last executing test programs: 3m46.505666769s ago: executing program 32 (id=21): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) syz_usb_connect(0x2, 0x43, &(0x7f0000000040)=ANY=[], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x801}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25, 0x2, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000300)={0x7, 0x1b, 0x2}, 0x7) ppoll(0x0, 0x0, &(0x7f0000002fc0)={0x7fffffffffffffff}, 0x0, 0x0) splice(r5, 0x0, r2, 0x0, 0x317e, 0x4) write$tun(r3, &(0x7f0000000840)=ANY=[], 0x11b0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x1000001e, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) 3m38.280490738s ago: executing program 33 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x0, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0xffffffffffffffff, 0x24000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="14000000100001000000000000f5ffffff00000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a0102000000008f000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050b00070066696c746572"], 0xf4}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 1m58.583807066s ago: executing program 0 (id=903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r7) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x20000000, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x14}], 0x1}, 0x4011) 1m58.413729351s ago: executing program 0 (id=906): r0 = socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f0000001080), 0x6, 0x2, &(0x7f0000001100), 0x0, 0x1) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$inet6(0xa, 0x802, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) socket$inet(0x2, 0x80001, 0x84) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet6(r8, &(0x7f0000001840), 0x3b, 0xc00) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000034723d71cd91293a6d89fa6540570200058d14f29d9e74e85fd55f19138bd90000"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abdf000fedbdf25020202000900010073577a320000000014000200766c616e3100"/46], 0x34}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x4000040) 1m56.56580062s ago: executing program 0 (id=914): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@nobarrier}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$eJzs3U1rXFUfAPD/nUzSNu3zNIVS1IUUurBSO2kSXyoI1pWIFgu6r0MyDSWTTslMShMLtgu7cSNFELEgfgD3LotfwE9R0EKREnQhQuRO7qTTZCavE2fS+f3gtufMuTfn/nPuOTln7gw3gL51Mv0nF/FiRHydRBxtKstHVnhyZb+lJ7cm0y2J5eVP/kgiyV5r7J9k/x/OMi9ExC9fRpzJra+3urA4UyyXS3NZfrQ2e320urB49upscbo0Xbo2PjFx/o2J8bfferNjsb566a/vPn7wwfmvTi19+9OjY/eSuBBHsrLmOHbhdnPmZPGfLDUYF9bsONaBynpJ0u0TYEcGsn4+GOkYcDQGsl4PPP++iIhloE8l+j/0qcY8oLG279A6eN94/N7KAqge+1Bz/PmV90biYH1tNLyUPLMySte7Ix2oP63j59/v30u32Ph9iEOb5AG25fadiDiXz68f/5Ns/Nu5c/U3jze2to5++/sD3fQgnf+81mr+l1ud/0SL+c/hFn13Jzbv/7lHHaimrXT+907L+e/q0DUykOX+V5/zDSZXrpZL5yLi/xFxOgYPpPmN7uecX3q43K6sef6Xbmn9jblgdh6P8geePWaqWCtGxNBu4m54fCfipXyr+JPV9k9atH/6+7i0xTpOlO6/3K5s8/j31vKPEa+0bP+nd7SSje9Pjtavh9HGVbHen3dP/Nqu/m7Hn7b/8MbxjyTN92ur26/jh4N/l9qVpfEP7+D6H0o+racbneBmsVabG4sYSj5a//r402Mb+cb+afynT63E/+xkJbfh9Z8uvj7bYvx3j99tu2svtP/Uttp/+4mHH37+fbv6tzb+vV5Pnc5eyca/1rJrZasnuNvfHwAAAAAAAPSSXEQciSRXWE3ncoXCyuc7jsdwrlyp1s5cqcxfm4r6d2VHYjDXuNN9tOnzEGPZ52Eb+fE1+YmIOBYR3wwcqucLk5XyVLeDBwAAAAAAAAAAAAAAAAAAgB5xuM33/1O/DXT77IA9V3+wwYFunwXQDZs+8r8TT3oCetKm/R94bun/0L/0f+hfa/t/R54sDOwL/v5D/9L/oX/p/9C/9H8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqEsXL6bb8tKTW5NpfurGwvxM5cbZqVJ1pjA7P1mYrMxdL0xXKtPlUmGyMrvZzytXKtfHxmP+5mitVK2NVhcWL89W5q/VLl+dLU6XLpcG/5OoAAAAAAAAAAAAAAAAAAAAYH+pLizOFMvl0txqIp+VzK0v6tPEu9ETp7GXAa7Y0eH5XolibxLvD/TEaewmcSdr3u0d1aUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa+DcAAP//Rm0oPg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") timer_create(0x0, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000640)={{0x0, 0x3938700}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={&(0x7f00000003c0)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e", 0x28}) ptrace$ARCH_GET_FS(0x1e, r2, &(0x7f0000000480), 0x1003) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r3, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100, 0x0, 0x800, 0x9, 0x0, 0x0, 0x1, 0x0, 0x80000000000, 0x1000, 0x102000001, 0x2, 0x1ff, 0x8001, 0x3}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) timer_create(0x1, &(0x7f00000003c0)={0x0, 0xf, 0x1, @thr={&(0x7f0000000240)="f81c989be7864c5901e33ffa6e861bbc97b84f517acdaf6d217b6ef8a5e022d4ce2aa34d3dfe9fbcc17a2488c3766ea5346b19baff19e196d67459c55fb0e00d645ef115805ead62cc24d86251bfc854e4f8bd79185181dbb6654c108fe40ef840b57241bbd97834a580b71b7fc164f7b63f7e492d35c068e209cb9d8a65024abd30c12f9d1ad7f2799573493d7074e78de6bc68204265de045a2ce5455d7f9dec8df586960b2d99bb", &(0x7f0000000300)="dc78046e7975051836891cbf39e17561f16521d0af47f7f9d8485cb42ab613e65f6738ead0c5d6d1f324350d40a4aed99c25756ad25f16189dab9da38fb883a63f245e08c13e46d610e48991ca57d8b56a1b235f288da693a71932dfc2d743eff82898576f52ac5c47257e76c99f2f8054e329d83e7f8c5c9c8e1ce56928e8e9"}}, &(0x7f0000000400)=0x0) sendto$packet(r4, &(0x7f0000003680)="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", 0x1000, 0x48000, 0x0, 0x0) timer_gettime(r5, &(0x7f0000000440)) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./bus\x00', 0x0, 0x63d014, 0x0) r6 = creat(&(0x7f00000007c0)='./bus\x00', 0x182) write$UHID_INPUT(r6, &(0x7f0000000840)={0x8, {"a841df4f20ab6f0f1d84c6aed31e2b2a9dcfa56da084411abf7eccee3435a3da3dad033fd8b34d60278be66106b5aefcf7f7dd1072a9860d0fe785cedee9f4e00c672f79af822aa1cdb059d798e7a27d3dfc2599516141bce02f988edba5efd62144bd3b72c02070e3545729308e83e20dfc3160944c11c085f6d468bee4698031fb0ceabdf64f77364df06bca9c5c28996c4a50d15249d154f2cb4d28e90b3072dccec691025e1bac615a1498dcd88631acccdfb0d79129b6378647ceeab0bf173c4a0f7908439ed40d1117f19595c00c566fcf7ead6e34968b7269f1e1a1a0b3f5ce7e86131c3d4d8a82bcbcc01cd9d8a6816d054010cf1e364c01b9850aa1068837f81b5d45de23b6ce0b49f082ffd97822c2ab07eb23d1e4c89e008950f4e4c5cdf9ebe0e4f9fd46e288871a612b44317d30708c77a25626bc8c3b502ba42e7b39e43635b176abfc6846d45860c720522e6a05c2ea3113c6224f20698fdc4b7c4d6d702635e7164471ff19d99dc3ce9e97044b4ea6c9f9061cc3d9dc1acfe0ed2978555d90cdaff8d1acfa899e563e6fc80bd46a54ca0f53faead5cb1be1599e4f44ce1377d5ab779dab086a12ac6948d3e44bad0808dd330748ddbc05aa601a82896572e42a37afd3a9b95c8e6615be21f19333f900264a2ba93aa01fbbb5a7936e3a84666434f2d9b44eed8c1d2359474e588f39ba01a135478a13e0aebbd8c5fd0c51f9335ef38c6c101b3ddf694c9b015dd472933f8a82139f30b248bc3949da18c60db1a3a5249154692e1428ad5d94d8d1113d98dc74fec088cd8185c6789fee7456fa8adb4f81888da75d81973dcbbff543610c1080f41a9f76090900a24f1575d108b5d975f66e4c942dacf1eaedf1b141f466e232a535bdb3db70d2dd6fb899afce54df68227988d811c6bdfe9b21db6b9fb435c7b095ef6aaabd6de8778efe0c217a692a92d1784859de7e38a0a510cf580444067850f74034f0268446a56b1dec5c345d37d7619e13a7927a16d6773269210b18928d22dcc06122a9dfe8e2aa304e16b6f64597c8b82700f864c08456bb57ff3f029e5a1dfefaf21fd851b6abe51c5bb6cd236399115a87b776d59e7aaf6ae43a5a56c0db541cb35b1409a17347a150a173a934f1bf9f2c08c78786fba43d160f1573f609e209f62be3a7f50f5fc81b9831bedd61a52807347edffe447431d6dd0807932faee6b88f582805d46718da1ccae49d9f50822bc24d560198a3ed7e78757fbf4078f27aead6ced5ab3f3a496bb9c097e8f80dee024dfc2f3b05f5116ca473a42c078d00a234d1d251179b1d7c9b09f6b68bfdebd8ee3a782f1fe89db84bfc615594d62beca8c7daf8e59c75442052eeba0fd2872bcf954b3517f279f83714f1307f01d00acf746644e262f3b8131c2c781a2f2a2e7d4a3cacba8349018bc1617922577644c67838590133f4ab476cb0068647cdd76b865abf881924a49489290efa2bdc111de8b9c9b25f3e8df4b7e526f1133ea4ee4803a29992ccfadb13c8efa766339a434ceeeb2f9717ca5e03ff132d3b51458373e0af1000fd6223449e8b1c7ded0540cfd931a267bd43ed24447298fa82b9ed2d9b9913f19beebbfb97e55b89cb06db1364b33c49110fcddeaed36926500ec3a8df13441caf472c418d186ebe858df1c2522ac5e14492f4321b02ad9fcacb622a14345e271c12963a7f00c08c9f3aee630b81e5f95d932797908e0185c119de5908cf5fc8cf1b79dd05ca2ae2b0f7e36944198af65b9c71bfec03f73cff6c2caadf06f91729a34e0286d6368818a2bc7b565d2723aedcd2040aba57a08f17ead747915d463a6dfb3eade4f7adcb147cd7a3461bbc765b7bf5283db58ca6f2e7941a22eabe78d11b1693a68813bc1d8cd1f234f1b048c33f73dc8117a75e975bc7a2a9432fd61969b820fe0d1f5b29973a1ec6cc6cb7ca8687deb0e6a33564dbdf4a889c87a2189aadff998e4b5696c38fa1e33a64920e97f0ec57858891938d620f08f053582783c3e890dd605234b5b8b83fdb5fb5e00509a3324176f2036cef07c75b9cbe4c9a8761c9e8652f23f467ff7c4d3944e6f633d9cf82eb4fec91effcae6e6372d213e6d809817c7097e7b4054809a83388db11c6fed718e5fef413a54a0f9b63ff1015ebf491f7df343efffcf7a11793c4ac44b912d3226106dc35ab7646c5dcf9d934599f90838d37dec5cf2d2dd38a5abfeaf8bcb77fd89ba9c70cba3995b4ad6f6d26a73e869776674ed8fc84dd768bed478faed5b2413a67c87eadb73ab2d485a0ecfed88eec25109420a4dc37da1e8519bfa745dbf6c7aff2faa6dff0104b54af95d9dbc3b5524c94a9fce8db1596cf7fd4f0acccef45dec7313b75075e6e2260e093bdb823d4df7b4d3e9f071eb62b83d715cc2ea6d6a79667c840d9c2d825a495bfb02f7b33d34521aa2f18e0ab71dff9f9c46a1f1d518f01126ee82700e18e1935594ef12a00f6a339f780733fb1c1ba412fd18a3340c7c84964b9ef5fca682a35bc5da5d6c0473e6b2b532e57322b1798935bc3415e53335a1fbe2929ff2c44799e735c4f69e7b69070a458049069c35b24519c6b91e6942ff5fdee0438c5b4239f6877bc04eee196b19431256c5c711de43df2c3214755d213ad81c48e741ec636ee54feb5be26a5d1661785d88f5b439f67a5d6fd58257eea16a5d65d33feb65411f0729e53381562554c8c417dec4b6582b69de666b793bb60ac30ac62265c0469e97c16d1fb22ebbdca9ee1ffe2f73b1c507e9c8224906d7620876f4b82e53527583d10c55c3434f7a4485f03547c63e59357131dcebe31d1317a59707888441a01e3acf2723b7700f7bff0cde59ebdeae17f8c0ffe938c50a8f603995298a1810540ebf806a4a91999f5696d9b6babaf6012c5c80f9907e99fc8de93f400fdc27fb7a95dcf819463a4205dd9fcc765ed5fee3e669624f3e2776cea687344d795e98420962f9ed72985c915ffc38b3c84666bd0a938f0311494413b57500215c37131c21e3ef6e9a7722d094786f2e897f4303460356d6aae5ff0b9322fecc72c9f839ccd855352757165c056efb6352cac9a3aab0d72ab1702bcf967242bd1fdf91decbf633c7131ec99783c10fb0e46a45145957fb35d9e914f3fcefdba8527426113bc2601c84895a6a12ef2c8c12bef082f0a6c3b254543f8f8f5dc303f1837dfebbc1ab799476700fa2d6125553460e0aadd2de843d66f1a20d061a357e0bfc1fbda4d9e9aab07d37adaaf1ec74857add653c0467d6bf2be99fe2d4b9a27e33357e7723eb2e89510a7d88cb86b1ddfd046aa703d69bb6486ae760e551557185fe4e19f8ea46621282da4aaa31662c82a4ce8e09357c78850323f3580e9e25a27b30e1463445f6bc66c53efe45ed905d084f6785db513d171594dc1256545e75e18eaf1a511c3b2f05a7c8e543d6398306a31fc7b504079a92a747a8f1eace8b0881c42bf07dc3c6f196a850968c4c01a64419176e9f2f67a0d960247e963445a106c3b501974236adf9b119d222afe3fb9383b11176e1ef3d9a0e546d9b19e8d5b6820cf9171d18576e54042b3f5b61e46a350d518457714632089668f3fb077b2a50019a50e75511902c89cbfa85f5b44206bbb15bb33761efcc0e4461f8568723287f53e21b451c1ee7a91302e7ef75126a5a310e463ee812061d0d36d008bc2b9e6e83e607b54549415cc40f7d6a46ee3752bde4c5d25c1803c4c251ca2b422538c89acf0bdf2beceabe03049f420efc2a81c4de3284a596153eda6dd90ae2e53770dc05a332e4b56142612c43326c4ae0fe487882f9c59cdc065e927e8b8c799cfd4a5d60a8fa9ee00b6138418b85ac00d73d39b1e78c66a6d9bcddaf58338a2387b1e5c1fffc29488ebdfde9378bb45d9a6ff7865dc9c0e87d8c9c2ae9a0c3f8c8d8788d3df49c9561b72854bd93969dbcce6932ecbed9a10113fac13a2dda9dfc10604dff051741c98ac3390f60c31585eb7375eb51f16bd4dc4020972186b213404ab62d4a411c481103527b573df6ead3b821aad479e1ebaa9680d6ab36bdd3eea78e45e1ce346b605334daa69f0a129beae7a9c25b5376dadffb9d27ebc8210d7e61fd700719f03947dc97807e39909f59faf57f0ec194608137d4c0761005b05e2f4cf23e619bf0a85add7599e91e1c924e0e2a45aab2a7e2a241807633db34aa9b15d410371d7c8b25135a1a82c279c2d273dcfde6fe9986dabcbc76e2451d33f628acbb64ecb74d2aa7979b1ffed8fefce794c83b9ee30c63dab63aceaeb69b169c0582a62c43c62f318cc09baddce0132fe53c35875c85b35d4f67b28e2a82303473672a479d600c677e36f20c9b3fd7fec8754bc06fbf18da162478271d3daa13e5031b3e078c242c2ab547c38a2239e3b748a579d32afc3831e94aeff1e0d07909287e1d2af6086540e0340f584628c487fa549d5f5b6aa004f6a09473834ff949eee52f7150d5bfdf2ea7898cb0a5c3ed4c055e6231ae63cab8fd9d82baaf071456b7d4a74870ace72ad05113f68d176ef85b7ed2d0a1170903f87cf4244793576ba26eb2154cf93fc7d8f1c00a8ce73de7d5096f36a6674882d31d9185920e50b7abf9f338d8e9b8d6f8b7135fb8abceb1ea3f4a90581d9cdf1bec047c21d19d061aacbb363ec015a72907173994ec28e19904cec251bbab19cdd60b4d990dced547a6bfae0148f9403eefc7ec69bc9b2a30e7153cb83ff191beb3e25d3fc41800f3f9be58f6a48e63bed81ea38b63d4dd70a7da2265d4f0138e104c17602e805cba5ca227e88fcecf96095934dd8f42ba299207ec20264fdedc547fa6353debc9b3ef60986acb631a8c8c17e96e91fab5c3c16f91e7f7368131e7c432ede014f9841651b4bd0591b1a3c145a4557380f642526b382f2be3950ecf08923c6ed59353cbc207bb57a613269467dbde09feaae27d4ebda274e507f8d6602207fcee47d81e413bce36e5721362678c7b010d125c0c8b2b0d995fc8ecb905429cbaea205deae7a57dcda775ed287e528a5c2737b8b28f6d77cf4649726db1a25f78fc6fff058fe3e5abc62dec3798edb175fba5c3d13d9a6acdbfeb955c23ce051667f006f8344fe45fdb019097a2df34d49c539fe6f62223bcdf4d026573253f80f68b09c47e0953f2958bc15b005f37555ac5e406d2658527e7715db09b896950e67cf1c6f21443ae5d41eb678447950da3278a23ae797270efeb3199b9c1fd439515e3cb4d93ce12bc7e54cc09fe169538ba7367414dfceeeeeca195b2161d6e9bff036d58639d600c27a467053166c4593a30b3172cb7b04e56b79a17a7d517f8d3da53ce246d71938c81759705e5f538e3963a5fff9f98ffd30fa62d06938f67c4e6f354fbd7f4c4302a00af825a0bb335af30bb98bc86d1aff2e14cc5f5d1b7c9a67ad7dc66b7872f4b32783e998d50c1695e3c365b2e2e994b8dcd3aec122da79fb71a067413a4b892b8abec69d3d8523f41989c5d712ee6fda503d4b0d1daa6f05b1d34f23954085429af180158628f8fc886cfb50f1c6361cc98a95cf62aa26c93b4e3ae7e78266115ad0546047b275416f3ba5435401bf5cdc4c40bad0ea711487c951df0e49eb3404d4535d21105bdcdedb368be363a9e90d36a1c96f1f317259f39ddcbbe84e5fada9fa55018c5911b498899ed4ed87c140d4a6f428e1d19914b81e82acadad2cf838639dfcdbc9539f5b62ba402d56455a874f5fafecd09e7ff0cf5315a93a4554a728a2485aa27522b7", 0x1000}}, 0x1006) fallocate(r0, 0x0, 0x9, 0x10001) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0x863, 0x863, 0x0) 1m56.035237756s ago: executing program 0 (id=919): socket(0x2, 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee01) keyctl$read(0xb, r0, &(0x7f0000000a00)=""/4096, 0x1000) 1m55.536336952s ago: executing program 0 (id=924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x8d, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1m55.501085314s ago: executing program 34 (id=924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x8d, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1m51.500710599s ago: executing program 5 (id=958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a90000000160a01080000000000000000020000000900020073797a30000000000900010073797a300000000044000380400003801400010067656e657665300000000000000000000000010065727370616e300000000000000000001400010076657468315f746f5f626174616476000900010073797a30000000000c0005400000000000000002080007"], 0xb8}}, 0x24040884) 1m51.206915789s ago: executing program 5 (id=960): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0xfe00, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x0, 0x5, 0x0, 0x0, r0}]) 1m51.051735574s ago: executing program 5 (id=961): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x81000) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'sit0\x00', 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) fstat(r1, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) readahead(r0, 0x7, 0x3ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x5, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa9b, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x400002, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 4) 1m50.54779178s ago: executing program 5 (id=963): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x7}, 0x2, 0x4, 0x10ffe, 0x7, 0x2, 0x1000, 0xe000, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket(0x15, 0x5, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) getsockopt(r4, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r7, 0x0, r9, 0x0, 0x38f9, 0x0) syz_emit_ethernet(0x4c5, &(0x7f0000000a00)=ANY=[], 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000007fffffff9500000000000000"], &(0x7f00000003c0)='GPL\x00', 0xa, 0xaf, &(0x7f0000000580)=""/175, 0x41100, 0x40, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0xc, 0x400, 0x401}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0xffffffffffffffff], &(0x7f0000000700)=[{0x0, 0x2, 0x6, 0x3}], 0x10, 0x7fff}, 0x94) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0xffffffffffffff4e) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") 1m47.338912711s ago: executing program 5 (id=980): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 1m47.215819975s ago: executing program 5 (id=982): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 1m32.16702185s ago: executing program 35 (id=982): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 1m28.620956082s ago: executing program 4 (id=1110): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 1m28.527478745s ago: executing program 4 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, 0x0}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x8, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0xc812) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$kcm(0x2, 0x200000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffffffffffff, 0x1781) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m26.559482417s ago: executing program 4 (id=1117): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x200, 0x0, 0xf}) 1m26.556045767s ago: executing program 4 (id=1118): r0 = inotify_init1(0x800) quotactl_fd$Q_SYNC(r0, 0x80000304, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0xa00008, &(0x7f0000000180)={[{@usrjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x4000001}}, {@nouid32}], [{@permit_directio}]}, 0x0, 0x7bd, &(0x7f0000001600)="$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") r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000240)) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x796f, 0x1000, 0x4, 0x235}) socket(0x15, 0x803, 0xd7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x10000001ff, 0x2252c745}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000200)={0x2, 'dvmrp0\x00', {0x8}, 0xff81}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x4}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001"], 0x5000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x368}, 0x1, 0x0, 0x0, 0x577731872b93fdce}, 0x20048080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000040)={[{@min_batch_time}]}, 0x30, 0x527, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) 1m25.870331939s ago: executing program 4 (id=1126): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe, &(0x7f0000006680)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca9000000000000350901000a0000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000020b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES8], 0x1, 0x801, &(0x7f0000001540)="$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") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x41, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) utimes(&(0x7f0000000000)='./file1\x00', 0x0) 1m24.923868729s ago: executing program 4 (id=1133): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x10, 0x0, 0x8, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0x3, 0xffffffffffffffff, 0x8) open_tree(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x89901) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x4008032, 0xffffffffffffffff, 0xb89de000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x1, 0x3, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x6800c000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x7, 0x0, 0x0, 0x0, 0x3, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x3e, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r1 = syz_open_dev$evdev(&(0x7f0000000580), 0x2, 0x2200) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000005c0)=[0x9, 0xfffffffa]) socket$igmp6(0xa, 0x3, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x2, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0x7, 0x8, 0xa, 0x30}, @ldst={0x3, 0x1, 0x0, 0x9, 0x7, 0xffffffffffffffc0}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1m13.554572568s ago: executing program 3 (id=1224): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m13.551061948s ago: executing program 3 (id=1226): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f001100000000ffff000000000001000000fc00000000000000140011"], 0x68}, 0x0) 1m13.524292539s ago: executing program 3 (id=1227): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000001001060018200000", @ANYRES32=r0, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) 1m13.463983951s ago: executing program 3 (id=1228): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600101000048110d50d84e154904530000000000700000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 1m13.463810961s ago: executing program 3 (id=1229): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 1m13.395487563s ago: executing program 3 (id=1231): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x10, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x44010) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000340)={r0, 0x5, {0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x4, 0x1, 0xd, "69bb83847dcd81574cdece372e9ed21fbd665da4214b020fae03604c40a193f6ef13d9a05e7f1d530173788d17468686475011ffc9e1d1ebe964efcd8d9ed3d3", "fc06c1707f6ec62f0aa14bee1c7cb157947e30a3ec135ea891926c14a2820d79efa532a32606dba5ecb96e06cfd49893aa51cb4881e1ee56348163d0adf4ac82", "24889a6e61d58f3f02686bb9b68d778e61bc348bbb8910c6e934d6021687a93f", [0x4, 0x5]}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}, {@inode64}]}) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000100)="0100", 0x2) socket(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, 0x0, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) 1m9.752010168s ago: executing program 36 (id=1133): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x10, 0x0, 0x8, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0x3, 0xffffffffffffffff, 0x8) open_tree(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x89901) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x4008032, 0xffffffffffffffff, 0xb89de000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x1, 0x3, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x6800c000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x7, 0x0, 0x0, 0x0, 0x3, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x3e, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r1 = syz_open_dev$evdev(&(0x7f0000000580), 0x2, 0x2200) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000005c0)=[0x9, 0xfffffffa]) socket$igmp6(0xa, 0x3, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x2, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0x7, 0x8, 0xa, 0x30}, @ldst={0x3, 0x1, 0x0, 0x9, 0x7, 0xffffffffffffffc0}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1m0.777337051s ago: executing program 6 (id=1311): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@jqfmt_vfsv0}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@grpjquota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") close(0xffffffffffffffff) r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x20000000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) 59.840173131s ago: executing program 6 (id=1319): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x5) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000440)='./file0\x00', 0x20009a2) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x3, 0x7, 0xfffffffffffffffd}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010428bd70000000000000030000", @ANYRES32=0x0, @ANYBLOB="0000000000040000300012800b00010067656e657665000020000280080001000100000014000300000000000000000000000000000000011400030067656e65"], 0x64}, 0x1, 0x0, 0x0, 0x8008}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 59.515893861s ago: executing program 6 (id=1320): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000000), 0x20000) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 58.628910269s ago: executing program 6 (id=1331): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f00000001c0)={[{@i_version}, {@nobarrier}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r2, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x391}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5184}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80090) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000140), 0xa0a1039, 0x1a901) ioctl$BLKGETNRZONES(r5, 0x80041285, &(0x7f0000000200)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r4, 0x0, 0x25, 0x3, @val=@iter={0x0}}, 0x20) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 58.30446916s ago: executing program 6 (id=1337): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xff80, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) 58.262555961s ago: executing program 37 (id=1231): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x10, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x44010) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000340)={r0, 0x5, {0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x4, 0x1, 0xd, "69bb83847dcd81574cdece372e9ed21fbd665da4214b020fae03604c40a193f6ef13d9a05e7f1d530173788d17468686475011ffc9e1d1ebe964efcd8d9ed3d3", "fc06c1707f6ec62f0aa14bee1c7cb157947e30a3ec135ea891926c14a2820d79efa532a32606dba5ecb96e06cfd49893aa51cb4881e1ee56348163d0adf4ac82", "24889a6e61d58f3f02686bb9b68d778e61bc348bbb8910c6e934d6021687a93f", [0x4, 0x5]}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}, {@inode64}]}) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000100)="0100", 0x2) socket(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, 0x0, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) 56.651999911s ago: executing program 6 (id=1346): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") 56.580829073s ago: executing program 38 (id=1346): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") 15.990336725s ago: executing program 8 (id=1602): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x824, 0x1224, 0x0, 0x5, 0x7d6f, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x182, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) sched_setattr(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e20, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast1, 0x4d4, 0x6c}, @in=@remote, {0xfffffffffffffffd, 0x9, 0x6, 0xffff, 0x3221b849, 0x9, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x4, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 15.887243729s ago: executing program 8 (id=1604): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500008400000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) 13.895964682s ago: executing program 8 (id=1614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d61746368000000380002800e0001007374617469737469630000001c000300000000000000000258c2052fade1bc2c62cd"], 0xa0}}, 0x0) 13.718868457s ago: executing program 8 (id=1616): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x2000, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000000}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000400)=ANY=[@ANYBLOB='noswap,inode32']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x2, 0x0, &(0x7f0000000340)) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = dup(0xffffffffffffffff) write$UHID_INPUT(r6, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11.351916072s ago: executing program 8 (id=1626): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffff", 0x15}], 0x1) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x0) dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) readahead(r3, 0x0, 0x6) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='bridge_slave_0\x00'}) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x126}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x10, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x42, 0x0, 0x1, 0x0, 0x0, @void, @value=0x2000}, 0x28) 8.767929334s ago: executing program 8 (id=1642): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000000)=0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x80000) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000086c0)) 8.767696594s ago: executing program 39 (id=1642): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000000)=0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x80000) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000086c0)) 2.771954133s ago: executing program 7 (id=1695): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x824, 0x1224, 0x0, 0x5, 0x7d6f, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x6}}, 0x20) 2.738598134s ago: executing program 7 (id=1696): creat(&(0x7f0000000380)='./file0\x00', 0xd4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x140, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fb", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9d12}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=@v3={0x3000000, [{0x3ecf, 0x5}, {0x101, 0x3ff}], 0xee01}, 0x18, 0x1) 2.257133469s ago: executing program 9 (id=1698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.255010049s ago: executing program 2 (id=1699): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8, 0x4}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002", @ANYRES32=r2], 0x2c}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f030006a5377aae2f", 0x0, 0x12f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.21241304s ago: executing program 7 (id=1700): mmap(&(0x7f000064a000/0x4000)=nil, 0x4000, 0x300000f, 0x50, 0xffffffffffffffff, 0x3000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4015, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff0001}]}) sched_getparam(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) brk(0xa00004ffc000) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2a282) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000040)) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) set_mempolicy(0x4005, &(0x7f0000000240)=0x7e, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xea, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x27, 0x12, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286dd", 0x0, 0x3ffe, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0xf) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100020000000000000100060000", @ANYRES32=0x0, @ANYBLOB="000000000101040008001b0000000000"], 0x28}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 1.647775038s ago: executing program 9 (id=1701): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffc000/0x4000)=nil, 0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r5 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x30000, 0x3) 1.239921921s ago: executing program 1 (id=1704): perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000190c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5, 0x700}}], 0x18, 0x4008000}, 0x28008841) 1.215880822s ago: executing program 2 (id=1705): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x6}}, 0x20) 1.187423983s ago: executing program 2 (id=1706): socket$l2tp(0x2, 0x2, 0x73) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a9014000700fe80000000000000000000000000000e"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x81, 0x0, 0x0, 0x0, 0x9, 0xb00d8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xc, 0x1}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x9, 0x2, 0x0, 0x5, 0x0, 0x80000001}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0xfffffc11, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbce}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x7) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001480)=ANY=[@ANYRES16=r3, @ANYRESOCT=r2], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x2, 0x8}, 0x10c0e9, 0x2, 0xfffffffc, 0x8, 0xa, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000c80)=ANY=[], 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r7, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b700000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x1016, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) wait4(r3, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8000000}, &(0x7f00000001c0)=0x8) capget(&(0x7f00000000c0)={0x20071026, r3}, &(0x7f0000000300)={0x7, 0x9, 0x9, 0x4003fc, 0xff9a, 0x3}) 1.128759205s ago: executing program 1 (id=1707): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffe}}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0xb557e000) socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000820000000000400060005000900010000000500"], 0x88}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000820000000000400060005000900010000000500"], 0x88}}, 0x0) 1.083696066s ago: executing program 1 (id=1708): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @limit={{0x39}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd62}]}}}, {0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 1.082910736s ago: executing program 2 (id=1709): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000080)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x3, 0x4}, 0x8) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$unix(r6, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r7) 991.902989ms ago: executing program 1 (id=1710): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000080)}, 0x223, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000780)={@local, @link_local, @void, {@ipv4={0x6000, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x140c, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 957.96969ms ago: executing program 1 (id=1711): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYRES64=r1], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000a00)={{0x1, 0x1, 0x18}, './cgroup\x00'}) r2 = socket$kcm(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") getpid() r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000000c0)={0x1800000, 0x6, 0x62a6, 0xbe, 0xe}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000d80), 0x17}, 0x1d144, 0xc50a, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x19) timer_create(0x1, &(0x7f0000000bc0)={0x0, 0x1e, 0x1, @thr={&(0x7f0000000ac0)="401dd8f5871afda27cd5a1cc32a18f0aab15444aea61902a5a0ac759b16336191dd8833278044159b8aa25a283ef3caf07f2b0c8dba37fcd3b0751e300ac5f01127e524931878efc81979b9b9ecb84c99dcd3feae3d1b1aa0899cfac666792bc437e7df5b7e864e1d2fbb5220bc66341dc186680a58b910f2df603bd407b3e3554622f", &(0x7f0000000b80)="3e009b"}}, &(0x7f0000000c00)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x438501, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$AUDIT_USER_AVC(r7, &(0x7f00000021c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002180)={&(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x1010}, 0x1, 0x0, 0x0, 0x4004010}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x4, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0x9, 0x4}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8804) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x3b8, 0x138, 0xa, 0x148, 0x0, 0x10, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x418) socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) read$char_usb(r9, &(0x7f0000001100)=""/19, 0x13) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) 938.167181ms ago: executing program 7 (id=1712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d61746368000000380002800e0001007374617469737469630000001c000300000000000000000258c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a3000000000"], 0xa0}}, 0x0) 890.586472ms ago: executing program 7 (id=1713): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x7, 0xfffffff7}, &(0x7f0000000180)=0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}, 0x1, 0x0, 0x0, 0x240080c4}, 0x20040004) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10101, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_setup(0x86, &(0x7f0000000440)) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000840)) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa2c0180c20000000800450000b0400000000011907800000000000000004e244e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00000000000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000648e3bfbc1f39cb307b3472eb9cdb042d2642c72f67d5441f6e8da020400000000"], 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 690.000958ms ago: executing program 9 (id=1714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x80b, 0x0, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x43, 0x1, {{0x0, 0x0, 0xc, 0x7}}}]}, {0x4}, {0xc}, {0x55}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) chdir(&(0x7f0000000080)='.\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000001040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}}], 0x18}, 0x50) preadv2(0xffffffffffffffff, &(0x7f0000007f40)=[{0x0}], 0x1, 0x0, 0x5, 0xc) 533.176234ms ago: executing program 0 (id=1643): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000004000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r6, @ANYBLOB="495327bd70000000000067000000", @ANYBLOB="0800428004"], 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x8000) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f00000002c0)) poll(0x0, 0x0, 0x9) r7 = epoll_create1(0x80000) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x100000, 0x136) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0xe000001a}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf25047c000004008c801400018006000600894f0000080016"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) 524.703234ms ago: executing program 9 (id=1715): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x6}}, 0x20) 387.854258ms ago: executing program 9 (id=1716): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) fstat(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x18420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2010012, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000001000)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r3, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0x8, 0x2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 196.105874ms ago: executing program 2 (id=1717): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x403, 0x0, 0xe4ff, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 93.600917ms ago: executing program 7 (id=1718): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@mpls_getroute={0x30, 0x1a, 0x10, 0x70bd26, 0x25dfdbfc, {0x1c, 0x14, 0x80, 0xa0, 0xff, 0x2, 0x0, 0x8, 0xc00}, [@RTA_NEWDST={0x0, 0x13, [{0x2, 0x0, 0x1}, {0x3}, {0xc6c, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8}, {0x2}, {0xe585, 0x0, 0x1}, {0xfa99}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x20, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x57c8}, {0x1ff}, {0x3, 0x0, 0x1}, {0xa10}, {0xffffa, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x54}, {0x4}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xa84d}, {0x6}, {0x7, 0x0, 0x1}, {0xbc7}, {0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048090}, 0x8000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xa0000006}) socketpair(0x1d, 0x2, 0x3841, &(0x7f00000001c0)) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4000005) 27.734849ms ago: executing program 2 (id=1719): socket$l2tp(0x2, 0x2, 0x73) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a9014000700fe80000000000000000000000000000e"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x81, 0x0, 0x0, 0x0, 0x9, 0xb00d8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xc, 0x1}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x9, 0x2, 0x0, 0x5, 0x0, 0x80000001}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0xfffffc11, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbce}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x7) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001480)=ANY=[@ANYRES16=r3, @ANYRESOCT=r2], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x2, 0x8}, 0x10c0e9, 0x2, 0xfffffffc, 0x8, 0xa, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000c80)=ANY=[], 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r7, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b700000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x1016, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) wait4(r3, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8000000}, &(0x7f00000001c0)=0x8) capget(&(0x7f00000000c0)={0x20071026, r3}, &(0x7f0000000300)={0x7, 0x9, 0x9, 0x4003fc, 0xff9a, 0x3}) 27.162299ms ago: executing program 1 (id=1720): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000ae01000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0xc000) (async) ioprio_get$pid(0x2, r0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0xd0da, 0x101, 0x8, 0x9, 0x6, 0x86, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, r5, 0xa) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) (async) syz_usbip_server_init(0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r7 = epoll_create(0x8001) fchmod(r7, 0x100) (async) rt_sigsuspend(0x0, 0x0) (async) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) (async) r8 = accept4$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800) accept4(r8, 0x0, &(0x7f0000000140), 0x800) (async) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000004f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x140080c0) 0s ago: executing program 9 (id=1721): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x223, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) (fail_nth: 5) kernel console output (not intermixed with test programs): 0x1a/0x20 [ 206.244081][ T8789] _copy_from_iter+0xcc/0xe70 [ 206.244173][ T8789] ? __alloc_skb+0x4f6/0x690 [ 206.244201][ T8789] ? __alloc_skb+0x200/0x690 [ 206.244279][ T8789] netlink_sendmsg+0x4a4/0x6f0 [ 206.244305][ T8789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.244327][ T8789] ____sys_sendmsg+0x532/0x580 [ 206.244360][ T8789] ___sys_sendmsg+0x195/0x1e0 [ 206.244437][ T8789] __x64_sys_sendmsg+0xd4/0x160 [ 206.244519][ T8789] x64_sys_call+0x194c/0x3020 [ 206.244547][ T8789] do_syscall_64+0x136/0x3c0 [ 206.244620][ T8789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.244687][ T8789] RIP: 0033:0x7f7027b9ce59 [ 206.244707][ T8789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.244728][ T8789] RSP: 002b:00007f70265ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.244754][ T8789] RAX: ffffffffffffffda RBX: 00007f7027e15fa0 RCX: 00007f7027b9ce59 [ 206.244774][ T8789] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 206.244790][ T8789] RBP: 00007f70265ef090 R08: 0000000000000000 R09: 0000000000000000 [ 206.244836][ T8789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.244852][ T8789] R13: 00007f7027e16038 R14: 00007f7027e15fa0 R15: 00007fffdb8267b8 [ 206.244874][ T8789] [ 206.498055][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1329'. [ 206.546273][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1329'. [ 206.556439][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1329'. [ 206.797809][ T8799] loop6: detected capacity change from 0 to 512 [ 206.843803][ T8801] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1333'. [ 206.853696][ T8799] EXT4-fs: Ignoring removed i_version option [ 206.859929][ T8803] netlink: 'syz.9.1334': attribute type 2 has an invalid length. [ 206.907946][ T8799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.921216][ T8799] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.943821][ T28] audit: type=1400 audit(1781570607.951:4108): avc: denied { write } for pid=8798 comm="syz.6.1331" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.040448][ T3926] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 207.104420][ T28] audit: type=1400 audit(1781570608.051:4109): avc: denied { write } for pid=3926 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.144888][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1339'. [ 207.154805][ T3926] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 207.206405][ T28] audit: type=1400 audit(1781570608.151:4110): avc: denied { bind } for pid=8816 comm="syz.7.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.252216][ T28] audit: type=1400 audit(1781570608.151:4111): avc: denied { setopt } for pid=8816 comm="syz.7.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.306684][ T8823] loop7: detected capacity change from 0 to 512 [ 207.396510][ T8823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.410313][ T8823] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.628161][ T8819] xfrm0 speed is unknown, defaulting to 1000 [ 208.385420][ T8840] tmpfs: Unknown parameter 'mppù-ZnF¸Ûleave:' [ 208.433327][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.444492][ T8847] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.1343'. [ 208.455485][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.466960][ T8819] bridge_slave_0: entered allmulticast mode [ 208.481247][ T8819] bridge_slave_0: entered promiscuous mode [ 208.494423][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.518563][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.534092][ T8819] bridge_slave_1: entered allmulticast mode [ 208.545058][ T8819] bridge_slave_1: entered promiscuous mode [ 208.567104][ T8819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.577756][ T8819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.589291][ T28] audit: type=1400 audit(1781570608.711:4112): avc: denied { write } for pid=8822 comm="syz.7.1341" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.640099][ T8796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.752390][ T8854] FAULT_INJECTION: forcing a failure. [ 208.752390][ T8854] name failslab, interval 1, probability 0, space 0, times 0 [ 208.782594][ T8819] team0: Port device team_slave_0 added [ 208.811596][ T8819] team0: Port device team_slave_1 added [ 208.820181][ T8854] CPU: 1 UID: 0 PID: 8854 Comm: syz.8.1345 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 208.820255][ T8854] Tainted: [W]=WARN [ 208.820261][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 208.820272][ T8854] Call Trace: [ 208.820278][ T8854] [ 208.820287][ T8854] __dump_stack+0x1d/0x30 [ 208.820390][ T8854] dump_stack_lvl+0x95/0xd0 [ 208.820409][ T8854] dump_stack+0x15/0x1b [ 208.820477][ T8854] should_fail_ex+0x25e/0x270 [ 208.820508][ T8854] should_failslab+0x8c/0xb0 [ 208.820527][ T8854] __kvmalloc_node_noprof+0x155/0x640 [ 208.820549][ T8854] ? xt_alloc_entry_offsets+0x4d/0x60 [ 208.820579][ T8854] xt_alloc_entry_offsets+0x4d/0x60 [ 208.820649][ T8854] translate_table+0xa8/0x1210 [ 208.820678][ T8854] ? should_fail_ex+0xd9/0x270 [ 208.820699][ T8854] ? _copy_from_user+0x89/0xb0 [ 208.820730][ T8854] do_ip6t_set_ctl+0x6ce/0x8e0 [ 208.820818][ T8854] ? kstrtoull+0x111/0x140 [ 208.820842][ T8854] ? __rcu_read_unlock+0x4e/0x70 [ 208.820873][ T8854] nf_setsockopt+0x199/0x1b0 [ 208.820951][ T8854] ipv6_setsockopt+0x11a/0x130 [ 208.820981][ T8854] udpv6_setsockopt+0x89/0xa0 [ 208.821004][ T8854] sock_common_setsockopt+0x69/0x80 [ 208.821109][ T8854] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 208.821129][ T8854] __sys_setsockopt+0x184/0x200 [ 208.821156][ T8854] __x64_sys_setsockopt+0x64/0x80 [ 208.821184][ T8854] x64_sys_call+0x2327/0x3020 [ 208.821263][ T8854] do_syscall_64+0x136/0x3c0 [ 208.821334][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.821355][ T8854] RIP: 0033:0x7fac961bce59 [ 208.821418][ T8854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.821435][ T8854] RSP: 002b:00007fac94bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.821454][ T8854] RAX: ffffffffffffffda RBX: 00007fac96436090 RCX: 00007fac961bce59 [ 208.821467][ T8854] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 208.821478][ T8854] RBP: 00007fac94bf6090 R08: 00000000000004e0 R09: 0000000000000000 [ 208.821489][ T8854] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 208.821581][ T8854] R13: 00007fac96436128 R14: 00007fac96436090 R15: 00007fff80b4aa78 [ 208.821615][ T8854] [ 209.116041][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.126340][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.156069][ T8819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.171985][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.180525][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.207751][ T8819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.241790][ T8819] hsr_slave_0: entered promiscuous mode [ 209.247860][ T8819] hsr_slave_1: entered promiscuous mode [ 209.255376][ T8819] debugfs: 'hsr0' already exists in 'hsr' [ 209.262546][ T8819] Cannot create hsr debugfs directory [ 209.334582][ T7044] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.616977][ T8876] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.1353'. [ 209.653578][ T8876] net_ratelimit: 7 callbacks suppressed [ 209.653593][ T8876] netlink: zone id is out of range [ 209.711349][ T8876] netlink: zone id is out of range [ 209.754080][ T5655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.812744][ T28] audit: type=1400 audit(1781570610.822:4113): avc: denied { write } for pid=8881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.836623][ T8876] netlink: set zone limit has 8 unknown bytes [ 209.865209][ T28] audit: type=1400 audit(1781570610.872:4114): avc: denied { write } for pid=8892 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.887470][ T5655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.898711][ T5655] bond0 (unregistering): Released all slaves [ 209.921507][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 209.947269][ T8856] xfrm0 speed is unknown, defaulting to 1000 [ 210.021902][ T5655] tipc: Left network mode [ 210.088487][ T28] audit: type=1400 audit(1781570611.092:4115): avc: denied { write } for pid=8898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.146973][ T5655] hsr_slave_0: left promiscuous mode [ 210.159929][ T5655] hsr_slave_1: left promiscuous mode [ 210.168686][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.186541][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.234821][ T8919] loop8: detected capacity change from 0 to 764 [ 210.256692][ T5655] team0 (unregistering): Port device team_slave_1 removed [ 210.271463][ T5655] team0 (unregistering): Port device team_slave_0 removed [ 210.441717][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 210.556502][ T8932] Symlink component flag not implemented [ 210.566124][ T8932] Symlink component flag not implemented (116) [ 210.736400][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 210.736477][ T28] audit: type=1400 audit(1781570611.742:4117): avc: denied { write } for pid=8924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.914093][ T28] audit: type=1400 audit(1781570611.922:4118): avc: denied { write } for pid=8937 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.321183][ T28] audit: type=1400 audit(1781570612.332:4119): avc: denied { write } for pid=8944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.367067][ T8960] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1361'. [ 211.417776][ T28] audit: type=1400 audit(1781570612.422:4120): avc: denied { write } for pid=8963 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.435215][ T8856] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.447204][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.454703][ T8856] bridge_slave_0: entered allmulticast mode [ 211.461869][ T8856] bridge_slave_0: entered promiscuous mode [ 211.475158][ T8856] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.482515][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.493889][ T8856] bridge_slave_1: entered allmulticast mode [ 211.500524][ T8856] bridge_slave_1: entered promiscuous mode [ 211.516494][ T8977] IPVS: rr: FWM 3 0x00000003 - no destination available [ 211.520051][ T8856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.534318][ T8856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.554241][ T8856] team0: Port device team_slave_0 added [ 211.560863][ T8856] team0: Port device team_slave_1 added [ 211.577450][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.584505][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.628522][ T8976] loop9: detected capacity change from 0 to 512 [ 211.676641][ T8856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.693708][ T8976] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.699082][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.712740][ T28] audit: type=1400 audit(1781570612.712:4121): avc: denied { write } for pid=8975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.713788][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.767501][ T8856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.805234][ T8976] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.835001][ T8819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.857213][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.865588][ T8976] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #2: comm syz.9.1363: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 211.885487][ T8819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.905673][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.927507][ T5655] IPVS: stop unused estimator thread 0... [ 211.962195][ T8819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.977188][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.050911][ T8856] hsr_slave_0: entered promiscuous mode [ 212.076669][ T8856] hsr_slave_1: entered promiscuous mode [ 212.090915][ T8856] debugfs: 'hsr0' already exists in 'hsr' [ 212.096854][ T8856] Cannot create hsr debugfs directory [ 212.103234][ T8819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.114838][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.203348][ T8539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.438525][ T5655] bridge_slave_1: left allmulticast mode [ 212.447619][ T5655] bridge_slave_1: left promiscuous mode [ 212.461566][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.540574][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1366'. [ 212.609856][ T5655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.619183][ T5655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.633342][ T5655] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 212.641946][ T5655] bond0 (unregistering): Released all slaves [ 212.684493][ T9001] 9p: Bad value for 'wfdno' [ 212.734415][ T28] audit: type=1400 audit(1781570613.742:4122): avc: denied { write } for pid=9004 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.784898][ T8819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.825520][ T8819] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.849599][ T9006] loop9: detected capacity change from 0 to 764 [ 212.891074][ T5655] hsr_slave_0: left promiscuous mode [ 213.046430][ T5655] hsr_slave_1: left promiscuous mode [ 213.052257][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.069966][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.412662][ T9013] Symlink component flag not implemented [ 213.421681][ T9013] Symlink component flag not implemented (116) [ 213.518624][ T9017] FAULT_INJECTION: forcing a failure. [ 213.518624][ T9017] name failslab, interval 1, probability 0, space 0, times 0 [ 213.770312][ T9015] loop8: detected capacity change from 0 to 764 [ 213.781887][ T9017] CPU: 0 UID: 0 PID: 9017 Comm: syz.7.1369 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 213.781965][ T9017] Tainted: [W]=WARN [ 213.781972][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.781986][ T9017] Call Trace: [ 213.781993][ T9017] [ 213.782003][ T9017] __dump_stack+0x1d/0x30 [ 213.782105][ T9017] dump_stack_lvl+0x95/0xd0 [ 213.782129][ T9017] dump_stack+0x15/0x1b [ 213.782149][ T9017] should_fail_ex+0x25e/0x270 [ 213.782172][ T9017] should_failslab+0x8c/0xb0 [ 213.782202][ T9017] kmem_cache_alloc_noprof+0x66/0x3f0 [ 213.782262][ T9017] ? fasync_helper+0x46/0xc0 [ 213.782295][ T9017] ? snd_fasync_helper+0x4c/0x130 [ 213.782323][ T9017] fasync_helper+0x46/0xc0 [ 213.782354][ T9017] snd_fasync_helper+0xfd/0x130 [ 213.782415][ T9017] ? __pfx_snd_timer_user_fasync+0x10/0x10 [ 213.782439][ T9017] snd_timer_user_fasync+0x32/0x40 [ 213.782462][ T9017] do_vfs_ioctl+0xb9b/0xe50 [ 213.782543][ T9017] ? selinux_file_ioctl+0x1b3/0x3c0 [ 213.782655][ T9017] ? __fget_files+0x184/0x1c0 [ 213.782728][ T9017] ? mutex_lock+0x57/0x90 [ 213.782755][ T9017] __se_sys_ioctl+0x82/0x140 [ 213.782791][ T9017] __x64_sys_ioctl+0x43/0x50 [ 213.782821][ T9017] x64_sys_call+0x1563/0x3020 [ 213.782923][ T9017] do_syscall_64+0x136/0x3c0 [ 213.782953][ T9017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.782974][ T9017] RIP: 0033:0x7f7027b9ce59 [ 213.782990][ T9017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.783021][ T9017] RSP: 002b:00007f70265ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.783047][ T9017] RAX: ffffffffffffffda RBX: 00007f7027e15fa0 RCX: 00007f7027b9ce59 [ 213.783064][ T9017] RDX: 0000200000002480 RSI: 0000000000005452 RDI: 0000000000000004 [ 213.783081][ T9017] RBP: 00007f70265ef090 R08: 0000000000000000 R09: 0000000000000000 [ 213.783096][ T9017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.783110][ T9017] R13: 00007f7027e16038 R14: 00007f7027e15fa0 R15: 00007fffdb8267b8 [ 213.783140][ T9017] [ 214.088140][ T5655] team0 (unregistering): Port device team_slave_1 removed [ 214.170289][ T5655] team0 (unregistering): Port device team_slave_0 removed [ 214.283923][ T9035] Symlink component flag not implemented [ 214.292014][ T9035] Symlink component flag not implemented (116) [ 214.347532][ T28] audit: type=1400 audit(1781570615.352:4123): avc: denied { write } for pid=9008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.564844][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.571964][ T5663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.592355][ T28] audit: type=1400 audit(1781570615.562:4124): avc: denied { ioctl } for pid=9027 comm="syz.7.1372" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.704868][ T28] audit: type=1400 audit(1781570615.662:4125): avc: denied { write } for pid=9039 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.962349][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.969483][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.022764][ T9050] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.1375'. [ 215.032517][ T9050] netlink: zone id is out of range [ 215.060663][ T9050] netlink: zone id is out of range [ 215.093491][ T9050] netlink: set zone limit has 8 unknown bytes [ 215.179794][ T28] audit: type=1400 audit(1781570616.182:4126): avc: denied { write } for pid=9053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.252847][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1378'. [ 215.268055][ T8819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.277465][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 215.357102][ T5655] IPVS: stop unused estimator thread 0... [ 215.387997][ T8856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.410418][ T8856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.423006][ T8856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.434734][ T8856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.445030][ T8856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.458021][ T8856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 215.470498][ T8856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.493070][ T8856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.503778][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1382'. [ 215.542887][ T8819] veth0_vlan: entered promiscuous mode [ 215.570876][ T8819] veth1_vlan: entered promiscuous mode [ 215.636459][ T8819] veth0_macvtap: entered promiscuous mode [ 215.652365][ T8819] veth1_macvtap: entered promiscuous mode [ 215.674880][ T8819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.692361][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 215.695239][ T9095] loop7: detected capacity change from 0 to 512 [ 215.721975][ T8856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.747076][ T8819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.774111][ T5655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.785434][ T5655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.797534][ T8856] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.806646][ T9125] syzkaller0: entered promiscuous mode [ 215.812601][ T9125] syzkaller0: entered allmulticast mode [ 215.829468][ T5655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.830399][ T9095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.852890][ T5655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.853597][ T9095] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.902998][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.910182][ T5645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.917561][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 215.917577][ T28] audit: type=1400 audit(1781570616.912:4130): avc: denied { write } for pid=9093 comm="syz.7.1382" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.919373][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.952442][ T5645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.958997][ T28] audit: type=1400 audit(1781570616.962:4131): avc: denied { write } for pid=9121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.973871][ T9095] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.1382: corrupted inode contents [ 216.019640][ T8856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.042892][ T9145] program syz.8.1390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.047829][ T8856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.063755][ T9095] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #2: comm syz.7.1382: mark_inode_dirty error [ 216.079884][ T9095] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.1382: corrupted inode contents [ 216.080002][ T28] audit: type=1400 audit(1781570617.062:4132): avc: denied { write } for pid=9146 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.124036][ T9095] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1382: mark_inode_dirty error [ 216.240235][ T9161] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 217.272024][ T28] audit: type=1400 audit(1781570618.283:4133): avc: denied { write } for pid=9155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.410738][ T28] audit: type=1400 audit(1781570618.403:4134): avc: denied { write } for pid=9180 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.618769][ T8856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.643722][ T28] audit: type=1400 audit(1781570618.653:4135): avc: denied { write } for pid=9183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.732698][ T28] audit: type=1400 audit(1781570618.743:4136): avc: denied { write } for pid=9201 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.811384][ T8856] veth0_vlan: entered promiscuous mode [ 217.829133][ T8856] veth1_vlan: entered promiscuous mode [ 217.864956][ T8856] veth0_macvtap: entered promiscuous mode [ 217.880984][ T8856] veth1_macvtap: entered promiscuous mode [ 217.908773][ T8856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.938402][ T8856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.959503][ T28] audit: type=1400 audit(1781570618.963:4137): avc: denied { write } for pid=9207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.993593][ T5663] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.007543][ T5663] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.025357][ T5663] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.046657][ T28] audit: type=1400 audit(1781570619.043:4138): avc: denied { write } for pid=9218 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.070489][ T5663] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.162470][ T28] audit: type=1400 audit(1781570619.173:4139): avc: denied { write } for pid=9220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.517068][ T7044] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.608405][ T9253] syzkaller0: entered promiscuous mode [ 218.634606][ T9253] syzkaller0: entered allmulticast mode [ 218.695796][ T9262] loop2: detected capacity change from 0 to 1764 [ 218.736309][ T9277] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004 [ 218.755404][ T9281] veth1_macvtap: left promiscuous mode [ 218.793723][ T9286] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1405'. [ 218.872930][ T9297] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1404'. [ 219.160547][ T9323] loop9: detected capacity change from 0 to 764 [ 220.024990][ T9342] Symlink component flag not implemented [ 220.032789][ T9342] Symlink component flag not implemented (116) [ 220.482369][ T9329] xfrm0 speed is unknown, defaulting to 1000 [ 220.600314][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.622697][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.630836][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.652230][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.773486][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 220.831869][ T9374] loop1: detected capacity change from 0 to 512 [ 220.884494][ T9374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.918497][ T9374] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.012142][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 221.012157][ T28] audit: type=1400 audit(1781570622.023:4151): avc: denied { write } for pid=9377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.053673][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.091993][ T28] audit: type=1400 audit(1781570622.103:4152): avc: denied { write } for pid=9390 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.130710][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 221.315625][ T9404] loop2: detected capacity change from 0 to 2048 [ 221.338154][ T9404] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 221.394722][ T9404] loop2: detected capacity change from 0 to 512 [ 221.407080][ T9403] loop8: detected capacity change from 0 to 256 [ 221.430968][ T9404] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 221.439734][ T9416] loop1: detected capacity change from 0 to 1024 [ 221.465904][ T9404] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 221.471140][ T9416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.496541][ T28] audit: type=1400 audit(1781570622.503:4153): avc: denied { write } for pid=9399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.542587][ T9404] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 221.564857][ T9416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 221.582778][ T9404] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 221.596258][ T9404] System zones: 0-2, 18-18, 34-35 [ 221.601774][ T9416] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.604852][ T28] audit: type=1400 audit(1781570622.613:4154): avc: denied { write } for pid=9428 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.613604][ T9404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.647851][ T9433] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1428'. [ 221.654407][ T9404] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 221.660387][ T9416] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.1426: lblock 0 mapped to illegal pblock 0 (length 1) [ 221.682836][ T9404] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 221.708220][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 221.720120][ T9433] nr0: tun_chr_ioctl cmd 1074025677 [ 221.727236][ T9433] nr0: linktype set to 825 [ 221.730972][ T28] audit: type=1400 audit(1781570622.663:4155): avc: denied { write } for pid=9400 comm="syz.2.1422" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.760350][ T8856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.788064][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 221.818986][ T28] audit: type=1400 audit(1781570622.673:4156): avc: denied { write } for pid=9415 comm="syz.1.1426" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.847271][ T28] audit: type=1400 audit(1781570622.693:4157): avc: denied { write } for pid=9400 comm="syz.2.1422" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.925940][ T28] audit: type=1400 audit(1781570622.933:4158): avc: denied { write } for pid=9441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.981526][ T28] audit: type=1400 audit(1781570622.973:4159): avc: denied { write } for pid=9455 comm="syz.2.1434" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 222.040037][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 222.042911][ T28] audit: type=1400 audit(1781570622.993:4160): avc: denied { write } for pid=9457 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.075998][ T9463] loop1: detected capacity change from 0 to 512 [ 222.146018][ T9463] EXT4-fs (loop1): 1 truncate cleaned up [ 222.152455][ T9463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.193161][ T9463] FAULT_INJECTION: forcing a failure. [ 222.193161][ T9463] name failslab, interval 1, probability 0, space 0, times 0 [ 222.216942][ T9463] CPU: 0 UID: 0 PID: 9463 Comm: syz.1.1435 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 222.216978][ T9463] Tainted: [W]=WARN [ 222.216988][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 222.217003][ T9463] Call Trace: [ 222.217011][ T9463] [ 222.217019][ T9463] __dump_stack+0x1d/0x30 [ 222.217044][ T9463] dump_stack_lvl+0x95/0xd0 [ 222.217074][ T9463] dump_stack+0x15/0x1b [ 222.217094][ T9463] should_fail_ex+0x25e/0x270 [ 222.217120][ T9463] should_failslab+0x8c/0xb0 [ 222.217142][ T9463] kmem_cache_alloc_noprof+0x66/0x3f0 [ 222.217162][ T9463] ? mas_alloc_nodes+0x1a2/0x210 [ 222.217196][ T9463] mas_alloc_nodes+0x1a2/0x210 [ 222.217226][ T9463] mas_preallocate+0x2ca/0x500 [ 222.217257][ T9463] __split_vma+0x240/0x640 [ 222.217289][ T9463] vms_gather_munmap_vmas+0x265/0x7f0 [ 222.217317][ T9463] mmap_region+0x7ca/0x20c0 [ 222.217344][ T9463] ? avc_has_perm_noaudit+0xa3/0x120 [ 222.217374][ T9463] ? avc_has_perm+0x101/0x190 [ 222.217406][ T9463] do_mmap+0x970/0xbc0 [ 222.217428][ T9463] ? selinux_mmap_file+0x5d/0x70 [ 222.217454][ T9463] vm_mmap_pgoff+0x183/0x2d0 [ 222.217474][ T9463] ksys_mmap_pgoff+0x250/0x310 [ 222.217496][ T9463] x64_sys_call+0x14df/0x3020 [ 222.217517][ T9463] do_syscall_64+0x136/0x3c0 [ 222.217545][ T9463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.217566][ T9463] RIP: 0033:0x7f0b0f02ce59 [ 222.217581][ T9463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.217598][ T9463] RSP: 002b:00007f0b0da87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 222.217618][ T9463] RAX: ffffffffffffffda RBX: 00007f0b0f2a5fa0 RCX: 00007f0b0f02ce59 [ 222.217631][ T9463] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 222.217642][ T9463] RBP: 00007f0b0da87090 R08: 0000000000000004 R09: 0000000000000000 [ 222.217654][ T9463] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 222.217665][ T9463] R13: 00007f0b0f2a6038 R14: 00007f0b0f2a5fa0 R15: 00007ffe897d2768 [ 222.217681][ T9463] [ 222.439622][ T9463] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1435: invalid indirect mapped block 234881024 (level 0) [ 222.469112][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.569033][ T9485] loop8: detected capacity change from 0 to 512 [ 222.581265][ T9485] EXT4-fs: Ignoring removed oldalloc option [ 222.609981][ T9485] EXT4-fs (loop8): filesystem is read-only [ 222.617544][ T9485] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 222.653953][ T9485] EXT4-fs (loop8): filesystem is read-only [ 222.674325][ T9485] EXT4-fs (loop8): orphan cleanup on readonly fs [ 222.691311][ T9485] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1439: bg 0: block 64: padding at end of block bitmap is not set [ 222.711264][ T9479] loop1: detected capacity change from 0 to 2048 [ 222.734768][ T9485] loop8: lost filesystem error report for type 5 error -117 [ 222.736571][ T9479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.751262][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 222.751558][ C1] EXT4-fs (loop8): initial error at time 1781570623: ext4_validate_block_bitmap:441 [ 222.751690][ C1] EXT4-fs (loop8): last error at time 1781570623: ext4_validate_block_bitmap:441 [ 222.757244][ T9485] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 222.804729][ T9485] loop8: lost filesystem error report for type 5 error -117 [ 222.805001][ T9485] EXT4-fs (loop8): 1 orphan inode deleted [ 222.807446][ T9479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.819539][ T9485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.896938][ T7835] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.948646][ T9509] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1437: bg 0: block 2: invalid block bitmap [ 222.962635][ T9509] EXT4-fs (loop1): Remounting filesystem read-only [ 223.022970][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.034387][ T9513] loop8: detected capacity change from 0 to 2048 [ 223.052689][ T9513] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 223.146561][ T9513] loop8: detected capacity change from 0 to 512 [ 223.186005][ T9528] EXT4-fs: Ignoring removed i_version option [ 223.205131][ T9513] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 223.208031][ T9528] EXT4-fs: Ignoring removed nobh option [ 223.232862][ T9513] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 223.249672][ T9528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.260158][ T9513] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 223.280127][ T9513] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 223.282883][ T9528] EXT4-fs (loop1): orphan cleanup on readonly fs [ 223.296595][ T9513] System zones: 0-2, 18-18, 34-35 [ 223.309781][ T9513] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.313531][ T9528] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.1444: corrupted in-inode xattr: overlapping e_value [ 223.336010][ T9528] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.336745][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 223.340769][ T9528] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1444: couldn't read orphan inode 15 (err -117) [ 223.345975][ C1] EXT4-fs (loop1): initial error at time 1781570624: ext4_iget_extra_inode:5128: inode 15 [ 223.346025][ C1] EXT4-fs (loop1): last error at time 1781570624: ext4_iget_extra_inode:5128: inode 15 [ 223.390898][ T9513] EXT4-fs warning (device loop8): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 223.411540][ T9513] EXT4-fs warning (device loop8): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 223.491348][ T9528] loop1: lost filesystem error report for type 5 error -117 [ 223.492012][ T9528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 223.573783][ T7835] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.576160][ T9551] Symlink component flag not implemented [ 223.590790][ T9551] Symlink component flag not implemented (116) [ 223.685716][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.793954][ T9581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.817829][ T9581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.278379][ T9608] SET target dimension over the limit! [ 224.296366][ T9616] msdos: Unknown parameter 't) f' [ 226.582887][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 226.582906][ T28] audit: type=1400 audit(1781570627.594:4179): avc: denied { write } for pid=9607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.345239][ T9636] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1459'. [ 227.519694][ T9632] set_capacity_and_notify: 4 callbacks suppressed [ 227.519729][ T9632] loop7: detected capacity change from 0 to 512 [ 228.340823][ T9581] loop1: detected capacity change from 0 to 128 [ 228.412039][ T9632] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.1458: corrupted inode contents [ 228.423983][ T9632] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 228.424493][ T9632] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #16: comm syz.7.1458: mark_inode_dirty error [ 228.433691][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 228.433708][ C0] EXT4-fs (loop7): initial error at time 1781570629: ext4_do_update_inode:5690: inode 16 [ 228.433735][ C0] EXT4-fs (loop7): last error at time 1781570629: ext4_do_update_inode:5690: inode 16 [ 228.470965][ T9632] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 228.475826][ T9632] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.1458: corrupted inode contents [ 228.496842][ T9632] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 228.497392][ T9632] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.1458: mark_inode_dirty error [ 228.517851][ T9632] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 228.518548][ T9632] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.1458: corrupted inode contents [ 228.539602][ T9632] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 228.540338][ T9632] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 228.558010][ T9632] loop7: lost filesystem error report for type 5 error -117 [ 228.558409][ T9632] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.1458: corrupted inode contents [ 228.577671][ T9632] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 228.582308][ T9632] EXT4-fs error (device loop7): ext4_truncate:4690: inode #16: comm syz.7.1458: mark_inode_dirty error [ 228.602542][ T9632] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 228.604079][ T9632] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 228.622112][ T9632] loop7: lost filesystem error report for type 5 error -117 [ 228.623533][ T9632] EXT4-fs (loop7): 1 truncate cleaned up [ 228.637705][ T9632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.650450][ T9632] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.686966][ T9625] 9pnet_virtio: no channels available for device 127.0.0.1 [ 228.696943][ T30] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 228.731711][ T9637] loop9: detected capacity change from 0 to 128 [ 228.749404][ T30] EXT4-fs error (device loop7): ext4_release_dquot:7068: comm kworker/u8:1: Failed to release dquot type 1 [ 228.760295][ T28] audit: type=1400 audit(1781570629.764:4180): avc: denied { write } for pid=9640 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.786593][ T9637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 228.987199][ T9637] System zones: 1-3, 19-19, 35-36 [ 229.027184][ T9649] batadv1: entered promiscuous mode [ 229.053815][ T9637] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 229.070322][ T9649] batadv1: entered allmulticast mode [ 229.083933][ T9637] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.138897][ T9637] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 1986356271 (only 1 groups) [ 229.430240][ T28] audit: type=1400 audit(1781570630.444:4181): avc: denied { write } for pid=9655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.471988][ T8539] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.529150][ T28] audit: type=1400 audit(1781570630.544:4182): avc: denied { write } for pid=9671 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.685324][ T28] audit: type=1400 audit(1781570630.694:4183): avc: denied { write } for pid=9682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.714573][ T7044] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.730108][ T28] audit: type=1400 audit(1781570630.744:4184): avc: denied { read } for pid=9679 comm="syz.1.1468" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 229.760510][ T28] audit: type=1400 audit(1781570630.744:4185): avc: denied { open } for pid=9679 comm="syz.1.1468" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 229.833980][ T9692] xfrm0 speed is unknown, defaulting to 1000 [ 229.849706][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'. [ 229.865144][ T28] audit: type=1400 audit(1781570630.874:4186): avc: denied { write } for pid=9696 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.053866][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.071007][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.083296][ T28] audit: type=1400 audit(1781570631.094:4187): avc: denied { write } for pid=9709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.327287][ T9738] loop8: detected capacity change from 0 to 2048 [ 230.335685][ T9738] EXT4-fs (loop8): Invalid log cluster size: 31 [ 230.633566][ T9764] loop7: detected capacity change from 0 to 512 [ 230.660674][ T9764] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 230.685536][ T9764] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1478: invalid indirect mapped block 8 (level 2) [ 230.752593][ T9764] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 230.752809][ T9764] EXT4-fs (loop7): Remounting filesystem read-only [ 230.762000][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 230.762036][ C0] EXT4-fs (loop7): initial error at time 1781570631: ext4_free_branches:1023: inode 13 [ 230.762068][ C0] EXT4-fs (loop7): last error at time 1781570631: ext4_free_branches:1023: inode 13 [ 230.848024][ T9764] EXT4-fs (loop7): 1 truncate cleaned up [ 230.867522][ T9764] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.932298][ T9776] loop2: detected capacity change from 0 to 512 [ 230.947658][ T7044] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.029594][ T3019] veth1_macvtap: entered promiscuous mode [ 231.063628][ T9776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.128138][ T9776] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.191985][ T9776] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.1480: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 231.332264][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.379230][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.511176][ T9722] loop1: detected capacity change from 0 to 512 [ 231.568193][ T8856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.609248][ T9826] loop2: detected capacity change from 0 to 512 [ 231.654658][ T9826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.684001][ T9826] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.714085][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 231.714102][ T28] audit: type=1400 audit(1781570632.724:4197): avc: denied { write } for pid=9824 comm="syz.2.1486" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.773178][ T8856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.784774][ T28] audit: type=1400 audit(1781570632.764:4198): avc: denied { write } for pid=9824 comm="syz.2.1486" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.927198][ T9722] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.1473: invalid block [ 231.950754][ T9722] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 231.956108][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 231.976577][ C0] EXT4-fs (loop1): initial error at time 1781570632: __ext4_iget:5481: inode 11: block 1 [ 231.991024][ C0] EXT4-fs (loop1): last error at time 1781570632: __ext4_iget:5481: inode 11: block 1 [ 232.044410][ T9722] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1473: couldn't read orphan inode 11 (err -117) [ 232.067289][ T9722] loop1: lost filesystem error report for type 5 error -117 [ 232.178088][ T9846] loop7: detected capacity change from 0 to 256 [ 232.286847][ T9722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.658483][ T9643] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 232.774972][ T9856] loop9: detected capacity change from 0 to 512 [ 232.892474][ T9856] EXT4-fs: inline encryption not supported [ 232.922582][ T9856] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 232.951765][ T9863] loop2: detected capacity change from 0 to 512 [ 232.955388][ T9856] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.074761][ T9856] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 233.100407][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.142935][ T9863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.158578][ T9856] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1490: bg 0: block 248: padding at end of block bitmap is not set [ 233.173885][ T9863] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.197487][ T9856] loop9: lost filesystem error report for type 5 error -117 [ 233.200540][ T9856] Quota error (device loop9): write_blk: dquota write failed [ 233.207969][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 233.207990][ C1] EXT4-fs (loop9): last error at time 1781570634: ext4_validate_block_bitmap:441 [ 233.231229][ T9863] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.1493: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 233.255025][ T9875] loop7: detected capacity change from 0 to 8192 [ 233.263238][ T9856] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 233.274293][ T9875] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.288951][ T9856] EXT4-fs error (device loop9): ext4_acquire_dquot:7032: comm syz.9.1490: Failed to acquire dquot type 1 [ 233.302708][ T9856] loop9: lost filesystem error report for type 5 error -28 [ 233.364034][ T9884] loop8: detected capacity change from 0 to 128 [ 233.379111][ T9856] EXT4-fs (loop9): 1 truncate cleaned up [ 233.402001][ T9856] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 233.461433][ T8856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.466775][ T9884] xfrm0 speed is unknown, defaulting to 1000 [ 233.504750][ T9853] netlink: 'syz.9.1490': attribute type 1 has an invalid length. [ 233.608557][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1490'. [ 233.732559][ T9910] loop7: detected capacity change from 0 to 764 [ 233.874591][ T8539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 233.927027][ T9913] Symlink component flag not implemented [ 233.935510][ T9913] Symlink component flag not implemented (116) [ 233.988743][ T9915] loop9: detected capacity change from 0 to 256 [ 236.962640][ T9932] loop1: detected capacity change from 0 to 128 [ 237.998713][ T9932] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 238.002165][ T9932] EXT4-fs: failed to create workqueue [ 238.534067][ T9932] EXT4-fs (loop1): mount failed [ 238.550827][ T9956] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1515'. [ 238.650501][ T9963] loop9: detected capacity change from 0 to 512 [ 238.695843][ T28] audit: type=1400 audit(1781570639.715:4199): avc: denied { write } for pid=9940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.729570][ T9968] IPVS: rr: FWM 3 0x00000003 - no destination available [ 238.757014][ T9963] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.789642][ T28] audit: type=1400 audit(1781570639.765:4200): avc: denied { write } for pid=9971 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.806108][ T9963] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.834003][ T9977] loop7: detected capacity change from 0 to 512 [ 238.842735][ T9977] msdos: Unknown parameter 't) f' [ 238.871750][ T28] audit: type=1400 audit(1781570639.855:4201): avc: denied { write } for pid=9954 comm="syz.9.1515" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.948615][ T9982] loop2: detected capacity change from 0 to 764 [ 238.959160][ T9985] loop1: detected capacity change from 0 to 764 [ 239.006349][ T9956] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #2: comm syz.9.1515: corrupted inode contents [ 239.021139][ T9956] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #2: comm syz.9.1515: mark_inode_dirty error [ 239.128316][ T9956] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #2: comm syz.9.1515: corrupted inode contents [ 239.145150][ T9956] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.1515: mark_inode_dirty error [ 239.268790][ T9992] Symlink component flag not implemented [ 239.276568][ T9992] Symlink component flag not implemented (116) [ 239.299150][ T9996] Symlink component flag not implemented [ 239.307689][ T9996] Symlink component flag not implemented (116) [ 239.391356][ T8539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.589680][ T28] audit: type=1326 audit(1781570640.605:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.8.1523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac961bce59 code=0x7ffc0000 [ 239.620197][ T28] audit: type=1326 audit(1781570640.635:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.8.1523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac961bce59 code=0x7ffc0000 [ 239.711041][ T28] audit: type=1326 audit(1781570640.635:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.8.1523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac961bce59 code=0x7ffc0000 [ 239.876534][ T28] audit: type=1326 audit(1781570640.635:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.8.1523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fac961bce59 code=0x7ffc0000 [ 239.934204][ T28] audit: type=1326 audit(1781570640.635:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.8.1523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac961bce59 code=0x7ffc0000 [ 239.967536][T10004] netlink: 'syz.8.1524': attribute type 10 has an invalid length. [ 239.975696][ T28] audit: type=1326 audit(1781570640.635:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.8.1523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac961bce59 code=0x7ffc0000 [ 239.990660][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1527'. [ 240.013457][T10004] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.027001][T10004] bond0: (slave team0): Enslaving as an active interface with an up link [ 240.027229][T10010] SET target dimension over the limit! [ 240.054752][ T28] audit: type=1326 audit(1781570640.635:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.8.1523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac961bce59 code=0x7ffc0000 [ 240.089757][T10004] SELinux: policydb magic number 0x6d616574 does not match expected magic number 0xf97cff8c [ 240.101395][T10010] usb usb8: usbfs: process 10010 (syz.2.1528) did not claim interface 0 before use [ 240.112812][T10004] SELinux: failed to load policy [ 240.121654][T10004] loop8: detected capacity change from 0 to 512 [ 240.140697][T10004] EXT4-fs (loop8): 1 orphan inode deleted [ 240.148718][T10004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.199208][T10012] loop1: detected capacity change from 0 to 512 [ 240.221563][ T9] IPVS: starting estimator thread 0... [ 240.360014][T10023] IPVS: using max 2400 ests per chain, 120000 per kthread [ 240.393384][T10028] IPVS: rr: FWM 3 0x00000003 - no destination available [ 240.523919][T10012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.573200][T10012] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.748886][T10012] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.1527: corrupted inode contents [ 240.764036][T10012] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #2: comm syz.1.1527: mark_inode_dirty error [ 240.785427][T10012] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.1527: corrupted inode contents [ 240.800116][T10012] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.1527: mark_inode_dirty error [ 241.265469][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.288907][ T7835] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.307126][T10035] bond2: entered promiscuous mode [ 241.312459][T10035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.390814][ T11] IPVS: starting estimator thread 0... [ 241.485812][T10038] IPVS: using max 2304 ests per chain, 115200 per kthread [ 241.508421][T10043] IPVS: rr: FWM 3 0x00000003 - no destination available [ 241.790160][T10051] loop9: detected capacity change from 0 to 512 [ 241.833698][T10051] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.847467][T10051] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.862066][T10051] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #2: comm syz.9.1541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 241.974702][ T8539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.099959][T10066] macvtap1: entered promiscuous mode [ 242.110796][T10066] macvtap1: entered allmulticast mode [ 242.122670][T10066] veth1_vlan: entered allmulticast mode [ 242.190379][T10071] netlink: 8 bytes leftover after parsing attributes in process `/dev/ttyS3'. [ 242.288496][T10071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10071 comm=/dev/ttyS3 [ 242.335498][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1550'. [ 242.348396][T10074] loop2: detected capacity change from 0 to 512 [ 242.416463][T10074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.483025][T10074] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.603844][T10074] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.1549: corrupted inode contents [ 242.645564][T10074] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #2: comm syz.2.1549: mark_inode_dirty error [ 242.679226][T10088] loop1: detected capacity change from 0 to 512 [ 242.695684][T10074] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.1549: corrupted inode contents [ 242.744030][T10074] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.1549: mark_inode_dirty error [ 242.791423][T10088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.852467][T10088] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.904427][ T8856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.916663][T10105] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1555'. [ 242.934331][T10088] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.1554: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 243.030482][T10105] loop8: detected capacity change from 0 to 512 [ 243.122638][T10105] EXT4-fs: Mount option(s) incompatible with ext3 [ 243.179643][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.385760][T10134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.413351][T10134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.425590][T10136] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 243.433923][T10136] System zones: 0-2, 18-18, 34-34 [ 243.440422][T10136] EXT4-fs (loop2): 1 orphan inode deleted [ 243.446852][T10136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.461326][T10136] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.466628][ T49] EXT4-fs error (device loop2): ext4_release_dquot:7068: comm kworker/u8:3: Failed to release dquot type 1 [ 243.474096][T10136] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1563'. [ 243.492380][T10136] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1563'. [ 243.525382][ T49] EXT4-fs (loop2): Remounting filesystem read-only [ 243.552831][ T8856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.688536][T10094] set_capacity_and_notify: 1 callbacks suppressed [ 243.688729][T10094] loop9: detected capacity change from 0 to 512 [ 244.008722][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 244.008737][ T28] audit: type=1400 audit(1781570645.025:4266): avc: denied { write } for pid=10148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.191259][ T28] audit: type=1400 audit(1781570645.205:4267): avc: denied { write } for pid=10166 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.213818][T10094] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 244.563605][T10168] loop1: detected capacity change from 0 to 512 [ 244.620144][ T28] audit: type=1400 audit(1781570645.635:4268): avc: denied { write } for pid=10172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.752759][ T28] audit: type=1400 audit(1781570645.765:4269): avc: denied { write } for pid=10184 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.883023][T10168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.037910][T10168] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.127052][ T28] audit: type=1400 audit(1781570646.125:4270): avc: denied { write } for pid=10167 comm="syz.1.1567" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.181243][T10168] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.1567: corrupted inode contents [ 245.229040][ T28] audit: type=1400 audit(1781570646.235:4271): avc: denied { write } for pid=10189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.267023][T10168] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #2: comm syz.1.1567: mark_inode_dirty error [ 245.330485][T10168] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.1567: corrupted inode contents [ 245.389411][T10168] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.1567: mark_inode_dirty error [ 245.425462][ T28] audit: type=1400 audit(1781570646.435:4272): avc: denied { write } for pid=10202 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.519114][T10208] loop2: detected capacity change from 0 to 512 [ 245.527299][ T28] audit: type=1400 audit(1781570646.505:4273): avc: denied { mount } for pid=10093 comm="syz.9.1556" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 245.593737][T10208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.612580][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.633648][ T28] audit: type=1400 audit(1781570646.645:4274): avc: denied { write } for pid=10205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.674317][T10208] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.730339][T10225] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1571'. [ 245.742795][ T28] audit: type=1400 audit(1781570646.745:4275): avc: denied { write } for pid=10226 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.768884][T10208] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.1569: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 245.835565][T10234] FAULT_INJECTION: forcing a failure. [ 245.835565][T10234] name failslab, interval 1, probability 0, space 0, times 0 [ 245.848456][T10234] CPU: 0 UID: 0 PID: 10234 Comm: syz.8.1572 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 245.848492][T10234] Tainted: [W]=WARN [ 245.848500][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 245.848586][T10234] Call Trace: [ 245.848592][T10234] [ 245.848600][T10234] __dump_stack+0x1d/0x30 [ 245.848634][T10234] dump_stack_lvl+0x95/0xd0 [ 245.848657][T10234] dump_stack+0x15/0x1b [ 245.848678][T10234] should_fail_ex+0x25e/0x270 [ 245.848741][T10234] should_failslab+0x8c/0xb0 [ 245.848760][T10234] __kmalloc_noprof+0xb8/0x4d0 [ 245.848854][T10234] ? tcf_idr_create+0x41/0x4a0 [ 245.848879][T10234] tcf_idr_create+0x41/0x4a0 [ 245.848903][T10234] ? tcf_idr_check_alloc+0x24b/0x2e0 [ 245.848937][T10234] tcf_police_init+0x2a1/0xd50 [ 245.848966][T10234] ? __pfx_tcf_police_init+0x10/0x10 [ 245.849059][T10234] tcf_action_init_1+0x395/0x4d0 [ 245.849107][T10234] tcf_action_init+0x29d/0x700 [ 245.849176][T10234] ? do_sys_openat2+0xa0/0x130 [ 245.849222][T10234] tc_ctl_action+0x29e/0x860 [ 245.849320][T10234] ? __pfx_tc_ctl_action+0x10/0x10 [ 245.849373][T10234] rtnetlink_rcv_msg+0x6a7/0x720 [ 245.849406][T10234] netlink_rcv_skb+0x11e/0x220 [ 245.849447][T10234] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.849486][T10234] rtnetlink_rcv+0x1c/0x30 [ 245.849591][T10234] netlink_unicast+0x5a7/0x680 [ 245.849694][T10234] netlink_sendmsg+0x5be/0x6f0 [ 245.849718][T10234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.849742][T10234] ____sys_sendmsg+0x532/0x580 [ 245.849810][T10234] ___sys_sendmsg+0x195/0x1e0 [ 245.849851][T10234] __x64_sys_sendmsg+0xd4/0x160 [ 245.849900][T10234] x64_sys_call+0x194c/0x3020 [ 245.849935][T10234] do_syscall_64+0x136/0x3c0 [ 245.849969][T10234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.850022][T10234] RIP: 0033:0x7fac961bce59 [ 245.850040][T10234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.850060][T10234] RSP: 002b:00007fac94c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.850085][T10234] RAX: ffffffffffffffda RBX: 00007fac96435fa0 RCX: 00007fac961bce59 [ 245.850161][T10234] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000004 [ 245.850176][T10234] RBP: 00007fac94c17090 R08: 0000000000000000 R09: 0000000000000000 [ 245.850189][T10234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.850203][T10234] R13: 00007fac96436038 R14: 00007fac96435fa0 R15: 00007fff80b4aa78 [ 245.850296][T10234] [ 245.884444][T10229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.111218][T10229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.189576][ T8856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.247303][T10266] loop2: detected capacity change from 0 to 764 [ 246.447163][T10281] Symlink component flag not implemented [ 246.469657][T10281] Symlink component flag not implemented (116) [ 246.489953][T10292] loop8: detected capacity change from 0 to 764 [ 246.650379][T10303] program syz.9.1582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.697368][T10306] loop1: detected capacity change from 0 to 764 [ 246.707356][T10307] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 246.719866][T10307] bond3 (unregistering): Released all slaves [ 246.800819][T10309] Symlink component flag not implemented [ 246.808098][T10309] Symlink component flag not implemented (116) [ 247.612008][T10314] Symlink component flag not implemented [ 247.621053][T10314] Symlink component flag not implemented (116) [ 247.995533][T10320] loop2: detected capacity change from 0 to 512 [ 248.016687][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1586'. [ 248.098927][ T9] IPVS: starting estimator thread 0... [ 248.120615][T10320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.136744][T10320] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.177576][T10335] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1590'. [ 248.192963][T10320] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.1585: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 248.217338][T10331] IPVS: using max 2784 ests per chain, 139200 per kthread [ 248.227936][T10336] IPVS: rr: FWM 3 0x00000003 - no destination available [ 248.268691][T10340] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1591'. [ 248.315610][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1592'. [ 248.326415][T10343] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1592'. [ 248.339674][T10345] loop9: detected capacity change from 0 to 256 [ 248.356450][ T8856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.388940][T10348] loop8: detected capacity change from 0 to 128 [ 248.398029][T10348] msdos: Unknown parameter 'err' [ 248.462408][T10350] loop8: detected capacity change from 0 to 764 [ 248.488596][T10353] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 248.499647][T10353] bond1 (unregistering): Released all slaves [ 248.645569][T10358] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1593'. [ 248.675620][T10359] Symlink component flag not implemented [ 248.684751][T10359] Symlink component flag not implemented (116) [ 248.824375][T10357] xfrm0 speed is unknown, defaulting to 1000 [ 249.182161][T10370] loop7: detected capacity change from 0 to 512 [ 249.182234][T10365] loop1: detected capacity change from 0 to 2048 [ 249.195965][T10370] EXT4-fs (loop7): 1 truncate cleaned up [ 249.196588][T10365] ext4: Bad value for 'init_itable' [ 249.226510][T10370] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.284528][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 249.284576][ T28] audit: type=1400 audit(1781570650.295:4282): avc: denied { write } for pid=10369 comm="syz.7.1600" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.360490][ T28] audit: type=1400 audit(1781570650.295:4283): avc: denied { write } for pid=10369 comm="syz.7.1600" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.361487][T10377] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1601'. [ 249.411317][T10376] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1600: invalid indirect mapped block 234881024 (level 0) [ 249.437392][T10353] loop2: detected capacity change from 0 to 512 [ 249.472281][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1603'. [ 249.481433][T10375] loop1: detected capacity change from 0 to 512 [ 249.499151][T10353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.636506][T10353] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.652168][T10375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.659478][ T28] audit: type=1400 audit(1781570650.665:4284): avc: denied { accept } for pid=10352 comm="syz.2.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 250.053226][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.112518][T10395] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10395 comm=syz.9.1607 [ 250.126851][ T8856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.190078][ T28] audit: type=1400 audit(1781570651.205:4285): avc: denied { setopt } for pid=10394 comm="syz.9.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 250.269059][T10395] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1607'. [ 250.286503][ T7044] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.397612][T10396] netlink: 'syz.9.1607': attribute type 1 has an invalid length. [ 250.433712][T10400] loop1: detected capacity change from 0 to 2048 [ 250.489506][T10400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.510939][T10403] loop7: detected capacity change from 0 to 512 [ 250.565694][T10403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.632476][T10403] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.662652][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.674934][T10404] loop2: detected capacity change from 0 to 8192 [ 250.690483][ T28] audit: type=1400 audit(1781570651.704:4286): avc: denied { write } for pid=10402 comm="syz.7.1610" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.712915][T10403] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.1610: corrupted inode contents [ 250.748422][T10403] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #2: comm syz.7.1610: mark_inode_dirty error [ 250.772531][T10403] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.1610: corrupted inode contents [ 250.811557][T10404] loop2: p1 p2 p3 [ 250.852062][T10404] loop2: p1 size 67111168 extends beyond EOD, truncated [ 250.875272][T10403] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1610: mark_inode_dirty error [ 250.901833][T10404] loop2: p2 size 8388608 extends beyond EOD, truncated [ 250.923855][T10404] loop2: p3 start 4294901760 is beyond EOD, truncated [ 250.941369][ T7044] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.960880][T10414] loop1: detected capacity change from 0 to 764 [ 250.984083][T10415] loop9: detected capacity change from 0 to 764 [ 251.386919][T10417] Symlink component flag not implemented [ 251.394415][T10417] Symlink component flag not implemented (116) [ 251.419700][T10418] Symlink component flag not implemented [ 251.429109][T10418] Symlink component flag not implemented (116) [ 251.539851][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1614'. [ 251.734810][T10428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=10428 comm=syz.2.1615 [ 251.901157][T10427] loop8: detected capacity change from 0 to 512 [ 251.915971][T10429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=10429 comm=syz.2.1615 [ 251.988483][T10427] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1616: inode has both inline data and extents flags [ 251.990513][T10436] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1618'. [ 252.021342][T10437] netlink: 172 bytes leftover after parsing attributes in process `syz.9.1619'. [ 252.030738][T10427] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.035660][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 252.051290][ C0] EXT4-fs (loop8): initial error at time 1781570653: ext4_orphan_get:1399: inode 15 [ 252.062644][ C0] EXT4-fs (loop8): last error at time 1781570653: ext4_orphan_get:1399: inode 15 [ 252.077114][T10427] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1616: couldn't read orphan inode 15 (err -117) [ 252.096811][T10427] loop8: lost filesystem error report for type 5 error -117 [ 252.097528][T10427] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.120260][ T28] audit: type=1400 audit(1781570653.134:4287): avc: denied { write } for pid=10425 comm="syz.8.1616" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.143354][T10427] tmpfs: Cannot disable swap on remount [ 252.256193][ T28] audit: type=1400 audit(1781570653.154:4288): avc: denied { remount } for pid=10425 comm="syz.8.1616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 252.355090][T10448] Symlink component flag not implemented [ 252.364377][T10448] Symlink component flag not implemented (116) [ 253.247455][T10436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.278156][T10445] EXT4-fs: Ignoring removed orlov option [ 253.337215][T10436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.418168][T10455] FAULT_INJECTION: forcing a failure. [ 253.418168][T10455] name failslab, interval 1, probability 0, space 0, times 0 [ 253.432120][T10445] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.444486][T10455] CPU: 1 UID: 0 PID: 10455 Comm: syz.2.1625 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 253.444627][T10455] Tainted: [W]=WARN [ 253.444636][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.444647][T10455] Call Trace: [ 253.444655][T10455] [ 253.444663][T10455] __dump_stack+0x1d/0x30 [ 253.444690][T10455] dump_stack_lvl+0x95/0xd0 [ 253.444714][T10455] dump_stack+0x15/0x1b [ 253.444818][T10455] should_fail_ex+0x25e/0x270 [ 253.444845][T10455] should_failslab+0x8c/0xb0 [ 253.444908][T10455] __kmalloc_noprof+0xb8/0x4d0 [ 253.444930][T10455] ? io_cache_alloc_new+0x2a/0xb0 [ 253.444957][T10455] io_cache_alloc_new+0x2a/0xb0 [ 253.444988][T10455] __io_prep_rw+0x121/0x740 [ 253.445046][T10455] io_prep_rwv+0x33/0x260 [ 253.445178][T10455] io_prep_writev+0x22/0x30 [ 253.445209][T10455] io_submit_sqes+0x737/0x1180 [ 253.445290][T10455] __se_sys_io_uring_enter+0x25c/0xfa0 [ 253.445326][T10455] ? putname+0x7c/0xc0 [ 253.445429][T10455] __x64_sys_io_uring_enter+0x78/0x90 [ 253.445560][T10455] x64_sys_call+0x1e16/0x3020 [ 253.445607][T10455] do_syscall_64+0x136/0x3c0 [ 253.445649][T10455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.445671][T10455] RIP: 0033:0x7f842b1ece59 [ 253.445689][T10455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.445714][T10455] RSP: 002b:00007f8429c3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 253.445755][T10455] RAX: ffffffffffffffda RBX: 00007f842b465fa0 RCX: 00007f842b1ece59 [ 253.445773][T10455] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 253.445789][T10455] RBP: 00007f8429c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 253.445804][T10455] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 253.445821][T10455] R13: 00007f842b466038 R14: 00007f842b465fa0 R15: 00007ffda4b71108 [ 253.445889][T10455] [ 253.640081][ T28] audit: type=1400 audit(1781570654.654:4289): avc: denied { write } for pid=10444 comm="syz.9.1623" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.691035][T10459] IPVS: rr: FWM 3 0x00000003 - no destination available [ 254.031192][ T7835] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 20: comm syz-executor: path /113/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=393216, rec_len=1024, size=1024 fake=0 [ 254.045060][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1627'. [ 254.053247][ T7835] EXT4-fs error (device loop8): ext4_empty_dir:3125: inode #11: block 20: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=393216, rec_len=1024, size=1024 fake=0 [ 254.061437][ T28] audit: type=1400 audit(1781570655.064:4290): avc: denied { write } for pid=7835 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.081153][ T7835] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 20: comm syz-executor: path /113/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=393216, rec_len=1024, size=1024 fake=0 [ 254.124565][ T28] audit: type=1400 audit(1781570655.134:4291): avc: denied { write } for pid=7835 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.124611][ T7835] EXT4-fs error (device loop8): ext4_empty_dir:3125: inode #11: block 20: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=393216, rec_len=1024, size=1024 fake=0 [ 254.166041][T10445] support for cryptoloop has been removed. Use dm-crypt instead. [ 254.166526][ T7835] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 20: comm syz-executor: path /113/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=393216, rec_len=1024, size=1024 fake=0 [ 254.205527][ T7835] EXT4-fs error (device loop8): ext4_empty_dir:3125: inode #11: block 20: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=393216, rec_len=1024, size=1024 fake=0 [ 254.227965][ T7835] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 20: comm syz-executor: path /113/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=393216, rec_len=1024, size=1024 fake=0 [ 254.252463][ T7835] EXT4-fs error (device loop8): ext4_empty_dir:3125: inode #11: block 20: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=393216, rec_len=1024, size=1024 fake=0 [ 254.275140][ T8539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.278959][ T7835] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 20: comm syz-executor: path /113/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=393216, rec_len=1024, size=1024 fake=0 [ 254.306770][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 254.306788][ T28] audit: type=1400 audit(1781570655.324:4303): avc: denied { write } for pid=7835 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.306796][ T7835] EXT4-fs error (device loop8): ext4_empty_dir:3125: inode #11: block 20: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=393216, rec_len=1024, size=1024 fake=0 [ 254.356460][T10463] set_capacity_and_notify: 2 callbacks suppressed [ 254.356481][T10463] loop2: detected capacity change from 0 to 764 [ 254.369812][ T28] audit: type=1400 audit(1781570655.384:4304): avc: denied { write } for pid=7835 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.395823][ T28] audit: type=1400 audit(1781570655.404:4305): avc: denied { write } for pid=7835 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.424045][ T28] audit: type=1400 audit(1781570655.434:4306): avc: denied { write } for pid=7835 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.837436][T10471] Symlink component flag not implemented [ 254.845599][T10471] Symlink component flag not implemented (116) [ 254.873772][T10469] loop9: detected capacity change from 0 to 764 [ 254.910104][ T28] audit: type=1400 audit(1781570655.474:4307): avc: denied { write } for pid=7835 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.261568][ T28] audit: type=1400 audit(1781570655.584:4308): avc: denied { write } for pid=7835 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.267894][ T7835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.291137][ T28] audit: type=1400 audit(1781570655.584:4309): avc: denied { write } for pid=7835 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.377864][T10476] Symlink component flag not implemented [ 255.386473][T10476] Symlink component flag not implemented (116) [ 255.429179][ T7835] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 255.437032][ T7835] audit: backlog limit exceeded [ 255.995273][T10483] loop2: detected capacity change from 0 to 764 [ 256.215699][T10491] Symlink component flag not implemented [ 256.228799][T10491] Symlink component flag not implemented (116) [ 256.258638][ T8555] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.368881][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1639'. [ 256.860285][T10503] loop9: detected capacity change from 0 to 512 [ 256.878580][T10503] EXT4-fs: Ignoring removed i_version option [ 256.885649][T10503] EXT4-fs: Ignoring removed bh option [ 257.015993][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.123468][T10503] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.141381][T10503] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.445844][ T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.467197][T10512] FAULT_INJECTION: forcing a failure. [ 257.467197][T10512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.566902][T10512] CPU: 0 UID: 0 PID: 10512 Comm: syz.2.1645 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 257.566952][T10512] Tainted: [W]=WARN [ 257.566960][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.567033][T10512] Call Trace: [ 257.567041][T10512] [ 257.567050][T10512] __dump_stack+0x1d/0x30 [ 257.567100][T10512] dump_stack_lvl+0x95/0xd0 [ 257.567125][T10512] dump_stack+0x15/0x1b [ 257.567147][T10512] should_fail_ex+0x25e/0x270 [ 257.567174][T10512] should_fail+0xb/0x20 [ 257.567252][T10512] should_fail_usercopy+0x1a/0x20 [ 257.567281][T10512] _copy_from_user+0x1c/0xb0 [ 257.567402][T10512] __snd_timer_user_ioctl+0x1e9/0x29d0 [ 257.567431][T10512] ? do_vfs_ioctl+0x848/0xe50 [ 257.567473][T10512] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 257.567580][T10512] snd_timer_user_ioctl+0x41/0x60 [ 257.567636][T10512] __se_sys_ioctl+0xce/0x140 [ 257.567673][T10512] __x64_sys_ioctl+0x43/0x50 [ 257.567739][T10512] x64_sys_call+0x1563/0x3020 [ 257.567794][T10512] do_syscall_64+0x136/0x3c0 [ 257.567832][T10512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.567858][T10512] RIP: 0033:0x7f842b1ece59 [ 257.567877][T10512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.567899][T10512] RSP: 002b:00007f8429c3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.567932][T10512] RAX: ffffffffffffffda RBX: 00007f842b465fa0 RCX: 00007f842b1ece59 [ 257.567949][T10512] RDX: 00002000000000c0 RSI: 0000000040505412 RDI: 0000000000000004 [ 257.567966][T10512] RBP: 00007f8429c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 257.567981][T10512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.568035][T10512] R13: 00007f842b466038 R14: 00007f842b465fa0 R15: 00007ffda4b71108 [ 257.568061][T10512] [ 257.801457][ T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.908665][ T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.047204][T10515] xfrm0 speed is unknown, defaulting to 1000 [ 258.180709][ T49] bridge_slave_1: left allmulticast mode [ 258.204181][ T49] bridge_slave_1: left promiscuous mode [ 258.222112][T10538] loop2: detected capacity change from 0 to 512 [ 258.235462][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.273621][ T49] bridge_slave_0: left allmulticast mode [ 258.292845][ T49] bridge_slave_0: left promiscuous mode [ 258.316788][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.329687][T10538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.370789][T10538] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.425897][T10538] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.1652: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 258.492713][ T8539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.530902][T10529] loop1: detected capacity change from 0 to 128 [ 258.562850][T10529] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.582188][T10529] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.599421][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.609874][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.619950][ T49] bond0 (unregistering): (slave team0): Releasing backup interface [ 258.629405][ T49] bond0 (unregistering): Released all slaves [ 258.637472][ T49] bond1 (unregistering): Released all slaves [ 258.657061][ T8819] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.739355][ T8856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.842594][T10568] netlink: 'syz.2.1658': attribute type 3 has an invalid length. [ 258.862013][ T49] hsr_slave_0: left promiscuous mode [ 258.869374][ T49] hsr_slave_1: left promiscuous mode [ 258.876045][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.890619][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.898304][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.907915][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.915438][T10579] loop1: detected capacity change from 0 to 1024 [ 258.950716][ T49] veth0_macvtap: left promiscuous mode [ 258.956432][ T49] veth1_vlan: left promiscuous mode [ 258.968389][ T49] veth0_vlan: left promiscuous mode [ 258.974779][T10579] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 259.000158][T10579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.090096][ T49] team0 (unregistering): Port device team_slave_1 removed [ 259.101904][ T49] team0 (unregistering): Port device team_slave_0 removed [ 259.114555][T10591] loop7: detected capacity change from 0 to 512 [ 259.122168][T10591] EXT4-fs: test_dummy_encryption option not supported [ 259.132001][T10591] tipc: Can't bind to reserved service type 0 [ 259.187892][T10568] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 259.196597][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 259.200346][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.237261][T10596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1665'. [ 259.262344][T10599] FAULT_INJECTION: forcing a failure. [ 259.262344][T10599] name failslab, interval 1, probability 0, space 0, times 0 [ 259.278426][T10596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1665'. [ 259.293501][T10596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1665'. [ 259.301625][T10515] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.310845][T10599] CPU: 1 UID: 0 PID: 10599 Comm: syz.1.1664 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 259.310882][T10599] Tainted: [W]=WARN [ 259.310890][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 259.310904][T10599] Call Trace: [ 259.310911][T10599] [ 259.310919][T10599] __dump_stack+0x1d/0x30 [ 259.310945][T10599] dump_stack_lvl+0x95/0xd0 [ 259.311020][T10599] dump_stack+0x15/0x1b [ 259.311042][T10599] should_fail_ex+0x25e/0x270 [ 259.311071][T10599] ? nf_flow_offload_xdp_setup+0x5d/0x440 [ 259.311184][T10599] should_failslab+0x8c/0xb0 [ 259.311273][T10599] __kmalloc_cache_noprof+0x5f/0x400 [ 259.311328][T10599] nf_flow_offload_xdp_setup+0x5d/0x440 [ 259.311383][T10599] ? nf_flow_table_offload_setup+0x7a/0x3e0 [ 259.311453][T10599] nf_flow_table_offload_setup+0x87/0x3e0 [ 259.311487][T10599] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 259.311576][T10599] nft_register_flowtable_net_hooks+0x255/0x500 [ 259.311649][T10599] ? nft_trans_flowtable_add+0x198/0x1b0 [ 259.311678][T10599] nf_tables_newflowtable+0x1110/0x1490 [ 259.311710][T10599] nfnetlink_rcv+0xbf7/0x1740 [ 259.311824][T10599] netlink_unicast+0x5a7/0x680 [ 259.311857][T10599] netlink_sendmsg+0x5be/0x6f0 [ 259.311881][T10599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.311915][T10599] ____sys_sendmsg+0x532/0x580 [ 259.311948][T10599] ___sys_sendmsg+0x195/0x1e0 [ 259.312048][T10599] __x64_sys_sendmsg+0xd4/0x160 [ 259.312083][T10599] x64_sys_call+0x194c/0x3020 [ 259.312109][T10599] do_syscall_64+0x136/0x3c0 [ 259.312202][T10599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.312233][T10599] RIP: 0033:0x7f0b0f02ce59 [ 259.312261][T10599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.312281][T10599] RSP: 002b:00007f0b0da87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.312304][T10599] RAX: ffffffffffffffda RBX: 00007f0b0f2a5fa0 RCX: 00007f0b0f02ce59 [ 259.312320][T10599] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 259.312406][T10599] RBP: 00007f0b0da87090 R08: 0000000000000000 R09: 0000000000000000 [ 259.312421][T10599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.312468][T10599] R13: 00007f0b0f2a6038 R14: 00007f0b0f2a5fa0 R15: 00007ffe897d2768 [ 259.312489][T10599] [ 259.316179][T10515] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.414845][T10603] --map-set only usable from mangle table [ 259.621827][T10515] bridge_slave_0: entered allmulticast mode [ 259.628702][T10515] bridge_slave_0: entered promiscuous mode [ 259.637478][T10515] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.645585][T10515] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.658384][T10515] bridge_slave_1: entered allmulticast mode [ 259.672538][T10515] bridge_slave_1: entered promiscuous mode [ 259.713849][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 259.713867][ T28] audit: type=1400 audit(1781570660.723:4404): avc: denied { write } for pid=10601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.784364][T10515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.799559][T10515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.830890][ T28] audit: type=1400 audit(1781570660.843:4405): avc: denied { write } for pid=10615 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.890764][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 259.902316][T10515] team0: Port device team_slave_0 added [ 259.915886][T10515] team0: Port device team_slave_1 added [ 260.034871][T10515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.042042][T10618] loop9: detected capacity change from 0 to 1024 [ 260.064156][T10515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.142743][T10618] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 260.164125][T10618] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.174822][T10515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.188455][ T49] IPVS: stop unused estimator thread 0... [ 260.195637][T10515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.203094][T10515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.216854][ T28] audit: type=1400 audit(1781570661.203:4406): avc: denied { write } for pid=10617 comm="syz.9.1667" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.240754][T10515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.306486][ T8539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 260.377677][T10515] hsr_slave_0: entered promiscuous mode [ 260.387967][T10651] FAULT_INJECTION: forcing a failure. [ 260.387967][T10651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.394511][T10650] FAULT_INJECTION: forcing a failure. [ 260.394511][T10650] name failslab, interval 1, probability 0, space 0, times 0 [ 260.419285][T10515] hsr_slave_1: entered promiscuous mode [ 260.436245][T10515] debugfs: 'hsr0' already exists in 'hsr' [ 260.442471][ T28] audit: type=1400 audit(1781570661.453:4407): avc: denied { write } for pid=10634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.443865][T10515] Cannot create hsr debugfs directory [ 260.471097][T10651] CPU: 1 UID: 0 PID: 10651 Comm: syz.7.1673 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 260.471156][T10651] Tainted: [W]=WARN [ 260.471163][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 260.471175][T10651] Call Trace: [ 260.471181][T10651] [ 260.471189][T10651] __dump_stack+0x1d/0x30 [ 260.471218][T10651] dump_stack_lvl+0x95/0xd0 [ 260.471332][T10651] dump_stack+0x15/0x1b [ 260.471362][T10651] should_fail_ex+0x25e/0x270 [ 260.471419][T10651] should_fail+0xb/0x20 [ 260.471444][T10651] should_fail_usercopy+0x1a/0x20 [ 260.471473][T10651] _copy_to_user+0x20/0xa0 [ 260.471530][T10651] simple_read_from_buffer+0xb5/0x130 [ 260.471553][T10651] proc_fail_nth_read+0x10e/0x150 [ 260.471573][T10651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.471591][T10651] vfs_read+0x18e/0x7c0 [ 260.471689][T10651] ? __rcu_read_unlock+0x4e/0x70 [ 260.471760][T10651] ? __fget_files+0x184/0x1c0 [ 260.471788][T10651] ? mutex_lock+0x57/0x90 [ 260.471818][T10651] ksys_read+0xdc/0x1a0 [ 260.471871][T10651] __x64_sys_read+0x40/0x50 [ 260.471907][T10651] x64_sys_call+0x2886/0x3020 [ 260.471982][T10651] do_syscall_64+0x136/0x3c0 [ 260.472015][T10651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.472035][T10651] RIP: 0033:0x7f7027b5d68e [ 260.472086][T10651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.472107][T10651] RSP: 002b:00007f70265eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.472132][T10651] RAX: ffffffffffffffda RBX: 00007f70265ef6c0 RCX: 00007f7027b5d68e [ 260.472148][T10651] RDX: 000000000000000f RSI: 00007f70265ef0a0 RDI: 0000000000000003 [ 260.472160][T10651] RBP: 00007f70265ef090 R08: 0000000000000000 R09: 0000000000000000 [ 260.472197][T10651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.472212][T10651] R13: 00007f7027e16038 R14: 00007f7027e15fa0 R15: 00007fffdb8267b8 [ 260.472241][T10651] [ 260.484767][T10653] loop9: detected capacity change from 0 to 2048 [ 260.515447][T10659] loop7: detected capacity change from 0 to 512 [ 260.522836][T10650] CPU: 0 UID: 0 PID: 10650 Comm: syz.1.1674 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 260.522871][T10650] Tainted: [W]=WARN [ 260.522879][T10650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 260.522891][T10650] Call Trace: [ 260.522898][T10650] [ 260.522907][T10650] __dump_stack+0x1d/0x30 [ 260.522933][T10650] dump_stack_lvl+0x95/0xd0 [ 260.523023][T10650] dump_stack+0x15/0x1b [ 260.523042][T10650] should_fail_ex+0x25e/0x270 [ 260.523066][T10650] should_failslab+0x8c/0xb0 [ 260.523087][T10650] kmem_cache_alloc_noprof+0x66/0x3f0 [ 260.523127][T10650] ? skb_clone+0x151/0x1f0 [ 260.523156][T10650] skb_clone+0x151/0x1f0 [ 260.523183][T10650] __netlink_deliver_tap+0x2be/0x510 [ 260.523236][T10650] netlink_unicast+0x654/0x680 [ 260.523266][T10650] netlink_sendmsg+0x5be/0x6f0 [ 260.523288][T10650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.523307][T10650] ____sys_sendmsg+0x532/0x580 [ 260.523351][T10650] ___sys_sendmsg+0x195/0x1e0 [ 260.523401][T10650] __x64_sys_sendmsg+0xd4/0x160 [ 260.523433][T10650] x64_sys_call+0x194c/0x3020 [ 260.523457][T10650] do_syscall_64+0x136/0x3c0 [ 260.523556][T10650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.523578][T10650] RIP: 0033:0x7f0b0f02ce59 [ 260.523595][T10650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.523741][T10650] RSP: 002b:00007f0b0da87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.523763][T10650] RAX: ffffffffffffffda RBX: 00007f0b0f2a5fa0 RCX: 00007f0b0f02ce59 [ 260.523778][T10650] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 260.523792][T10650] RBP: 00007f0b0da87090 R08: 0000000000000000 R09: 0000000000000000 [ 260.523805][T10650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.523836][T10650] R13: 00007f0b0f2a6038 R14: 00007f0b0f2a5fa0 R15: 00007ffe897d2768 [ 260.523856][T10650] [ 260.540091][ T28] audit: type=1400 audit(1781570661.553:4408): avc: denied { write } for pid=10660 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.566547][T10659] EXT4-fs: Ignoring removed i_version option [ 260.597851][T10653] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.669470][T10659] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.672384][T10653] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.676643][T10659] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.684847][ T28] audit: type=1400 audit(1781570661.693:4409): avc: denied { write } for pid=10652 comm="syz.9.1675" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.701495][T10659] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1676: bg 0: block 160: padding at end of block bitmap is not set [ 260.707577][T10653] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1675: bg 0: block 345: padding at end of block bitmap is not set [ 260.725999][ T28] audit: type=1400 audit(1781570661.713:4410): avc: denied { write } for pid=10657 comm="syz.7.1676" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.728468][T10653] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 117 [ 261.033296][T10653] EXT4-fs (loop9): This should not happen!! Data will be lost [ 261.033296][T10653] [ 261.035507][ T7044] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.089618][ T28] audit: type=1400 audit(1781570662.093:4411): avc: denied { ioctl } for pid=10669 comm="syz.7.1677" path="socket:[28059]" dev="sockfs" ino=28059 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 261.138480][ T8539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.139674][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.161488][T10650] bridge_slave_0 (unregistering): left allmulticast mode [ 261.196899][T10650] bridge_slave_0 (unregistering): left promiscuous mode [ 261.212745][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.234088][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 261.355290][T10700] FAULT_INJECTION: forcing a failure. [ 261.355290][T10700] name fail_futex, interval 1, probability 0, space 0, times 1 [ 261.378548][T10700] CPU: 0 UID: 0 PID: 10700 Comm: syz.2.1681 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 261.378584][T10700] Tainted: [W]=WARN [ 261.378645][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 261.378659][T10700] Call Trace: [ 261.378666][T10700] [ 261.378673][T10700] __dump_stack+0x1d/0x30 [ 261.378697][T10700] dump_stack_lvl+0x95/0xd0 [ 261.378717][T10700] dump_stack+0x15/0x1b [ 261.378778][T10700] should_fail_ex+0x25e/0x270 [ 261.378804][T10700] should_fail+0xb/0x20 [ 261.378827][T10700] get_futex_key+0x82f/0xb10 [ 261.378862][T10700] ? refill_pi_state_cache+0x5f/0xe0 [ 261.378971][T10700] futex_requeue+0x177/0x1490 [ 261.379000][T10700] ? _parse_integer+0x27/0x40 [ 261.379050][T10700] ? kstrtouint_from_user+0xa8/0xf0 [ 261.379077][T10700] ? get_pid_task+0x92/0xc0 [ 261.379108][T10700] do_futex+0x3bf/0x460 [ 261.379129][T10700] __se_sys_futex+0x2f6/0x370 [ 261.379151][T10700] __x64_sys_futex+0x78/0x90 [ 261.379210][T10700] x64_sys_call+0x24ab/0x3020 [ 261.379238][T10700] do_syscall_64+0x136/0x3c0 [ 261.379272][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.379298][T10700] RIP: 0033:0x7f842b1ece59 [ 261.379316][T10700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.379358][T10700] RSP: 002b:00007f8429bfd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 261.379379][T10700] RAX: ffffffffffffffda RBX: 00007f842b466180 RCX: 00007f842b1ece59 [ 261.379393][T10700] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 261.379407][T10700] RBP: 00007f8429bfd090 R08: 0000200000048000 R09: 0000000000000000 [ 261.379423][T10700] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 261.379439][T10700] R13: 00007f842b466218 R14: 00007f842b466180 R15: 00007ffda4b71108 [ 261.379490][T10700] [ 261.572851][T10695] loop7: detected capacity change from 0 to 512 [ 261.640068][T10695] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.655246][T10695] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.671261][ T28] audit: type=1400 audit(1781570662.683:4412): avc: denied { write } for pid=10687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.711753][T10695] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.1684: corrupted inode contents [ 261.735930][T10714] tipc: Started in network mode [ 261.742080][T10695] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #2: comm syz.7.1684: mark_inode_dirty error [ 261.757336][ T28] audit: type=1400 audit(1781570662.723:4413): avc: denied { write } for pid=10694 comm="syz.7.1684" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 261.779446][T10714] tipc: Node identity 030000000000000006, cluster identity 4 [ 261.788615][T10695] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.1684: corrupted inode contents [ 261.813689][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 261.813956][T10695] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1684: mark_inode_dirty error [ 261.867876][ T7044] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.941223][T10724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10724 comm=syz.7.1687 [ 261.954698][T10515] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.968867][T10515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 261.978359][T10515] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.019406][T10515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.041064][T10515] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.068278][T10515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 262.096336][T10735] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 262.139932][T10703] loop9: detected capacity change from 0 to 512 [ 262.157780][T10735] bond1 (unregistering): Released all slaves [ 262.209381][T10515] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.222456][T10515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 262.321768][T10515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.332948][T10768] IPVS: rr: FWM 3 0x00000003 - no destination available [ 262.375076][T10515] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.392354][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.399474][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.433226][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.440369][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.477001][T10703] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1686: bad orphan inode 13 [ 262.492561][T10703] loop9: lost filesystem error report for type 5 error -117 [ 262.497351][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 262.519023][ C1] EXT4-fs (loop9): initial error at time 1781570663: ext4_orphan_get:1425 [ 262.533464][ C1] EXT4-fs (loop9): last error at time 1781570663: ext4_orphan_get:1425 [ 262.568611][T10703] ext4_test_bit(bit=12, block=4) = 1 [ 262.593922][T10703] is_bad_inode(inode)=0 [ 262.604553][T10703] NEXT_ORPHAN(inode)=0 [ 262.632258][T10703] max_ino=32 [ 262.647650][T10703] i_nlink=1 [ 262.811294][T10703] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.844294][T10816] syzkaller0: entered promiscuous mode [ 262.880814][T10816] syzkaller0: entered allmulticast mode [ 262.905633][T10515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.064275][ T8539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.160213][T10850] syzkaller0: entered promiscuous mode [ 263.230949][T10850] syzkaller0: entered allmulticast mode [ 263.288244][T10850] tipc: Started in network mode [ 263.318038][T10850] tipc: Node identity 8a1a595e9375, cluster identity 4711 [ 263.427666][T10862] loop1: detected capacity change from 0 to 512 [ 263.593387][T10850] tipc: Enabled bearer , priority 0 [ 263.966920][T10883] loop9: detected capacity change from 0 to 4096 [ 263.985102][T10883] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.231245][T10860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.243197][T10860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.283356][T10860] veth1_macvtap: left allmulticast mode [ 264.290083][T10860] macsec0: left promiscuous mode [ 264.316361][T10860] batadv0: left allmulticast mode [ 264.321807][T10860] macsec1: left promiscuous mode [ 264.327392][T10860] bridge1: left promiscuous mode [ 264.333166][T10860] veth1_vlan: left allmulticast mode [ 264.339577][T10860] macvtap1: left promiscuous mode [ 264.357310][T10923] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5132 sclass=netlink_tcpdiag_socket pid=10923 comm=syz.1.1710 [ 264.375213][ T53] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.384337][ T53] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.397602][ T53] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.424076][T10929] IPVS: rr: FWM 3 0x00000003 - no destination available [ 264.427978][ T53] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.455282][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1712'. [ 264.466046][T10515] veth0_vlan: entered promiscuous mode [ 264.480028][T10933] loop1: detected capacity change from 0 to 512 [ 264.493473][T10515] veth1_vlan: entered promiscuous mode [ 264.519920][T10933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 264.536451][T10515] veth0_macvtap: entered promiscuous mode [ 264.536495][T10933] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.542688][T10940] loop7: detected capacity change from 0 to 1024 [ 264.554808][T10515] veth1_macvtap: entered promiscuous mode [ 264.569730][T10515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.574820][T10933] EXT4-fs warning (device loop1): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 264.578647][T10515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.600975][ T3385] tipc: Node number set to 426727774 [ 264.641282][T10940] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 264.643087][ T8539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.662544][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.679316][T10940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.692222][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.701426][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.718605][ T5628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.751851][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1714'. [ 264.764164][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1714'. [ 264.777891][T10956] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1714'. [ 264.800040][ T28] kauditd_printk_skb: 475 callbacks suppressed [ 264.800088][ T28] audit: type=1400 audit(1781570665.813:4889): avc: denied { write } for pid=10947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.858908][ T28] audit: type=1400 audit(1781570665.853:4890): avc: denied { write } for pid=10515 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 264.896642][ T28] audit: type=1400 audit(1781570665.853:4891): avc: denied { open } for pid=10515 comm="syz-executor" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 264.926775][ T28] audit: type=1400 audit(1781570665.913:4892): avc: denied { write } for pid=10966 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.998945][T10972] loop9: detected capacity change from 0 to 512 [ 265.050451][ T28] audit: type=1400 audit(1781570666.063:4893): avc: denied { write } for pid=10973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.100463][ T28] audit: type=1400 audit(1781570666.113:4894): avc: denied { write } for pid=10985 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.158780][T10972] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.173109][T10972] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.195618][T10972] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #2: comm syz.9.1716: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 265.225418][T10993] vlan3: entered allmulticast mode [ 265.230851][T10993] veth0_to_bond: entered allmulticast mode [ 265.289858][ T7044] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.302785][T10965] openvswitch: netlink: Missing key (keys=400040, expected=10000000) [ 265.328982][ T28] audit: type=1400 audit(1781570666.333:4895): avc: denied { write } for pid=10990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.372739][ T8819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 265.387364][T10965] ================================================================== [ 265.395491][T10965] BUG: KCSAN: data-race in ktime_get_ts64 / timekeeping_update_from_shadow [ 265.404109][T10965] [ 265.406453][T10965] write to 0xffffffff8939e488 of 304 bytes by interrupt on cpu 0: [ 265.414284][T10965] timekeeping_update_from_shadow+0x40d/0x440 [ 265.418242][ T8539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.420382][T10965] __timekeeping_advance+0xa68/0xc10 [ 265.434613][T10965] update_wall_time+0x21/0x50 [ 265.439322][T10965] tick_do_update_jiffies64+0x169/0x1c0 [ 265.444876][T10965] tick_nohz_handler+0x88/0x380 [ 265.449736][T10965] __hrtimer_run_queues+0x1f8/0x510 [ 265.454944][T10965] hrtimer_interrupt+0x257/0x810 [ 265.459890][T10965] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 265.465794][T10965] sysvec_apic_timer_interrupt+0x32/0x80 [ 265.471440][T10965] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 265.477427][T10965] [ 265.479752][T10965] read to 0xffffffff8939e4a0 of 4 bytes by task 10965 on cpu 1: [ 265.487385][T10965] ktime_get_ts64+0x13f/0x350 [ 265.492063][T10965] poll_select_set_timeout+0x73/0x100 [ 265.497438][T10965] do_recvmmsg+0x95/0x560 [ 265.501781][T10965] __x64_sys_recvmmsg+0xfb/0x170 [ 265.506729][T10965] x64_sys_call+0x80f/0x3020 [ 265.511325][T10965] do_syscall_64+0x136/0x3c0 [ 265.515927][T10965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.521825][T10965] [ 265.524146][T10965] value changed: 0x0074597f -> 0x00745980 [ 265.529862][T10965] [ 265.532185][T10965] Reported by Kernel Concurrency Sanitizer on: [ 265.538334][T10965] CPU: 1 UID: 0 PID: 10965 Comm: syz.0.1643 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 265.549278][T10965] Tainted: [W]=WARN [ 265.553076][T10965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.563135][T10965] ================================================================== [ 265.606503][ T28] audit: type=1400 audit(1781570666.413:4896): avc: denied { write } for pid=11008 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.672065][T11019] FAULT_INJECTION: forcing a failure. [ 265.672065][T11019] name failslab, interval 1, probability 0, space 0, times 0 [ 265.707275][T11019] CPU: 1 UID: 0 PID: 11019 Comm: syz.9.1721 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 265.707367][T11019] Tainted: [W]=WARN [ 265.707376][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.707389][T11019] Call Trace: [ 265.707397][T11019] [ 265.707407][T11019] __dump_stack+0x1d/0x30 [ 265.707487][T11019] dump_stack_lvl+0x95/0xd0 [ 265.707512][T11019] dump_stack+0x15/0x1b [ 265.707533][T11019] should_fail_ex+0x25e/0x270 [ 265.707560][T11019] should_failslab+0x8c/0xb0 [ 265.707647][T11019] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 265.707669][T11019] ? __alloc_skb+0x2d6/0x690 [ 265.707694][T11019] __alloc_skb+0x2d6/0x690 [ 265.707719][T11019] ? __alloc_skb+0x200/0x690 [ 265.707762][T11019] netlink_dump+0x10d/0x870 [ 265.707852][T11019] __netlink_dump_start+0x435/0x520 [ 265.707912][T11019] netlink_diag_handler_dump+0xcf/0x110 [ 265.707937][T11019] ? __pfx_netlink_diag_dump+0x10/0x10 [ 265.707964][T11019] ? __pfx_netlink_diag_dump_done+0x10/0x10 [ 265.708072][T11019] ? __pfx_netlink_diag_handler_dump+0x10/0x10 [ 265.708105][T11019] sock_diag_rcv_msg+0x288/0x2c0 [ 265.708141][T11019] netlink_rcv_skb+0x11e/0x220 [ 265.708224][T11019] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 265.708263][T11019] sock_diag_rcv+0x1c/0x30 [ 265.708318][T11019] netlink_unicast+0x5a7/0x680 [ 265.708351][T11019] netlink_sendmsg+0x5be/0x6f0 [ 265.708372][T11019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.708412][T11019] sock_write_iter+0x2e8/0x320 [ 265.708463][T11019] do_iter_readv_writev+0x4f6/0x5a0 [ 265.708502][T11019] vfs_writev+0x2d1/0x8b0 [ 265.708524][T11019] ? get_pid_task+0x92/0xc0 [ 265.708622][T11019] do_writev+0xe9/0x210 [ 265.708647][T11019] __x64_sys_writev+0x45/0x50 [ 265.708670][T11019] x64_sys_call+0x1c0c/0x3020 [ 265.708754][T11019] do_syscall_64+0x136/0x3c0 [ 265.708789][T11019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.708816][T11019] RIP: 0033:0x7f8f5560ce59 [ 265.708833][T11019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.708851][T11019] RSP: 002b:00007f8f54067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 265.708897][T11019] RAX: ffffffffffffffda RBX: 00007f8f55885fa0 RCX: 00007f8f5560ce59 [ 265.708914][T11019] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 265.708929][T11019] RBP: 00007f8f54067090 R08: 0000000000000000 R09: 0000000000000000 [ 265.708943][T11019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.709087][T11019] R13: 00007f8f55886038 R14: 00007f8f55885fa0 R15: 00007ffcf0c89a98 [ 265.709108][T11019] [ 265.997792][ T28] audit: type=1400 audit(1781570667.003:4897): avc: denied { write } for pid=11012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.071682][ T28] audit: type=1400 audit(1781570667.083:4898): avc: denied { write } for pid=11030 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1