a10625533ef054d0d32e2ede105adf3098b56a6364dd0999c0d334f41870fc3de3cb24533b698ed21af5c79b37e1880ca3e935e90eaaa7f4cc39247b736640c94221bd2dd819f1af643b449a8ac60b70cd2d9d51b28c2e6d6028efec844f3cd266b962424a98cb87d1a7be734c5600c9a7cc96f104f2a7b954d6dbe0619843de0fa5f9caac6d861251df65ca0ff42f4ac7ffe2bb6636e4109c2c278703236cf2e9e8e326cb92fc5aad7adc9755e730e6d5e3c7eacd6cba7c893d4c291e797f85671dd409f12f9371ec25252fbd3959d295cffbde40244092cdd5814f8fe5eebe7aa1e1410c667e3099d48da33de731da0b5da5a725a5edff3273ee41b87defd9c8036686a09deb2aefe3ad942ad5078fa6f5886e76e6a70e9c0f897f6ad1d3643a9912dd5e9843fa5c8d73e99a1db8e29a31f10af1322f5489fb8acb9e541bafcbf2b1aef5b71465800dbeb7d03244864f23bb02f3a7c6095ab14f0bcb936ac276ef6792afd4316b7f6250af89667d33e60fe6d3d81df4afb27b65ea648a2663837ccb5961d10b9460918c787edf10dee60c9d8d030109bb5b1694c7f452a3eb0db87e5d867b459aed50c138dc62959b54ad0a1f4bb8ecc94f0a07e3649a5a09e9ce4b9b02d690aaad8490cc96f63573cf889fcc03f22b2d3066aed486e81bcabd3a32b5a883ec2f8b2bbb763f9ac2ba1720f819208b7f473f428a09ef231a9fc131d5218d3e943e101fe5f6427b96c2046ee5198299cec63e4db0cc05ca9b9bbe62541d3ad547ba0138abdbb096c5313adece063cfe6921820af55cadb5fbc1b07af218a1ac386670d976a89ccd3ae9116f0c1ac9bd37ecf19d6412bae238e59c7476f9f34888a937899f5f66aac3f377d152cc6fb96e023eb4666920759450ff0a63124d66e00f957a069ddbec86ca4cb965ca0419c5d7dd850cffeecfa86300a32a659704a07df69fb12f8e0fd36108ab1a20d9a4e8b5b3dd3d458819350c44c6ff54a81740be710d7d54396553f1c670bf509daa8fe5817974f264dad43529b9434c398a148cfca630aed8a622e3ca9fe5a8fc8ca4884ba2a2cea99c9dbca30a57c3bc1cd62cb21be9dff12019e083992ca28e47bb2d6b5c49046fc2010defe878d649260baaeb536d7e055fad215bba30a4318b78059f92782bb19f454fd31c2fda6cab3f03061fae3333ef90072f561217be8fab6aea5f1b3f267ca6f2fc87e5acb8a4d827d0af319ef7b261efeb14d2fdd0aa4724a8b0f8fa313a0efe9c9abeb164a3a3ca8fa29df086d9682e82e01554546ccb69fb204594e1e79", 0x1000}}, 0x1006) 16.617639225s ago: executing program 7 (id=1585): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='cubic\x00', 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001080)={[{@utf8}, {@uni_xlateno}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_win95}, {@uni_xlate}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@numtail}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp737'}}]}, 0x81, 0x2c1, &(0x7f0000001880)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = userfaultfd(0x800) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000001}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x2, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x10000, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x2, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0x11, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x5e6f, 0x8, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x80009, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x7, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x0, 0xb, 0x2, 0x8000, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10041, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 16.402789082s ago: executing program 1 (id=1586): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) (async) lremovexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)=@random={'osx.', 'ext4\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) mknod(&(0x7f0000000080)='./bus\x00', 0xffffffffffffc000, 0x0) (async, rerun: 64) creat(0x0, 0x175) 16.354992154s ago: executing program 1 (id=1587): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xed) inotify_init1(0x0) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x178) close(r0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 16.281767116s ago: executing program 1 (id=1588): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25020000cb", @ANYRES32, @ANYBLOB="08000400640101010800080010000000080001007f"], 0x48}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 15.375282474s ago: executing program 8 (id=1589): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40082, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xad41, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081c, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x120) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0xfffffffffffffed7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x4c814) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) 2.504815982s ago: executing program 36 (id=1579): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) personality(0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x140301, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x30000019}) dup2(r5, r4) r6 = fsopen(&(0x7f0000000180)='befs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r7 = fsmount(r6, 0x0, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet6(0xa, 0x4, 0xfffdfff8) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0xa4e3, 0xfffc, 0x4e23, 0x0, 0xa, 0x0, 0x30, 0xff}, {0x100000000, 0xa, 0x9, 0x0, 0xffffffffffffffff, 0x6, 0x6, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x5, 0x10000000009}, 0xffff7ff9, 0x9, 0x2, 0x1, 0x2, 0x1}, {{@in=@multicast2, 0x210000, 0x33}, 0x0, @in6=@mcast2, 0x1034ff, 0x0, 0x0, 0x7, 0x4, 0x0, 0x1002}}, 0xe8) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0xffe0) mkdirat(0xffffffffffffff9c, 0x0, 0x108) 2.004812248s ago: executing program 37 (id=1582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0x5, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0xcb9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x46ed}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40d0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000f}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_emit_ethernet(0x72, &(0x7f0000000300)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x8, 0x4, 0x0, 0x7, 0x64, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x8, 0x1, [{0x1, 0x2}]}, @ra={0x94, 0x4, 0x2000}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x1}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x98, 0x2, 0x1, 0x0, 0x1, 0x9}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x3, {{0xa, 0x2, 0x5, 0x0, 0x1, 0x0, 0x7, 0x10}, 0x2, {0xd, 0xac1, 0x2, 0x0, 0x1, 0x1}}}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000540), 0x6, 0x42201) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000600)={0x2, 0x400, 0x4, 0x8, 0x1ff, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={r5, 0xee01}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)={0x7d, {{0x29, 0x0, 0x3000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x89) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1.500955734s ago: executing program 38 (id=1585): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='cubic\x00', 0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001080)={[{@utf8}, {@uni_xlateno}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_win95}, {@uni_xlate}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@numtail}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp737'}}]}, 0x81, 0x2c1, &(0x7f0000001880)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = userfaultfd(0x800) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000001}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x2, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x10000, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x2, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0x11, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x5e6f, 0x8, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x80009, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x7, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x0, 0xb, 0x2, 0x8000, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10041, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 481.310225ms ago: executing program 39 (id=1588): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25020000cb", @ANYRES32, @ANYBLOB="08000400640101010800080010000000080001007f"], 0x48}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 0s ago: executing program 40 (id=1589): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40082, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xad41, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081c, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x120) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0xfffffffffffffed7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x4c814) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) kernel console output (not intermixed with test programs): t=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.446653][ T3103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 117.457105][ T1526] usb 4-1: USB disconnect, device number 21 [ 117.481330][ T3156] xt_hashlimit: size too large, truncated to 1048576 [ 117.636433][ T24] audit: type=1400 audit(1780691073.325:1081): avc: denied { name_bind } for pid=3155 comm="syz.1.752" src=560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 117.666918][ T3150] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001, [ 117.683366][ T3142] EXT4-fs error (device loop6): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.698644][ T3142] EXT4-fs (loop6): Remounting filesystem read-only [ 117.890735][ T24] audit: type=1326 audit(1780691073.585:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3186 comm="syz.4.761" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5854d2ce59 code=0x0 [ 118.575065][ T3209] netlink: 'syz.1.765': attribute type 3 has an invalid length. [ 118.583238][ T3209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 118.594724][ T3209] fuse: Bad value for 'group_id' [ 118.599880][ T3201] FAT-fs (loop6): bogus logical sector size 0 [ 118.620299][ T3201] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 118.631519][ T3201] FAT-fs (loop6): Can't find a valid FAT filesystem [ 118.708392][ T3223] incfs: Error accessing: ./bus. [ 118.713825][ T3223] incfs: mount failed -2 [ 118.737428][ T3228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 118.793749][ T3211] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001, [ 118.811041][ T24] audit: type=1400 audit(1780691074.505:1083): avc: denied { ioctl } for pid=3239 comm="syz.4.775" path="socket:[25260]" dev="sockfs" ino=25260 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.836184][ T3240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 118.892069][ T3211] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.906976][ T3238] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 118.918403][ T3238] EXT4-fs (loop6): Test dummy encryption mode enabled [ 118.925679][ T3211] EXT4-fs (loop3): Remounting filesystem read-only [ 118.935991][ T3238] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 118.941848][ T3247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=258 sclass=netlink_audit_socket pid=3247 comm=syz.4.776 [ 118.949011][ T3238] System zones: 0-5 [ 118.963026][ T3238] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf, [ 119.007593][ T3253] netlink: 'syz.4.777': attribute type 16 has an invalid length. [ 119.015495][ T3253] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.777'. [ 119.185821][ T3259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 119.280131][ T3278] tc_dump_action: action bad kind [ 119.359078][ T3288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 119.379237][ T24] audit: type=1400 audit(1780691075.065:1084): avc: denied { mount } for pid=3280 comm="syz.1.785" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 119.402501][ T3281] netlink: 'syz.1.785': attribute type 3 has an invalid length. [ 119.541115][ T3300] EXT4-fs (loop6): dax option not supported [ 119.675410][ T3310] __nla_validate_parse: 2 callbacks suppressed [ 119.675419][ T3310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 119.724927][ T3316] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.797: missing EA_INODE flag [ 119.737930][ T3316] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.797: error while reading EA inode 2 err=-117 [ 119.750363][ T3316] EXT4-fs (loop6): 1 orphan inode deleted [ 119.756161][ T3316] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue [ 120.392369][ T3338] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001, [ 120.397002][ T3345] tc_dump_action: action bad kind [ 120.430813][ T3338] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.446604][ T3338] EXT4-fs (loop3): Remounting filesystem read-only [ 120.455955][ T3338] netlink: 27 bytes leftover after parsing attributes in process `syz.3.805'. [ 120.613684][ T3347] exfat: Deprecated parameter 'utf8' [ 120.621520][ T3347] exfat: Deprecated parameter 'namecase' [ 120.628630][ T3347] exfat: Deprecated parameter 'utf8' [ 120.670402][ T3347] exfat: Unknown parameter 'giƒ¯Õøõäù4‹P}ç²ÿÿÿÿ' [ 120.834904][ T3354] bridge: RTM_NEWNEIGH with invalid ether address [ 121.777266][ T3364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 121.786123][ T3364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.812'. [ 121.798289][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 121.798307][ T24] audit: type=1400 audit(1780691077.425:1086): avc: denied { getopt } for pid=3360 comm="syz.3.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.143786][ T3377] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001, [ 122.178345][ T3377] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.195455][ T3377] EXT4-fs (loop3): Remounting filesystem read-only [ 122.202757][ T3377] netlink: 27 bytes leftover after parsing attributes in process `syz.3.816'. [ 122.251417][ T24] audit: type=1400 audit(1780691077.945:1087): avc: denied { getopt } for pid=3388 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.324542][ T24] audit: type=1326 audit(1780691078.015:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3388 comm="syz.1.820" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 122.350056][ T24] audit: type=1326 audit(1780691078.015:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3388 comm="syz.1.820" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 122.515073][ T24] audit: type=1326 audit(1780691078.015:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3388 comm="syz.1.820" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 122.616954][ T3394] netlink: 'syz.3.821': attribute type 1 has an invalid length. [ 122.627830][ T3394] netlink: 76 bytes leftover after parsing attributes in process `syz.3.821'. [ 122.644487][ T24] audit: type=1326 audit(1780691078.015:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3388 comm="syz.1.820" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 122.681246][ T24] audit: type=1326 audit(1780691078.015:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3388 comm="syz.1.820" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 122.706761][ T24] audit: type=1326 audit(1780691078.015:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3388 comm="syz.1.820" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 122.731834][ T24] audit: type=1326 audit(1780691078.015:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3388 comm="syz.1.820" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 122.764715][ T24] audit: type=1326 audit(1780691078.025:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3388 comm="syz.1.820" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f21e8f3268e code=0x7ffc0000 [ 123.130387][ T1530] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 123.650848][ T1530] usb 4-1: Using ep0 maxpacket: 8 [ 123.780668][ T1530] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 123.860241][ C0] sched: RT throttling activated [ 124.691320][ T1530] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.760391][ T1535] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 124.942745][ T1530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 124.952015][ T1530] usb 4-1: SerialNumber: syz [ 125.450375][ T1535] usb 5-1: Using ep0 maxpacket: 32 [ 125.637198][ T1535] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 125.657371][ T1535] usb 5-1: config 0 has no interface number 0 [ 125.680188][ T1535] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 125.700667][ T1535] usb 5-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 125.722048][ T1535] usb 5-1: config 0 interface 196 has no altsetting 0 [ 125.890453][ T1535] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 125.904350][ T1535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.920297][ T1535] usb 5-1: Product: syz [ 125.924503][ T1535] usb 5-1: Manufacturer: syz [ 125.939384][ T1535] usb 5-1: SerialNumber: syz [ 125.953557][ T1535] usb 5-1: config 0 descriptor?? [ 125.970413][ T3417] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.990537][ T1530] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 126.117059][ T3429] netlink: 27 bytes leftover after parsing attributes in process `syz.1.831'. [ 126.160425][ T3431] netlink: 'syz.7.832': attribute type 1 has an invalid length. [ 126.168133][ T3431] netlink: 86 bytes leftover after parsing attributes in process `syz.7.832'. [ 126.177603][ T3431] netlink: 24 bytes leftover after parsing attributes in process `syz.7.832'. [ 126.190218][ T3431] netlink: 4 bytes leftover after parsing attributes in process `syz.7.832'. [ 126.193231][ T1549] usb 4-1: USB disconnect, device number 22 [ 126.895986][ T3444] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 126.931337][ T3446] netlink: 'syz.3.835': attribute type 16 has an invalid length. [ 126.939259][ T3446] netlink: 'syz.3.835': attribute type 17 has an invalid length. [ 127.310764][ T1535] ipheth 5-1:0.196: Unable to find endpoints [ 127.335722][ T24] kauditd_printk_skb: 220 callbacks suppressed [ 127.335734][ T24] audit: type=1400 audit(1780691083.025:1316): avc: denied { create } for pid=3452 comm="syz.7.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 127.338539][ T3456] tipc: Enabling of bearer rejected, failed to enable media [ 127.347808][ T1535] usb 5-1: USB disconnect, device number 32 [ 127.453129][ T3457] EXT4-fs (loop3): Ignoring removed oldalloc option [ 127.469169][ T3457] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.494080][ T3457] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,min_batch_time=0x0000000000000007,norecovery,dioread_nolock,oldalloc,nodelalloc,sysvgroups,norecovery,,errors=continue [ 127.740312][ T1535] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 127.754266][ T3469] EXT4-fs (loop3): Mount option "nodioread_nolock" incompatible with ext2 [ 127.874719][ T3464] netlink: 4 bytes leftover after parsing attributes in process `syz.7.841'. [ 127.991673][ T3472] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001, [ 128.000459][ T1535] usb 5-1: Using ep0 maxpacket: 16 [ 128.009464][ T3472] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.025202][ T3472] EXT4-fs (loop3): Remounting filesystem read-only [ 128.032694][ T3472] netlink: 27 bytes leftover after parsing attributes in process `syz.3.843'. [ 128.130622][ T1535] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 128.143003][ T1535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.153826][ T1535] usb 5-1: config 0 descriptor?? [ 128.211124][ T1535] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 128.365097][ T3484] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.846: iget: bad i_size value: 38620345925642 [ 128.378060][ T3484] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.846: couldn't read orphan inode 15 (err -117) [ 128.390122][ T3484] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue [ 128.430380][ T1535] usb 5-1: Detected FT8U232AM [ 128.442035][ T1535] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 128.464713][ T3490] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.846: bg 0: block 5: invalid block bitmap [ 128.467960][ T1535] usb 5-1: USB disconnect, device number 33 [ 128.483386][ T3490] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 128.486045][ T1535] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 128.505636][ T3490] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.505636][ T3490] [ 128.507613][ T1535] ftdi_sio 5-1:0.0: device disconnected [ 128.548663][ T3490] EXT4-fs (loop3): Total free blocks count 0 [ 128.554895][ T3490] EXT4-fs (loop3): Free/Dirty block details [ 128.560963][ T3490] EXT4-fs (loop3): free_blocks=0 [ 128.566122][ T3490] EXT4-fs (loop3): dirty_blocks=3096 [ 128.571563][ T3490] EXT4-fs (loop3): Block reservation details [ 128.701896][ T3490] EXT4-fs (loop3): i_reserved_data_blocks=3096 [ 128.892087][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1044 with error 28 [ 128.904969][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.904969][ T9] [ 128.921339][ T3494] EXT4-fs (loop6): Test dummy encryption mode enabled [ 128.931015][ T3494] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,auto_da_alloc=0x0000000000000002,nodiscard,data_err=ignore,data_err=abort,nojournal_checksum,resuid=0x0000000000000000,,errors=continue [ 128.965913][ T3494] overlayfs: missing 'lowerdir' [ 129.152241][ T3505] EXT4-fs (loop3): Ignoring removed oldalloc option [ 129.172444][ T3505] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.200505][ T3505] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,min_batch_time=0x0000000000000007,norecovery,dioread_nolock,oldalloc,nodelalloc,sysvgroups,norecovery,,errors=continue [ 129.260382][ T1530] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 129.561835][ T3518] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001, [ 129.576415][ T3518] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.591629][ T3518] EXT4-fs (loop3): Remounting filesystem read-only [ 129.598994][ T3518] netlink: 27 bytes leftover after parsing attributes in process `syz.3.855'. [ 129.730601][ T1530] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.810367][ T1530] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 129.950401][ T1549] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 129.980390][ T1530] usb 5-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 129.989618][ T1530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.008251][ T1530] usb 5-1: Product: syz [ 130.016728][ T1530] usb 5-1: Manufacturer: syz [ 130.026546][ T1530] usb 5-1: SerialNumber: syz [ 130.058192][ T24] audit: type=1326 audit(1780691085.745:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.1.861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 130.084683][ T24] audit: type=1326 audit(1780691085.745:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.1.861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 130.110011][ T24] audit: type=1326 audit(1780691085.745:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.1.861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 130.135285][ T24] audit: type=1326 audit(1780691085.745:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.1.861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 130.161049][ T24] audit: type=1326 audit(1780691085.745:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.1.861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 130.186113][ T24] audit: type=1326 audit(1780691085.745:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.1.861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 130.211200][ T24] audit: type=1326 audit(1780691085.745:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.1.861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 130.236291][ T24] audit: type=1326 audit(1780691085.745:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.1.861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 130.261335][ T24] audit: type=1326 audit(1780691085.745:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.1.861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 130.299147][ T1549] usb 4-1: device descriptor read/64, error -71 [ 130.328497][ T3548] FAULT_INJECTION: forcing a failure. [ 130.328497][ T3548] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.343660][ T3548] CPU: 1 PID: 3548 Comm: syz.4.865 Tainted: G W syzkaller #0 [ 130.352376][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.362456][ T3548] Call Trace: [ 130.365799][ T3548] __dump_stack+0x21/0x24 [ 130.370155][ T3548] dump_stack_lvl+0x1a7/0x208 [ 130.374852][ T3548] ? show_regs_print_info+0x18/0x18 [ 130.380063][ T3548] ? 0xffffffffa002cc18 [ 130.384238][ T3548] ? __kernel_text_address+0xa0/0x100 [ 130.389636][ T3548] dump_stack+0x15/0x1c [ 130.393817][ T3548] should_fail+0x3c1/0x510 [ 130.398265][ T3548] should_fail_usercopy+0x1a/0x20 [ 130.403314][ T3548] _copy_from_user+0x20/0xd0 [ 130.407929][ T3548] __copy_msghdr_from_user+0xc9/0x630 [ 130.413319][ T3548] ? stack_trace_snprint+0xf0/0xf0 [ 130.418455][ T3548] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 130.423848][ T3548] ? kasan_set_track+0x5b/0x70 [ 130.428630][ T3548] ? kasan_set_track+0x4a/0x70 [ 130.433413][ T3548] ? kasan_set_free_info+0x23/0x40 [ 130.438573][ T3548] ? ____kasan_slab_free+0x125/0x160 [ 130.443884][ T3548] ? __kasan_slab_free+0x11/0x20 [ 130.448849][ T3548] ___sys_sendmsg+0x19a/0x2e0 [ 130.453544][ T3548] ? __sys_sendmsg+0x280/0x280 [ 130.458340][ T3548] ? kstrtouint_from_user+0x1c4/0x220 [ 130.463745][ T3548] __sys_sendmmsg+0x2ab/0x4c0 [ 130.468531][ T3548] ? __ia32_sys_sendmsg+0x2c0/0x2c0 [ 130.473978][ T3548] ? __ia32_sys_read+0x90/0x90 [ 130.478772][ T3548] ? debug_smp_processor_id+0x17/0x20 [ 130.484166][ T3548] __x64_sys_sendmmsg+0xa0/0xb0 [ 130.489044][ T3548] do_syscall_64+0x31/0x40 [ 130.493481][ T3548] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 130.499390][ T3548] RIP: 0033:0x7f5854d2ce59 [ 130.503820][ T3548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.524136][ T3548] RSP: 002b:00007f5853787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 130.532570][ T3548] RAX: ffffffffffffffda RBX: 00007f5854fa5fa0 RCX: 00007f5854d2ce59 [ 130.540555][ T3548] RDX: 0000000000000001 RSI: 0000200000007180 RDI: 0000000000000004 [ 130.548534][ T3548] RBP: 00007f5853787090 R08: 0000000000000000 R09: 0000000000000000 [ 130.556515][ T3548] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 130.564492][ T3548] R13: 00007f5854fa6038 R14: 00007f5854fa5fa0 R15: 00007ffddf9454e8 [ 130.640429][ T1530] usb 5-1: unit 4 not found! [ 130.680795][ T3554] FAT-fs (loop6): Unrecognized mount option "" or missing value [ 130.694607][ T1530] usb 5-1: USB disconnect, device number 34 [ 130.726979][ T3558] futex_wake_op: syz.1.868 tries to shift op by 32; fix this program [ 130.850404][ T1549] usb 4-1: device descriptor read/64, error -71 [ 130.951169][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.120332][ T1549] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 131.400334][ T1549] usb 4-1: device descriptor read/64, error -71 [ 131.790363][ T1549] usb 4-1: device descriptor read/64, error -71 [ 131.910414][ T1549] usb usb4-port1: attempt power cycle [ 132.320337][ T1549] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 132.490399][ T1549] usb 4-1: device descriptor read/8, error -71 [ 132.720359][ T1549] usb 4-1: device descriptor read/8, error -71 [ 179.461080][ T3586] EXT4-fs (loop6): Test dummy encryption mode enabled [ 179.509369][ T3593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 179.650759][ T3586] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,auto_da_alloc=0x0000000000000002,nodiscard,data_err=ignore,data_err=abort,nojournal_checksum,resuid=0x0000000000000000,,errors=continue [ 180.260135][ T3586] overlayfs: missing 'lowerdir' [ 180.418313][ T3600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.881'. [ 181.203648][ T3625] FAT-fs (loop6): Unrecognized mount option "'hortname=mixed" or missing value [ 181.348144][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 181.348162][ T24] audit: type=1400 audit(1780691137.035:1331): avc: denied { mounton } for pid=3627 comm="syz.3.891" path="/syzcgroup/cpu/syz3/cpuset.cpus" dev="cgroup" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 181.900303][ T5] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 182.314916][ T3657] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue [ 182.350315][ T5] usb 4-1: unable to get BOS descriptor or descriptor too short [ 182.360937][ T3657] EXT4-fs (loop6): Online resizing not supported with bigalloc [ 182.410393][ T5] usb 4-1: not running at top speed; connect to a high speed hub [ 182.500318][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.510549][ T5] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 182.523024][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.532902][ T5] usb 4-1: config 1 interface 1 has no altsetting 2 [ 182.690338][ T5] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 182.699624][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.707926][ T5] usb 4-1: Product: syz [ 182.712383][ T5] usb 4-1: Manufacturer: syz [ 182.717042][ T5] usb 4-1: SerialNumber: syz [ 182.838541][ T3671] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3671 comm=syz.4.906 [ 183.280645][ T3690] overlayfs: failed to resolve './file0': -2 [ 183.454952][ T3701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3701 comm=syz.7.916 [ 183.600508][ T3702] exfat: Deprecated parameter 'namecase' [ 183.635537][ T3702] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 183.652359][ T24] audit: type=1400 audit(1780691139.345:1332): avc: denied { setattr } for pid=3698 comm="syz.6.915" name="file0" dev="loop6" ino=1048645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.794371][ T3711] IPv6: sit1: Disabled Multicast RS [ 184.107222][ T24] audit: type=1400 audit(1780691139.795:1333): avc: denied { read } for pid=3712 comm="syz.1.919" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.324363][ T3732] netlink: 56 bytes leftover after parsing attributes in process `syz.1.924'. [ 184.414355][ T3735] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (1841152 > 6144). [ 184.426410][ T3735] EXT4-fs warning (device loop3): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 184.442029][ T3735] EXT4-fs (loop3): mount failed [ 184.790318][ T5] usb 4-1: 0:2 : does not exist [ 184.826894][ T5] usb 4-1: USB disconnect, device number 27 [ 184.906842][ T3753] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 184.929183][ T3753] ±ÿþ€: renamed from team_slave_1 [ 185.030823][ T3704] udevd[3704]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.288879][ T3749] F2FS-fs (loop3): invalid crc value [ 185.352984][ T3749] F2FS-fs (loop3): Found nat_bits in checkpoint [ 185.392588][ T3749] F2FS-fs (loop3): Start checkpoint disabled! [ 185.399503][ T3749] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 185.636857][ T3781] fuse: Bad value for 'fd' [ 185.990273][ T1524] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 186.450374][ T1524] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.544674][ T3807] incfs: Error accessing: ./file0. [ 186.550072][ T3807] incfs: mount failed -2 [ 186.630523][ T1524] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.667377][ T1524] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 186.730767][ T3809] EXT4-fs (loop6): Ignoring removed oldalloc option [ 186.762693][ T3809] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.870773][ T1524] usb 4-1: New USB device found, idVendor=0582, idProduct=004d, bcdDevice= 0.40 [ 186.893295][ T1524] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.907459][ T3809] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,min_batch_time=0x0000000000000007,norecovery,dioread_nolock,oldalloc,nodelalloc,sysvgroups,norecovery,,errors=continue [ 186.928534][ T1524] usb 4-1: Product: syz [ 186.954617][ T1524] usb 4-1: Manufacturer: syz [ 186.978187][ T1524] usb 4-1: SerialNumber: syz [ 187.100792][ T3783] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.541614][ T3783] udc-core: couldn't find an available UDC or it's busy [ 187.556036][ T3783] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 187.624918][ T3823] device syzkaller0 entered promiscuous mode [ 187.638885][ T3823] device syzkaller0 left promiscuous mode [ 187.680942][ T1524] usb 4-1: invalid MIDI out EP 0 [ 187.687887][ T1524] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 187.697866][ T3827] 9pnet: Insufficient options for proto=fd [ 187.706144][ T24] audit: type=1326 audit(1780691143.395:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.952" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5854d2ce59 code=0x7ffc0000 [ 187.749373][ T1524] usb 4-1: USB disconnect, device number 28 [ 187.756089][ T3827] fuse: Bad value for 'fd' [ 187.768509][ T24] audit: type=1326 audit(1780691143.435:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.952" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5854d2ce59 code=0x7ffc0000 [ 187.793732][ T24] audit: type=1326 audit(1780691143.435:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.952" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5854d2ce59 code=0x7ffc0000 [ 187.819991][ T24] audit: type=1326 audit(1780691143.435:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.952" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5854d2ce59 code=0x7ffc0000 [ 187.853670][ T24] audit: type=1326 audit(1780691143.435:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.952" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5854d2ce59 code=0x7ffc0000 [ 187.924730][ T24] audit: type=1326 audit(1780691143.435:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.952" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5854d2ce59 code=0x7ffc0000 [ 187.979087][ T24] audit: type=1326 audit(1780691143.435:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.952" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5854d2ce59 code=0x7ffc0000 [ 188.017784][ T24] audit: type=1326 audit(1780691143.455:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.952" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5854d2ce59 code=0x7ffc0000 [ 188.042904][ T24] audit: type=1326 audit(1780691143.455:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.952" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5854d2ce59 code=0x7ffc0000 [ 188.093541][ T24] audit: type=1326 audit(1780691143.455:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.4.952" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5854d2ce59 code=0x7ffc0000 [ 188.220432][ T3851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37769 sclass=netlink_route_socket pid=3851 comm=syz.3.960 [ 188.241733][ T3855] netlink: 24 bytes leftover after parsing attributes in process `syz.6.962'. [ 188.273259][ T3851] netlink: 128 bytes leftover after parsing attributes in process `syz.3.960'. [ 188.483645][ T3873] futex_wake_op: syz.4.965 tries to shift op by 144; fix this program [ 188.551203][ T3880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.968'. [ 188.664253][ T3825] netlink: 8 bytes leftover after parsing attributes in process `syz.7.951'. [ 188.690799][ T3886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'. [ 189.132805][ T3890] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.170385][ T3890] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 189.220019][ T3890] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xdca9dc68, utbl_chksum : 0xe619d30d) [ 189.602437][ T3905] EXT4-fs (loop3): Ignoring removed oldalloc option [ 189.609665][ T3905] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.631624][ T3905] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,min_batch_time=0x0000000000000007,norecovery,dioread_nolock,oldalloc,nodelalloc,sysvgroups,norecovery,,errors=continue [ 190.301101][ T3931] netlink: 27 bytes leftover after parsing attributes in process `syz.6.981'. [ 190.586505][ T3933] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 190.620888][ T3933] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 190.662257][ T3933] EXT4-fs (loop6): Test dummy encryption mode enabled [ 190.874634][ T3933] EXT4-fs (loop6): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf, [ 191.223699][ T3944] EXT4-fs (loop3): Unrecognized mount option "hash" or missing value [ 192.360335][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 192.377508][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.406995][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 192.433609][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.461018][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.618563][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.637164][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): 26±ÿþ€: link becomes ready [ 192.658205][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.793338][ T3972] netlink: 27 bytes leftover after parsing attributes in process `syz.3.992'. [ 192.814997][ T24] kauditd_printk_skb: 89 callbacks suppressed [ 192.815011][ T24] audit: type=1400 audit(1780691148.505:1433): avc: denied { lock } for pid=3973 comm="syz.3.993" path="socket:[28108]" dev="sockfs" ino=28108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.863053][ T3963] netlink: 28 bytes leftover after parsing attributes in process `syz.7.989'. [ 192.921603][ T3974] xt_hashlimit: size too large, truncated to 1048576 [ 192.973245][ T3980] netlink: 'syz.3.993': attribute type 4 has an invalid length. [ 192.981140][ T3980] netlink: 17 bytes leftover after parsing attributes in process `syz.3.993'. [ 193.234426][ T3982] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 193.242360][ T3982] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 193.252633][ T3982] EXT4-fs (loop3): Test dummy encryption mode enabled [ 193.269456][ T3982] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf, [ 194.384790][ T3993] EXT4-fs (loop3): Ignoring removed oldalloc option [ 194.406032][ T3993] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.421825][ T3993] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,min_batch_time=0x0000000000000007,norecovery,dioread_nolock,oldalloc,nodelalloc,sysvgroups,norecovery,,errors=continue [ 194.611665][ T1530] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.619285][ T1530] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.627399][ T4001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'. [ 194.636618][ T4001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'. [ 194.645717][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.750286][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.950314][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.037035][ T4010] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1003'. [ 195.081999][ T4014] device syzkaller0 entered promiscuous mode [ 195.090815][ T4014] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 195.099141][ T4014] tipc: Started in network mode [ 195.104662][ T4014] tipc: Own node identity 3a1949c6aebd, cluster identity 4711 [ 195.118816][ T4014] tipc: Enabled bearer , priority 0 [ 195.142798][ T4020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 195.153209][ T24] audit: type=1400 audit(1780691150.845:1434): avc: denied { create } for pid=4019 comm="syz.3.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 195.154779][ T4020] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1007'. [ 195.233894][ T4016] binder: Unknown parameter 'measure' [ 195.269151][ T4028] x_tables: duplicate entry at hook 1 [ 195.276332][ T24] audit: type=1400 audit(1780691150.975:1435): avc: denied { connect } for pid=4027 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 195.348231][ T24] audit: type=1400 audit(1780691151.035:1436): avc: denied { map } for pid=4000 comm="syz.4.1001" path="socket:[27406]" dev="sockfs" ino=27406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.381098][ T4032] binder: 4027:4032 ioctl c018620c 200000000000 returned -1 [ 195.383261][ T24] audit: type=1400 audit(1780691151.035:1437): avc: denied { read } for pid=4000 comm="syz.4.1001" path="socket:[27406]" dev="sockfs" ino=27406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.566357][ T4042] fuse: Bad value for 'fd' [ 195.584863][ T4046] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1015'. [ 195.590762][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 195.631819][ T4054] raw_sendmsg: syz.1.1019 forgot to set AF_INET. Fix it! [ 196.020347][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 196.111181][ T491] tipc: 32-bit node address hash set to c649a494 [ 196.177658][ T4075] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1027'. [ 196.410304][ T1524] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 196.581404][ T24] audit: type=1400 audit(1780691152.278:1438): avc: denied { create } for pid=4104 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 196.601649][ T4106] tmpfs: Unknown parameter '' [ 196.650271][ T1524] usb 4-1: Using ep0 maxpacket: 8 [ 196.682330][ T4112] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1038'. [ 196.744192][ T4114] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 196.790379][ T1524] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 196.810258][ T1524] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.830599][ T1524] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.847408][ T1524] usb 4-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 196.867577][ T1524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.887887][ T1524] usb 4-1: config 0 descriptor?? [ 197.450467][ T1524] usbhid 4-1:0.0: can't add hid device: -71 [ 197.466308][ T1524] usbhid: probe of 4-1:0.0 failed with error -71 [ 197.670487][ T1524] usb 4-1: USB disconnect, device number 29 [ 198.260578][ T4133] EXT4-fs (loop6): Ignoring removed oldalloc option [ 198.294071][ T4133] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.340967][ T4133] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,min_batch_time=0x0000000000000007,norecovery,dioread_nolock,oldalloc,nodelalloc,sysvgroups,norecovery,,errors=continue [ 198.366300][ T4157] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1049'. [ 198.376496][ T24] audit: type=1326 audit(1780691154.068:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.7.1050" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f44d1868e59 code=0x7ffc0000 [ 198.560742][ T4167] overlayfs: failed to resolve './file0': -2 [ 198.692464][ T4191] overlayfs: overlapping lowerdir path [ 198.840338][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 199.214335][ T4207] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1067'. [ 199.662537][ T24] audit: type=1326 audit(1780691155.358:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.3.1069" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 199.707251][ T24] audit: type=1326 audit(1780691155.358:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.3.1069" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 199.734776][ T4222] SELinux: Context system_u:object_r:klogd_var_run_t:s0 is not valid (left unmapped). [ 199.746398][ T4224] tipc: Enabling of bearer rejected, already enabled [ 199.755287][ T4224] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1073'. [ 199.765843][ T4224] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 199.775276][ T4224] tipc: Enabled bearer , priority 10 [ 199.784043][ T4222] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 199.792658][ T24] audit: type=1326 audit(1780691155.358:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.3.1069" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 199.870454][ T24] audit: type=1326 audit(1780691155.358:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.3.1069" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 199.921311][ T24] audit: type=1326 audit(1780691155.358:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.3.1069" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 199.980299][ T24] audit: type=1326 audit(1780691155.358:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.3.1069" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa0551fbc2 code=0x7ffc0000 [ 200.026330][ T24] audit: type=1400 audit(1780691155.458:1446): avc: denied { relabelto } for pid=4221 comm="syz.4.1072" name="file0" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:klogd_var_run_t:s0" [ 200.077209][ T24] audit: type=1400 audit(1780691155.458:1447): avc: denied { associate } for pid=4221 comm="syz.4.1072" name="file0" dev="tmpfs" ino=1075 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:klogd_var_run_t:s0" [ 200.131010][ T24] audit: type=1400 audit(1780691155.528:1448): avc: denied { rmdir } for pid=283 comm="syz-executor" name="file0" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:klogd_var_run_t:s0" [ 200.531626][ T4240] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1078'. [ 200.547997][ T4211] /dev/loop3: Can't open blockdev [ 200.555877][ T4211] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1069'. [ 200.565274][ T4211] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1069'. [ 200.574431][ T4211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 200.601708][ T4244] xt_hashlimit: size too large, truncated to 1048576 [ 200.900111][ T4264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 200.960792][ T4271] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1089'. [ 200.974143][ T4272] xt_CONNSECMARK: invalid mode: 66 [ 202.036181][ T4296] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1098'. [ 202.061794][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1098'. [ 202.206582][ T4311] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 203.181714][ T4336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=4336 comm=syz.4.1106 [ 203.194775][ T4336] netlink: 'syz.4.1106': attribute type 4 has an invalid length. [ 203.202569][ T4336] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1106'. [ 205.564582][ T24] kauditd_printk_skb: 55 callbacks suppressed [ 205.564597][ T24] audit: type=1326 audit(1780691161.258:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.1115" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 205.607736][ T24] audit: type=1326 audit(1780691161.288:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.1115" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 205.633633][ T4357] xt_hashlimit: size too large, truncated to 1048576 [ 205.657385][ T24] audit: type=1326 audit(1781215449.297:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.1115" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 205.698143][ T24] audit: type=1326 audit(1781215449.297:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.1115" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 205.748849][ T24] audit: type=1326 audit(1781215449.297:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.1115" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 205.800256][ T24] audit: type=1326 audit(1781215449.297:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.1115" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 205.855831][ T24] audit: type=1326 audit(1781215449.297:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.1115" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 206.310228][ C0] Adjusting tsc more than 11% (8579266 vs 8464875) [ 206.984928][ T4418] syz.1.1135 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 207.290696][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 207.621619][ T4428] F2FS-fs (loop6): invalid crc value [ 207.639897][ T4428] F2FS-fs (loop6): Found nat_bits in checkpoint [ 207.784157][ T4428] F2FS-fs (loop6): Start checkpoint disabled! [ 207.819509][ T4428] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 208.139394][ T24] audit: type=1400 audit(1781215452.025:1511): avc: denied { bind } for pid=4429 comm="syz.4.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.511804][ T4457] overlayfs: failed to clone upperpath [ 208.516105][ T24] audit: type=1400 audit(1781215452.121:1512): avc: denied { setattr } for pid=4427 comm="syz.6.1139" name="file0" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 208.539780][ T24] audit: type=1400 audit(1781215452.421:1513): avc: denied { read } for pid=4456 comm="syz.4.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.671650][ T9] attempt to access beyond end of device [ 208.671650][ T9] loop6: rw=2049, want=40976, limit=40427 [ 208.745230][ T4467] overlayfs: missing 'lowerdir' [ 211.653995][ T4490] EXT4-fs (loop6): dax option not supported [ 212.702884][ T24] kauditd_printk_skb: 420 callbacks suppressed [ 212.702907][ T24] audit: type=1400 audit(1781215456.783:1934): avc: denied { relabelfrom } for pid=4496 comm="syz.4.1157" name="" dev="pipefs" ino=29040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 212.895487][ T4507] FAT-fs (loop6): bogus number of FAT sectors [ 212.946645][ T4507] FAT-fs (loop6): Can't find a valid FAT filesystem [ 213.167889][ T4507] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65048 sclass=netlink_xfrm_socket pid=4507 comm=syz.6.1159 [ 213.211331][ T24] audit: type=1400 audit(1781215457.303:1935): avc: denied { setopt } for pid=4492 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.750291][ T4528] overlayfs: missing 'lowerdir' [ 214.212567][ T4545] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1171'. [ 214.221958][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1171'. [ 214.318795][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 214.338920][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 214.365336][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 214.707923][ T4563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1177'. [ 215.002462][ T4569] incfs: Error accessing: ./file0. [ 215.007844][ T4569] incfs: mount failed -2 [ 215.101604][ T4571] fuse: Bad value for 'user_id' [ 216.238092][ T4581] overlayfs: missing 'lowerdir' [ 216.573946][ T4601] xt_hashlimit: overflow, try lower: 3/0 [ 216.639078][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 216.648795][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 216.692592][ T4607] 8021q: VLANs not supported on tunl0 [ 216.728633][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 216.803194][ T24] audit: type=1400 audit(1781215461.914:1936): avc: denied { read } for pid=4594 comm="syz.3.1187" name="file0" dev="tmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 216.844451][ T4613] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1194'. [ 217.378720][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 217.916440][ T24] audit: type=1400 audit(1781215463.024:1937): avc: denied { set_context_mgr } for pid=4625 comm="syz.6.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 217.966848][ T24] audit: type=1400 audit(1781215463.054:1938): avc: denied { map } for pid=4625 comm="syz.6.1198" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 218.168600][ T24] audit: type=1400 audit(1781215463.104:1939): avc: denied { call } for pid=4625 comm="syz.6.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 218.214623][ T4632] overlayfs: missing 'lowerdir' [ 218.603743][ T4657] EXT4-fs (loop6): Test dummy encryption mode enabled [ 218.624098][ T4657] EXT4-fs (loop6): Test dummy encryption mode enabled [ 218.661468][ T4657] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue [ 218.751058][ T4657] SELinux: Context  is not valid (left unmapped). [ 218.758226][ T24] audit: type=1400 audit(1781215463.864:1940): avc: denied { relabelto } for pid=4656 comm="syz.6.1208" name="rdma.current" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=07 [ 218.791713][ T24] audit: type=1400 audit(1781215463.904:1941): avc: denied { write } for pid=4656 comm="syz.6.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 218.828847][ T4682] cgroup: Invalid name [ 219.279116][ T4689] netlink: 'syz.6.1217': attribute type 4 has an invalid length. [ 219.292736][ T4689] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1217'. [ 219.696279][ T4707] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1224'. [ 219.721010][ T4703] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.807915][ T4710] overlayfs: missing 'lowerdir' [ 219.813138][ T4703] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1222: bg 0: block 5: invalid block bitmap [ 219.836108][ T4703] EXT4-fs (loop6): Remounting filesystem read-only [ 219.843173][ T4703] EXT4-fs error (device loop6) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 219.864739][ T4703] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #11: comm syz.6.1222: invalid indirect mapped block 3 (level 2) [ 219.895879][ T4703] EXT4-fs (loop6): 2 truncates cleaned up [ 219.901899][ T4703] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,dioread_nolock,grpquota, [ 220.073905][ T24] audit: type=1400 audit(1781215465.184:1942): avc: denied { create } for pid=4728 comm="syz.3.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 220.601340][ T4742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4742 comm=syz.6.1234 [ 220.697163][ T4745] incfs: Error accessing: ./file0. [ 220.702593][ T4745] incfs: mount failed -2 [ 221.801488][ T4772] overlayfs: missing 'lowerdir' [ 221.993375][ T4785] overlayfs: failed to clone upperpath [ 222.978577][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 223.001487][ T4834] overlayfs: missing 'lowerdir' [ 223.235555][ T4844] tipc: Started in network mode [ 223.253405][ T4844] tipc: Own node identity fe80000000000000000000000000001, cluster identity 4711 [ 223.270855][ T4844] tipc: Enabled bearer , priority 10 [ 223.311122][ T4847] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1264'. [ 224.550046][ T1530] tipc: 32-bit node address hash set to 100080fe [ 225.241432][ T4870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1271'. [ 225.787254][ T4821] overlayfs: failed to resolve './file0': -2 [ 225.830763][ T4882] netlink: 'syz.1.1275': attribute type 21 has an invalid length. [ 225.909489][ T4890] overlayfs: missing 'lowerdir' [ 226.228880][ T24] audit: type=1400 audit(1781215471.344:1943): avc: denied { connect } for pid=4899 comm="syz.7.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.275615][ T4907] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 229.454811][ T4934] overlayfs: missing 'lowerdir' [ 230.464943][ T4954] EXT4-fs (loop6): dax option not supported [ 230.849559][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 230.869666][ T4963] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 230.915273][ T4965] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1301'. [ 230.926484][ T24] audit: type=1326 audit(1781215476.034:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 230.973427][ T24] audit: type=1326 audit(1781215476.034:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 231.034162][ T24] audit: type=1326 audit(1781215476.034:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 231.071767][ T4954] EXT4-fs (loop6): Test dummy encryption mode enabled [ 231.090925][ T4954] EXT4-fs (loop6): error: could not find journal device path: error -2 [ 231.108757][ T24] audit: type=1326 audit(1781215476.034:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 231.178572][ T24] audit: type=1326 audit(1781215476.034:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 231.276162][ T24] audit: type=1326 audit(1781215476.034:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 231.301569][ T24] audit: type=1326 audit(1781215476.034:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 231.391635][ T24] audit: type=1326 audit(1781215476.034:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 231.549601][ T4982] incfs: Can't find or create .index dir in ./file0 [ 231.556506][ T4982] incfs: mount failed -22 [ 231.670487][ T24] audit: type=1326 audit(1781215476.034:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 232.086081][ T24] audit: type=1326 audit(1781215476.034:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 232.132259][ T4990] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 232.149790][ T24] audit: type=1326 audit(1781215476.034:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 232.196203][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1306'. [ 232.218725][ T24] audit: type=1326 audit(1781215476.034:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 232.249623][ T24] audit: type=1326 audit(1781215476.034:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 232.275601][ T24] audit: type=1326 audit(1781215476.034:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 232.302199][ T24] audit: type=1326 audit(1781215476.034:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.1301" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 232.515020][ T5004] overlayfs: missing 'lowerdir' [ 232.666569][ T5019] xt_hashlimit: size too large, truncated to 1048576 [ 234.593455][ T5060] overlayfs: missing 'lowerdir' [ 234.722976][ T5064] EXT4-fs (loop6): Mount option "journal_dev=0x0000000000000005" incompatible with ext2 [ 235.205515][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1337'. [ 235.353172][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1344'. [ 235.461714][ T5123] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1352'. [ 235.478987][ T5123] device gretap0 entered promiscuous mode [ 235.499877][ T5122] EXT4-fs (loop6): Test dummy encryption mode enabled [ 235.525292][ T5122] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,auto_da_alloc=0x0000000000000002,nodiscard,data_err=ignore,data_err=abort,nojournal_checksum,resuid=0x0000000000000000,,errors=continue [ 235.570116][ T5122] overlayfs: missing 'lowerdir' [ 235.598244][ T5120] fuse: Bad value for 'fd' [ 235.842673][ T5151] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1361'. [ 235.859974][ T5143] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 236.068311][ T5159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 236.530772][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1369'. [ 236.654673][ T5193] netlink: 'syz.1.1373': attribute type 4 has an invalid length. [ 236.672574][ T24] kauditd_printk_skb: 71 callbacks suppressed [ 236.672586][ T24] audit: type=1107 audit(1781215737.790:2030): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='/‰' [ 236.734381][ T5197] netlink: 'syz.3.1370': attribute type 9 has an invalid length. [ 237.034240][ T5201] overlayfs: missing 'lowerdir' [ 237.523684][ T24] audit: type=1400 audit(1781215738.640:2031): avc: denied { create } for pid=5171 comm="syz.4.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 237.621450][ T5247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=5247 comm=syz.4.1390 [ 238.655234][ T5293] netlink: 'syz.3.1405': attribute type 3 has an invalid length. [ 238.949002][ T5300] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1406'. [ 239.231215][ T5304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1409'. [ 239.903884][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 239.918582][ T5325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1415'. [ 239.956630][ T24] audit: type=1400 audit(1781215741.070:2032): avc: denied { map } for pid=5330 comm="syz.4.1417" path="socket:[31936]" dev="sockfs" ino=31936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 239.999267][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1418'. [ 240.374274][ T5337] incfs: Error accessing: ./file0. [ 240.379726][ T5337] incfs: mount failed -2 [ 242.819320][ T5375] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5375 comm=syz.7.1430 [ 243.345989][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 243.600711][ T5379] incfs: Error accessing: ./file0. [ 243.606279][ T5379] incfs: mount failed -2 [ 243.688368][ T5382] netlink: 'syz.7.1433': attribute type 2 has an invalid length. [ 244.136100][ T5382] netlink: 'syz.7.1433': attribute type 4 has an invalid length. [ 244.429805][ T5416] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1444'. [ 244.514812][ T5424] syz.3.1447[5424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.514874][ T5424] syz.3.1447[5424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.625284][ T5407] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 244.666778][ T5407] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 244.676081][ T5407] F2FS-fs (loop6): invalid crc value [ 244.689916][ T5407] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 244.720716][ T5407] F2FS-fs (loop6): recover fsync data on readonly fs [ 244.727803][ T5407] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 244.735430][ T5407] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 244.899888][ T5442] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 244.908996][ T5442] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.941956][ T684] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /211/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 245.129489][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.136614][ T5451] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.144379][ T5451] device bridge_slave_0 entered promiscuous mode [ 245.151463][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.158740][ T5451] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.166218][ T5451] device bridge_slave_1 entered promiscuous mode [ 245.234354][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.241486][ T5451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.248861][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.255915][ T5451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.291685][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.300779][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.311215][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.330229][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.343878][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.351027][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.359453][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.368515][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.375618][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.402029][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.410469][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.426282][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.435260][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.443665][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.452249][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.462774][ T5451] device veth0_vlan entered promiscuous mode [ 245.477053][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.488971][ T5451] device veth1_macvtap entered promiscuous mode [ 245.502480][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.517048][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.602041][ T424] bridge1: port 1(vlan2) entered disabled state [ 245.612709][ T424] device vlan2 left promiscuous mode [ 245.618054][ T424] device erspan0 left promiscuous mode [ 245.634285][ T424] bridge1: port 1(vlan2) entered disabled state [ 245.704429][ T5503] netlink: 30 bytes leftover after parsing attributes in process `syz.8.1472'. [ 245.798041][ T5477] 9pnet: Insufficient options for proto=fd [ 245.804201][ T24] audit: type=1400 audit(1781215746.910:2033): avc: denied { mounton } for pid=5476 comm="syz.1.1464" path="/376/file0" dev="tmpfs" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 245.929800][ T424] device bridge_slave_1 left promiscuous mode [ 245.935998][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.952056][ T424] device bridge_slave_0 left promiscuous mode [ 245.958302][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.070121][ T424] device veth1_macvtap left promiscuous mode [ 246.143181][ T424] device veth0_vlan left promiscuous mode [ 246.798571][ T24] audit: type=1326 audit(1781215747.840:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.1.1476" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x0 [ 247.073931][ T5505] F2FS-fs (loop8): invalid crc value [ 247.152884][ T5505] F2FS-fs (loop8): Found nat_bits in checkpoint [ 247.168742][ T5523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1477'. [ 247.195276][ T5523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1477'. [ 247.232233][ T5505] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 247.249908][ T5505] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 247.273246][ T5505] F2FS-fs (loop8): access invalid blkaddr:36 [ 247.279520][ T5505] CPU: 0 PID: 5505 Comm: syz.8.1473 Tainted: G W syzkaller #0 [ 247.288368][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.298467][ T5505] Call Trace: [ 247.301785][ T5505] __dump_stack+0x21/0x24 [ 247.306135][ T5505] dump_stack_lvl+0x1a7/0x208 [ 247.310837][ T5505] ? f2fs_get_next_page_offset+0x760/0x760 [ 247.316664][ T5505] ? show_regs_print_info+0x18/0x18 [ 247.321895][ T5505] dump_stack+0x15/0x1c [ 247.326070][ T5505] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 247.331532][ T5505] f2fs_get_read_data_page+0x3e7/0x7a0 [ 247.337009][ T5505] ? f2fs_get_block+0x140/0x140 [ 247.341885][ T5505] ? may_link+0x3de/0x560 [ 247.346231][ T5505] ? may_create+0x7d0/0x7d0 [ 247.350758][ T5505] f2fs_get_lock_data_page+0x59/0x230 [ 247.356146][ T5505] f2fs_empty_dir+0xca/0x230 [ 247.360757][ T5505] f2fs_rmdir+0x3f/0x70 [ 247.364933][ T5505] vfs_rmdir+0x1b3/0x3e0 [ 247.369202][ T5505] do_rmdir+0x230/0x630 [ 247.373386][ T5505] ? d_delete_notify+0xd0/0xd0 [ 247.378167][ T5505] ? getname_flags+0x206/0x500 [ 247.382976][ T5505] __x64_sys_rmdir+0x49/0x50 [ 247.387603][ T5505] do_syscall_64+0x31/0x40 [ 247.392055][ T5505] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 247.397979][ T5505] RIP: 0033:0x7ff18c1cce59 [ 247.402421][ T5505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.422038][ T5505] RSP: 002b:00007ff18ac27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 247.430456][ T5505] RAX: ffffffffffffffda RBX: 00007ff18c445fa0 RCX: 00007ff18c1cce59 [ 247.438438][ T5505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 247.446621][ T5505] RBP: 00007ff18c262d6f R08: 0000000000000000 R09: 0000000000000000 [ 247.454700][ T5505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.462671][ T5505] R13: 00007ff18c446038 R14: 00007ff18c445fa0 R15: 00007ffd3a2ca498 [ 247.799526][ T5540] fuse: Unknown parameter 'fS' [ 247.814037][ T24] audit: type=1400 audit(1781215748.930:2035): avc: denied { map } for pid=5539 comm="syz.1.1483" path="/378/file0" dev="tmpfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 248.859620][ T5575] overlayfs: failed to clone upperpath [ 248.992638][ T5553] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 249.020600][ T5553] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 249.039185][ T5553] F2FS-fs (loop8): invalid crc value [ 249.044799][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1499'. [ 249.054594][ T24] audit: type=1400 audit(1781215750.130:2036): avc: denied { associate } for pid=5586 comm="syz.7.1498" name="cgroup.controllers" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 249.064778][ T5553] F2FS-fs (loop8): Found nat_bits in checkpoint [ 249.129001][ T5553] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 249.136396][ T5553] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 249.293902][ T24] audit: type=1400 audit(1781215750.410:2037): avc: denied { mounton } for pid=5552 comm="syz.8.1482" path=2F362F66696C65302FE91F7189591E9233614B dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 249.320103][ T24] audit: type=1400 audit(1781215750.410:2038): avc: denied { write } for pid=5552 comm="syz.8.1482" name=E91F7189591E9233614B dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 249.632613][ T5612] EXT4-fs (loop8): Test dummy encryption mode enabled [ 249.640931][ T5612] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 249.649481][ T5612] System zones: 0-5 [ 249.654251][ T5612] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,errors=continue,data_err=ignore,delalloc,barrier,,errors=continue [ 249.867090][ T5620] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1502: bg 0: block 416: padding at end of block bitmap is not set [ 249.908647][ T24] audit: type=1400 audit(1781215751.020:2039): avc: denied { rename } for pid=5611 comm="syz.8.1502" name="file2" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.055798][ T5630] tipc: Enabling of bearer rejected, failed to enable media [ 250.121306][ T24] audit: type=1400 audit(1781215751.210:2040): avc: denied { mount } for pid=5629 comm="syz.3.1509" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 250.726725][ T5639] netlink: 'syz.8.1512': attribute type 4 has an invalid length. [ 250.800782][ T24] audit: type=1400 audit(1781215751.920:2041): avc: denied { getopt } for pid=5656 comm="syz.8.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 250.808635][ T5657] netlink: 'syz.8.1518': attribute type 298 has an invalid length. [ 250.845170][ T24] audit: type=1400 audit(1781215751.960:2042): avc: denied { ioctl } for pid=5659 comm="syz.1.1519" path="socket:[32835]" dev="sockfs" ino=32835 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 250.947295][ T5667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1522'. [ 250.980136][ T24] audit: type=1400 audit(1781215752.100:2043): avc: denied { execmod } for pid=5668 comm="syz.8.1520" path="/12/cpuset.effective_cpus" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 251.397714][ T5679] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1525'. [ 251.438606][ T24] audit: type=1400 audit(1781215752.530:2044): avc: denied { ioctl } for pid=5678 comm="syz.8.1525" path="/13/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 252.203671][ T5706] EXT4-fs (loop8): Unrecognized mount option "hash" or missing value [ 252.426636][ T24] audit: type=1326 audit(1781215753.540:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.1.1539" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 252.833316][ T5722] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 252.842898][ T5722] ext4 filesystem being mounted at /15/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.157595][ T24] audit: type=1326 audit(1781215753.800:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.1.1539" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 253.239753][ T24] audit: type=1326 audit(1781215753.800:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.1.1539" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 253.275260][ T24] audit: type=1326 audit(1781215753.810:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.1.1539" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 253.390961][ T24] audit: type=1326 audit(1781215753.810:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5720 comm="syz.1.1539" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e8f71e59 code=0x7ffc0000 [ 253.698570][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 254.154487][ T5747] F2FS-fs (loop8): invalid crc value [ 254.180182][ T5747] F2FS-fs (loop8): Found nat_bits in checkpoint [ 254.233348][ T5747] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 254.278322][ T5747] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 254.287414][ T5747] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 254.338740][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 254.380682][ T5771] xt_hashlimit: size too large, truncated to 1048576 [ 254.392706][ T5770] device batadv_slave_0 entered promiscuous mode [ 254.417585][ T5769] device batadv_slave_0 left promiscuous mode [ 254.712746][ T5789] exfat: Unknown parameter ' §ýÞbŒH+îM/FúVòPn¾5CðIJw' [ 254.752586][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1552'. [ 255.088428][ T24] audit: type=1326 audit(1781215756.200:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.3.1574" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 255.120002][ T24] audit: type=1326 audit(1781215756.220:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.3.1574" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0551fe59 code=0x7ffc0000 [ 255.189555][ T5828] netlink: 67 bytes leftover after parsing attributes in process `syz.7.1573'. [ 255.202090][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1576'. [ 255.574774][ T5854] device erspan0 entered promiscuous mode [ 255.651352][ T5854] device macsec1 entered promiscuous mode [ 255.674227][ T5854] device erspan0 left promiscuous mode [ 256.080315][ T1535] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 256.318538][ T1535] usb 9-1: Using ep0 maxpacket: 16 [ 256.498614][ T1535] usb 9-1: unable to get BOS descriptor or descriptor too short [ 256.588666][ T1535] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1632, setting to 1024 [ 256.768640][ T1535] usb 9-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 256.777884][ T1535] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.786135][ T1535] usb 9-1: Product: syz [ 256.790547][ T1535] usb 9-1: Manufacturer: syz [ 256.795195][ T1535] usb 9-1: SerialNumber: syz [ 257.158657][ T1535] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 257.193885][ T1535] usb 9-1: USB disconnect, device number 2 [ 257.587987][ T5882] input: syz1 as /devices/virtual/input/input8 [ 257.595532][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 257.595544][ T24] audit: type=1400 audit(1781215758.710:2081): avc: denied { read } for pid=79 comm="acpid" name="event3" dev="devtmpfs" ino=996 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.632577][ T24] audit: type=1400 audit(1781215758.710:2082): avc: denied { open } for pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=996 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.656631][ T24] audit: type=1400 audit(1781215758.710:2083): avc: denied { ioctl } for pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=996 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 270.482002][ T24] audit: type=1400 audit(1781215771.600:2084): avc: denied { module_request } for pid=5885 comm="syz-executor" kmod="netdev-nr9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 355.878469][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 355.885133][ C0] rcu: 0-....: (1 GPs behind) idle=c12/1/0x4000000000000000 softirq=21139/21140 fqs=4960 last_accelerate: ee84/15aa dyntick_enabled: 1 [ 355.899010][ C0] (t=10000 jiffies g=24989 q=2083) [ 355.904213][ C0] NMI backtrace for cpu 0 [ 355.908549][ C0] CPU: 0 PID: 5860 Comm: syz.3.1582 Tainted: G W syzkaller #0 [ 355.917310][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.927400][ C0] Call Trace: [ 355.930776][ C0] [ 355.933665][ C0] __dump_stack+0x21/0x24 [ 355.937995][ C0] dump_stack_lvl+0x1a7/0x208 [ 355.942665][ C0] ? show_regs_print_info+0x18/0x18 [ 355.947863][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 355.953314][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 355.958074][ C0] ? printk+0xda/0x130 [ 355.962163][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 355.968396][ C0] dump_stack+0x15/0x1c [ 355.972548][ C0] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 355.978523][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 355.984408][ C0] rcu_dump_cpu_stacks+0x19c/0x2c0 [ 355.989521][ C0] rcu_sched_clock_irq+0xf88/0x1880 [ 355.994714][ C0] ? rcutree_dead_cpu+0x310/0x310 [ 355.999736][ C0] ? hrtimer_run_queues+0x166/0x430 [ 356.004933][ C0] update_process_times+0x198/0x200 [ 356.010131][ C0] tick_sched_timer+0x17c/0x240 [ 356.014973][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 356.020523][ C0] __hrtimer_run_queues+0x34f/0x820 [ 356.025717][ C0] ? hrtimer_interrupt+0xdc0/0xdc0 [ 356.030819][ C0] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 356.036887][ C0] hrtimer_interrupt+0x3a6/0xdc0 [ 356.041828][ C0] ? do_sync_core+0x22/0x30 [ 356.046329][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 356.052215][ C0] asm_call_irq_on_stack+0xf/0x20 [ 356.057467][ C0] [ 356.060445][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 356.066110][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 356.072094][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x13/0xe0 [ 356.078608][ C0] Code: 4a 89 7c 02 10 4a 89 74 02 18 4a 89 44 02 20 48 ff c1 48 89 0a 5d c3 48 8b 4e 08 48 83 c1 f8 48 c1 c1 3d 48 83 f9 08 0f 92 c0 8b d2 ea 20 c2 80 fa 01 0f 85 b7 00 00 00 48 8b 06 48 85 c0 0f [ 356.098214][ C0] RSP: 0018:ffffc90000d0ef40 EFLAGS: 00000293 [ 356.104276][ C0] RAX: 0000000000000001 RBX: ffff88812f8fac3c RCX: 0000000000000003 [ 356.112246][ C0] RDX: ffffc900028f0000 RSI: ffffffff86af40e0 RDI: 00000000fffffff1 [ 356.120219][ C0] RBP: ffffc90000d0ef90 R08: ffff88811c390000 R09: 0000000000000002 [ 356.128190][ C0] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000fffffff1 [ 356.136161][ C0] R13: ffff88812f8faccc R14: dffffc0000000000 R15: ffff88812f8fac00 [ 356.144154][ C0] ? qdisc_tree_reduce_backlog+0x64/0x340 [ 356.149949][ C0] codel_change+0x8fc/0xbe0 [ 356.154448][ C0] ? codel_reset+0x150/0x150 [ 356.159031][ C0] codel_init+0x1a8/0x390 [ 356.163382][ C0] ? qdisc_peek_dequeued+0x230/0x230 [ 356.168669][ C0] qdisc_create+0x848/0x1220 [ 356.173252][ C0] ? qdisc_notify+0x350/0x350 [ 356.177923][ C0] ? __nla_parse+0x42/0x60 [ 356.182337][ C0] tc_modify_qdisc+0x8a1/0x1490 [ 356.187186][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 356.193106][ C0] ? cap_capable+0x19c/0x220 [ 356.197689][ C0] ? ns_capable+0x8c/0xf0 [ 356.202018][ C0] ? netlink_net_capable+0x125/0x160 [ 356.207388][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 356.213279][ C0] rtnetlink_rcv_msg+0xa31/0xcc0 [ 356.218215][ C0] ? rtnetlink_bind+0x80/0x80 [ 356.222882][ C0] ? arch_stack_walk+0xee/0x140 [ 356.227728][ C0] ? stack_trace_save+0xa6/0xf0 [ 356.232572][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 356.237676][ C0] ? avc_has_perm+0x168/0x3d0 [ 356.242626][ C0] ? memcpy+0x56/0x70 [ 356.246639][ C0] ? avc_has_perm+0x27f/0x3d0 [ 356.251330][ C0] ? __kasan_slab_alloc+0xbd/0xf0 [ 356.256413][ C0] ? slab_post_alloc_hook+0x5d/0x2f0 [ 356.261872][ C0] ? avc_has_perm_noaudit+0x260/0x260 [ 356.267252][ C0] ? selinux_nlmsg_lookup+0x3de/0x4a0 [ 356.272627][ C0] netlink_rcv_skb+0x1f5/0x440 [ 356.277489][ C0] ? rtnetlink_bind+0x80/0x80 [ 356.282161][ C0] ? netlink_ack+0xb70/0xb70 [ 356.286747][ C0] ? __netlink_lookup+0x387/0x3b0 [ 356.291792][ C0] rtnetlink_rcv+0x1c/0x20 [ 356.296209][ C0] netlink_unicast+0x876/0xa40 [ 356.300982][ C0] netlink_sendmsg+0x89c/0xb50 [ 356.305929][ C0] ? netlink_getsockopt+0x530/0x530 [ 356.311472][ C0] ? security_socket_sendmsg+0x82/0xa0 [ 356.316931][ C0] ? netlink_getsockopt+0x530/0x530 [ 356.322561][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 356.327487][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 356.332516][ C0] ? import_iovec+0x7c/0xb0 [ 356.337375][ C0] ___sys_sendmsg+0x236/0x2e0 [ 356.342137][ C0] ? __sys_sendmsg+0x280/0x280 [ 356.346916][ C0] ? memcpy+0x56/0x70 [ 356.350907][ C0] ? __fdget+0x1a1/0x230 [ 356.355419][ C0] __x64_sys_sendmsg+0x1f9/0x2c0 [ 356.360701][ C0] ? __kasan_check_write+0x14/0x20 [ 356.365805][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 356.370661][ C0] ? __kasan_check_read+0x11/0x20 [ 356.375686][ C0] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 356.381323][ C0] do_syscall_64+0x31/0x40 [ 356.385745][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 356.391726][ C0] RIP: 0033:0x7ffa0551fe59 [ 356.396163][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.415928][ C0] RSP: 002b:00007ffa03f7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.424344][ C0] RAX: ffffffffffffffda RBX: 00007ffa05798fa0 RCX: 00007ffa0551fe59 [ 356.432312][ C0] RDX: 00000000000040d0 RSI: 0000200000000240 RDI: 0000000000000004 [ 356.440317][ C0] RBP: 00007ffa055b5d6f R08: 0000000000000000 R09: 0000000000000000 [ 356.448307][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.456900][ C0] R13: 00007ffa05799038 R14: 00007ffa05798fa0 R15: 00007ffeb6903578 [ 361.859564][ T1535] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10424 jiffies s: 16337 root: 0x1/. [ 361.871973][ T1535] rcu: blocking rcu_node structures: [ 361.877291][ T1535] Task dump for CPU 0: [ 361.881479][ T1535] task:syz.3.1582 state:R running task stack: 0 pid: 5860 ppid: 281 flags:0x0000000c [ 361.892293][ T1535] Call Trace: [ 361.895607][ T1535] ? netlink_ack+0xb70/0xb70 [ 361.900225][ T1535] ? __netlink_lookup+0x387/0x3b0 [ 361.905264][ T1535] ? rtnetlink_rcv+0x1c/0x20 [ 361.909878][ T1535] ? netlink_unicast+0x876/0xa40 [ 361.914829][ T1535] ? netlink_sendmsg+0x89c/0xb50 [ 361.919808][ T1535] ? netlink_getsockopt+0x530/0x530 [ 361.925035][ T1535] ? security_socket_sendmsg+0x82/0xa0 [ 361.930514][ T1535] ? netlink_getsockopt+0x530/0x530 [ 361.935726][ T1535] ? ____sys_sendmsg+0x5b7/0x8f0 [ 361.940692][ T1535] ? __sys_sendmsg_sock+0x40/0x40 [ 361.945733][ T1535] ? import_iovec+0x7c/0xb0 [ 361.950271][ T1535] ? ___sys_sendmsg+0x236/0x2e0 [ 361.955137][ T1535] ? __sys_sendmsg+0x280/0x280 [ 361.960022][ T1535] ? memcpy+0x56/0x70 [ 361.964026][ T1535] ? __fdget+0x1a1/0x230 [ 361.968286][ T1535] ? __x64_sys_sendmsg+0x1f9/0x2c0 [ 361.973419][ T1535] ? __kasan_check_write+0x14/0x20 [ 361.978548][ T1535] ? ___sys_sendmsg+0x2e0/0x2e0 [ 361.983414][ T1535] ? __kasan_check_read+0x11/0x20 [ 361.988462][ T1535] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 361.994106][ T1535] ? do_syscall_64+0x31/0x40 [ 361.998726][ T1535] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 395.778528][ T26] INFO: task khugepaged:30 blocked for more than 122 seconds. [ 395.786032][ T26] Tainted: G W syzkaller #0 [ 395.793379][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.802656][ T26] task:khugepaged state:D stack: 0 pid: 30 ppid: 2 flags:0x00004000 [ 395.812086][ T26] Call Trace: [ 395.815420][ T26] __schedule+0xb53/0x1320 [ 395.820001][ T26] ? __sched_text_start+0x8/0x8 [ 395.824882][ T26] schedule+0x13c/0x1d0 [ 395.829253][ T26] schedule_timeout+0xba/0x330 [ 395.834062][ T26] ? console_conditional_schedule+0x10/0x10 [ 395.840153][ T26] ? __prepare_to_swait+0xa8/0x130 [ 395.845284][ T26] wait_for_common+0x28d/0x440 [ 395.850318][ T26] ? wait_for_completion+0x20/0x20 [ 395.855470][ T26] ? _raw_spin_lock_irq+0x95/0xf0 [ 395.860765][ T26] ? wake_up_process+0x10/0x20 [ 395.865556][ T26] ? insert_work+0x282/0x310 [ 395.870389][ T26] wait_for_completion+0x18/0x20 [ 395.875358][ T26] __flush_work+0x520/0x600 [ 395.880027][ T26] ? flush_work+0x20/0x20 [ 395.884375][ T26] ? move_linked_works+0x2b0/0x2b0 [ 395.889700][ T26] ? wq_worker_last_func+0x50/0x50 [ 395.894831][ T26] ? find_next_bit+0x80/0x100 [ 395.899694][ T26] flush_work+0x15/0x20 [ 395.903877][ T26] __lru_add_drain_all+0xab1/0xba0 [ 395.909196][ T26] lru_add_drain_all+0x10/0x20 [ 395.914072][ T26] khugepaged+0x149/0xf40 [ 395.918596][ T26] ? start_stop_khugepaged+0x170/0x170 [ 395.924082][ T26] ? io_schedule+0xe0/0xe0 [ 395.928827][ T26] ? __kasan_check_write+0x14/0x20 [ 395.933959][ T26] ? io_schedule+0xe0/0xe0 [ 395.938396][ T26] ? __kasan_check_read+0x11/0x20 [ 395.943658][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 395.948748][ T26] kthread+0x346/0x3d0 [ 395.952846][ T26] ? start_stop_khugepaged+0x170/0x170 [ 395.958409][ T26] ? kthread_blkcg+0xd0/0xd0 [ 395.963292][ T26] ret_from_fork+0x1f/0x30 [ 395.967833][ T26] INFO: task acpid:79 blocked for more than 123 seconds. [ 395.975062][ T26] Tainted: G W syzkaller #0 [ 395.981518][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.990369][ T26] task:acpid state:D stack: 0 pid: 79 ppid: 1 flags:0x00004000 [ 395.999831][ T26] Call Trace: [ 396.003142][ T26] __schedule+0xb53/0x1320 [ 396.007594][ T26] ? __sched_text_start+0x8/0x8 [ 396.012717][ T26] ? prepare_to_wait_event+0x306/0x410 [ 396.018194][ T26] schedule+0x13c/0x1d0 [ 396.023908][ T26] synchronize_rcu_expedited+0x4c7/0x640 [ 396.029710][ T26] ? synchronize_rcu+0x140/0x140 [ 396.034671][ T26] ? rcu_exp_handler+0x370/0x370 [ 396.039775][ T26] ? locks_remove_file+0x369/0xfc0 [ 396.044906][ T26] ? kasan_record_aux_stack+0xe/0x10 [ 396.050507][ T26] ? task_work_add+0x27/0x1e0 [ 396.055223][ T26] ? fput_many+0xe7/0x1a0 [ 396.059764][ T26] ? fput+0x1a/0x20 [ 396.063592][ T26] ? filp_close+0x105/0x150 [ 396.068110][ T26] ? io_schedule+0xe0/0xe0 [ 396.072758][ T26] ? locks_remove_posix+0x550/0x550 [ 396.077979][ T26] ? lockref_put_or_lock+0x114/0x180 [ 396.083473][ T26] ? fast_dput+0x16f/0x290 [ 396.088001][ T26] synchronize_rcu+0x8f/0x140 [ 396.092879][ T26] ? kvfree_call_rcu+0x650/0x650 [ 396.097835][ T26] ? __kasan_check_write+0x14/0x20 [ 396.103144][ T26] ? _raw_spin_lock+0x94/0xf0 [ 396.107935][ T26] ? _raw_spin_trylock_bh+0x150/0x150 [ 396.113580][ T26] evdev_release+0x268/0x820 [ 396.119124][ T26] ? evdev_open+0x5e0/0x5e0 [ 396.123665][ T26] __fput+0x2fb/0x770 [ 396.127668][ T26] ____fput+0x15/0x20 [ 396.131906][ T26] task_work_run+0x127/0x190 [ 396.136524][ T26] exit_to_user_mode_loop+0xcb/0xe0 [ 396.141932][ T26] exit_to_user_mode_prepare+0x76/0xa0 [ 396.147413][ T26] syscall_exit_to_user_mode+0x1d/0x40 [ 396.153068][ T26] do_syscall_64+0x3d/0x40 [ 396.157508][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 396.163694][ T26] RIP: 0033:0x7f78d8057407 [ 396.168128][ T26] RSP: 002b:00007fffa43170a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 396.176848][ T26] RAX: 0000000000000000 RBX: 00007f78d7fcd740 RCX: 00007f78d8057407 [ 396.184970][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 396.193097][ T26] RBP: 00007fffa4317260 R08: 0000000000000000 R09: 0000000000000000 [ 396.201211][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040 [ 396.209330][ T26] R13: 00007fffa4317360 R14: 0000562f19a567fe R15: 00007fffa4317360 [ 396.217435][ T26] INFO: task udevd:94 blocked for more than 123 seconds. [ 396.224626][ T26] Tainted: G W syzkaller #0 [ 396.231205][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.240009][ T26] task:udevd state:D stack: 0 pid: 94 ppid: 1 flags:0x00004000 [ 396.249396][ T26] Call Trace: [ 396.252715][ T26] __schedule+0xb53/0x1320 [ 396.257245][ T26] ? __sched_text_start+0x8/0x8 [ 396.262358][ T26] ? __mutex_add_waiter+0x180/0x280 [ 396.267593][ T26] ? __kasan_check_write+0x14/0x20 [ 396.272934][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 396.278871][ T26] ? unwind_get_return_address+0x4d/0x90 [ 396.284524][ T26] schedule+0x13c/0x1d0 [ 396.288894][ T26] schedule_preempt_disabled+0x13/0x20 [ 396.294374][ T26] __mutex_lock+0x6cc/0xc60 [ 396.299132][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 396.305918][ T26] ? bdev_check_media_change+0x350/0x350 [ 396.311949][ T26] ? bdev_check_media_change+0x350/0x350 [ 396.317605][ T26] ? kobj_lookup+0x42b/0x430 [ 396.322399][ T26] __mutex_lock_slowpath+0xe/0x10 [ 396.327441][ T26] mutex_lock+0xdb/0xf0 [ 396.331786][ T26] ? mutex_trylock+0xa0/0xa0 [ 396.336419][ T26] ? __kasan_check_write+0x14/0x20 [ 396.341732][ T26] ? up_read+0x12/0x50 [ 396.345829][ T26] ? disk_block_events+0xab/0x110 [ 396.351068][ T26] __blkdev_get+0x2da/0x1300 [ 396.355682][ T26] ? _raw_spin_unlock+0x4d/0x70 [ 396.360707][ T26] ? blkdev_bio_end_io+0x450/0x450 [ 396.365954][ T26] ? selinux_file_receive+0x130/0x130 [ 396.371630][ T26] ? selinux_inode_permission+0x406/0x5f0 [ 396.377390][ T26] blkdev_open+0x207/0x430 [ 396.382009][ T26] ? block_ioctl+0x100/0x100 [ 396.386612][ T26] do_dentry_open+0x793/0x1090 [ 396.391584][ T26] vfs_open+0x73/0x80 [ 396.395587][ T26] path_openat+0x280f/0x31c0 [ 396.400351][ T26] ? __kasan_slab_alloc+0xcf/0xf0 [ 396.405480][ T26] ? slab_post_alloc_hook+0x5d/0x2f0 [ 396.410987][ T26] ? do_sys_openat2+0xde/0x750 [ 396.415777][ T26] ? do_filp_open+0x410/0x410 [ 396.421255][ T26] do_filp_open+0x1e2/0x410 [ 396.425786][ T26] ? vfs_tmpfile+0x2c0/0x2c0 [ 396.430706][ T26] ? get_unused_fd_flags+0x92/0xa0 [ 396.435837][ T26] do_sys_openat2+0x19f/0x750 [ 396.440699][ T26] ? percpu_counter_add_batch+0x13c/0x160 [ 396.446442][ T26] ? blkcg_maybe_throttle_current+0x1e0/0x9e0 [ 396.452702][ T26] ? do_sys_open+0xe0/0xe0 [ 396.457145][ T26] ? __blkcg_punt_bio_submit+0x170/0x170 [ 396.462949][ T26] ? ____fput+0x15/0x20 [ 396.467129][ T26] __x64_sys_openat+0x136/0x160 [ 396.472182][ T26] do_syscall_64+0x31/0x40 [ 396.476624][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 396.482672][ T26] RIP: 0033:0x7ff0d8636407 [ 396.487104][ T26] RSP: 002b:00007ffee87afaa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 396.495725][ T26] RAX: ffffffffffffffda RBX: 00007ff0d8548880 RCX: 00007ff0d8636407 [ 396.503850][ T26] RDX: 00000000000a0800 RSI: 000055626c0a5fc0 RDI: ffffffffffffff9c [ 396.511969][ T26] RBP: 00000000000000c2 R08: 0000000000000000 R09: 0000000000000000 [ 396.520086][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 396.528091][ T26] R13: 000055623d877100 R14: 0000000000000000 R15: 00007ffee87afd30 [ 396.536306][ T26] INFO: task kworker/u4:4:424 blocked for more than 123 seconds. [ 396.544287][ T26] Tainted: G W syzkaller #0 [ 396.550744][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.559569][ T26] task:kworker/u4:4 state:D stack: 0 pid: 424 ppid: 2 flags:0x00004000 [ 396.568934][ T26] Workqueue: events_unbound linkwatch_event [ 396.574847][ T26] Call Trace: [ 396.578159][ T26] __schedule+0xb53/0x1320 [ 396.582815][ T26] ? __sched_text_start+0x8/0x8 [ 396.587684][ T26] ? __mutex_add_waiter+0xcc/0x280 [ 396.593008][ T26] ? __kasan_check_write+0x14/0x20 [ 396.598141][ T26] ? kthread_data+0x50/0xc0 [ 396.602832][ T26] ? wq_worker_sleeping+0x60/0x200 [ 396.607966][ T26] schedule+0x13c/0x1d0 [ 396.612362][ T26] schedule_preempt_disabled+0x13/0x20 [ 396.617840][ T26] __mutex_lock+0x6cc/0xc60 [ 396.622520][ T26] ? __kasan_check_read+0x11/0x20 [ 396.627570][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 396.634553][ T26] ? _raw_spin_unlock_irq+0x4e/0x70 [ 396.639915][ T26] __mutex_lock_slowpath+0xe/0x10 [ 396.644964][ T26] mutex_lock+0xdb/0xf0 [ 396.649329][ T26] ? mutex_trylock+0xa0/0xa0 [ 396.653948][ T26] ? read_word_at_a_time+0x12/0x20 [ 396.659225][ T26] rtnl_lock+0x15/0x20 [ 396.663321][ T26] linkwatch_event+0xe/0x60 [ 396.667838][ T26] process_one_work+0x6e1/0xba0 [ 396.672905][ T26] worker_thread+0xa6a/0x13c0 [ 396.677709][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 396.683378][ T26] kthread+0x346/0x3d0 [ 396.687469][ T26] ? worker_clr_flags+0x190/0x190 [ 396.692692][ T26] ? kthread_blkcg+0xd0/0xd0 [ 396.697337][ T26] ret_from_fork+0x1f/0x30 [ 396.702001][ T26] INFO: task syz.1.332:1608 blocked for more than 123 seconds. [ 396.709701][ T26] Tainted: G W syzkaller #0 [ 396.716042][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.724908][ T26] task:syz.1.332 state:D stack: 0 pid: 1608 ppid: 279 flags:0x00004306 [ 396.734274][ T26] Call Trace: [ 396.737589][ T26] __schedule+0xb53/0x1320 [ 396.742179][ T26] ? __sched_text_start+0x8/0x8 [ 396.747046][ T26] ? __mutex_add_waiter+0x180/0x280 [ 396.752428][ T26] ? __kasan_check_write+0x14/0x20 [ 396.757562][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 396.763517][ T26] schedule+0x13c/0x1d0 [ 396.767698][ T26] schedule_preempt_disabled+0x13/0x20 [ 396.773386][ T26] __mutex_lock+0x6cc/0xc60 [ 396.777913][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 396.784856][ T26] ? has_bh_in_lru+0x308/0x330 [ 396.789849][ T26] __mutex_lock_slowpath+0xe/0x10 [ 396.794887][ T26] mutex_lock+0xdb/0xf0 [ 396.799224][ T26] ? mutex_trylock+0xa0/0xa0 [ 396.803831][ T26] ? __kasan_check_write+0x14/0x20 [ 396.809124][ T26] ? _raw_spin_lock+0x94/0xf0 [ 396.813819][ T26] ? _raw_spin_trylock_bh+0x150/0x150 [ 396.819443][ T26] ? __kasan_check_read+0x11/0x20 [ 396.824490][ T26] lo_release+0x2b/0x1f0 [ 396.829107][ T26] ? lo_open+0xd0/0xd0 [ 396.833239][ T26] __blkdev_put+0x541/0x7c0 [ 396.837767][ T26] ? blkdev_get_by_dev+0x530/0x530 [ 396.843092][ T26] ? _raw_spin_lock+0x94/0xf0 [ 396.847797][ T26] ? _raw_spin_trylock_bh+0x150/0x150 [ 396.853373][ T26] blkdev_put+0x2d6/0x3c0 [ 396.857729][ T26] kill_block_super+0xb8/0xf0 [ 396.862578][ T26] kill_f2fs_super+0x303/0x3b0 [ 396.867354][ T26] ? unregister_shrinker+0x202/0x270 [ 396.872815][ T26] ? f2fs_mount+0x40/0x40 [ 396.877447][ T26] ? unregister_shrinker+0x202/0x270 [ 396.882999][ T26] deactivate_locked_super+0xa0/0x100 [ 396.888393][ T26] deactivate_super+0xaf/0xe0 [ 396.893325][ T26] cleanup_mnt+0x45b/0x510 [ 396.897766][ T26] __cleanup_mnt+0x19/0x20 [ 396.902335][ T26] task_work_run+0x127/0x190 [ 396.906942][ T26] do_exit+0xa87/0x2500 [ 396.911326][ T26] ? put_task_struct+0x90/0x90 [ 396.916120][ T26] ? __kasan_check_write+0x14/0x20 [ 396.921409][ T26] ? _raw_spin_lock_irq+0x95/0xf0 [ 396.926453][ T26] ? __kasan_check_read+0x11/0x20 [ 396.931649][ T26] ? cgroup_update_frozen+0x15c/0x970 [ 396.937037][ T26] do_group_exit+0x141/0x310 [ 396.941891][ T26] get_signal+0xf7d/0x12e0 [ 396.946330][ T26] arch_do_signal_or_restart+0xe2/0x11d0 [ 396.952187][ T26] ? update_spec_ctrl_cond+0x40/0x80 [ 396.957492][ T26] ? __switch_to+0x732/0x1020 [ 396.962421][ T26] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 396.968071][ T26] ? __kasan_check_write+0x14/0x20 [ 396.973399][ T26] ? recalc_sigpending+0x1c4/0x230 [ 396.978651][ T26] exit_to_user_mode_loop+0xa2/0xe0 [ 396.983865][ T26] exit_to_user_mode_prepare+0x76/0xa0 [ 396.989491][ T26] syscall_exit_to_user_mode+0x1d/0x40 [ 396.994969][ T26] ret_from_fork+0x15/0x30 [ 396.999629][ T26] RIP: 0033:0x7f21e8f71e59 [ 397.004064][ T26] RSP: 002b:00007f21e79cbfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 397.012713][ T26] RAX: 0000000000000000 RBX: 00007f21e91eafa0 RCX: 00007f21e8f71e59 [ 397.020803][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 397.028909][ T26] RBP: 00007f21e9007d6f R08: 0000000000000000 R09: 0000000000000000 [ 397.036899][ T26] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 397.045065][ T26] R13: 00007f21e91eb038 R14: 00007f21e91eafa0 R15: 00007ffe6ac5b3e8 [ 397.053201][ T26] INFO: task udevd:5355 blocked for more than 124 seconds. [ 397.062778][ T26] Tainted: G W syzkaller #0 [ 397.069624][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.078394][ T26] task:udevd state:D stack: 0 pid: 5355 ppid: 94 flags:0x00004000 [ 397.087870][ T26] Call Trace: [ 397.091505][ T26] __schedule+0xb53/0x1320 [ 397.095949][ T26] ? __sched_text_start+0x8/0x8 [ 397.101009][ T26] ? __mutex_add_waiter+0xcc/0x280 [ 397.106149][ T26] ? __kasan_check_write+0x14/0x20 [ 397.111449][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 397.117280][ T26] ? unwind_get_return_address+0x4d/0x90 [ 397.123218][ T26] schedule+0x13c/0x1d0 [ 397.127400][ T26] schedule_preempt_disabled+0x13/0x20 [ 397.133096][ T26] __mutex_lock+0x6cc/0xc60 [ 397.137631][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 397.144627][ T26] ? bdev_check_media_change+0x350/0x350 [ 397.150415][ T26] ? bdev_check_media_change+0x350/0x350 [ 397.156071][ T26] ? kobj_lookup+0x42b/0x430 [ 397.160873][ T26] __mutex_lock_slowpath+0xe/0x10 [ 397.165920][ T26] mutex_lock+0xdb/0xf0 [ 397.170259][ T26] ? mutex_trylock+0xa0/0xa0 [ 397.174864][ T26] ? __kasan_check_write+0x14/0x20 [ 397.180245][ T26] ? up_read+0x12/0x50 [ 397.184337][ T26] ? disk_block_events+0xab/0x110 [ 397.189588][ T26] __blkdev_get+0x2da/0x1300 [ 397.194197][ T26] ? _raw_spin_unlock+0x4d/0x70 [ 397.199238][ T26] ? blkdev_bio_end_io+0x450/0x450 [ 397.204368][ T26] ? selinux_file_receive+0x130/0x130 [ 397.209916][ T26] ? selinux_inode_permission+0x406/0x5f0 [ 397.215653][ T26] blkdev_open+0x207/0x430 [ 397.220275][ T26] ? block_ioctl+0x100/0x100 [ 397.224882][ T26] do_dentry_open+0x793/0x1090 [ 397.229861][ T26] vfs_open+0x73/0x80 [ 397.233865][ T26] path_openat+0x280f/0x31c0 [ 397.238700][ T26] ? __kasan_slab_alloc+0xcf/0xf0 [ 397.243742][ T26] ? slab_post_alloc_hook+0x5d/0x2f0 [ 397.249360][ T26] ? do_sys_openat2+0xde/0x750 [ 397.254145][ T26] ? do_filp_open+0x410/0x410 [ 397.259182][ T26] do_filp_open+0x1e2/0x410 [ 397.263709][ T26] ? vfs_tmpfile+0x2c0/0x2c0 [ 397.268315][ T26] ? get_unused_fd_flags+0x92/0xa0 [ 397.273663][ T26] do_sys_openat2+0x19f/0x750 [ 397.278360][ T26] ? __fdget+0x15b/0x230 [ 397.282785][ T26] ? do_sys_open+0xe0/0xe0 [ 397.287221][ T26] ? __x64_sys_recvmsg+0x20f/0x2c0 [ 397.292550][ T26] ? __kasan_check_write+0x14/0x20 [ 397.297682][ T26] __x64_sys_openat+0x136/0x160 [ 397.302701][ T26] do_syscall_64+0x31/0x40 [ 397.307140][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 397.313273][ T26] RIP: 0033:0x7ff0d8636407 [ 397.317706][ T26] RSP: 002b:00007ffee87af8e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 397.326324][ T26] RAX: ffffffffffffffda RBX: 00007ff0d8548880 RCX: 00007ff0d8636407 [ 397.334460][ T26] RDX: 00000000000a0800 RSI: 000055626be614f0 RDI: ffffffffffffff9c [ 397.342672][ T26] RBP: 000055626be5e2c0 R08: 0000000000000000 R09: 0000000000000000 [ 397.350959][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 000055626c0c06b0 [ 397.359061][ T26] R13: 000055626c0a3920 R14: 0000000000000000 R15: 000055626c0c06b0 [ 397.367071][ T26] INFO: task syz.3.1582:5861 blocked for more than 124 seconds. [ 397.374909][ T26] Tainted: G W syzkaller #0 [ 397.381352][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.390352][ T26] task:syz.3.1582 state:D stack: 0 pid: 5861 ppid: 281 flags:0x00004004 [ 397.399745][ T26] Call Trace: [ 397.403059][ T26] __schedule+0xb53/0x1320 [ 397.407499][ T26] ? __sched_text_start+0x8/0x8 [ 397.412584][ T26] ? __mutex_add_waiter+0x180/0x280 [ 397.417798][ T26] ? __kasan_check_write+0x14/0x20 [ 397.423074][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 397.429023][ T26] schedule+0x13c/0x1d0 [ 397.433200][ T26] schedule_preempt_disabled+0x13/0x20 [ 397.438810][ T26] __mutex_lock+0x6cc/0xc60 [ 397.443334][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 397.450316][ T26] ? cap_capable+0x19c/0x220 [ 397.454957][ T26] __mutex_lock_slowpath+0xe/0x10 [ 397.460269][ T26] mutex_lock+0xdb/0xf0 [ 397.464451][ T26] ? mutex_trylock+0xa0/0xa0 [ 397.469288][ T26] ? ns_capable+0x8c/0xf0 [ 397.473649][ T26] ? netlink_net_capable+0x125/0x160 [ 397.479102][ T26] rtnetlink_rcv_msg+0x576/0xcc0 [ 397.484066][ T26] ? rtnetlink_bind+0x80/0x80 [ 397.488961][ T26] ? arch_stack_walk+0xee/0x140 [ 397.493846][ T26] ? stack_trace_save+0xa6/0xf0 [ 397.498892][ T26] ? stack_trace_snprint+0xf0/0xf0 [ 397.504023][ T26] ? avc_has_perm+0x168/0x3d0 [ 397.508879][ T26] ? memcpy+0x56/0x70 [ 397.512881][ T26] ? avc_has_perm+0x27f/0x3d0 [ 397.517582][ T26] ? __kasan_slab_alloc+0xbd/0xf0 [ 397.522928][ T26] ? slab_post_alloc_hook+0x5d/0x2f0 [ 397.528245][ T26] ? avc_has_perm_noaudit+0x260/0x260 [ 397.533872][ T26] ? selinux_nlmsg_lookup+0x3f1/0x4a0 [ 397.539365][ T26] netlink_rcv_skb+0x1f5/0x440 [ 397.544151][ T26] ? rtnetlink_bind+0x80/0x80 [ 397.549078][ T26] ? netlink_ack+0xb70/0xb70 [ 397.553692][ T26] ? __netlink_lookup+0x387/0x3b0 [ 397.558892][ T26] rtnetlink_rcv+0x1c/0x20 [ 397.563328][ T26] netlink_unicast+0x876/0xa40 [ 397.568107][ T26] netlink_sendmsg+0x89c/0xb50 [ 397.573097][ T26] ? netlink_getsockopt+0x530/0x530 [ 397.578317][ T26] ? pagevec_add_and_need_flush+0x19d/0x2f0 [ 397.584408][ T26] ? security_socket_sendmsg+0x82/0xa0 [ 397.590023][ T26] ? netlink_getsockopt+0x530/0x530 [ 397.595264][ T26] ____sys_sendmsg+0x5b7/0x8f0 [ 397.600205][ T26] ? __sys_sendmsg_sock+0x40/0x40 [ 397.605255][ T26] ? import_iovec+0x7c/0xb0 [ 397.610000][ T26] ___sys_sendmsg+0x236/0x2e0 [ 397.614702][ T26] ? __sys_sendmsg+0x280/0x280 [ 397.619653][ T26] ? __kasan_check_write+0x14/0x20 [ 397.624790][ T26] ? _raw_spin_lock_irq+0x95/0xf0 [ 397.630011][ T26] ? __fdget+0x1a1/0x230 [ 397.634272][ T26] __x64_sys_sendmsg+0x1f9/0x2c0 [ 397.639389][ T26] ? ___sys_sendmsg+0x2e0/0x2e0 [ 397.644266][ T26] ? debug_smp_processor_id+0x17/0x20 [ 397.649868][ T26] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 397.655953][ T26] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 397.661764][ T26] do_syscall_64+0x31/0x40 [ 397.666202][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 397.672307][ T26] RIP: 0033:0x7ffa0551fe59 [ 397.676735][ T26] RSP: 002b:00007ffa03f59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.685383][ T26] RAX: ffffffffffffffda RBX: 00007ffa05799090 RCX: 00007ffa0551fe59 [ 397.693500][ T26] RDX: 0000000000040000 RSI: 0000200000000580 RDI: 0000000000000003 [ 397.701848][ T26] RBP: 00007ffa055b5d6f R08: 0000000000000000 R09: 0000000000000000 [ 397.710014][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.718017][ T26] R13: 00007ffa05799128 R14: 00007ffa05799090 R15: 00007ffeb6903578 [ 397.726219][ T26] INFO: task syz.7.1585:5870 blocked for more than 124 seconds. [ 397.734122][ T26] Tainted: G W syzkaller #0 [ 397.740700][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.749575][ T26] task:syz.7.1585 state:D stack: 0 pid: 5870 ppid: 798 flags:0x00004004 [ 397.758986][ T26] Call Trace: [ 397.762298][ T26] __schedule+0xb53/0x1320 [ 397.766742][ T26] ? __sched_text_start+0x8/0x8 [ 397.772034][ T26] ? __mutex_add_waiter+0xcc/0x280 [ 397.777181][ T26] ? __kasan_check_write+0x14/0x20 [ 397.782509][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 397.788340][ T26] schedule+0x13c/0x1d0 [ 397.792759][ T26] schedule_preempt_disabled+0x13/0x20 [ 397.798246][ T26] __mutex_lock+0x6cc/0xc60 [ 397.802976][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 397.809899][ T26] ? cap_capable+0x19c/0x220 [ 397.814522][ T26] __mutex_lock_slowpath+0xe/0x10 [ 397.819830][ T26] mutex_lock+0xdb/0xf0 [ 397.824019][ T26] ? mutex_trylock+0xa0/0xa0 [ 397.828778][ T26] ? ns_capable+0x8c/0xf0 [ 397.833134][ T26] ? netlink_net_capable+0x125/0x160 [ 397.838606][ T26] rtnetlink_rcv_msg+0x576/0xcc0 [ 397.843573][ T26] ? rtnetlink_bind+0x80/0x80 [ 397.848262][ T26] ? arch_stack_walk+0xee/0x140 [ 397.853393][ T26] ? stack_trace_save+0xa6/0xf0 [ 397.858265][ T26] ? stack_trace_snprint+0xf0/0xf0 [ 397.863618][ T26] ? avc_has_perm+0x168/0x3d0 [ 397.868319][ T26] ? memcpy+0x56/0x70 [ 397.872652][ T26] ? avc_has_perm+0x27f/0x3d0 [ 397.877349][ T26] ? __kasan_slab_alloc+0xbd/0xf0 [ 397.882551][ T26] ? slab_post_alloc_hook+0x5d/0x2f0 [ 397.887858][ T26] ? avc_has_perm_noaudit+0x260/0x260 [ 397.893428][ T26] ? selinux_nlmsg_lookup+0x3f1/0x4a0 [ 397.898926][ T26] netlink_rcv_skb+0x1f5/0x440 [ 397.903925][ T26] ? rtnetlink_bind+0x80/0x80 [ 397.908907][ T26] ? netlink_ack+0xb70/0xb70 [ 397.913525][ T26] ? __netlink_lookup+0x387/0x3b0 [ 397.918736][ T26] rtnetlink_rcv+0x1c/0x20 [ 397.923173][ T26] netlink_unicast+0x876/0xa40 [ 397.927958][ T26] netlink_sendmsg+0x89c/0xb50 [ 397.933013][ T26] ? netlink_getsockopt+0x530/0x530 [ 397.938415][ T26] ? security_socket_sendmsg+0x82/0xa0 [ 397.944052][ T26] ? netlink_getsockopt+0x530/0x530 [ 397.949398][ T26] ____sys_sendmsg+0x5b7/0x8f0 [ 397.954183][ T26] ? __sys_sendmsg_sock+0x40/0x40 [ 397.959471][ T26] ? import_iovec+0x7c/0xb0 [ 397.963989][ T26] ___sys_sendmsg+0x236/0x2e0 [ 397.968857][ T26] ? slab_post_alloc_hook+0x7d/0x2f0 [ 397.974158][ T26] ? __sys_sendmsg+0x280/0x280 [ 397.979102][ T26] ? alloc_file+0x82/0x540 [ 397.983536][ T26] ? __fdget+0x1a1/0x230 [ 397.987795][ T26] __x64_sys_sendmsg+0x1f9/0x2c0 [ 397.992956][ T26] ? __kasan_check_write+0x14/0x20 [ 397.998094][ T26] ? ___sys_sendmsg+0x2e0/0x2e0 [ 398.003178][ T26] ? __kasan_check_read+0x11/0x20 [ 398.008232][ T26] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 398.014070][ T26] do_syscall_64+0x31/0x40 [ 398.018613][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 398.024517][ T26] RIP: 0033:0x7f44d1868e59 [ 398.029128][ T26] RSP: 002b:00007f44d0281028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.037561][ T26] RAX: ffffffffffffffda RBX: 00007f44d1ae2180 RCX: 00007f44d1868e59 [ 398.045719][ T26] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000005 [ 398.053861][ T26] RBP: 00007f44d18fed6f R08: 0000000000000000 R09: 0000000000000000 [ 398.061980][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.070105][ T26] R13: 00007f44d1ae2218 R14: 00007f44d1ae2180 R15: 00007ffd3b3473d8 [ 398.078109][ T26] INFO: task syz.1.1588:5879 blocked for more than 125 seconds. [ 398.085936][ T26] Tainted: G W syzkaller #0 [ 398.092449][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.102443][ T26] task:syz.1.1588 state:D stack: 0 pid: 5879 ppid: 279 flags:0x00004004 [ 398.111799][ T26] Call Trace: [ 398.115112][ T26] __schedule+0xb53/0x1320 [ 398.120142][ T26] ? __sched_text_start+0x8/0x8 [ 398.125031][ T26] ? __mutex_add_waiter+0xcc/0x280 [ 398.130347][ T26] ? __kasan_check_write+0x14/0x20 [ 398.135493][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 398.141461][ T26] schedule+0x13c/0x1d0 [ 398.145641][ T26] schedule_preempt_disabled+0x13/0x20 [ 398.151304][ T26] __mutex_lock+0x6cc/0xc60 [ 398.155831][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 398.162801][ T26] ? __kasan_check_write+0x14/0x20 [ 398.167941][ T26] ? cap_capable+0x19c/0x220 [ 398.172733][ T26] ? _raw_spin_trylock_bh+0x150/0x150 [ 398.178149][ T26] __mutex_lock_slowpath+0xe/0x10 [ 398.183476][ T26] mutex_lock+0xdb/0xf0 [ 398.187647][ T26] ? mutex_trylock+0xa0/0xa0 [ 398.192416][ T26] ? ns_capable+0x8c/0xf0 [ 398.196774][ T26] ? netlink_net_capable+0x125/0x160 [ 398.202239][ T26] rtnetlink_rcv_msg+0x576/0xcc0 [ 398.207206][ T26] ? rtnetlink_bind+0x80/0x80 [ 398.212094][ T26] ? can_reuse_spf_vma+0xe0/0xe0 [ 398.217050][ T26] ? avc_has_perm+0x168/0x3d0 [ 398.221920][ T26] ? memcpy+0x56/0x70 [ 398.225923][ T26] ? avc_has_perm+0x27f/0x3d0 [ 398.230793][ T26] ? __kasan_check_write+0x14/0x20 [ 398.235930][ T26] ? avc_has_perm_noaudit+0x260/0x260 [ 398.241513][ T26] ? up_read+0x12/0x50 [ 398.245604][ T26] ? do_user_addr_fault+0x779/0xde0 [ 398.250997][ T26] ? selinux_nlmsg_lookup+0x3de/0x4a0 [ 398.256504][ T26] netlink_rcv_skb+0x1f5/0x440 [ 398.262083][ T26] ? rtnetlink_bind+0x80/0x80 [ 398.266782][ T26] ? netlink_ack+0xb70/0xb70 [ 398.271585][ T26] ? __netlink_lookup+0x387/0x3b0 [ 398.276631][ T26] rtnetlink_rcv+0x1c/0x20 [ 398.281221][ T26] netlink_unicast+0x876/0xa40 [ 398.286008][ T26] netlink_sendmsg+0x89c/0xb50 [ 398.290992][ T26] ? netlink_getsockopt+0x530/0x530 [ 398.296215][ T26] ? security_socket_sendmsg+0x82/0xa0 [ 398.301840][ T26] __sys_sendto+0x467/0x620 [ 398.306379][ T26] ? __ia32_sys_getpeername+0x90/0x90 [ 398.311979][ T26] ? __fget_files+0x2c4/0x320 [ 398.316686][ T26] ? fpu__clear_all+0x20/0x20 [ 398.321537][ T26] __x64_sys_sendto+0xe5/0x100 [ 398.326319][ T26] do_syscall_64+0x31/0x40 [ 398.330936][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 398.336845][ T26] RIP: 0033:0x7f21e8f71e59 [ 398.341428][ T26] RSP: 002b:00007f21e79cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 398.350006][ T26] RAX: ffffffffffffffda RBX: 00007f21e91eafa0 RCX: 00007f21e8f71e59 [ 398.358002][ T26] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 398.366174][ T26] RBP: 00007f21e9007d6f R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 398.374321][ T26] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 398.382505][ T26] R13: 00007f21e91eb038 R14: 00007f21e91eafa0 R15: 00007ffe6ac5b3e8 [ 398.390828][ T26] INFO: task udevd:5880 blocked for more than 125 seconds. [ 398.398043][ T26] Tainted: G W syzkaller #0 [ 398.404658][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.413933][ T26] task:udevd state:D stack: 0 pid: 5880 ppid: 94 flags:0x00004000 [ 398.423389][ T26] Call Trace: [ 398.426702][ T26] __schedule+0xb53/0x1320 [ 398.431307][ T26] ? __sched_text_start+0x8/0x8 [ 398.436180][ T26] ? __mutex_add_waiter+0x180/0x280 [ 398.441587][ T26] ? __kasan_check_write+0x14/0x20 [ 398.446723][ T26] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 398.453164][ T26] schedule+0x13c/0x1d0 [ 398.457342][ T26] schedule_preempt_disabled+0x13/0x20 [ 398.463048][ T26] __mutex_lock+0x6cc/0xc60 [ 398.467624][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 398.474606][ T26] __mutex_lock_slowpath+0xe/0x10 [ 398.479789][ T26] mutex_lock+0xdb/0xf0 [ 398.484049][ T26] ? mutex_trylock+0xa0/0xa0 [ 398.488821][ T26] ? __kasan_check_read+0x11/0x20 [ 398.493866][ T26] synchronize_rcu_expedited+0x30f/0x640 [ 398.499672][ T26] ? synchronize_rcu+0x140/0x140 [ 398.504635][ T26] ? locks_remove_file+0x369/0xfc0 [ 398.509974][ T26] ? kasan_record_aux_stack+0xe/0x10 [ 398.515286][ T26] ? task_work_add+0x27/0x1e0 [ 398.520134][ T26] ? fput_many+0xe7/0x1a0 [ 398.524484][ T26] ? fput+0x1a/0x20 [ 398.528306][ T26] ? filp_close+0x105/0x150 [ 398.533066][ T26] ? locks_remove_posix+0x550/0x550 [ 398.538291][ T26] ? lockref_put_or_lock+0x114/0x180 [ 398.543880][ T26] ? fast_dput+0x16f/0x290 [ 398.548372][ T26] synchronize_rcu+0x8f/0x140 [ 398.553449][ T26] ? kvfree_call_rcu+0x650/0x650 [ 398.558411][ T26] ? __kasan_check_write+0x14/0x20 [ 398.563697][ T26] ? _raw_spin_lock+0x94/0xf0 [ 398.568392][ T26] ? _raw_spin_trylock_bh+0x150/0x150 [ 398.573984][ T26] evdev_release+0x268/0x820 [ 398.578689][ T26] ? evdev_open+0x5e0/0x5e0 [ 398.583207][ T26] __fput+0x2fb/0x770 [ 398.587203][ T26] ____fput+0x15/0x20 [ 398.591412][ T26] task_work_run+0x127/0x190 [ 398.596022][ T26] exit_to_user_mode_loop+0xcb/0xe0 [ 398.601405][ T26] exit_to_user_mode_prepare+0x76/0xa0 [ 398.606891][ T26] syscall_exit_to_user_mode+0x1d/0x40 [ 398.612584][ T26] do_syscall_64+0x3d/0x40 [ 398.617024][ T26] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 398.623072][ T26] RIP: 0033:0x7ff0d8636407 [ 398.627517][ T26] RSP: 002b:00007ffee87aa5a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 398.636405][ T26] RAX: 0000000000000000 RBX: 00007ff0d8548880 RCX: 00007ff0d8636407 [ 398.644796][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 398.652938][ T26] RBP: 00007ff0d85486e8 R08: 0000000000000000 R09: 0000000000000000 [ 398.661114][ T26] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000016 [ 398.669269][ T26] R13: 00007ffee87aa6b0 R14: 0000000000000000 R15: 0000000000000000 [ 398.677283][ T26] NMI backtrace for cpu 1 [ 398.681664][ T26] CPU: 1 PID: 26 Comm: khungtaskd Tainted: G W syzkaller #0 [ 398.690271][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 398.700335][ T26] Call Trace: [ 398.703645][ T26] __dump_stack+0x21/0x24 [ 398.708000][ T26] dump_stack_lvl+0x1a7/0x208 [ 398.713217][ T26] ? show_regs_print_info+0x18/0x18 [ 398.718426][ T26] ? sched_show_task+0x31c/0x480 [ 398.723466][ T26] ? __rcu_read_unlock+0xa0/0xa0 [ 398.728428][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 398.734514][ T26] dump_stack+0x15/0x1c [ 398.738786][ T26] nmi_trigger_cpumask_backtrace+0x27f/0x2c0 [ 398.744783][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 398.750701][ T26] watchdog+0xe2d/0xf80 [ 398.754974][ T26] ? hungtask_pm_notify+0x50/0x50 [ 398.760017][ T26] ? __kasan_check_read+0x11/0x20 [ 398.765055][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 398.770007][ T26] kthread+0x346/0x3d0 [ 398.774089][ T26] ? hungtask_pm_notify+0x50/0x50 [ 398.779129][ T26] ? kthread_blkcg+0xd0/0xd0 [ 398.783823][ T26] ret_from_fork+0x1f/0x30 [ 398.788395][ T26] Sending NMI from CPU 1 to CPUs 0: [ 398.794280][ C0] NMI backtrace for cpu 0 [ 398.794289][ C0] CPU: 0 PID: 5860 Comm: syz.3.1582 Tainted: G W syzkaller #0 [ 398.794296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 398.794301][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 398.794315][ C0] Code: 00 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 3c c1 5e 05 48 89 de e8 14 e7 39 00 5b 5d c3 00 <55> 48 89 e5 48 8b 45 08 65 48 8b 0d a0 a7 9d 7e 65 8b 15 a5 a7 9d [ 398.794320][ C0] RSP: 0018:ffffc90000d0ef00 EFLAGS: 00000246 [ 398.794330][ C0] RAX: ffffffff83b2b775 RBX: 00000000ffff0000 RCX: 0000000000000002 [ 398.794336][ C0] RDX: ffff88811c390000 RSI: 00000000ffff0000 RDI: 00000000ffff0000 [ 398.794342][ C0] RBP: ffffc90000d0ef38 R08: ffff88811c390000 R09: 0000000000000002 [ 398.794348][ C0] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881252d6000 [ 398.794354][ C0] R13: dffffc0000000000 R14: ffff88812f8fac00 R15: 00000000ffff0000 [ 398.794361][ C0] FS: 00007ffa03f7a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 398.794366][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.794373][ C0] CR2: 000000110c24c119 CR3: 0000000113405000 CR4: 00000000003506b0 [ 398.794379][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.794385][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 398.794388][ C0] Call Trace: [ 398.794392][ C0] ? qdisc_lookup+0x30f/0x4e0 [ 398.794396][ C0] qdisc_tree_reduce_backlog+0x111/0x340 [ 398.794400][ C0] codel_change+0x8fc/0xbe0 [ 398.794404][ C0] ? codel_reset+0x150/0x150 [ 398.794408][ C0] codel_init+0x1a8/0x390 [ 398.794412][ C0] ? qdisc_peek_dequeued+0x230/0x230 [ 398.794416][ C0] qdisc_create+0x848/0x1220 [ 398.794420][ C0] ? qdisc_notify+0x350/0x350 [ 398.794424][ C0] ? __nla_parse+0x42/0x60 [ 398.794428][ C0] tc_modify_qdisc+0x8a1/0x1490 [ 398.794432][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 398.794436][ C0] ? cap_capable+0x19c/0x220 [ 398.794440][ C0] ? ns_capable+0x8c/0xf0 [ 398.794444][ C0] ? netlink_net_capable+0x125/0x160 [ 398.794450][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 398.794454][ C0] rtnetlink_rcv_msg+0xa31/0xcc0 [ 398.794458][ C0] ? rtnetlink_bind+0x80/0x80 [ 398.794462][ C0] ? arch_stack_walk+0xee/0x140 [ 398.794466][ C0] ? stack_trace_save+0xa6/0xf0 [ 398.794470][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 398.794474][ C0] ? avc_has_perm+0x168/0x3d0 [ 398.794477][ C0] ? memcpy+0x56/0x70 [ 398.794481][ C0] ? avc_has_perm+0x27f/0x3d0 [ 398.794485][ C0] ? __kasan_slab_alloc+0xbd/0xf0 [ 398.794490][ C0] ? slab_post_alloc_hook+0x5d/0x2f0 [ 398.794495][ C0] ? avc_has_perm_noaudit+0x260/0x260 [ 398.794500][ C0] ? selinux_nlmsg_lookup+0x3de/0x4a0 [ 398.794504][ C0] netlink_rcv_skb+0x1f5/0x440 [ 398.794508][ C0] ? rtnetlink_bind+0x80/0x80 [ 398.794512][ C0] ? netlink_ack+0xb70/0xb70 [ 398.794516][ C0] ? __netlink_lookup+0x387/0x3b0 [ 398.794520][ C0] rtnetlink_rcv+0x1c/0x20 [ 398.794524][ C0] netlink_unicast+0x876/0xa40 [ 398.794528][ C0] netlink_sendmsg+0x89c/0xb50 [ 398.794532][ C0] ? netlink_getsockopt+0x530/0x530 [ 398.794537][ C0] ? security_socket_sendmsg+0x82/0xa0 [ 398.794541][ C0] ? netlink_getsockopt+0x530/0x530 [ 398.794545][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 398.794549][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 398.794553][ C0] ? import_iovec+0x7c/0xb0 [ 398.794557][ C0] ___sys_sendmsg+0x236/0x2e0 [ 398.794561][ C0] ? __sys_sendmsg+0x280/0x280 [ 398.794564][ C0] ? memcpy+0x56/0x70 [ 398.794568][ C0] ? __fdget+0x1a1/0x230 [ 398.794572][ C0] __x64_sys_sendmsg+0x1f9/0x2c0 [ 398.794576][ C0] ? __kasan_check_write+0x14/0x20 [ 398.794580][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 398.794584][ C0] ? __kasan_check_read+0x11/0x20 [ 398.794589][ C0] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 398.794592][ C0] do_syscall_64+0x31/0x40 [ 398.794597][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 398.794601][ C0] RIP: 0033:0x7ffa0551fe59 [ 398.794614][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.794619][ C0] RSP: 002b:00007ffa03f7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.794628][ C0] RAX: ffffffffffffffda RBX: 00007ffa05798fa0 RCX: 00007ffa0551fe59 [ 398.794633][ C0] RDX: 00000000000040d0 RSI: 0000200000000240 RDI: 0000000000000004 [ 398.794639][ C0] RBP: 00007ffa055b5d6f R08: 0000000000000000 R09: 0000000000000000 [ 398.794646][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.794652][ C0] R13: 00007ffa05799038 R14: 00007ffa05798fa0 R15: 00007ffeb6903578 [ 550.629834][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz.3.1582:5860] [ 550.638551][ C0] Modules linked in: [ 550.644122][ C0] CPU: 0 PID: 5860 Comm: syz.3.1582 Tainted: G W syzkaller #0 [ 550.652968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.663750][ C0] RIP: 0010:qdisc_tree_reduce_backlog+0x9d/0x340 [ 550.670153][ C0] Code: 91 02 00 00 49 8d 5f 10 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 f0 01 00 00 8b 1b 89 de 83 e6 40 31 ff e8 c3 f0 b1 fd <83> e3 40 0f 85 70 02 00 00 49 8d bf a8 00 00 00 48 89 f8 48 c1 e8 [ 550.689861][ C0] RSP: 0018:ffffc90000d0ef48 EFLAGS: 00000297 [ 550.695938][ C0] RAX: ffffffff83b2d8bd RBX: 0000000000000022 RCX: 0000000000000002 [ 550.703918][ C0] RDX: ffff88811c390000 RSI: 0000000000000000 RDI: 0000000000000000 [ 550.711896][ C0] RBP: ffffc90000d0ef90 R08: ffff88811c390000 R09: 0000000000000002 [ 550.719883][ C0] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000fffffff1 [ 550.727949][ C0] R13: ffff88812f8faccc R14: dffffc0000000000 R15: ffff88812f8fac00 [ 550.735931][ C0] FS: 00007ffa03f7a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 550.745485][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.752179][ C0] CR2: 000000110c24c119 CR3: 0000000113405000 CR4: 00000000003506b0 [ 550.760248][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 550.768229][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 550.776205][ C0] Call Trace: [ 550.779510][ C0] codel_change+0x8fc/0xbe0 [ 550.784024][ C0] ? codel_reset+0x150/0x150 [ 550.788623][ C0] codel_init+0x1a8/0x390 [ 550.792964][ C0] ? qdisc_peek_dequeued+0x230/0x230 [ 550.798253][ C0] qdisc_create+0x848/0x1220 [ 550.802856][ C0] ? qdisc_notify+0x350/0x350 [ 550.807546][ C0] ? __nla_parse+0x42/0x60 [ 550.812598][ C0] tc_modify_qdisc+0x8a1/0x1490 [ 550.817562][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 550.823585][ C0] ? cap_capable+0x19c/0x220 [ 550.828190][ C0] ? ns_capable+0x8c/0xf0 [ 550.832530][ C0] ? netlink_net_capable+0x125/0x160 [ 550.837826][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 550.843733][ C0] rtnetlink_rcv_msg+0xa31/0xcc0 [ 550.848859][ C0] ? rtnetlink_bind+0x80/0x80 [ 550.854151][ C0] ? arch_stack_walk+0xee/0x140 [ 550.859022][ C0] ? stack_trace_save+0xa6/0xf0 [ 550.863880][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 550.869011][ C0] ? avc_has_perm+0x168/0x3d0 [ 550.873694][ C0] ? memcpy+0x56/0x70 [ 550.877686][ C0] ? avc_has_perm+0x27f/0x3d0 [ 550.882377][ C0] ? __kasan_slab_alloc+0xbd/0xf0 [ 550.887415][ C0] ? slab_post_alloc_hook+0x5d/0x2f0 [ 550.892713][ C0] ? avc_has_perm_noaudit+0x260/0x260 [ 550.898103][ C0] ? selinux_nlmsg_lookup+0x3de/0x4a0 [ 550.903481][ C0] netlink_rcv_skb+0x1f5/0x440 [ 550.908256][ C0] ? rtnetlink_bind+0x80/0x80 [ 550.912943][ C0] ? netlink_ack+0xb70/0xb70 [ 550.917549][ C0] ? __netlink_lookup+0x387/0x3b0 [ 550.922582][ C0] rtnetlink_rcv+0x1c/0x20 [ 550.927013][ C0] netlink_unicast+0x876/0xa40 [ 550.931792][ C0] netlink_sendmsg+0x89c/0xb50 [ 550.936568][ C0] ? netlink_getsockopt+0x530/0x530 [ 550.941785][ C0] ? security_socket_sendmsg+0x82/0xa0 [ 550.947249][ C0] ? netlink_getsockopt+0x530/0x530 [ 550.952460][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 550.957240][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 550.962273][ C0] ? import_iovec+0x7c/0xb0 [ 550.966788][ C0] ___sys_sendmsg+0x236/0x2e0 [ 550.971478][ C0] ? __sys_sendmsg+0x280/0x280 [ 550.976255][ C0] ? memcpy+0x56/0x70 [ 550.980252][ C0] ? __fdget+0x1a1/0x230 [ 550.984608][ C0] __x64_sys_sendmsg+0x1f9/0x2c0 [ 550.989558][ C0] ? __kasan_check_write+0x14/0x20 [ 550.994681][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 550.999542][ C0] ? __kasan_check_read+0x11/0x20 [ 551.004584][ C0] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 551.010229][ C0] do_syscall_64+0x31/0x40 [ 551.014662][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 551.020571][ C0] RIP: 0033:0x7ffa0551fe59 [ 551.024998][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.044618][ C0] RSP: 002b:00007ffa03f7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.053049][ C0] RAX: ffffffffffffffda RBX: 00007ffa05798fa0 RCX: 00007ffa0551fe59 [ 551.061127][ C0] RDX: 00000000000040d0 RSI: 0000200000000240 RDI: 0000000000000004 [ 551.069116][ C0] RBP: 00007ffa055b5d6f R08: 0000000000000000 R09: 0000000000000000 [ 551.077098][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.085087][ C0] R13: 00007ffa05799038 R14: 00007ffa05798fa0 R15: 00007ffeb6903578 [ 551.093079][ C0] Sending NMI from CPU 0 to CPUs 1: [ 551.098804][ C1] NMI backtrace for cpu 1 [ 551.098812][ C1] CPU: 1 PID: 5380 Comm: kworker/u4:5 Tainted: G W syzkaller #0 [ 551.098819][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.098825][ C1] Workqueue: events_unbound toggle_allocation_gate [ 551.098838][ C1] RIP: 0010:smp_call_function_single+0x209/0x490 [ 551.098852][ C1] Code: 48 44 89 f6 83 e6 01 31 ff e8 63 89 0a 00 41 83 e6 01 49 bc 00 00 00 00 00 fc ff df 75 0a e8 9e 85 0a 00 e9 a4 00 00 00 f3 90 44 24 48 01 00 00 00 0f 84 8f 00 00 00 e8 84 85 0a 00 eb e9 e8 [ 551.098857][ C1] RSP: 0018:ffffc90002037720 EFLAGS: 00000293 [ 551.098866][ C1] RAX: ffffffff815a404c RBX: 0000000000000000 RCX: ffff888116b84f00 [ 551.098872][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 551.098878][ C1] RBP: ffffc90002037810 R08: ffff8881f7057647 R09: 1ffff1103ee0aec8 [ 551.098884][ C1] R10: dffffc0000000000 R11: ffffed103ee0aec9 R12: dffffc0000000000 [ 551.098890][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff92000406ee8 [ 551.098897][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 551.098903][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.098909][ C1] CR2: 00007f3a18975744 CR3: 000000000640f000 CR4: 00000000003506a0 [ 551.098915][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 551.098921][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 551.098925][ C1] Call Trace: [ 551.098929][ C1] ? text_poke_sync+0x20/0x20 [ 551.098934][ C1] ? flush_smp_call_function_from_idle+0x190/0x190 [ 551.098938][ C1] ? text_poke_sync+0x20/0x20 [ 551.098943][ C1] smp_call_function_many_cond+0x90a/0xa00 [ 551.098947][ C1] ? text_poke_sync+0x20/0x20 [ 551.098952][ C1] ? flush_tlb_mm_range+0x220/0x2c0 [ 551.098956][ C1] ? smp_call_function_many+0x40/0x40 [ 551.098961][ C1] ? __kmalloc_track_caller+0xe5/0x320 [ 551.098965][ C1] ? __text_poke+0x5a2/0x630 [ 551.098969][ C1] ? text_poke_sync+0x20/0x20 [ 551.098972][ C1] on_each_cpu+0xab/0x180 [ 551.098976][ C1] ? text_poke+0x20/0x20 [ 551.098980][ C1] ? text_poke_loc_init+0x3b2/0x5f0 [ 551.098984][ C1] ? smp_call_function+0x90/0x90 [ 551.098988][ C1] ? text_poke_finish+0x30/0x30 [ 551.098993][ C1] text_poke_bp_batch+0x1cb/0x5f0 [ 551.098997][ C1] ? text_poke_loc_init+0x5f0/0x5f0 [ 551.099002][ C1] ? __kasan_check_write+0x14/0x20 [ 551.099006][ C1] ? mutex_lock+0x92/0xf0 [ 551.099010][ C1] ? mutex_trylock+0xa0/0xa0 [ 551.099014][ C1] ? __kmalloc_track_caller+0xe5/0x320 [ 551.099019][ C1] ? __kasan_check_write+0x14/0x20 [ 551.099022][ C1] ? mutex_unlock+0x1c/0x40 [ 551.099027][ C1] text_poke_finish+0x1a/0x30 [ 551.099032][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 551.099036][ C1] __jump_label_update+0x37c/0x3a0 [ 551.099040][ C1] jump_label_update+0x34c/0x3e0 [ 551.099045][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 551.099049][ C1] static_key_disable+0x1a/0x30 [ 551.099053][ C1] toggle_allocation_gate+0x3a5/0x440 [ 551.099058][ C1] ? kfence_protect+0x1b0/0x1b0 [ 551.099062][ C1] ? finish_task_switch+0x12e/0x5a0 [ 551.099066][ C1] ? io_schedule+0xe0/0xe0 [ 551.099070][ C1] ? __kasan_check_read+0x11/0x20 [ 551.099074][ C1] ? read_word_at_a_time+0x12/0x20 [ 551.099078][ C1] ? strscpy+0x9b/0x290 [ 551.099082][ C1] process_one_work+0x6e1/0xba0 [ 551.099086][ C1] worker_thread+0xa6a/0x13c0 [ 551.099091][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 551.099095][ C1] ? __kasan_check_read+0x11/0x20 [ 551.099099][ C1] kthread+0x346/0x3d0 [ 551.099103][ C1] ? worker_clr_flags+0x190/0x190 [ 551.099107][ C1] ? kthread_blkcg+0xd0/0xd0 [ 551.099111][ C1] ret_from_fork+0x1f/0x30 [ 551.099392][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 551.469816][ C0] CPU: 0 PID: 5860 Comm: syz.3.1582 Tainted: G W L syzkaller #0 [ 551.478665][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.488726][ C0] Call Trace: [ 551.492044][ C0] [ 551.494924][ C0] __dump_stack+0x21/0x24 [ 551.499271][ C0] dump_stack_lvl+0x1a7/0x208 [ 551.503978][ C0] ? show_regs_print_info+0x18/0x18 [ 551.509198][ C0] dump_stack+0x15/0x1c [ 551.513368][ C0] panic+0x2e7/0x810 [ 551.517266][ C0] ? cpumask_next+0x12/0x30 [ 551.521778][ C0] ? bpf_jit_dump+0xe0/0xe0 [ 551.526291][ C0] watchdog_timer_fn+0x591/0x5a0 [ 551.531239][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 551.536529][ C0] __hrtimer_run_queues+0x34f/0x820 [ 551.541738][ C0] ? hrtimer_interrupt+0xdc0/0xdc0 [ 551.546854][ C0] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 551.552929][ C0] hrtimer_interrupt+0x3a6/0xdc0 [ 551.557902][ C0] ? do_sync_core+0x22/0x30 [ 551.562428][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 551.568339][ C0] asm_call_irq_on_stack+0xf/0x20 [ 551.573373][ C0] [ 551.576333][ C0] sysvec_apic_timer_interrupt+0x85/0xe0 [ 551.581978][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 551.588085][ C0] RIP: 0010:qdisc_tree_reduce_backlog+0x9d/0x340 [ 551.594416][ C0] Code: 91 02 00 00 49 8d 5f 10 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 f0 01 00 00 8b 1b 89 de 83 e6 40 31 ff e8 c3 f0 b1 fd <83> e3 40 0f 85 70 02 00 00 49 8d bf a8 00 00 00 48 89 f8 48 c1 e8 [ 551.614029][ C0] RSP: 0018:ffffc90000d0ef48 EFLAGS: 00000297 [ 551.620102][ C0] RAX: ffffffff83b2d8bd RBX: 0000000000000022 RCX: 0000000000000002 [ 551.628079][ C0] RDX: ffff88811c390000 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.636061][ C0] RBP: ffffc90000d0ef90 R08: ffff88811c390000 R09: 0000000000000002 [ 551.644044][ C0] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000fffffff1 [ 551.652047][ C0] R13: ffff88812f8faccc R14: dffffc0000000000 R15: ffff88812f8fac00 [ 551.660153][ C0] ? qdisc_tree_reduce_backlog+0x9d/0x340 [ 551.665885][ C0] ? qdisc_tree_reduce_backlog+0x9d/0x340 [ 551.671611][ C0] codel_change+0x8fc/0xbe0 [ 551.676136][ C0] ? codel_reset+0x150/0x150 [ 551.680733][ C0] codel_init+0x1a8/0x390 [ 551.685073][ C0] ? qdisc_peek_dequeued+0x230/0x230 [ 551.690362][ C0] qdisc_create+0x848/0x1220 [ 551.694959][ C0] ? qdisc_notify+0x350/0x350 [ 551.699650][ C0] ? __nla_parse+0x42/0x60 [ 551.704082][ C0] tc_modify_qdisc+0x8a1/0x1490 [ 551.708944][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 551.714855][ C0] ? cap_capable+0x19c/0x220 [ 551.719472][ C0] ? ns_capable+0x8c/0xf0 [ 551.723898][ C0] ? netlink_net_capable+0x125/0x160 [ 551.729289][ C0] ? qdisc_offload_graft_helper+0x280/0x280 [ 551.735199][ C0] rtnetlink_rcv_msg+0xa31/0xcc0 [ 551.740150][ C0] ? rtnetlink_bind+0x80/0x80 [ 551.744846][ C0] ? arch_stack_walk+0xee/0x140 [ 551.749881][ C0] ? stack_trace_save+0xa6/0xf0 [ 551.754739][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 551.759866][ C0] ? avc_has_perm+0x168/0x3d0 [ 551.764548][ C0] ? memcpy+0x56/0x70 [ 551.768537][ C0] ? avc_has_perm+0x27f/0x3d0 [ 551.773224][ C0] ? __kasan_slab_alloc+0xbd/0xf0 [ 551.778252][ C0] ? slab_post_alloc_hook+0x5d/0x2f0 [ 551.783551][ C0] ? avc_has_perm_noaudit+0x260/0x260 [ 551.788938][ C0] ? selinux_nlmsg_lookup+0x3de/0x4a0 [ 551.794321][ C0] netlink_rcv_skb+0x1f5/0x440 [ 551.799099][ C0] ? rtnetlink_bind+0x80/0x80 [ 551.803785][ C0] ? netlink_ack+0xb70/0xb70 [ 551.808406][ C0] ? __netlink_lookup+0x387/0x3b0 [ 551.813437][ C0] rtnetlink_rcv+0x1c/0x20 [ 551.817864][ C0] netlink_unicast+0x876/0xa40 [ 551.822640][ C0] netlink_sendmsg+0x89c/0xb50 [ 551.827413][ C0] ? netlink_getsockopt+0x530/0x530 [ 551.832616][ C0] ? security_socket_sendmsg+0x82/0xa0 [ 551.838079][ C0] ? netlink_getsockopt+0x530/0x530 [ 551.843281][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 551.848053][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 551.853082][ C0] ? import_iovec+0x7c/0xb0 [ 551.857596][ C0] ___sys_sendmsg+0x236/0x2e0 [ 551.862280][ C0] ? __sys_sendmsg+0x280/0x280 [ 551.867048][ C0] ? memcpy+0x56/0x70 [ 551.871040][ C0] ? __fdget+0x1a1/0x230 [ 551.875290][ C0] __x64_sys_sendmsg+0x1f9/0x2c0 [ 551.880236][ C0] ? __kasan_check_write+0x14/0x20 [ 551.885356][ C0] ? ___sys_sendmsg+0x2e0/0x2e0 [ 551.890211][ C0] ? __kasan_check_read+0x11/0x20 [ 551.895247][ C0] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 551.900886][ C0] do_syscall_64+0x31/0x40 [ 551.905311][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 551.911208][ C0] RIP: 0033:0x7ffa0551fe59 [ 551.915631][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.935245][ C0] RSP: 002b:00007ffa03f7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.943670][ C0] RAX: ffffffffffffffda RBX: 00007ffa05798fa0 RCX: 00007ffa0551fe59 [ 551.951651][ C0] RDX: 00000000000040d0 RSI: 0000200000000240 RDI: 0000000000000004 [ 551.959626][ C0] RBP: 00007ffa055b5d6f R08: 0000000000000000 R09: 0000000000000000 [ 551.967605][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.975587][ C0] R13: 00007ffa05799038 R14: 00007ffa05798fa0 R15: 00007ffeb6903578 [ 551.983898][ C0] Kernel Offset: disabled [ 551.988386][ C0] Rebooting in 86400 seconds..