last executing test programs: 1m7.18381397s ago: executing program 3 (id=37): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffb, r0, 0xb) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80414, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x6, @perf_config_ext={0x1, 0x9}, 0xc, 0x2, 0xffffffff, 0x7, 0x5, 0x1000004, 0x1, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xb, r1, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIOCLEX(r2, 0x5451) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r1, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') open$dir(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x60800, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@delalloc}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0185879, &(0x7f00000004c0)={0xfffffffc, 0xffffffffffffffff, 0x400000, 0x2, 0x17a0, 0x0, 0x2401}) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x8000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000300)={'pim6reg\x00', {0x2, 0x0, @loopback}}) 1m6.860781077s ago: executing program 3 (id=39): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) umount2(0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000075266f83000000000000000004000000ffffffff62000000000100009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x28, 0x48, 0x0, 0xfffff031}]}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) r2 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) process_mrelease(r1, 0x0) r4 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x2, 0x0, 0x10000000}, &(0x7f0000000240), &(0x7f00000010c0), &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000100)={0x359, 0x40, 0x2, 0x7fffffffffffffff, 0x6, 0x6, 0x0, 0x10000}, &(0x7f0000000140)={0x79f1, 0x5, 0x1, 0x7, 0x9, 0x5, 0x5ee9, 0xff}, &(0x7f0000000180)={0x8, 0x0, 0xfffffffffffffffd, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x4, 0xfff}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000200)={[0x50]}, 0x8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1) 1m6.479937055s ago: executing program 3 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x80, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1m6.472887535s ago: executing program 3 (id=44): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000002}, 0x10000d, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x4, 0x2, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) openat$ptp0(0xffffffffffffff9c, 0x0, 0x101001, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x7, 0x1, 0x40000}, 0x1) acct(0x0) socketpair(0x23, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000200)='\xf4\x9da`yv\xa9\x97-\x94\x1c|J+0l\xe88G[\xf8kT\x97\x83_\xc8\xd7|n\x9c\xc9U\xd35\nM9\x1f\b\x00\x00\x00\x00\x00\x00\x00\x89B\xbbF.\vy\xa1\xa1\xcd\r\xd9\x8e\x06Bqj\xd6\x10\xb1d\xde\x84\x91\n\xf6\xa6X\xa2B\x04\x0f\x12J\xdfB&\x8c\xfd\xcaU*\xfd\x80\xb4o\xc2T\v\a\xebFb\x122', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x2, 0x18000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={&(0x7f00000002c0), 0x1}, 0x110005, 0x3, 0xfffffbff, 0x7, 0x1, 0xfffffffc, 0x7, 0x0, 0x3, 0x0, 0x1000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0xb20) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) close(r3) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m6.233960251s ago: executing program 3 (id=47): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000a5b0500850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x54a72803820cb231, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0xf}, {0x0, 0xc}, {0x3, 0xffe0}}}, 0x24}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m5.953231427s ago: executing program 3 (id=49): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES8=0x0], 0x3, 0x252, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x30, 0xffffffffffffffff, 0x7f82d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x0, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x906}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r4, 0x2) move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56141, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044882}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008091}, 0xc0728b1c6209639e) socket$key(0xf, 0x3, 0x2) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000006c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 1m5.952978577s ago: executing program 32 (id=49): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES8=0x0], 0x3, 0x252, &(0x7f0000000880)="$eJzs2j1rZFUYB/Dnxo1Zs2RnxDd2QTxooTaXTWqLDbILYkDRjbAKsnfNjQ65zoTcITAibipt/QjWYmknyJY2afwEFnZpUqYQryST1Z0wiw6+zKi/XzMP99w/cw73nMMpzsFLn3+4tVnnm0U/5rIs5q7GXhxl0Y65uGcvXnz+5ndPv3nz7VdX19auvZHS9dUbyysppYvPfPvOx189e7d/4a2vL36zEPvtdw8OV37cf3L/0sHPNz7o1KlTp26vn4p0u9frF7erMm106q08pdersqjL1OnW5c5I+2bV294epKK7sbS4vVPWdSq6g7RVDlK/l/o7g1S8X3S6Kc/ztLQY/BnrXx41TRw287eiaZpHvogLd2Pph2hF9mjKHruaPXEre2ovu3TYNK1pd5W/xVGzEBG+///VfZv6+Yjqs9313fXh77B9dTM6UUUZV6IVP8XxNDk1rK+/snbtSjrRjk+rO6f5O7vrD43ml6MV7fH55WE+jeYXYjFiPuI0vxKteHx8fmVs/ny88Nx9/59HK75/L3pRxUYcZ3/Lf7Kc0suvrZ3JXz55DwDgvyZPvxp7fsvzB7UP8xOcD8+cr87F5XPTHTsR9eCjraKqyp3fKZb+wDuzWRyPcga6MYtFe4IJMFvFQkyUyiL2jufBVPqcRXay1O49eXjCpTelYoqbEv+Y0X0SAAAAAAAAAACAf4uzt//mT5//1TdwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHuSXAAAA//8ersB3") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x30, 0xffffffffffffffff, 0x7f82d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x0, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x906}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r4, 0x2) move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56141, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044882}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008091}, 0xc0728b1c6209639e) socket$key(0xf, 0x3, 0x2) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000006c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 40.291186666s ago: executing program 5 (id=190): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000007c0)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYBLOB="d409dc8e24d49a763975dc32157f744bf11d34568e923b785710fa579d8ea39e3f47ee2d6ad834993b2f56d85060833fba2a9bb33c6c44af69cc07f4f13609d4a541a77aa60a6e66304eea197c0daaffbe7aa45d3d6a2728dbcfbdbb3c4b660fdc1d0d41b162484e6115f1221dba751a269467809075b7972073668d80636fcf8ac71b0f4b0ea440f1c252d379bd5af4f4027fe0ef8c49b827fe32a4e6a430af652573f8bf1a", @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f50365616934fdc2da8c998a8700232e5263a04392efa56fc98553afa5a498c8c3a3206f2b25a00c0ec0d1202c822ab708034c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750af696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6bad00524f7beaa8ed556d0451eb684c1084dc0048aa9956828000", @ANYRES16, @ANYRES32=r1, @ANYBLOB="f47d9d"], 0x0, 0x65c, &(0x7f0000002280)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') socket(0x1e, 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000240)="f31549e9813126aafa410e7177d5d7fe83521d004df270c57689ae206877febb4da04588de3fdce17510661608af6b98dcee120d05adf11b02f9c763518fed6d4ba9", 0x42}, {&(0x7f00000002c0)="26a0958620a6c7b4c21da6f74463c8dfd51fc744ba77e98de3bf56d2", 0x1c}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) 39.163393461s ago: executing program 5 (id=194): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "642c72f67d5441f6e8da020400"}}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0xf, 0x40c00) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x6000000d}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = memfd_secret(0x0) futimesat(r4, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 38.368023289s ago: executing program 5 (id=195): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$tipc(0x1e, 0x2, 0x0) syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000340)=ANY=[], 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24050000000300000000300080b3f30000110000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 36.96709785s ago: executing program 5 (id=211): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0xa, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_open_procfs$pagemap(r3, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r4 = socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)={r4}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6, 0xfe, 0x4}]}, 0x10) 36.763623804s ago: executing program 5 (id=215): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_newroute={0x2c, 0x18, 0x100, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x0, 0x1f, 0xfd, 0x0, 0xc8, 0x6, 0xa00}, [@RTA_SRC={0x8, 0x2, @remote}, @RTA_IIF={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xc9, 0x0, &(0x7f00000006c0)="9dbaac999f69835fc48373a1ee579bf8e61d32ab682c74cc8e8b3cfe796371e95b9408d4c7a674f5abb800000027b87f00000000000000ca87c854dab256e43ba8ce4622439a1d7c3a8822d68802cea5aecbcab4a964a5150cbafd1c57988f01c472cce8b1b6d3932de59ca604a548d0c40a85fddfc54fbef358dea5bda8fbb46518d38425ef327be63cfa298a8751056f29a4f609dc88a32af65d35d60804130f3150cbb93ee535e83fb1f1430f8d01fe2224d69142952117e514891d9627beb7ac4de39db3d57a43", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x93) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, r3, 0x2, 0xc7a, '\x00', {0xa4ca, 0x0, 0xdb, 0x6, 0x45, 0x3, 0xe, 0x80000000001, {0x1, 0x3}, {0x9, 0xcc8a}, {0xe3a6, 0x1a0de61d}, 0x13, 0x5fd8, 0x4, 0x2989, 0x6, 0x80, 0x5, 0x10, 0x6, 0x9, '\x00', 0x37, 0xd1, 0x190, 0x8000}}) mmap(&(0x7f00003be000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x0, 0x3}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x1, 0xf0}, 0x1}, 0x18) connect$can_j1939(r5, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000000000000a) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0xe4200) 36.49187396s ago: executing program 5 (id=220): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r5, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0xa, 0x14, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101}}}}}, 0x0) 36.47836163s ago: executing program 33 (id=220): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r5, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0xa, 0x14, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101}}}}}, 0x0) 8.09322603s ago: executing program 4 (id=518): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @loopback, @local}}}}}}, 0x0) (fail_nth: 3) 8.025512841s ago: executing program 4 (id=519): socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f00009ff000/0x4000)=nil], 0x0, 0x0, 0x2) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x2, @perf_bp={0x0}, 0x3cad, 0x0, 0x0, 0x2, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x2003, @mcast1, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r1, @ANYBLOB="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"/331], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000300000000000000004000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x400, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1c, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x86}, @TCA_SAMPLE_PARMS={0xffffffffffffff99, 0x2, {0x0, 0x0, 0x0, 0x40, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 7.339378667s ago: executing program 4 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x9, 0x0, 0x0, 0x0, 0x5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x27}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x4d1f09bfa548064f) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3444, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, r3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@gettaction={0x14, 0x32, 0xe72c5f922f23ccf3, 0x70bd27, 0x25dfdbfb}, 0x65}, 0x1, 0x0, 0x0, 0x40008c4}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x8080) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000300)="dc070000000300000000000000f1e3b76d64454aedba283413e674c7719c33a4b17f028f68610a6c550100f8282853f3e16f06000000674c6c07e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348cdd9b462ab1e34d54a9ce164ade124c5a89c0c9f60165bc2c6f474c1880ea461e8955a5", 0x94}) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a118001500060814fe800000120800040043000000a80016000a00014006000600000010fab94dcf5c0461c1d67f6f9400057afc84858000a0e408e8d895d8adef52a9d7eac0b7a196e6f643202065dbe1469f6112c88ac4fc898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d2d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce19f6c769ad809d52a9ecbeebf", 0xe4}], 0x1}, 0x20000004) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 5.643406924s ago: executing program 1 (id=527): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=5,size=4']) 4.652608866s ago: executing program 1 (id=530): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000c40, &(0x7f0000000340)={[], [{@euid_gt}]}, 0x5, 0x51c, &(0x7f0000000c40)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) 4.392779152s ago: executing program 4 (id=531): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000001340)=""/4106, 0x100a}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x0, 0xf, 0x15, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x1, 0x3}}) sendto$inet(r0, &(0x7f00000007c0)="4d12a86dd84f86329b6afe2ab14aa6a47ac1ba6503000000178c79d3133b7aa5ee7072cdcbb483f105bdf7271f12770a55141545288fe4e8be539f0853c3dd3f55095f075b52ed45ba5a3487a548b3ade13a5c2a9f71f092fa094ba4", 0x5c, 0x0, &(0x7f0000000880)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x8, 0x7, 0x7, 0x3, {{0x8, 0x4, 0x0, 0x5, 0x20, 0x67, 0x0, 0x7f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xaf, [@private=0xa010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x700, 0x1, 0x84d, 0x0, {{0xf, 0x4, 0x3, 0x28, 0x3c, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x28, 0x9, 0x0, 0xf, [0x8, 0x1, 0x0, 0x4, 0x1, 0x7, 0x7fff, 0x81, 0x2d]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a00)=@newqdisc={0x14c, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r2, {0x1, 0x2}, {0xffff, 0xffff}, {0xb, 0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x1ab, 0x6, 0x1, 0xf, 0x9, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000140}, 0x8840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00'}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) 4.133031718s ago: executing program 1 (id=533): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) rmdir(0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x30, 0x30}, {0x0, 0x7f, 0x7, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[], {{0x2100, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6153, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x1e) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f00000003c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newlink={0x5c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a24}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}]}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x86}]}, 0x5c}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000005c0)={0x0, 0x8f, "1915fae3398f75aa248306d97d88d77d6244a8ab01d87a12677b7ce26bcfac98bbffc886951ce74198ea870d2433594e9f06fc05855080db4cd884ff34d4f4fdf37a0336dd3fdb40354be3289b3a4dad0f0738264d34291b1bc4b5ed591861fde2a1b48c5633cb36532de1a61b084990fb42e7d6f3a2fee5a3b59c9c0c063f14e1e1bce190526da1b64112b6596e7a"}, &(0x7f0000000680)=0x97) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x2000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={r4, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x3, 0x40, 0x6, 0x7fffffff, 0x48, 0x2, 0x5}, 0x9c) 3.787865176s ago: executing program 0 (id=535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 3.765977876s ago: executing program 0 (id=536): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000", @ANYRESDEC], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) (fail_nth: 3) 3.474991142s ago: executing program 0 (id=537): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000001f000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x20) 3.407451034s ago: executing program 0 (id=538): r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8018, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646f74732c646f733178666c6f7070792c6e6f646f74732c646f74732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c00c54cc17944a18ebf14e2b8a9ac6ea496fe7b48b2b2f8cdb92be6a539029275fea026b227a52d8faa1d1088d548ed4aaf1db14670bcdf8437de27498ec07a9c0ab653b718c93d3b8927625ec6b392"], 0x1, 0x2c5, &(0x7f0000000180)="$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") bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(0xffffffffffffffff, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r2, 0x10e, 0xb, 0x0, &(0x7f0000001240)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @objref={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @meta={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv4={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @quota={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x0, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUOTA_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0x0, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0x0, 0x4, 0x1, 0x0, 0x8}]}}}, {0x0, 0x1, 0x0, 0x1, @numgen={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @cmp={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x0, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_DATA={0x0, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x0, 0x1, "4a74f503770ec459e1aa3c82d4462e8351b780b7340358a16275d331d2fb5c41d2ac4b18cacd520b5fd88715af9c216885b0221d937e0d5be7a10f7aac0219cc542e402cdd6519c4032da70c52a06effdd1a0a373c73efc9617fb8d210"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x0, 0x1, "c80cb2c6b8ea97c1ab4a970342743ff4eea365680df931cce51cd04cf6c0414f10fab00821c8597ee42f86cb"}, @NFTA_DATA_VALUE={0x0, 0x1, "471a7af327c73d11c07c42677e61968d986aee66bf1b1b4f135beb062bdea1d2953a8b5e514aafe352a5f9d7ceaad699bbb28750be96f3556e753b9fa2e18ad1a0b5c29872e2bf7268ce371b21ec44399d301baf6a64edc7570b8869e18e7e64c6b90dbd04cddaf5c7926a276fbb4831825404a64f6da86a55d50c3aff8f86301a1c77f0762d8f0b27d31896c49a8317dd9db2e546a809c6b6cccd0532bde6f676989dfe63cd22a0b6fa3f0664736c3ffb3825070eccfe8df113694bac8cdb88b24bd96ebdddf5a37f9dcfa38297"}]}, @NFTA_CMP_SREG={0x0, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_SREG={0x0, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_SREG={0x0, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_DATA={0x0, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "77f585afe12ef1099dfa907274aaac72af5cd5fe75c61d8a50fd640f476c4d421f1d6fda5c0ad756dec15b1b83b2e858f3b14518d98159212c4babab6df951e8b810e507678fb8c335a3dc4f5291702c23a5209de6cc26e90efe9f4c3eef86ff38185f3808c73fc1747484ccef36f87ea731fad7c31331da7718120235806af17fea58133fade238a281769926ec4c70cb5cb832"}]}, @NFTA_CMP_SREG={0x0, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_SREG={0x0, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_SREG={0x0, 0x1, 0x1, 0x0, 0xd}]}}}, {0x0, 0x1, 0x0, 0x1, @socket={{}, @void}}]}, @NFTA_RULE_CHAIN={0x37, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x480c4}, 0x24040000) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000", @ANYRES16=r7], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x81, 0x0}, 0x8) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x22, &(0x7f0000000780)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x55d, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], &(0x7f00000008c0)='GPL\x00', 0x7fffffff, 0x32, &(0x7f0000000900)=""/50, 0x40f00, 0x10, '\x00', r9, 0x1b, r6, 0x8, &(0x7f00000009c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0x3, 0x9, 0x7}, 0x10, r11, 0x0, 0x1, &(0x7f0000000a80)=[r7, r6, r4, r6, r10, r4], &(0x7f0000000ac0)=[{0x5, 0x1, 0xe}], 0x10, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x50) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r13], 0x28}}, 0x0) 3.229405148s ago: executing program 1 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}}, 0x0) 3.183760389s ago: executing program 6 (id=540): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1bfa, 0xd}, 0x0, 0x35, 0x6, 0x3, 0x6, 0x6, 0x3f8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x353, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)='%-010d \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r2}, 0x38) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x38, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xf28c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e22, 0x66, @mcast2, 0x80000000}]}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0x9, @loopback}, @in={0x2, 0x4e20, @remote}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) 3.12791169s ago: executing program 1 (id=541): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@deltfilter={0x1404, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xa, 0xa}, {0x6, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x13cc, 0x2, [@TCA_CGROUP_POLICE={0x4b8, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6e, 0x4, 0x7ff, 0x2, 0x7, {0xdf, 0x2, 0x6, 0x6, 0x1, 0x1000}, {0x4, 0x2, 0x81, 0x4, 0x7, 0x10}, 0xee, 0x7ff, 0x7f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x69}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x6, 0x1, 0x0, 0x5, 0x7, 0xffff, 0xa, 0x2, 0x2, 0x1, 0x10, 0x7fff, 0xff, 0x80, 0x0, 0x6, 0x2, 0x7ff, 0x0, 0x1, 0xfffffffe, 0x9bd, 0x7f, 0xcff1, 0x200, 0xf7, 0xfffffff8, 0x100, 0x3, 0xff, 0xfffffff7, 0x0, 0x4, 0x3, 0x1, 0x7, 0x8, 0x72e, 0x3, 0x6, 0x7, 0x7, 0x73, 0xfffffffc, 0x5, 0x10001, 0x2, 0xfffffffc, 0x24, 0x0, 0x3ff, 0x7, 0x80, 0x1000, 0x5, 0x38a, 0xfffff177, 0xba9, 0xb9, 0x2c, 0x5, 0x5, 0x4, 0xda, 0x4, 0x5, 0x7, 0x8, 0x200, 0x10001, 0x2, 0xfffffffa, 0x6, 0x7, 0x6, 0xffff7e8d, 0x0, 0x4, 0x3, 0x1, 0x8, 0xffff, 0x3, 0xcb, 0x8, 0x1, 0x5, 0x9b, 0x7, 0xfffffffd, 0x401, 0x8, 0x2, 0x7fffffff, 0x1, 0x400, 0x5, 0x4, 0x5, 0x80, 0x6, 0x0, 0x8, 0x5, 0x1, 0x0, 0x7f, 0x1, 0x3, 0x0, 0xfc, 0x80, 0x703800, 0x5, 0x2000, 0x45, 0xc6b, 0x9, 0x9, 0x3, 0x0, 0x200, 0x5, 0x0, 0x0, 0x4, 0x7, 0x3, 0x1, 0xd, 0x1, 0x4, 0x1c98, 0x1, 0x403870e5, 0x9, 0xfffff645, 0x200, 0x6, 0x8, 0x4, 0x4, 0x8, 0x3de5221d, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0xa2b4, 0x8, 0x2, 0x5, 0x6, 0x6, 0xb9bc, 0x200, 0x4a9d926, 0xf3c, 0x7, 0x2, 0x7, 0xff, 0x5, 0x4, 0x3, 0x5, 0x5, 0x2, 0x7, 0x4, 0xf58, 0xdb50, 0x88c0, 0x8, 0xdde, 0xfffffff7, 0x7, 0x8, 0x8, 0x8, 0x6, 0x1000, 0x4, 0xb6, 0x5, 0x9, 0x3, 0x2, 0x8000, 0x8, 0xf46, 0x4, 0x4, 0x1, 0x3, 0x81, 0x9, 0x101, 0x5, 0x5, 0x1000, 0x3ff, 0x4, 0x5, 0x2, 0x9f5, 0xfffffff8, 0x8, 0x2, 0x3, 0x9, 0xb, 0x10001, 0x7, 0x8, 0x3, 0x8, 0xc, 0x2, 0xf4, 0x7, 0x2764, 0x8, 0xffff5267, 0x3c9, 0x39, 0xc, 0x2, 0x4, 0x7, 0x1, 0x0, 0x9, 0x3, 0x5, 0x2, 0x3c, 0x8, 0x6, 0x7, 0x2, 0xf, 0xfffffffa, 0x4, 0x2, 0x6, 0x1, 0x4, 0x6, 0x5, 0xa4, 0x7, 0x81, 0x7fffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4000, 0x8, 0x0, 0x5, 0x9, {0xd, 0x1, 0x7fbb, 0x2, 0x8, 0x8}, {0x4, 0x1, 0x4, 0x9, 0xb, 0xfffffffb}, 0x0, 0x101, 0x7c7c}}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0xf0c, 0x1, [@m_csum={0x58, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8001, 0x0, 0x57, 0xbd}, 0x70}}]}, {0xd, 0x6, "0c2b96677a26c9eafa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x6}}}}, @m_pedit={0xeb0, 0x20, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x6, 0x7, 0x2, 0x3, 0x5}, 0x2, 0x5, [{0x7, 0x2f87, 0x3ff, 0x6, 0x1000, 0x25}, {0x800, 0x5, 0xca3, 0x1, 0x1ff, 0xdc8}, {0x40, 0x5, 0x100000, 0x4f22, 0x6, 0x1000}, {0x0, 0x6b47, 0xf, 0x3, 0x7, 0xfffffffa}]}, [{0x0, 0x0, 0x7, 0x2, 0x5, 0xff}, {0x7f, 0x400, 0x7fff, 0xffffff00, 0xffff702e, 0x1}, {0x8a, 0x1ff, 0x925, 0x10000, 0x8, 0x2c}, {0x2c, 0x7fff, 0x3, 0x0, 0xfffffff8, 0x7fffffff}, {0x8, 0x40, 0x9, 0xfbf0, 0xfffffff9, 0x7ff}, {0x605c, 0x7, 0x9, 0x5, 0x0, 0xd96b}, {0x2, 0xc, 0x7, 0x7, 0x17a4800, 0x5}, {0x7, 0x3, 0xc, 0xf532, 0xa04a, 0x200}, {0x7fff, 0x8ef, 0x1, 0x300, 0x4, 0xfffffff7}, {0x3, 0x8, 0x2, 0x2, 0x8001, 0x2}, {0x7fc00, 0x3c, 0x9, 0x1000, 0x6, 0x9}, {0x8, 0x9, 0x9, 0xad, 0x100, 0x4}, {0x0, 0x6, 0x0, 0x7ff, 0x3, 0x8}, {0x82, 0x2, 0x2, 0x4, 0x6, 0x4}, {0x0, 0x5, 0x6, 0xfffffffa, 0x3, 0xe1e7}, {0xfccf, 0x3, 0xd, 0x400, 0xffffffff, 0x3}, {0x92fa, 0x1, 0x8, 0x1, 0x5, 0x400}, {0x1, 0x1, 0x5, 0xff, 0x7, 0x8}, {0x4, 0xb, 0xf, 0x6, 0x4, 0xe}, {0xc09, 0x50000, 0x48, 0x7, 0x2, 0x3}, {0x8, 0x1, 0x4, 0x9, 0x1, 0x1}, {0x2, 0x7, 0xb0, 0x3, 0x8}, {0xc6a3, 0x3, 0x7, 0x1a, 0x4, 0x9}, {0x2, 0x1, 0x6, 0xa, 0x0, 0xfffffbcb}, {0x4, 0x8, 0x7, 0xf560, 0x5, 0x400}, {0x7, 0x7, 0x7b42436c, 0x81, 0x223fc478, 0x3}, {0x1, 0x80000001, 0xfffff519, 0x800, 0x834, 0xb}, {0x0, 0xd589, 0x3, 0x2, 0x2d8, 0xada}, {0x48, 0x5, 0x9, 0xffff70d2, 0x3, 0xffffffff}, {0x2, 0x74ee, 0xffff, 0x4, 0xd, 0x2}, {0x1ff, 0x1, 0x20, 0x7fffffff, 0x19c77467, 0x2}, {0x7fff, 0xfd9, 0x7, 0x200, 0x8, 0x517b}, {0x6, 0xc, 0x3, 0x2, 0x1}, {0x1000, 0x7f, 0xffff, 0x8, 0x1, 0xeec}, {0xcc4, 0xaf46, 0xe5, 0x188, 0x1, 0x7f}, {0x7, 0x1, 0x1b6c, 0x0, 0x6, 0x7fffffff}, {0xffff0001, 0x3, 0xfffff8df, 0x279e, 0x10000, 0xa}, {0x2304467b, 0xc, 0xffff799f, 0x7, 0x7, 0x9}, {0x1, 0xffffffec, 0xb92, 0xe0000000, 0xf9}, {0x8, 0x734, 0x2, 0xd99, 0x7fffffff, 0x7}, {0x7f, 0x10000, 0x5, 0x4, 0x3ff, 0x1}, {0x5, 0x65e, 0x1, 0x1, 0x9, 0x9}, {0xb14f, 0x0, 0x1, 0x1, 0x4, 0x81}, {0x2, 0x8, 0x0, 0x1, 0x40, 0x2}, {0x0, 0x2, 0x21e9, 0xffffffff, 0x0, 0x2}, {0x1, 0xf, 0x1, 0x6, 0x400, 0x2}, {0x7, 0x83b3, 0x67, 0x5, 0xfa48, 0x9}, {0x7fffffff, 0x6, 0x8, 0xdaf2, 0x9, 0xfffffff8}, {0x0, 0xa, 0x7fffffff, 0xb, 0xd7, 0x6}, {0x4, 0x0, 0xf, 0xf, 0x8, 0x8000}, {0x90400000, 0x1, 0xc2a8, 0x8, 0xd3, 0x8001}, {0x1, 0x0, 0x7ff, 0x0, 0x1000, 0x58}, {0x7, 0xcd, 0x101, 0x81, 0x10000, 0x8000}, {0x1, 0x8db, 0x8, 0x80000001, 0x1, 0x8000}, {0x1ff, 0x2, 0x2, 0x0, 0xffff, 0x9}, {0x8c62, 0x4, 0x9, 0x401, 0x6, 0x1}, {0x0, 0x7f59, 0x0, 0x811, 0x4ce41782, 0x91}, {0x7ff, 0x4, 0x6, 0x5286, 0x7fffffff, 0x2}, {0x7ff, 0x5, 0x6, 0xd, 0x7ff, 0x19}, {0x0, 0xfffffffc, 0x7, 0x2, 0x2, 0xffff07e8}, {0x7, 0x2, 0x1, 0xc62, 0xf, 0x7}, {0x40, 0x7, 0xae, 0x3e6b, 0xd, 0xffffffff}, {0x5, 0x7, 0x5, 0x8, 0x7, 0x7fff}, {0x7fff, 0xfffffffd, 0x4, 0x5, 0x3, 0x2}, {0x8001, 0x7ff, 0x2, 0xffff8001, 0x5, 0x9}, {0x4, 0x3c7, 0x7, 0x719, 0xfffffffd, 0x6}, {0xe, 0x7f, 0x80, 0x2, 0x3, 0x1}, {0x37, 0xf, 0x10000, 0x4, 0x9, 0x9e9}, {0x2, 0x4, 0x6, 0xc, 0x200, 0x60000}, {0xffff, 0xe3e8, 0x2, 0x3, 0x1, 0x6}, {0x6, 0x9, 0x9, 0xe, 0x8, 0xffffffff}, {0x1, 0x400, 0x9, 0x3, 0x7fff, 0x507}, {0x6, 0xffff8362, 0x1, 0x0, 0x80, 0x2}, {0x4, 0x10000009, 0x3, 0x5, 0x3}, {0xfffffff7, 0x7, 0x4, 0x7fffffff, 0x656, 0x6}, {0x2, 0x80000001, 0x5, 0x9, 0x9, 0x101}, {0xfffffff9, 0x5, 0x3, 0x7, 0xf, 0xd4}, {0x4, 0x401, 0x1, 0x9}, {0x62, 0x10001, 0x3, 0x69, 0x43, 0xb}, {0x4, 0x5, 0x80000001, 0x2584, 0x6, 0x9}, {0x401, 0xfffff800, 0x81, 0xca, 0xf96, 0xffff0001}, {0x2ace, 0x0, 0x7fffffff, 0x800, 0x6, 0x2}, {0x8, 0xffffff6a, 0x6, 0x80000000, 0xe, 0x8}, {0x10001, 0xffffff6c, 0x2, 0x4, 0x3, 0x7}, {0xf, 0x8, 0x7, 0xfffffff9, 0xb, 0x6}, {0x200, 0x9, 0x8, 0x1b9, 0x1947}, {0x9, 0x2, 0x6ddf5bf4, 0x6, 0xab0b, 0x101}, {0x4, 0x8a73, 0x4, 0x7, 0xb, 0x9}, {0x81, 0x101, 0x7ed8, 0x67e1, 0x7f, 0x40}, {0x4, 0x4, 0x15, 0x2, 0x7, 0x7ff}, {0x300000, 0x9, 0x1200000, 0x4, 0x0, 0x100}, {0x8, 0x3, 0x8, 0xffffc000, 0x0, 0x2}, {0x3, 0x2, 0x0, 0x6ad1d25d, 0x5, 0x81}, {0x8, 0x7, 0x3, 0x6, 0x4, 0x7}, {0x8, 0x3, 0x4, 0x0, 0x2, 0xfffffffd}, {0x5, 0xfffffffe, 0x3, 0x2, 0x6, 0xd76f}, {0x2, 0x5, 0x1, 0x10000, 0x2, 0x2}, {0x6, 0x5, 0x7, 0xa9, 0x5, 0xfffffffd}, {0x80000000, 0x4, 0x1ff8, 0x0, 0xffffffff, 0x8}, {0x7fff, 0xfffffeff, 0x1, 0x6, 0x8, 0x8}, {0x3e87, 0xff, 0x0, 0x4, 0x10000, 0x2}, {0xe, 0x1, 0x8, 0x16fe, 0x4, 0x5}, {0x6, 0xfffffc00, 0xb05e, 0xc36, 0x81, 0x8000}, {0x76, 0x0, 0x0, 0x5f, 0xd, 0x8020000}, {0x1, 0x13, 0x3, 0x4, 0x9, 0x23}, {0x2, 0xfffffff7, 0x1, 0x14000, 0x8, 0x9}, {0x7, 0x2, 0x3, 0xffff571c, 0x5, 0x8000}, {0xfffffffb, 0xfffffffe, 0x40000, 0x3, 0x4, 0x2}, {0x6, 0x2, 0x2, 0x4, 0xa, 0x9}, {0x1, 0x3, 0xf, 0xf5e6, 0x2, 0x3}, {0x1650, 0xfffffff7, 0xb, 0x4, 0xb, 0x2}, {0xd0, 0x5, 0xf, 0x1, 0x4a8, 0x5}, {0x9, 0x8, 0xe04, 0x0, 0x4, 0x4}, {0x2, 0x6, 0x3ff, 0x1, 0xa67, 0x1}, {0x2, 0x0, 0x1b, 0x5, 0x0, 0x80000001}, {0x8, 0x5, 0xfff, 0x1, 0xac76, 0x3}, {0x1, 0x1, 0x9, 0xd14, 0x6430, 0xffffffc0}, {0x200, 0x434d5920, 0x3, 0x10001, 0x5, 0x5f2}, {0xd41, 0x100, 0x80000001, 0xbad, 0x4, 0x7}, {0x87e0, 0xdf2b, 0x4, 0x6, 0x3, 0x67f4}, {0x5, 0x7, 0x4, 0x7, 0x4ce5, 0xffffffff}, {0x9, 0x4, 0x8, 0x0, 0xd, 0x6}, {0x2, 0x3, 0x6, 0x2000000, 0x7ff, 0xfffffffc}, {0x2, 0x7, 0xe7, 0x6, 0x5, 0x8}, {0x5, 0x61b91923, 0x5, 0x0, 0x9, 0x3}, {0x3, 0xb01, 0x4, 0x1, 0x7f, 0x5}, {0x6, 0x57, 0xc, 0xcf4, 0xbf5, 0x2}, {0x2, 0x9, 0x1, 0x3ff, 0x5bb, 0x1}], [{0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x5}, {0x5}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x4}, {0x1}, {0x4}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x5}, {}, {0x3, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x2}, {0x5}, {0x2}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x7}, {0x2}, {0x1, 0xdbfda2a59af9eec2}, {0x5, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1404}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@acl}, {@noblock_validity}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@inlinecrypt}, {@dioread_nolock}]}, 0x7, 0x60a, &(0x7f00000027c0)="$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") 3.12721518s ago: executing program 4 (id=542): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000c40, &(0x7f0000000340)={[], [{@euid_gt}]}, 0x5, 0x51c, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) 2.887518685s ago: executing program 2 (id=543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRESDEC], 0x48) mprotect(&(0x7f00000b3000/0x1000)=nil, 0x1000, 0x5) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x200000, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000080)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000100)='syzkaller\x00', 0x200000, 0xe7, &(0x7f0000000140)=""/231, 0x40f00, 0x22, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x6, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[{0x0, 0x1, 0x3, 0x4}, {0x4, 0x5, 0x0, 0x9}, {0x1, 0x5, 0xe, 0x6}, {0x2, 0x2, 0x2, 0x9}], 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x3, 0x40, 0x41}, 0x50) 2.23059518s ago: executing program 0 (id=544): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$tipc(0x1e, 0x2, 0x0) syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000340)=ANY=[], 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x87, 0x0, 0x9, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24050000000300000000300080b3f30000110000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.095988563s ago: executing program 2 (id=545): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1}, 0x90) (fail_nth: 3) 1.934417586s ago: executing program 6 (id=546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.847100508s ago: executing program 4 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$kcm(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r4 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x50, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x44810) 1.384994529s ago: executing program 6 (id=548): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) rmdir(0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x30, 0x30}, {0x0, 0x7f, 0x7, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[], {{0x2100, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6153, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x1e) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f00000003c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newlink={0x5c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a24}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}]}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x86}]}, 0x5c}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000005c0)={0x0, 0x8f, "1915fae3398f75aa248306d97d88d77d6244a8ab01d87a12677b7ce26bcfac98bbffc886951ce74198ea870d2433594e9f06fc05855080db4cd884ff34d4f4fdf37a0336dd3fdb40354be3289b3a4dad0f0738264d34291b1bc4b5ed591861fde2a1b48c5633cb36532de1a61b084990fb42e7d6f3a2fee5a3b59c9c0c063f14e1e1bce190526da1b64112b6596e7a"}, &(0x7f0000000680)=0x97) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x2000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={r4, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x3, 0x40, 0x6, 0x7fffffff, 0x48, 0x2, 0x5}, 0x9c) 1.003971567s ago: executing program 2 (id=549): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000001f000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x20) 727.490443ms ago: executing program 2 (id=550): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1bfa, 0xd}, 0x0, 0x35, 0x6, 0x3, 0x6, 0x6, 0x3f8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x353, 0x2, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x3, 0x15, 0x950, 0x1, 0x404, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)='%-010d \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r2}, 0x38) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x38, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xf28c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e22, 0x66, @mcast2, 0x80000000}]}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0x9, @loopback}, @in={0x2, 0x4e20, @remote}], 0x2c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x100, 0x0, &(0x7f0000000040)={0x0, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x0, 0x0}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fstat(r3, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc014) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r4, 0x10000000005, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xfffe, @broadcast}, 0x10) 469.474199ms ago: executing program 1 (id=551): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) rmdir(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x30, 0x30}, {0x0, 0x7f, 0x7, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x80003, 0x200000004, 0x40000000004, 0x20000a0e1, 0x100000000, 0x0, 0x200000003, 0x9}, {0x8}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x3502, 0x3, 0x8, 0x2, 0x9075, 0xef, 0xc5e}}, 0xe8) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) io_setup(0x1, &(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6153, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x1e) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f00000003c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newlink={0x5c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a24}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}]}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x86}]}, 0x5c}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000005c0)={0x0, 0x8f, "1915fae3398f75aa248306d97d88d77d6244a8ab01d87a12677b7ce26bcfac98bbffc886951ce74198ea870d2433594e9f06fc05855080db4cd884ff34d4f4fdf37a0336dd3fdb40354be3289b3a4dad0f0738264d34291b1bc4b5ed591861fde2a1b48c5633cb36532de1a61b084990fb42e7d6f3a2fee5a3b59c9c0c063f14e1e1bce190526da1b64112b6596e7a"}, &(0x7f0000000680)=0x97) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={r7, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x3, 0x40, 0x6, 0x7fffffff, 0x48, 0x2, 0x5}, 0x9c) 459.039519ms ago: executing program 6 (id=552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 428.90227ms ago: executing program 6 (id=553): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x18}) mq_timedreceive(r0, &(0x7f0000001140)=""/170, 0xaa, 0x0, 0x0) 389.777711ms ago: executing program 6 (id=554): set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x703f, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x5fad, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x50}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e1010203010902900102"], 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 47.221579ms ago: executing program 2 (id=555): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1}, 0x90) 46.576428ms ago: executing program 2 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = epoll_create1(0x80000) io_setup(0xa, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x85, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2016}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x21081e, &(0x7f0000000300), 0x1, 0x506, &(0x7f0000000d00)="$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") (async) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) (async, rerun: 64) setresgid(0x0, 0xee01, 0x0) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x3a) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) (async, rerun: 32) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="a0002e7577d4017a", 0x8}], 0x1, &(0x7f0000000e80)=ANY=[], 0xd}}], 0x1, 0x4000880) (async, rerun: 32) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async, rerun: 32) setgroups(0x0, 0x0) (rerun: 32) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000140)={0x7ff, 0x6}) setuid(0xee01) (async, rerun: 64) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (rerun: 64) 0s ago: executing program 0 (id=557): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000c40, &(0x7f0000000340)={[], [{@euid_gt}]}, 0x5, 0x51c, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): ystem_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.057576][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.082091][ T4131] loop2: detected capacity change from 0 to 512 [ 63.098766][ T4103] memory+swap: usage 227524kB, limit 9007199254740988kB, failcnt 0 [ 63.106719][ T4103] kmem: usage 227044kB, limit 9007199254740988kB, failcnt 0 [ 63.114108][ T4103] Memory cgroup stats for /syz1: [ 63.114458][ T4103] cache 0 [ 63.122429][ T4103] rss 20480 [ 63.125574][ T4103] shmem 0 [ 63.128520][ T4103] mapped_file 0 [ 63.132083][ T4103] dirty 0 [ 63.135037][ T4103] writeback 0 [ 63.138345][ T4103] workingset_refault_anon 63 [ 63.143075][ T4103] workingset_refault_file 641 [ 63.147788][ T4103] swap 155648 [ 63.151096][ T4103] swapcached 749568 [ 63.154926][ T4103] pgpgin 11004 [ 63.158358][ T4103] pgpgout 10992 [ 63.170596][ T4131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.183764][ T28] audit: type=1400 audit(1784672442.999:456): avc: denied { ioctl } for pid=4127 comm="syz.2.148" path="socket:[7265]" dev="sockfs" ino=7265 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.209417][ T4134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.250918][ T4103] pgfault 13147 [ 63.251766][ T28] audit: type=1400 audit(1784672443.009:457): avc: denied { write } for pid=4142 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.276498][ T28] audit: type=1400 audit(1784672443.159:458): avc: denied { write } for pid=4133 comm="syz.4.150" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.298104][ T4103] pgmajfault 29 [ 63.313506][ T28] audit: type=1400 audit(1784672443.219:459): avc: denied { map } for pid=4133 comm="syz.4.150" path="socket:[6018]" dev="sockfs" ino=6018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.335477][ T4103] inactive_anon 0 [ 63.343139][ T4103] active_anon 45056 [ 63.352473][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.370687][ T4153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.154'. [ 63.400898][ T28] audit: type=1400 audit(1784672443.219:460): avc: denied { read } for pid=4133 comm="syz.4.150" path="socket:[6018]" dev="sockfs" ino=6018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.449148][ T4103] inactive_file 0 [ 63.452871][ T4103] active_file 0 [ 63.458962][ T4103] unevictable 0 [ 63.462629][ T4103] hierarchical_memory_limit 314572800 [ 63.471084][ T4103] hierarchical_memsw_limit 9223372036854771712 [ 63.479340][ T4103] total_cache 0 [ 63.483960][ T4103] total_rss 20480 [ 63.488555][ T4103] total_shmem 0 [ 63.492093][ T4103] total_mapped_file 0 [ 63.496629][ T4103] total_dirty 0 [ 63.500218][ T4103] total_writeback 0 [ 63.504070][ T4103] total_workingset_refault_anon 63 [ 63.510184][ T4103] total_workingset_refault_file 641 [ 63.515654][ T4103] total_swap 155648 [ 63.519513][ T4103] total_swapcached 749568 [ 63.523912][ T4103] total_pgpgin 11004 [ 63.528321][ T4103] total_pgpgout 10992 [ 63.532354][ T4103] total_pgfault 13147 [ 63.543212][ T4103] total_pgmajfault 29 [ 63.547677][ T4103] total_inactive_anon 0 [ 63.552287][ T4103] total_active_anon 45056 [ 63.556960][ T4103] total_inactive_file 0 [ 63.561257][ T4103] total_active_file 0 [ 63.567182][ T4103] total_unevictable 0 [ 63.571303][ T4103] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.143,pid=4101,uid=0 [ 63.586359][ T4103] Memory cgroup out of memory: Killed process 4101 (syz.1.143) total-vm:94180kB, anon-rss:1360kB, file-rss:22560kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 63.588704][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.700161][ T4162] loop0: detected capacity change from 0 to 128 [ 63.836055][ T4162] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.849280][ T4162] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.204152][ T4174] netlink: 'syz.1.158': attribute type 9 has an invalid length. [ 65.606004][ T4177] __nla_validate_parse: 5 callbacks suppressed [ 65.606070][ T4177] netlink: 32 bytes leftover after parsing attributes in process `syz.4.155'. [ 66.265704][ T4169] loop5: detected capacity change from 0 to 128 [ 66.274264][ T4169] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.286399][ T4169] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.386304][ T4177] netlink: 32 bytes leftover after parsing attributes in process `syz.4.155'. [ 66.414274][ T4174] loop1: detected capacity change from 0 to 512 [ 66.426171][ T4177] netlink: 104 bytes leftover after parsing attributes in process `syz.4.155'. [ 66.441145][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.463016][ T4177] netlink: 144 bytes leftover after parsing attributes in process `syz.4.155'. [ 66.473425][ T4174] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.158: bg 0: block 127: padding at end of block bitmap is not set [ 66.487618][ T4174] loop1: lost filesystem error report for type 5 error -117 [ 66.488495][ T4177] netlink: 'syz.4.155': attribute type 9 has an invalid length. [ 66.504427][ T4174] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.158: bit already cleared for inode 11 [ 66.515886][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 66.515986][ C0] EXT4-fs (loop1): initial error at time 1784672446: ext4_validate_block_bitmap:441 [ 66.516126][ C0] EXT4-fs (loop1): last error at time 1784672446: ext4_validate_block_bitmap:441 [ 66.613444][ T4174] loop1: lost filesystem error report for type 5 error -117 [ 66.615555][ T4174] EXT4-fs (loop1): 1 orphan inode deleted [ 66.681934][ T4174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.696579][ T4177] loop4: detected capacity change from 0 to 512 [ 66.705491][ T4177] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.155: bg 0: block 127: padding at end of block bitmap is not set [ 66.719697][ T4177] loop4: lost filesystem error report for type 5 error -117 [ 66.735566][ T4177] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.155: bit already cleared for inode 11 [ 66.753894][ T4177] loop4: lost filesystem error report for type 5 error -117 [ 66.754927][ T3670] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.794657][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 66.801122][ C0] EXT4-fs (loop4): initial error at time 1784672446: ext4_validate_block_bitmap:441 [ 66.810574][ C0] EXT4-fs (loop4): last error at time 1784672446: ext4_free_inode:356 [ 66.828509][ T4177] EXT4-fs (loop4): 1 orphan inode deleted [ 66.860941][ T4177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.873459][ T4196] tipc: Started in network mode [ 66.879471][ T4196] tipc: Node identity , cluster identity 4711 [ 66.885554][ T4196] tipc: Failed to obtain node identity [ 66.891112][ T4196] tipc: Enabling of bearer rejected, failed to enable media [ 66.920998][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.950419][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.068531][ T4204] loop0: detected capacity change from 0 to 128 [ 67.099589][ T4204] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.116270][ T4204] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.025095][ T4211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.036932][ T4209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.167'. [ 68.049995][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 68.050029][ T28] audit: type=1400 audit(1784672447.939:463): avc: denied { create } for pid=4210 comm="syz.5.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.337313][ T4214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.167'. [ 68.346569][ T4211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.084010][ T28] audit: type=1400 audit(1784672447.939:464): avc: denied { read write } for pid=4210 comm="syz.5.168" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.107423][ T28] audit: type=1400 audit(1784672447.939:465): avc: denied { open } for pid=4210 comm="syz.5.168" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.130638][ T28] audit: type=1400 audit(1784672447.939:466): avc: denied { ioctl } for pid=4210 comm="syz.5.168" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.420666][ T4209] netlink: 104 bytes leftover after parsing attributes in process `syz.2.167'. [ 69.578168][ T4213] loop1: detected capacity change from 0 to 128 [ 69.764557][ T4213] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.784975][ T4213] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.858704][ T4209] netlink: 144 bytes leftover after parsing attributes in process `syz.2.167'. [ 69.869149][ T4209] netlink: 'syz.2.167': attribute type 9 has an invalid length. [ 69.911016][ T4209] loop2: detected capacity change from 0 to 512 [ 69.929141][ T4209] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.167: bg 0: block 127: padding at end of block bitmap is not set [ 69.943340][ T4209] loop2: lost filesystem error report for type 5 error -117 [ 69.944091][ T4209] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.167: bit already cleared for inode 11 [ 69.962396][ T4209] loop2: lost filesystem error report for type 5 error -117 [ 69.962913][ T4209] EXT4-fs (loop2): 1 orphan inode deleted [ 69.976625][ T4209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.073910][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.124088][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.169268][ T4224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.188062][ T4224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.198217][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.260710][ T28] audit: type=1400 audit(1784672450.179:467): avc: denied { mounton } for pid=4228 comm="syz.1.174" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 70.262843][ T4231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.173'. [ 70.322931][ T4234] netlink: 32 bytes leftover after parsing attributes in process `syz.4.175'. [ 70.333525][ T4234] netlink: 'syz.4.175': attribute type 9 has an invalid length. [ 70.414218][ T4238] loop2: detected capacity change from 0 to 256 [ 70.441127][ T28] audit: type=1400 audit(1784672450.359:468): avc: denied { create } for pid=4237 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 70.466521][ T4238] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 70.478372][ T28] audit: type=1400 audit(1784672450.399:469): avc: denied { create } for pid=4237 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 70.530143][ T4234] loop4: detected capacity change from 0 to 512 [ 70.585365][ T4248] 9pnet_virtio: no channels available for device 127.0.0.1 [ 70.596218][ T28] audit: type=1400 audit(1784672450.509:470): avc: denied { mounton } for pid=4247 comm="syz.1.181" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 70.677399][ T4234] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.175: bg 0: block 127: padding at end of block bitmap is not set [ 70.700821][ T4234] loop4: lost filesystem error report for type 5 error -117 [ 70.704625][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 70.715898][ T4234] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.175: bit already cleared for inode 11 [ 70.718447][ C1] EXT4-fs (loop4): initial error at time 1784672450: ext4_validate_block_bitmap:441 [ 70.729388][ T4234] loop4: lost filesystem error report for type 5 error -117 [ 70.729905][ T4234] EXT4-fs (loop4): 1 orphan inode deleted [ 70.738801][ C1] [ 70.738808][ C1] EXT4-fs (loop4): last error at time 1784672450: ext4_free_inode:356 [ 70.747130][ T4234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.763074][ T4252] loop1: detected capacity change from 0 to 512 [ 70.781089][ T28] audit: type=1400 audit(1784672450.709:471): avc: denied { write } for pid=4245 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.800325][ T28] audit: type=1400 audit(1784672450.709:472): avc: denied { remount } for pid=4247 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.844557][ T4253] loop2: detected capacity change from 0 to 512 [ 70.851241][ T4253] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.857839][ T4253] EXT4-fs: inline encryption not supported [ 70.874270][ T4253] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 70.885854][ T4253] __nla_validate_parse: 5 callbacks suppressed [ 70.885874][ T4253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 71.100437][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.195015][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.202373][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.362076][ T4273] loop5: detected capacity change from 0 to 164 [ 71.461837][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.471764][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.510670][ T4281] loop4: detected capacity change from 0 to 128 [ 71.560731][ T4281] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.576898][ T4281] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.647383][ T4273] iso9660: Bad value for 'uid' [ 71.652399][ T4273] iso9660: Bad value for 'uid' [ 73.082377][ T4296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.095557][ T4296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.115132][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.122000][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.131737][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.141879][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.150782][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.231473][ T4303] FAULT_INJECTION: forcing a failure. [ 73.231473][ T4303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.258968][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 73.258986][ T28] audit: type=1400 audit(1784672453.179:480): avc: denied { getopt } for pid=4297 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.262060][ T4303] CPU: 0 UID: 0 PID: 4303 Comm: syz.2.199 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 73.262161][ T4303] Tainted: [W]=WARN [ 73.262190][ T4303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 73.262337][ T4303] Call Trace: [ 73.262356][ T4303] [ 73.262378][ T4303] __dump_stack+0x1d/0x30 [ 73.262519][ T4303] dump_stack_lvl+0x95/0xd0 [ 73.262582][ T4303] dump_stack+0x15/0x1b [ 73.262628][ T4303] should_fail_ex+0x25e/0x270 [ 73.262718][ T4303] should_fail+0xb/0x20 [ 73.262848][ T4303] should_fail_usercopy+0x1a/0x20 [ 73.263003][ T4303] _copy_from_iter+0xcc/0xe70 [ 73.263126][ T4303] ? __alloc_skb+0x368/0x6f0 [ 73.263285][ T4303] ? __alloc_skb+0x511/0x6f0 [ 73.263403][ T4303] ? _copy_from_iter+0x13b/0xe70 [ 73.263515][ T4303] skb_copy_datagram_from_iter+0xad/0x480 [ 73.263665][ T4303] tun_get_user+0xc1d/0x2820 [ 73.263770][ T4303] ? _parse_integer+0x27/0x40 [ 73.263890][ T4303] ? ref_tracker_alloc+0x1eb/0x2f0 [ 73.264033][ T4303] tun_chr_write_iter+0x15a/0x210 [ 73.264120][ T4303] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 73.264200][ T4303] vfs_write+0x57d/0x990 [ 73.264316][ T4303] ksys_write+0xdc/0x1a0 [ 73.264423][ T4303] __x64_sys_write+0x40/0x50 [ 73.264480][ T4303] x64_sys_call+0x27e1/0x3020 [ 73.264564][ T4303] do_syscall_64+0x136/0x3c0 [ 73.264659][ T4303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.264742][ T4303] RIP: 0033:0x7feb4f03de99 [ 73.264796][ T4303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.264861][ T4303] RSP: 002b:00007feb4da97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.264935][ T4303] RAX: ffffffffffffffda RBX: 00007feb4f2c5fa0 RCX: 00007feb4f03de99 [ 73.264988][ T4303] RDX: 000000000000004e RSI: 0000200000000100 RDI: 0000000000000003 [ 73.265072][ T4303] RBP: 00007feb4da97090 R08: 0000000000000000 R09: 0000000000000000 [ 73.265089][ T4303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.265105][ T4303] R13: 00007feb4f2c6038 R14: 00007feb4f2c5fa0 R15: 00007ffe45c5ab18 [ 73.265128][ T4303] [ 73.563766][ T28] audit: type=1400 audit(1784672453.319:481): avc: denied { write } for pid=4297 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.588516][ T28] audit: type=1400 audit(1784672453.319:482): avc: denied { execute } for pid=4297 comm="syz.1.196" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 73.684669][ T28] audit: type=1400 audit(1784672453.599:483): avc: denied { create } for pid=4324 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.198065][ T28] audit: type=1400 audit(1784672453.609:484): avc: denied { listen } for pid=4324 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.229284][ T28] audit: type=1400 audit(1784672453.609:485): avc: denied { ioctl } for pid=4324 comm="syz.0.206" path="socket:[7642]" dev="sockfs" ino=7642 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.265775][ T28] audit: type=1400 audit(1784672454.019:486): avc: denied { listen } for pid=4329 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.305114][ T4333] loop2: detected capacity change from 0 to 512 [ 74.315340][ T4341] loop1: detected capacity change from 0 to 512 [ 74.330982][ T4341] EXT4-fs (loop1): invalid journal inode [ 74.345098][ T4341] EXT4-fs (loop1): can't get journal size [ 74.357163][ T4341] EXT4-fs (loop1): 1 truncate cleaned up [ 74.363352][ T4341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.391013][ T28] audit: type=1400 audit(1784672454.309:487): avc: denied { mount } for pid=4347 comm="syz.0.210" name="/" dev="autofs" ino=8383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 74.420646][ T4333] EXT4-fs (loop2): failed to initialize system zone (-117) [ 74.428144][ T4333] EXT4-fs (loop2): mount failed [ 74.503167][ T28] audit: type=1400 audit(1784672454.419:488): avc: denied { write } for pid=4340 comm="syz.1.208" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.542804][ T28] audit: type=1400 audit(1784672454.419:489): avc: denied { add_name } for pid=4340 comm="syz.1.208" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.641659][ T4357] loop0: detected capacity change from 0 to 512 [ 74.659596][ T4357] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.674410][ T4357] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 74.684744][ T4357] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 74.699848][ T4357] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 74.708555][ T4357] System zones: 0-2, 18-18, 34-35 [ 74.714519][ T4357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.763828][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.832306][ T4365] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 74.864236][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.894870][ T119] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.949038][ T4372] loop0: detected capacity change from 0 to 4096 [ 74.961225][ T119] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.976668][ T4372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.058966][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.077696][ T119] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.118368][ T4322] syz.2.205 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 75.134380][ T4322] CPU: 0 UID: 0 PID: 4322 Comm: syz.2.205 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 75.134441][ T4322] Tainted: [W]=WARN [ 75.134489][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 75.134505][ T4322] Call Trace: [ 75.134513][ T4322] [ 75.134523][ T4322] __dump_stack+0x1d/0x30 [ 75.134592][ T4322] dump_stack_lvl+0x95/0xd0 [ 75.134613][ T4322] dump_stack+0x15/0x1b [ 75.134632][ T4322] dump_header+0x80/0x240 [ 75.134661][ T4322] oom_kill_process+0x295/0x350 [ 75.134721][ T4322] out_of_memory+0x981/0xbc0 [ 75.134763][ T4322] try_charge_memcg+0x621/0xa00 [ 75.134799][ T4322] __obj_cgroup_charge+0x105/0x230 [ 75.134867][ T4322] __memcg_slab_post_alloc_hook+0x492/0x860 [ 75.134918][ T4322] kmem_cache_alloc_noprof+0x1f1/0x3c0 [ 75.134947][ T4322] ? alloc_buffer_head+0x35/0x1f0 [ 75.134985][ T4322] ? alloc_buffer_head+0x35/0x1f0 [ 75.135074][ T4322] alloc_buffer_head+0x35/0x1f0 [ 75.135118][ T4322] folio_alloc_buffers+0x11b/0x3d0 [ 75.135226][ T4322] create_empty_buffers+0x2c/0x200 [ 75.135269][ T4322] __block_write_begin_int+0x1d4/0xf90 [ 75.135306][ T4322] ? __ext4_mark_inode_dirty+0x2f1/0x3d0 [ 75.135368][ T4322] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 75.135465][ T4322] ? __list_add_valid_or_report+0x38/0xe0 [ 75.135497][ T4322] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 75.135605][ T4322] ? __mark_inode_dirty+0x496/0x700 [ 75.135723][ T4322] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 75.135756][ T4322] block_page_mkwrite+0x183/0x300 [ 75.135844][ T4322] ext4_page_mkwrite+0x824/0xa90 [ 75.135884][ T4322] ? folio_unlock+0xfe/0x150 [ 75.135950][ T4322] handle_mm_fault+0x1b3d/0x2da0 [ 75.136001][ T4322] do_user_addr_fault+0x402/0x1060 [ 75.136060][ T4322] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 75.136103][ T4322] exc_page_fault+0x62/0xa0 [ 75.136149][ T4322] asm_exc_page_fault+0x26/0x30 [ 75.136225][ T4322] RIP: 0033:0x7feb4ef06728 [ 75.136257][ T4322] Code: be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 4f f0 ee 00 44 88 78 ff 44 8b 3d 34 f0 ee 00 e8 2f 52 ff ff 48 8b 05 40 f0 ee 00 <44> 89 38 41 bf 04 00 00 00 48 83 c0 08 66 44 89 78 fc 83 05 2f f0 [ 75.136281][ T4322] RSP: 002b:00007ffe45c5ac10 EFLAGS: 00010206 [ 75.136317][ T4322] RAX: 0000001b32924220 RBX: 0000000000000026 RCX: 0000000000000000 [ 75.136334][ T4322] RDX: 0000001b32924220 RSI: 0000000000000008 RDI: 00007feb4fdf5720 [ 75.136351][ T4322] RBP: 00007feb4fdf5720 R08: 00007feb4f2b0000 R09: 00007feb4f2c6038 [ 75.136369][ T4322] R10: 0000000000000001 R11: 0000000000000004 R12: 0000000000000000 [ 75.136384][ T4322] R13: 000000000000ec0c R14: 0000000000011064 R15: 0000000000011065 [ 75.136409][ T4322] [ 75.480639][ T4322] memory: usage 4300kB, limit 307200kB, failcnt 564 [ 75.487692][ T4322] memory+swap: usage 4504kB, limit 9007199254740988kB, failcnt 0 [ 75.495730][ T4322] kmem: usage 4092kB, limit 9007199254740988kB, failcnt 0 [ 75.502963][ T4322] Memory cgroup stats for /syz2: [ 75.503164][ T4322] cache 4096 [ 75.511404][ T4322] rss 0 [ 75.514195][ T4322] shmem 0 [ 75.517406][ T4322] mapped_file 0 [ 75.520914][ T4322] dirty 0 [ 75.536614][ T119] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.548281][ T4322] writeback 0 [ 75.555395][ T4322] workingset_refault_anon 17 [ 75.560065][ T4322] workingset_refault_file 614 [ 75.564897][ T4322] swap 208896 [ 75.568320][ T4322] swapcached 278528 [ 75.572199][ T4322] pgpgin 25306 [ 75.575722][ T4322] pgpgout 25305 [ 75.579414][ T4322] pgfault 28425 [ 75.582936][ T4322] pgmajfault 22 [ 75.586611][ T4322] inactive_anon 0 [ 75.590322][ T4322] active_anon 0 [ 75.593839][ T4322] inactive_file 0 [ 75.597704][ T4322] active_file 4096 [ 75.601504][ T4322] unevictable 0 [ 75.605098][ T4322] hierarchical_memory_limit 314572800 [ 75.610709][ T4322] hierarchical_memsw_limit 9223372036854771712 [ 75.616972][ T4322] total_cache 4096 [ 75.620817][ T4322] total_rss 0 [ 75.624162][ T4322] total_shmem 0 [ 75.627746][ T4322] total_mapped_file 0 [ 75.641684][ T4322] total_dirty 0 [ 75.654016][ T4322] total_writeback 0 [ 75.662234][ T4322] total_workingset_refault_anon 17 [ 75.667484][ T4322] total_workingset_refault_file 614 [ 75.674138][ T4322] total_swap 208896 [ 75.744234][ T4322] total_swapcached 278528 [ 75.751144][ T119] bridge_slave_1: left allmulticast mode [ 75.761705][ T4322] total_pgpgin 25306 [ 75.766000][ T119] bridge_slave_1: left promiscuous mode [ 75.780015][ T4322] total_pgpgout 25305 [ 75.787332][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.803474][ T4322] total_pgfault 28425 [ 75.807819][ T4322] total_pgmajfault 22 [ 75.811836][ T4322] total_inactive_anon 0 [ 75.816046][ T4322] total_active_anon 0 [ 75.820049][ T4322] total_inactive_file 0 [ 75.824267][ T4322] total_active_file 4096 [ 75.828649][ T4322] total_unevictable 0 [ 75.832713][ T4322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.205,pid=4322,uid=0 [ 75.847636][ T4322] Memory cgroup out of memory: Killed process 4322 (syz.2.205) total-vm:96360kB, anon-rss:1248kB, file-rss:22552kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 75.866257][ T119] bridge_slave_0: left allmulticast mode [ 76.022616][ T4399] loop0: detected capacity change from 0 to 512 [ 76.030301][ T119] bridge_slave_0: left promiscuous mode [ 76.036648][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.362639][ T4399] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.437420][ T4399] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.227: bad orphan inode 131083 [ 76.593128][ T4417] loop2: detected capacity change from 0 to 512 [ 76.608653][ T4399] loop0: lost filesystem error report for type 5 error -117 [ 76.609797][ T4399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.697920][ T4417] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.228: Invalid inode bitmap blk 4 in block_group 0 [ 76.794412][ T4417] loop2: lost filesystem error report for type 5 error -117 [ 76.794607][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 76.808574][ C1] EXT4-fs (loop2): initial error at time 1784672456: ext4_read_inode_bitmap:141 [ 76.817672][ C1] EXT4-fs (loop2): last error at time 1784672456: ext4_read_inode_bitmap:141 [ 76.886965][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.901279][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.931807][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.942369][ T4426] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 76.955700][ T4417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.970871][ T4426] loop4: detected capacity change from 0 to 512 [ 76.985068][ T119] bond0 (unregistering): Released all slaves [ 77.026039][ T4417] EXT4-fs (loop2): shut down requested (2) [ 77.095592][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.110312][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 77.149435][ T119] hsr_slave_0: left promiscuous mode [ 77.155452][ T119] hsr_slave_1: left promiscuous mode [ 77.305576][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.315974][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.323665][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.331555][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.342758][ T119] veth1_macvtap: left promiscuous mode [ 77.789353][ T4433] loop2: detected capacity change from 0 to 128 [ 77.863469][ T4433] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.881313][ T4433] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.065793][ T119] veth0_macvtap: left promiscuous mode [ 78.071688][ T119] veth1_vlan: left promiscuous mode [ 78.077510][ T119] veth0_vlan: left promiscuous mode [ 78.251536][ T119] team0 (unregistering): Port device team_slave_1 removed [ 78.261664][ T119] team0 (unregistering): Port device team_slave_0 removed [ 78.452232][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 78.452329][ T28] audit: type=1400 audit(1784672458.369:520): avc: denied { write } for pid=4442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.529545][ T28] audit: type=1400 audit(1784672458.449:521): avc: denied { write } for pid=4456 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.593446][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 78.772026][ T28] audit: type=1400 audit(1784672458.689:522): avc: denied { write } for pid=4459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.854075][ T4472] FAULT_INJECTION: forcing a failure. [ 78.854075][ T4472] name failslab, interval 1, probability 0, space 0, times 0 [ 78.884166][ T28] audit: type=1400 audit(1784672458.789:523): avc: denied { write } for pid=4470 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.919091][ T4472] CPU: 1 UID: 0 PID: 4472 Comm: syz.0.236 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 78.919183][ T4472] Tainted: [W]=WARN [ 78.919190][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 78.919216][ T4472] Call Trace: [ 78.919286][ T4472] [ 78.919293][ T4472] __dump_stack+0x1d/0x30 [ 78.919389][ T4472] dump_stack_lvl+0x95/0xd0 [ 78.919484][ T4472] dump_stack+0x15/0x1b [ 78.919504][ T4472] should_fail_ex+0x25e/0x270 [ 78.919539][ T4472] should_failslab+0x8c/0xb0 [ 78.919565][ T4472] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 78.919610][ T4472] ? __alloc_skb+0x2db/0x6f0 [ 78.919665][ T4472] ? __alloc_skb+0x2db/0x6f0 [ 78.919692][ T4472] __alloc_skb+0x2db/0x6f0 [ 78.919716][ T4472] ? __alloc_skb+0x205/0x6f0 [ 78.919742][ T4472] netlink_alloc_large_skb+0xbf/0xf0 [ 78.919795][ T4472] netlink_sendmsg+0x40c/0x6f0 [ 78.919889][ T4472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.919913][ T4472] ____sys_sendmsg+0x532/0x580 [ 78.919997][ T4472] ___sys_sendmsg+0x195/0x1e0 [ 78.920053][ T4472] __x64_sys_sendmsg+0xd4/0x160 [ 78.920145][ T4472] x64_sys_call+0x194c/0x3020 [ 78.920211][ T4472] do_syscall_64+0x136/0x3c0 [ 78.920281][ T4472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.920304][ T4472] RIP: 0033:0x7f2f9935de99 [ 78.920323][ T4472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.920345][ T4472] RSP: 002b:00007f2f97db7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.920369][ T4472] RAX: ffffffffffffffda RBX: 00007f2f995e5fa0 RCX: 00007f2f9935de99 [ 78.920387][ T4472] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 78.920442][ T4472] RBP: 00007f2f97db7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.920535][ T4472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.920551][ T4472] R13: 00007f2f995e6038 R14: 00007f2f995e5fa0 R15: 00007ffc54842cc8 [ 78.920575][ T4472] [ 79.185937][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 79.221149][ T4475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'. [ 79.434627][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.441768][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.449271][ T4374] bridge_slave_0: entered allmulticast mode [ 79.460387][ T4374] bridge_slave_0: entered promiscuous mode [ 79.467064][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.474811][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.482017][ T4374] bridge_slave_1: entered allmulticast mode [ 79.488956][ T4374] bridge_slave_1: entered promiscuous mode [ 79.507249][ T4374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.537227][ T4501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 79.549324][ T4500] loop4: detected capacity change from 0 to 512 [ 79.567827][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.577047][ T4501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 79.592775][ T4500] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.631504][ T4374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.641411][ T4500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.650042][ T4500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.706000][ T4374] team0: Port device team_slave_0 added [ 79.727914][ T4500] loop4: detected capacity change from 0 to 512 [ 79.738608][ T4500] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.750724][ T4374] team0: Port device team_slave_1 added [ 79.771256][ T4503] loop0: detected capacity change from 0 to 4096 [ 79.783931][ T4374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.791134][ T4374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.821875][ T4374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.850271][ T4500] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 79.855028][ T4503] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 79.867723][ T4374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.881391][ T4500] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.245: bg 0: block 248: padding at end of block bitmap is not set [ 79.895680][ T4500] loop4: lost filesystem error report for type 5 error -117 [ 79.895850][ T4374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.929571][ T4374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.937301][ T4500] Quota error (device loop4): write_blk: dquota write failed [ 79.962108][ T28] audit: type=1400 audit(1784672459.879:524): avc: denied { write } for pid=4502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.964604][ T4374] hsr_slave_0: entered promiscuous mode [ 79.985087][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 79.985109][ C0] EXT4-fs (loop4): last error at time 1784672459: ext4_validate_block_bitmap:441 [ 80.008971][ T4374] hsr_slave_1: entered promiscuous mode [ 80.012082][ T4500] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 80.015032][ T4374] debugfs: 'hsr0' already exists in 'hsr' [ 80.015049][ T4374] Cannot create hsr debugfs directory [ 80.033651][ T4520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.247'. [ 80.046689][ T4520] netlink: 'syz.2.247': attribute type 7 has an invalid length. [ 80.054350][ T4520] netlink: 'syz.2.247': attribute type 8 has an invalid length. [ 80.062082][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 80.071862][ T4500] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.245: Failed to acquire dquot type 1 [ 80.085252][ T4500] loop4: lost filesystem error report for type 5 error -28 [ 80.099178][ T4500] EXT4-fs (loop4): 1 truncate cleaned up [ 80.115534][ T4520] team0: entered promiscuous mode [ 80.115558][ T4520] team_slave_0: entered promiscuous mode [ 80.115629][ T4520] team_slave_1: entered promiscuous mode [ 80.117439][ T4520] bond0: entered promiscuous mode [ 80.128476][ T4500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 80.152184][ T28] audit: type=1400 audit(1784672460.069:525): avc: denied { write } for pid=4523 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.165692][ T4520] bond_slave_0: entered promiscuous mode [ 80.192658][ T4520] bond_slave_1: entered promiscuous mode [ 80.199464][ T4520] erspan0: entered promiscuous mode [ 80.205779][ T4520] debugfs: 'hsr1' already exists in 'hsr' [ 80.211542][ T4520] Cannot create hsr debugfs directory [ 80.217161][ T4520] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 80.236987][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 80.291333][ T28] audit: type=1400 audit(1784672460.209:526): avc: denied { append } for pid=4526 comm="syz.0.248" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 80.317520][ T28] audit: type=1400 audit(1784672460.209:527): avc: denied { write } for pid=4526 comm="syz.0.248" path="socket:[8691]" dev="sockfs" ino=8691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.391136][ T4374] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 80.400315][ T4374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.411662][ T4374] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 80.420820][ T4374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.428969][ T4374] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 80.440590][ T4374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.450252][ T4374] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.460302][ T4374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.511226][ T4374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.525744][ T4374] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.535546][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.542712][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.543717][ T4535] loop2: detected capacity change from 0 to 764 [ 80.559295][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.566424][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.607107][ T4535] Symlink component flag not implemented [ 80.613328][ T4535] Symlink component flag not implemented (15) [ 80.723688][ T4374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.844105][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 80.881510][ T4567] loop2: detected capacity change from 0 to 512 [ 80.895773][ T4567] EXT4-fs: Ignoring removed nobh option [ 80.916243][ T4567] EXT4-fs (loop2): 1 orphan inode deleted [ 80.919413][ T4374] veth0_vlan: entered promiscuous mode [ 80.927716][ T4567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.946003][ T4567] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.253: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 80.967633][ T4374] veth1_vlan: entered promiscuous mode [ 80.985302][ T4374] veth0_macvtap: entered promiscuous mode [ 80.995732][ T4374] veth1_macvtap: entered promiscuous mode [ 81.002688][ T4574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 81.021898][ T4567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.253'. [ 81.030817][ T4374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.042198][ T4374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.052086][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.060926][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.079502][ T4577] loop4: detected capacity change from 0 to 512 [ 81.101063][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.113456][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.120207][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.138746][ T4577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.152089][ T4577] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.170039][ T4577] FAULT_INJECTION: forcing a failure. [ 81.170039][ T4577] name failslab, interval 1, probability 0, space 0, times 0 [ 81.195613][ T4584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.199253][ T4577] CPU: 0 UID: 0 PID: 4577 Comm: syz.4.255 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 81.199359][ T4577] Tainted: [W]=WARN [ 81.199382][ T4577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 81.199468][ T4577] Call Trace: [ 81.199489][ T4577] [ 81.199600][ T4577] __dump_stack+0x1d/0x30 [ 81.199746][ T4577] dump_stack_lvl+0x95/0xd0 [ 81.199830][ T4577] dump_stack+0x15/0x1b [ 81.199892][ T4577] should_fail_ex+0x25e/0x270 [ 81.200019][ T4577] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 81.200181][ T4577] should_failslab+0x8c/0xb0 [ 81.200266][ T4577] __kmalloc_cache_noprof+0x7b/0x3d0 [ 81.200424][ T4577] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 81.200520][ T4577] inode_doinit_use_xattr+0x3c/0x2d0 [ 81.200615][ T4577] inode_doinit_with_dentry+0x59e/0x7b0 [ 81.200687][ T4577] selinux_d_instantiate+0x27/0x40 [ 81.200791][ T4577] security_d_instantiate+0x76/0x90 [ 81.200868][ T4577] d_splice_alias_ops+0x54/0x370 [ 81.200989][ T4577] ? d_splice_alias+0x12/0x30 [ 81.201089][ T4577] d_splice_alias+0x1f/0x30 [ 81.201349][ T4577] ext4_lookup+0x1a6/0x3a0 [ 81.201561][ T4577] __lookup_slow+0x155/0x200 [ 81.201797][ T4577] lookup_slow+0x3c/0x60 [ 81.201901][ T4577] path_lookupat+0x2b2/0x4c0 [ 81.202019][ T4577] filename_lookup+0x18f/0x390 [ 81.202185][ T4577] do_fchownat+0xa0/0x210 [ 81.202333][ T4577] __x64_sys_fchownat+0x64/0x80 [ 81.202424][ T4577] x64_sys_call+0x2c7a/0x3020 [ 81.202497][ T4577] do_syscall_64+0x136/0x3c0 [ 81.202633][ T4577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.202721][ T4577] RIP: 0033:0x7fb97787de99 [ 81.202820][ T4577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.202862][ T4577] RSP: 002b:00007fb9762d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 81.202945][ T4577] RAX: ffffffffffffffda RBX: 00007fb977b05fa0 RCX: 00007fb97787de99 [ 81.203005][ T4577] RDX: 000000000000ee01 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 81.203046][ T4577] RBP: 00007fb9762d7090 R08: 0000000000001000 R09: 0000000000000000 [ 81.203088][ T4577] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 81.203156][ T4577] R13: 00007fb977b06038 R14: 00007fb977b05fa0 R15: 00007ffe8435fe48 [ 81.203220][ T4577] [ 81.203347][ T4577] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.255: corrupted xattr block 6: invalid header [ 81.224129][ T4584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.459837][ T4577] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 81.502974][ T4577] EXT4-fs error (device loop4): ext4_get_inode_usage:888: inode #12: comm syz.4.255: corrupted xattr block 6: invalid header [ 81.513040][ T4587] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 81.559868][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b51dc00: rx timeout, send abort [ 81.568219][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b51dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 81.582635][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b278600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 81.603551][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.661320][ T4593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.260'. [ 81.675578][ T4593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.260'. [ 81.687782][ T4593] netlink: 104 bytes leftover after parsing attributes in process `syz.4.260'. [ 81.699330][ T4593] netlink: 'syz.4.260': attribute type 9 has an invalid length. [ 81.717438][ T4593] loop4: detected capacity change from 0 to 512 [ 81.741124][ T4593] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.260: bg 0: block 127: padding at end of block bitmap is not set [ 81.756441][ T4593] loop4: lost filesystem error report for type 5 error -117 [ 81.757529][ T4593] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.260: bit already cleared for inode 11 [ 81.765110][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 81.765210][ C1] EXT4-fs (loop4): initial error at time 1784672461: ext4_validate_block_bitmap:441 [ 81.765380][ C1] EXT4-fs (loop4): last error at time 1784672461: ext4_validate_block_bitmap:441 [ 81.803226][ T4593] loop4: lost filesystem error report for type 5 error -117 [ 81.803954][ T4593] EXT4-fs (loop4): 1 orphan inode deleted [ 81.818958][ T4593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.863462][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.093715][ T4601] sg_write: data in/out 1204224/136 bytes for SCSI command 0x0-- guessing data in; [ 82.093715][ T4601] program syz.2.263 not setting count and/or reply_len properly [ 82.152037][ T4604] loop2: detected capacity change from 0 to 128 [ 82.182238][ T4606] SELinux: syz.2.265 (4606) wrote to user. This is no longer supported. [ 82.255489][ T4615] sg_write: data in/out 563552/136 bytes for SCSI command 0x0-- guessing data in; [ 82.255489][ T4615] program syz.2.268 not setting count and/or reply_len properly [ 82.556944][ T4616] loop6: detected capacity change from 0 to 32768 [ 82.617269][ T4632] loop0: detected capacity change from 0 to 4096 [ 82.626393][ T4632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.644964][ T4616] loop6: p1 < > p3 < > p4 [ 82.649583][ T4616] loop6: partition table partially beyond EOD, truncated [ 82.685701][ T4616] loop6: p4 start 1426063360 is beyond EOD, truncated [ 82.697863][ T4625] loop1: detected capacity change from 0 to 4096 [ 82.714239][ T4625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.742159][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.743779][ T4636] netlink: 'syz.2.275': attribute type 29 has an invalid length. [ 82.809827][ T4640] loop4: detected capacity change from 0 to 2048 [ 82.861054][ T4644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.882884][ T4644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.901974][ T4638] loop4: detected capacity change from 0 to 4096 [ 83.052153][ T4651] 8021q: VLANs not supported on ip_vti0 [ 83.063091][ T4651] loop0: detected capacity change from 0 to 256 [ 83.154364][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.213233][ T4662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.286'. [ 83.226445][ T328] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.235694][ T328] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.246379][ T328] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.258628][ T328] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.603632][ T4680] loop1: detected capacity change from 0 to 512 [ 83.616371][ T4680] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.293: inode has both inline data and extents flags [ 83.635326][ T4680] fserror_report: 4 callbacks suppressed [ 83.635395][ T4680] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.645471][ T4680] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.293: couldn't read orphan inode 15 (err -117) [ 83.654707][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 83.654729][ C0] EXT4-fs (loop1): initial error at time 1784672463: ext4_orphan_get:1399: inode 15 [ 83.654782][ C0] EXT4-fs (loop1): last error at time 1784672463: ext4_orphan_get:1399: inode 15 [ 83.691740][ T4680] loop1: lost filesystem error report for type 5 error -117 [ 83.692534][ T4680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.713971][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 83.714067][ T28] audit: type=1400 audit(1784672463.639:543): avc: denied { write } for pid=4677 comm="syz.1.293" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.742017][ T28] audit: type=1400 audit(1784672463.649:544): avc: denied { write } for pid=4677 comm="syz.1.293" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.765550][ T28] audit: type=1400 audit(1784672463.689:545): avc: denied { connect } for pid=4684 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.785334][ T4685] loop2: detected capacity change from 0 to 1024 [ 83.792355][ T4685] EXT4-fs: dax option not supported [ 83.799156][ T28] audit: type=1400 audit(1784672463.719:546): avc: denied { read write } for pid=4684 comm="syz.2.295" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.826362][ T28] audit: type=1400 audit(1784672463.719:547): avc: denied { open } for pid=4684 comm="syz.2.295" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.850341][ T4685] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.295: inode has both inline data and extents flags [ 83.863571][ T4685] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.863780][ T4685] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.295: couldn't read orphan inode 15 (err -117) [ 83.872978][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 83.873001][ C0] EXT4-fs (loop2): initial error at time 1784672463: ext4_orphan_get:1399: inode 15 [ 83.873042][ C0] EXT4-fs (loop2): last error at time 1784672463: ext4_orphan_get:1399: inode 15 [ 83.910052][ T4685] loop2: lost filesystem error report for type 5 error -117 [ 83.910721][ T4685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.985684][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.025323][ T4688] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.096323][ T4688] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.116459][ T28] audit: type=1400 audit(1784672464.039:548): avc: denied { write } for pid=4687 comm="syz.0.296" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.137959][ T28] audit: type=1400 audit(1784672464.039:549): avc: denied { append } for pid=4687 comm="syz.0.296" path="/58/mnt/memory.events" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.244430][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.479267][ T4701] EXT4-fs: quotafile must be on filesystem root [ 84.532170][ T28] audit: type=1400 audit(1784672464.299:550): avc: denied { map } for pid=4692 comm="syz.4.298" path="socket:[9117]" dev="sockfs" ino=9117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 84.626026][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.701571][ T4702] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.301' sets config #1 [ 85.069565][ T4711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.079599][ T4711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.318316][ T4718] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.306: inode has both inline data and extents flags [ 85.366576][ T4718] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.366788][ T4718] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.306: couldn't read orphan inode 15 (err -117) [ 85.376077][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 85.376105][ C0] EXT4-fs (loop1): initial error at time 1784672465: ext4_orphan_get:1399: inode 15 [ 85.376131][ C0] EXT4-fs (loop1): last error at time 1784672465: ext4_orphan_get:1399: inode 15 [ 85.409998][ T4726] __nla_validate_parse: 1 callbacks suppressed [ 85.410212][ T4726] netlink: 32 bytes leftover after parsing attributes in process `syz.6.309'. [ 85.438107][ T4726] netlink: 32 bytes leftover after parsing attributes in process `syz.6.309'. [ 85.460570][ T4726] netlink: 104 bytes leftover after parsing attributes in process `syz.6.309'. [ 85.476039][ T4726] netlink: 144 bytes leftover after parsing attributes in process `syz.6.309'. [ 85.485939][ T4718] loop1: lost filesystem error report for type 5 error -117 [ 85.488564][ T4718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.511737][ T28] audit: type=1400 audit(1784672465.429:551): avc: denied { write } for pid=4714 comm="syz.1.306" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.534274][ T4728] netlink: 'syz.6.309': attribute type 9 has an invalid length. [ 85.593574][ T28] audit: type=1400 audit(1784672465.499:552): avc: denied { map } for pid=4714 comm="syz.1.306" path="/61/file1/file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.060433][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.063040][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 86.250727][ T4752] netlink: 32 bytes leftover after parsing attributes in process `syz.4.320'. [ 86.315390][ T4752] netlink: 32 bytes leftover after parsing attributes in process `syz.4.320'. [ 86.360179][ T4752] netlink: 104 bytes leftover after parsing attributes in process `syz.4.320'. [ 86.409364][ T4760] netlink: 144 bytes leftover after parsing attributes in process `syz.4.320'. [ 86.441405][ T4760] netlink: 'syz.4.320': attribute type 9 has an invalid length. [ 86.523033][ T4772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.556367][ T4772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.597328][ T4776] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 86.695242][ T4783] netlink: 'syz.4.331': attribute type 3 has an invalid length. [ 86.703032][ T4783] netlink: 'syz.4.331': attribute type 3 has an invalid length. [ 86.734366][ T4781] set_capacity_and_notify: 7 callbacks suppressed [ 86.734469][ T4781] loop2: detected capacity change from 0 to 512 [ 86.752084][ T4781] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 86.761207][ T4781] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 86.771149][ T4781] FAT-fs (loop2): Filesystem has been set read-only [ 86.843250][ T4793] IPVS: Unknown mcast interface: syzkaller1 [ 86.854154][ T4794] netlink: 32 bytes leftover after parsing attributes in process `syz.2.336'. [ 86.930203][ T4798] netlink: 'syz.0.338': attribute type 9 has an invalid length. [ 86.963637][ T4801] loop0: detected capacity change from 0 to 512 [ 86.971025][ T4801] EXT4-fs error (device loop0): ext4_get_journal_inode:5900: comm syz.0.339: inode #1792: comm syz.0.339: iget: illegal inode # [ 86.984437][ T4801] loop0: lost filesystem error report for type 5 error -117 [ 86.985032][ T4801] EXT4-fs (loop0): Remounting filesystem read-only [ 86.985405][ T4794] netlink: 'syz.2.336': attribute type 9 has an invalid length. [ 86.992341][ T4801] EXT4-fs (loop0): no journal found [ 86.992358][ T4801] EXT4-fs (loop0): can't get journal size [ 86.993882][ T4801] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 87.032484][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 87.032694][ C0] EXT4-fs (loop0): initial error at time 1784672466: ext4_get_journal_inode:5900 [ 87.032772][ C0] EXT4-fs (loop0): last error at time 1784672466: ext4_get_journal_inode:5900 [ 87.058813][ T4799] loop2: detected capacity change from 0 to 512 [ 87.100013][ T4799] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.336: bg 0: block 127: padding at end of block bitmap is not set [ 87.100045][ T4799] loop2: lost filesystem error report for type 5 error -117 [ 87.101237][ T4799] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.336: bit already cleared for inode 11 [ 87.101303][ T4799] loop2: lost filesystem error report for type 5 error -117 [ 87.103462][ T4799] EXT4-fs (loop2): 1 orphan inode deleted [ 87.110879][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 87.110894][ C1] EXT4-fs (loop2): initial error at time 1784672467: ext4_validate_block_bitmap:441 [ 87.110935][ C1] EXT4-fs (loop2): last error at time 1784672467: ext4_free_inode:356 [ 87.138049][ T4801] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 87.154181][ T4799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.158390][ T4801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.230309][ T4808] loop6: detected capacity change from 0 to 128 [ 87.238763][ T4801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.257593][ T4808] FAT-fs (loop6): bogus number of reserved sectors [ 87.257614][ T4808] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 87.257636][ T4808] FAT-fs (loop6): Can't find a valid FAT filesystem [ 87.310413][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.449871][ T4801] loop0: detected capacity change from 0 to 164 [ 87.462922][ T4801] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 87.655738][ T4831] netlink: 'syz.1.349': attribute type 9 has an invalid length. [ 87.672844][ T4831] loop1: detected capacity change from 0 to 512 [ 87.737340][ T4831] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.349: bg 0: block 127: padding at end of block bitmap is not set [ 87.783157][ T4836] loop6: detected capacity change from 0 to 128 [ 87.805061][ T4836] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.817774][ T4836] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.908565][ T4831] loop1: lost filesystem error report for type 5 error -117 [ 87.914918][ T4831] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.349: bit already cleared for inode 11 [ 87.933388][ T4831] loop1: lost filesystem error report for type 5 error -117 [ 87.933631][ T4831] EXT4-fs (loop1): 1 orphan inode deleted [ 87.947844][ T4831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.012050][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.192305][ T4841] loop4: detected capacity change from 0 to 1024 [ 88.263278][ T4843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.347224][ T4841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.365358][ T4843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.641166][ T4854] netlink: 'syz.1.351': attribute type 9 has an invalid length. [ 88.651803][ T4854] loop1: detected capacity change from 0 to 512 [ 88.726128][ T4854] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.351: bg 0: block 127: padding at end of block bitmap is not set [ 88.740423][ T4854] loop1: lost filesystem error report for type 5 error -117 [ 88.747665][ T4854] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.351: bit already cleared for inode 11 [ 88.765965][ T4854] loop1: lost filesystem error report for type 5 error -117 [ 88.770649][ T4854] EXT4-fs (loop1): 1 orphan inode deleted [ 88.784058][ T4854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.875023][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.919496][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 88.919515][ T28] audit: type=1400 audit(1784672468.839:574): avc: denied { bind } for pid=4857 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.020254][ T28] audit: type=1400 audit(1784672468.839:575): avc: denied { name_bind } for pid=4857 comm="syz.2.358" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 89.074422][ T28] audit: type=1400 audit(1784672468.839:576): avc: denied { node_bind } for pid=4857 comm="syz.2.358" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 89.117530][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.174302][ T28] audit: type=1400 audit(1784672468.909:577): avc: denied { setopt } for pid=4857 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.368007][ T28] audit: type=1400 audit(1784672468.969:578): avc: denied { ioctl } for pid=4857 comm="syz.2.358" path="socket:[9821]" dev="sockfs" ino=9821 ioctlcmd=0x583f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.534130][ T4871] netlink: 'syz.1.361': attribute type 9 has an invalid length. [ 89.546759][ T4374] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.777378][ T28] audit: type=1326 audit(1784672469.149:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.0.362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9935de99 code=0x7ffc0000 [ 89.853571][ T4867] loop1: detected capacity change from 0 to 512 [ 89.902169][ T4867] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.361: bg 0: block 127: padding at end of block bitmap is not set [ 89.916466][ T4867] loop1: lost filesystem error report for type 5 error -117 [ 89.954591][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 89.960713][ T4867] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.361: bit already cleared for inode 11 [ 89.961962][ C0] EXT4-fs (loop1): initial error at time 1784672469: ext4_validate_block_bitmap:441 [ 89.961994][ C0] EXT4-fs (loop1): last error at time 1784672469: ext4_validate_block_bitmap:441 [ 89.971533][ T28] audit: type=1326 audit(1784672469.149:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.0.362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9935de99 code=0x7ffc0000 [ 89.971581][ T28] audit: type=1326 audit(1784672469.149:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.0.362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9935de99 code=0x7ffc0000 [ 89.971617][ T28] audit: type=1326 audit(1784672469.149:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.0.362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9935de99 code=0x7ffc0000 [ 89.971673][ T28] audit: type=1326 audit(1784672469.149:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.0.362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9935de99 code=0x7ffc0000 [ 90.111538][ T4867] loop1: lost filesystem error report for type 5 error -117 [ 90.112823][ T4867] EXT4-fs (loop1): 1 orphan inode deleted [ 90.133786][ T4867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.298738][ T4879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.354780][ T4881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.445272][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.513472][ T4881] tipc: Enabling of bearer rejected, failed to enable media [ 91.297679][ T4894] __nla_validate_parse: 19 callbacks suppressed [ 91.297703][ T4894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.368'. [ 91.758853][ T4897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.368'. [ 91.884108][ T4894] netlink: 104 bytes leftover after parsing attributes in process `syz.1.368'. [ 91.904534][ T4894] netlink: 144 bytes leftover after parsing attributes in process `syz.1.368'. [ 91.918078][ T4894] netlink: 'syz.1.368': attribute type 9 has an invalid length. [ 92.082411][ T4901] set_capacity_and_notify: 2 callbacks suppressed [ 92.082428][ T4901] loop1: detected capacity change from 0 to 512 [ 92.087080][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.119289][ T4900] 9pnet: p9_errstr2errno: server reported unknown error [ 92.147362][ T4903] tipc: Started in network mode [ 92.153086][ T4903] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 92.171562][ T4901] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.368: bg 0: block 127: padding at end of block bitmap is not set [ 92.226154][ T4374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.235520][ T4903] tipc: Enabled bearer , priority 10 [ 92.242498][ T4901] loop1: lost filesystem error report for type 5 error -117 [ 92.243394][ T4901] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.368: bit already cleared for inode 11 [ 92.261813][ T4901] loop1: lost filesystem error report for type 5 error -117 [ 92.262782][ T4901] EXT4-fs (loop1): 1 orphan inode deleted [ 92.276274][ T4901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.308047][ T4915] loop4: detected capacity change from 0 to 512 [ 92.315735][ T4915] ext4: Unknown parameter 'euid>00000000000000000000' [ 92.370399][ T4922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.406317][ T4922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.480466][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.511611][ T4943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.379'. [ 92.867107][ T4990] netlink: 'syz.1.382': attribute type 9 has an invalid length. [ 92.885059][ T4990] netlink: 387 bytes leftover after parsing attributes in process `syz.1.382'. [ 92.964629][ T4998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.389'. [ 92.974792][ T4998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.389'. [ 92.985156][ T4998] netlink: 104 bytes leftover after parsing attributes in process `syz.0.389'. [ 92.996327][ T4998] netlink: 144 bytes leftover after parsing attributes in process `syz.0.389'. [ 93.005696][ T4998] netlink: 'syz.0.389': attribute type 9 has an invalid length. [ 93.017490][ T4998] loop0: detected capacity change from 0 to 512 [ 93.055679][ T4998] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.389: bg 0: block 127: padding at end of block bitmap is not set [ 93.070519][ T4998] loop0: lost filesystem error report for type 5 error -117 [ 93.075025][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 93.090123][ C1] EXT4-fs (loop0): initial error at time 1784672472: ext4_validate_block_bitmap:441 [ 93.100234][ C1] EXT4-fs (loop0): last error at time 1784672472: ext4_validate_block_bitmap:441 [ 93.122442][ T4998] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.389: bit already cleared for inode 11 [ 93.138827][ T4998] loop0: lost filesystem error report for type 5 error -117 [ 93.140378][ T4998] EXT4-fs (loop0): 1 orphan inode deleted [ 93.179709][ T4998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.283711][ T9] tipc: Node number set to 10136234 [ 93.298217][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.392248][ T5027] netlink: 'syz.2.396': attribute type 7 has an invalid length. [ 93.404252][ T5027] netlink: 'syz.2.396': attribute type 8 has an invalid length. [ 93.522763][ T5037] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 93.559859][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.569506][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.628664][ T5043] loop1: detected capacity change from 0 to 8192 [ 93.701322][ T5043] loop1: p1 < > p3 < > [ 93.704139][ T5045] netlink: 'syz.0.405': attribute type 9 has an invalid length. [ 93.757305][ T5045] loop0: detected capacity change from 0 to 512 [ 93.773697][ T5045] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.405: bg 0: block 127: padding at end of block bitmap is not set [ 93.788063][ T5045] loop0: lost filesystem error report for type 5 error -117 [ 93.788597][ T5045] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.405: bit already cleared for inode 11 [ 93.806990][ T5045] loop0: lost filesystem error report for type 5 error -117 [ 93.807211][ T5045] EXT4-fs (loop0): 1 orphan inode deleted [ 93.821245][ T5045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.952219][ T5052] loop6: detected capacity change from 0 to 4096 [ 93.976022][ T28] kauditd_printk_skb: 249 callbacks suppressed [ 93.976111][ T28] audit: type=1400 audit(1784672473.899:833): avc: denied { write } for pid=5050 comm="syz.6.407" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.026469][ T28] audit: type=1400 audit(1784672473.929:834): avc: denied { write } for pid=5050 comm="syz.6.407" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.030055][ T5054] netlink: 'syz.0.409': attribute type 7 has an invalid length. [ 94.048867][ T28] audit: type=1400 audit(1784672473.929:835): avc: denied { open } for pid=5050 comm="syz.6.407" path="/21/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.094082][ T5054] netlink: 'syz.0.409': attribute type 8 has an invalid length. [ 94.107566][ T28] audit: type=1400 audit(1784672474.029:836): avc: denied { write } for pid=5050 comm="syz.6.407" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.136016][ T28] audit: type=1400 audit(1784672474.049:837): avc: denied { read } for pid=5050 comm="syz.6.407" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.263452][ T5069] FAULT_INJECTION: forcing a failure. [ 94.263452][ T5069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.281688][ T5069] CPU: 0 UID: 0 PID: 5069 Comm: syz.0.416 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 94.281798][ T5069] Tainted: [W]=WARN [ 94.281808][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 94.281900][ T5069] Call Trace: [ 94.281908][ T5069] [ 94.281918][ T5069] __dump_stack+0x1d/0x30 [ 94.281950][ T5069] dump_stack_lvl+0x95/0xd0 [ 94.282012][ T5069] dump_stack+0x15/0x1b [ 94.282038][ T5069] should_fail_ex+0x25e/0x270 [ 94.282182][ T5069] should_fail+0xb/0x20 [ 94.282214][ T5069] should_fail_usercopy+0x1a/0x20 [ 94.282255][ T5069] _copy_to_user+0x20/0xa0 [ 94.282325][ T5069] simple_read_from_buffer+0xb5/0x130 [ 94.282372][ T5069] proc_fail_nth_read+0x10e/0x150 [ 94.282402][ T5069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.282429][ T5069] vfs_read+0x18e/0x7c0 [ 94.282450][ T5069] ? __rcu_read_unlock+0x4e/0x70 [ 94.282595][ T5069] ? __fget_files+0x184/0x1c0 [ 94.282627][ T5069] ? mutex_lock+0x57/0x90 [ 94.282710][ T5069] ksys_read+0xdc/0x1a0 [ 94.282733][ T5069] __x64_sys_read+0x40/0x50 [ 94.282805][ T5069] x64_sys_call+0x2886/0x3020 [ 94.282842][ T5069] do_syscall_64+0x136/0x3c0 [ 94.282936][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.283028][ T5069] RIP: 0033:0x7f2f9931e6ce [ 94.283044][ T5069] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.283068][ T5069] RSP: 002b:00007f2f97db6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.283112][ T5069] RAX: ffffffffffffffda RBX: 00007f2f97db76c0 RCX: 00007f2f9931e6ce [ 94.283131][ T5069] RDX: 000000000000000f RSI: 00007f2f97db70a0 RDI: 0000000000000004 [ 94.283148][ T5069] RBP: 00007f2f97db7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.283226][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.283243][ T5069] R13: 00007f2f995e6038 R14: 00007f2f995e5fa0 R15: 00007ffc54842cc8 [ 94.283271][ T5069] [ 94.562969][ T28] audit: type=1400 audit(1784672474.479:838): avc: denied { setopt } for pid=5070 comm="syz.6.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.662755][ T5079] loop0: detected capacity change from 0 to 512 [ 94.682160][ T5079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.721340][ T5079] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #16: comm syz.0.423: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 94.738917][ T5079] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 94.739889][ T5079] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.423: couldn't read orphan inode 16 (err -117) [ 94.749202][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 94.749220][ C0] EXT4-fs (loop0): initial error at time 1784672474: ext4_ext_check_inode:521: inode 16 [ 94.749262][ C0] EXT4-fs (loop0): last error at time 1784672474: ext4_ext_check_inode:521: inode 16 [ 94.788483][ T5079] loop0: lost filesystem error report for type 5 error -117 [ 94.788850][ T5079] EXT4-fs (loop0): 1 orphan inode deleted [ 94.811213][ T5091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.820722][ T5091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.894631][ T5093] loop1: detected capacity change from 0 to 4096 [ 94.921923][ T28] audit: type=1400 audit(1784672474.839:839): avc: denied { write } for pid=5092 comm="syz.1.424" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.969121][ T28] audit: type=1400 audit(1784672474.869:840): avc: denied { write } for pid=5092 comm="syz.1.424" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.008752][ T5100] loop0: detected capacity change from 0 to 512 [ 95.015202][ T5098] loop2: detected capacity change from 0 to 512 [ 95.038094][ T5100] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.429: EA inode hash validation failed [ 95.050706][ T5100] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.429: corrupted inode contents [ 95.060496][ T5098] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.428: inode has both inline data and extents flags [ 95.062525][ T5100] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.062741][ T5100] EXT4-fs (loop0): Remounting filesystem read-only [ 95.062765][ T5100] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -30) [ 95.062835][ T5100] EXT4-fs (loop0): 1 orphan inode deleted [ 95.110459][ T5098] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.114157][ T5098] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.428: couldn't read orphan inode 15 (err -117) [ 95.114675][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 95.114737][ C1] EXT4-fs (loop2): initial error at time 1784672475: ext4_orphan_get:1399: inode 15 [ 95.114919][ C1] EXT4-fs (loop2): last error at time 1784672475: ext4_orphan_get:1399: inode 15 [ 95.200440][ T5098] loop2: lost filesystem error report for type 5 error -117 [ 95.216235][ T28] audit: type=1400 audit(1784672475.129:841): avc: denied { write } for pid=5097 comm="syz.2.428" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.255528][ T28] audit: type=1400 audit(1784672475.169:842): avc: denied { write } for pid=5097 comm="syz.2.428" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.334000][ T5109] EXT4-fs (loop1): 1 orphan inode deleted [ 95.340608][ T5114] ext4: Unknown parameter 'euid>00000000000000000000' [ 95.449297][ T5120] FAULT_INJECTION: forcing a failure. [ 95.449297][ T5120] name failslab, interval 1, probability 0, space 0, times 0 [ 95.496009][ T5120] CPU: 0 UID: 0 PID: 5120 Comm: syz.4.436 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 95.496052][ T5120] Tainted: [W]=WARN [ 95.496092][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 95.496111][ T5120] Call Trace: [ 95.496117][ T5120] [ 95.496124][ T5120] __dump_stack+0x1d/0x30 [ 95.496154][ T5120] dump_stack_lvl+0x95/0xd0 [ 95.496182][ T5120] dump_stack+0x15/0x1b [ 95.496246][ T5120] should_fail_ex+0x25e/0x270 [ 95.496286][ T5120] should_failslab+0x8c/0xb0 [ 95.496310][ T5120] __kmalloc_noprof+0xd4/0x4a0 [ 95.496422][ T5120] ? ext4_find_extent+0x17f/0x7a0 [ 95.496490][ T5120] ? ext4_find_extent+0x17f/0x7a0 [ 95.496605][ T5120] ext4_find_extent+0x17f/0x7a0 [ 95.496641][ T5120] ext4_ext_map_blocks+0x10b/0x2f30 [ 95.496753][ T5120] ? ext4_getblk+0x20b/0x540 [ 95.496779][ T5120] ? skb_free_head+0x53/0x220 [ 95.496826][ T5120] ? folio_mark_accessed+0x240/0x3a0 [ 95.496854][ T5120] ? invalidate_inode_pages2_range+0x3da/0x410 [ 95.496898][ T5120] ? find_get_block_common+0x675/0x870 [ 95.496935][ T5120] ext4_map_query_blocks+0xa1/0x500 [ 95.497031][ T5120] ? ext4_es_lookup_extent+0x390/0x4f0 [ 95.497116][ T5120] ext4_map_blocks+0x300/0x950 [ 95.497145][ T5120] ext4_iomap_begin+0xa24/0x1000 [ 95.497253][ T5120] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 95.497289][ T5120] iomap_iter+0x3ae/0x750 [ 95.497329][ T5120] __iomap_dio_rw+0x83d/0x1410 [ 95.497466][ T5120] iomap_dio_rw+0x40/0x90 [ 95.497512][ T5120] ext4_file_write_iter+0xc2d/0xef0 [ 95.497591][ T5120] do_iter_readv_writev+0x4f6/0x5a0 [ 95.497627][ T5120] vfs_writev+0x2d1/0x8b0 [ 95.497661][ T5120] ? get_pid_task+0x92/0xc0 [ 95.497687][ T5120] __se_sys_pwritev2+0xfc/0x1c0 [ 95.497711][ T5120] __x64_sys_pwritev2+0x67/0x80 [ 95.497794][ T5120] x64_sys_call+0xe07/0x3020 [ 95.497825][ T5120] do_syscall_64+0x136/0x3c0 [ 95.497858][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.497925][ T5120] RIP: 0033:0x7fb97787de99 [ 95.497968][ T5120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.497994][ T5120] RSP: 002b:00007fb9762d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 95.498088][ T5120] RAX: ffffffffffffffda RBX: 00007fb977b05fa0 RCX: 00007fb97787de99 [ 95.498109][ T5120] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000006 [ 95.498127][ T5120] RBP: 00007fb9762d7090 R08: 000000000000ff01 R09: 0000000000000003 [ 95.498141][ T5120] R10: 0000000000006400 R11: 0000000000000246 R12: 0000000000000001 [ 95.498153][ T5120] R13: 00007fb977b06038 R14: 00007fb977b05fa0 R15: 00007ffe8435fe48 [ 95.498173][ T5120] [ 95.948839][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.958541][ T5137] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.005795][ T5145] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 96.014256][ T5145] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.020641][ T5145] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.447: bad orphan inode 15 [ 96.030716][ T5145] loop2: lost filesystem error report for type 5 error -117 [ 96.032719][ T5145] ext4_test_bit(bit=14, block=5) = 0 [ 96.097013][ T5145] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 96.151606][ T5160] FAT-fs (loop0): bogus number of reserved sectors [ 96.158236][ T5160] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 96.167541][ T5160] FAT-fs (loop0): Can't find a valid FAT filesystem [ 96.247703][ T5175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.257429][ T5175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.303021][ T5180] netlink: 'syz.6.459': attribute type 30 has an invalid length. [ 96.368114][ T5184] __nla_validate_parse: 10 callbacks suppressed [ 96.368138][ T5184] netlink: 32 bytes leftover after parsing attributes in process `syz.6.461'. [ 96.430579][ T5185] netlink: 32 bytes leftover after parsing attributes in process `syz.6.461'. [ 96.462809][ T5184] netlink: 104 bytes leftover after parsing attributes in process `syz.6.461'. [ 96.472580][ T5184] netlink: 144 bytes leftover after parsing attributes in process `syz.6.461'. [ 96.509240][ T5184] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.461: bg 0: block 127: padding at end of block bitmap is not set [ 96.510839][ T5189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.462'. [ 96.523550][ T5184] loop6: lost filesystem error report for type 5 error -117 [ 96.539173][ T5184] EXT4-fs error (device loop6): ext4_free_inode:356: comm syz.6.461: bit already cleared for inode 11 [ 96.549977][ T5189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.462'. [ 96.558218][ T5184] EXT4-fs (loop6): 1 orphan inode deleted [ 96.603226][ T5189] netlink: 104 bytes leftover after parsing attributes in process `syz.4.462'. [ 96.625916][ T5189] netlink: 144 bytes leftover after parsing attributes in process `syz.4.462'. [ 96.665774][ T5194] FAULT_INJECTION: forcing a failure. [ 96.665774][ T5194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.678984][ T5194] CPU: 1 UID: 0 PID: 5194 Comm: syz.6.463 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 96.679017][ T5194] Tainted: [W]=WARN [ 96.679024][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 96.679066][ T5194] Call Trace: [ 96.679075][ T5194] [ 96.679085][ T5194] __dump_stack+0x1d/0x30 [ 96.679143][ T5194] dump_stack_lvl+0x95/0xd0 [ 96.679169][ T5194] dump_stack+0x15/0x1b [ 96.679200][ T5194] should_fail_ex+0x25e/0x270 [ 96.679239][ T5194] should_fail+0xb/0x20 [ 96.679273][ T5194] should_fail_usercopy+0x1a/0x20 [ 96.679336][ T5194] _copy_to_user+0x20/0xa0 [ 96.679363][ T5194] btf_get_info_by_fd+0x12e/0x4a0 [ 96.679401][ T5194] bpf_obj_get_info_by_fd+0x6e4/0x2320 [ 96.679421][ T5194] ? terminate_walk+0x1d5/0x200 [ 96.679499][ T5194] ? path_openat+0x1ae6/0x2000 [ 96.679555][ T5194] ? _parse_integer_limit+0x177/0x1a0 [ 96.679635][ T5194] ? _parse_integer+0x27/0x40 [ 96.679715][ T5194] ? kstrtoull+0x111/0x140 [ 96.679752][ T5194] ? selinux_bpf+0xc7/0xe0 [ 96.679786][ T5194] __sys_bpf+0x908/0xc30 [ 96.679881][ T5194] ? vfs_write+0x780/0x990 [ 96.679913][ T5194] __x64_sys_bpf+0x69/0x80 [ 96.679949][ T5194] x64_sys_call+0x10cb/0x3020 [ 96.679983][ T5194] do_syscall_64+0x136/0x3c0 [ 96.680071][ T5194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.680095][ T5194] RIP: 0033:0x7f8781eede99 [ 96.680111][ T5194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.680133][ T5194] RSP: 002b:00007f8780947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.680157][ T5194] RAX: ffffffffffffffda RBX: 00007f8782175fa0 RCX: 00007f8781eede99 [ 96.680181][ T5194] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 000000000000000f [ 96.680272][ T5194] RBP: 00007f8780947090 R08: 0000000000000000 R09: 0000000000000000 [ 96.680315][ T5194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.680330][ T5194] R13: 00007f8782176038 R14: 00007f8782175fa0 R15: 00007ffce8075278 [ 96.680367][ T5194] [ 96.985425][ T5178] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.007599][ T5189] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.462: bg 0: block 127: padding at end of block bitmap is not set [ 97.025227][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 97.032455][ C1] EXT4-fs (loop4): initial error at time 1784672476: ext4_validate_block_bitmap:441 [ 97.042135][ C1] EXT4-fs (loop4): last error at time 1784672476: ext4_validate_block_bitmap:441 [ 97.053232][ T5189] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.462: bit already cleared for inode 11 [ 97.065418][ T5189] EXT4-fs (loop4): 1 orphan inode deleted [ 97.092162][ T5189] syz.4.462 (5189) used greatest stack depth: 8320 bytes left [ 97.333155][ T5219] set_capacity_and_notify: 9 callbacks suppressed [ 97.333175][ T5219] loop0: detected capacity change from 0 to 512 [ 97.334598][ T5220] netlink: 32 bytes leftover after parsing attributes in process `syz.2.473'. [ 97.355061][ T5219] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.358178][ T5220] netlink: 32 bytes leftover after parsing attributes in process `syz.2.473'. [ 97.378516][ T5220] loop2: detected capacity change from 0 to 512 [ 97.386156][ T5219] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #16: comm syz.0.474: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 97.403400][ T5219] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 97.403685][ T5219] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.474: couldn't read orphan inode 16 (err -117) [ 97.405193][ T5220] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.473: bg 0: block 127: padding at end of block bitmap is not set [ 97.413008][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 97.424595][ T5220] fserror_report: 3 callbacks suppressed [ 97.424610][ T5220] loop2: lost filesystem error report for type 5 error -117 [ 97.438841][ C1] EXT4-fs (loop0): initial error at time 1784672477: ext4_ext_check_inode:521: inode 16 [ 97.438905][ C1] EXT4-fs (loop0): last error at time 1784672477: ext4_ext_check_inode:521: inode 16 [ 97.440279][ T5219] loop0: lost filesystem error report for type 5 error -117 [ 97.440538][ T5219] EXT4-fs (loop0): 1 orphan inode deleted [ 97.442125][ T5219] FAULT_INJECTION: forcing a failure. [ 97.442125][ T5219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.442222][ T5219] CPU: 1 UID: 0 PID: 5219 Comm: syz.0.474 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 97.442260][ T5219] Tainted: [W]=WARN [ 97.442270][ T5219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 97.442346][ T5219] Call Trace: [ 97.442355][ T5219] [ 97.442365][ T5219] __dump_stack+0x1d/0x30 [ 97.442395][ T5219] dump_stack_lvl+0x95/0xd0 [ 97.442423][ T5219] dump_stack+0x15/0x1b [ 97.442474][ T5219] should_fail_ex+0x25e/0x270 [ 97.442515][ T5219] should_fail+0xb/0x20 [ 97.442548][ T5219] should_fail_usercopy+0x1a/0x20 [ 97.442585][ T5219] strncpy_from_user+0x27/0x250 [ 97.442675][ T5219] do_getname+0x59/0x1c0 [ 97.442710][ T5219] getname_flags+0x1d/0x30 [ 97.442745][ T5219] __x64_sys_getxattr+0xfd/0x150 [ 97.442796][ T5219] x64_sys_call+0x24ce/0x3020 [ 97.442835][ T5219] do_syscall_64+0x136/0x3c0 [ 97.442867][ T5219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.442969][ T5219] RIP: 0033:0x7f2f9935de99 [ 97.442989][ T5219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.443014][ T5219] RSP: 002b:00007f2f97db7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 97.443039][ T5219] RAX: ffffffffffffffda RBX: 00007f2f995e5fa0 RCX: 00007f2f9935de99 [ 97.443153][ T5219] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000040 [ 97.443171][ T5219] RBP: 00007f2f97db7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.443188][ T5219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.443205][ T5219] R13: 00007f2f995e6038 R14: 00007f2f995e5fa0 R15: 00007ffc54842cc8 [ 97.443232][ T5219] [ 97.694957][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 97.702659][ C0] EXT4-fs (loop2): initial error at time 1784672477: ext4_validate_block_bitmap:441 [ 97.712269][ C0] EXT4-fs (loop2): last error at time 1784672477: ext4_validate_block_bitmap:441 [ 97.744642][ T5220] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.473: bit already cleared for inode 11 [ 97.755711][ T5220] loop2: lost filesystem error report for type 5 error -117 [ 97.756045][ T5220] EXT4-fs (loop2): 1 orphan inode deleted [ 97.799307][ T5226] loop0: detected capacity change from 0 to 1764 [ 97.819382][ T5228] netlink: 'syz.2.477': attribute type 7 has an invalid length. [ 97.833099][ T5226] netlink: 'syz.0.476': attribute type 21 has an invalid length. [ 97.867850][ T5228] netlink: 'syz.2.477': attribute type 8 has an invalid length. [ 97.907801][ T5226] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 97.915043][ T5230] netlink: 'syz.6.478': attribute type 9 has an invalid length. [ 97.926778][ T5230] loop6: detected capacity change from 0 to 512 [ 97.944399][ T5230] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.478: bg 0: block 127: padding at end of block bitmap is not set [ 97.964622][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.969949][ T5230] loop6: lost filesystem error report for type 5 error -117 [ 97.971344][ T5230] EXT4-fs error (device loop6): ext4_free_inode:356: comm syz.6.478: bit already cleared for inode 11 [ 97.989747][ T5230] loop6: lost filesystem error report for type 5 error -117 [ 97.998827][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 98.004827][ T5230] EXT4-fs (loop6): 1 orphan inode deleted [ 98.006228][ C0] EXT4-fs (loop6): initial error at time 1784672477: ext4_validate_block_bitmap:441 [ 98.006259][ C0] EXT4-fs (loop6): last error at time 1784672477: ext4_free_inode:356 [ 98.074945][ T5237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.083617][ T5237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.268293][ T5245] loop2: detected capacity change from 0 to 764 [ 98.387528][ T5250] netlink: 'syz.0.487': attribute type 9 has an invalid length. [ 98.403493][ T5250] loop0: detected capacity change from 0 to 512 [ 98.443954][ T5250] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.487: bg 0: block 127: padding at end of block bitmap is not set [ 98.458419][ T5250] loop0: lost filesystem error report for type 5 error -117 [ 98.461348][ T5250] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.487: bit already cleared for inode 11 [ 98.484704][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 98.491180][ C0] EXT4-fs (loop0): initial error at time 1784672478: ext4_validate_block_bitmap:441 [ 98.500595][ C0] EXT4-fs (loop0): last error at time 1784672478: ext4_validate_block_bitmap:441 [ 98.535917][ T5250] loop0: lost filesystem error report for type 5 error -117 [ 98.537867][ T5250] EXT4-fs (loop0): 1 orphan inode deleted [ 99.395261][ T5262] loop4: detected capacity change from 0 to 1024 [ 99.413657][ T5262] EXT4-fs: Ignoring removed bh option [ 99.420672][ T5262] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 99.440059][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 99.440076][ T28] audit: type=1400 audit(1784672479.359:849): avc: denied { write } for pid=5261 comm="syz.4.491" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.470824][ T5262] dns_resolver: Unsupported server list version (0) [ 99.480672][ T28] audit: type=1400 audit(1784672479.399:850): avc: denied { setattr } for pid=5261 comm="syz.4.491" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.543284][ T5268] loop2: detected capacity change from 0 to 764 [ 99.556436][ T28] audit: type=1400 audit(1784672479.469:851): avc: denied { create } for pid=5261 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.627637][ T5268] loop2: detected capacity change from 0 to 256 [ 99.634553][ T5268] vfat: Bad value for 'fmask' [ 99.744057][ T28] audit: type=1400 audit(1784672479.659:852): avc: denied { shutdown } for pid=5272 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.799543][ T28] audit: type=1400 audit(1784672479.719:853): avc: denied { connect } for pid=5274 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.026139][ T3300] EXT4-fs unmount: 32 callbacks suppressed [ 100.026155][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.085220][ T5285] netlink: 'syz.4.498': attribute type 9 has an invalid length. [ 100.096562][ T5285] loop4: detected capacity change from 0 to 512 [ 100.114724][ T5285] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.498: bg 0: block 127: padding at end of block bitmap is not set [ 100.149190][ T5285] loop4: lost filesystem error report for type 5 error -117 [ 100.153808][ T5285] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.498: bit already cleared for inode 11 [ 100.172097][ T5285] loop4: lost filesystem error report for type 5 error -117 [ 100.176526][ T5285] EXT4-fs (loop4): 1 orphan inode deleted [ 100.190235][ T5285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.381765][ T5292] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 100.391153][ T5291] syzkaller1: entered promiscuous mode [ 100.395987][ T5290] xt_socket: unknown flags 0x48 [ 100.402859][ T5291] syzkaller1: entered allmulticast mode [ 100.406571][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.466432][ T5294] netlink: 'syz.6.504': attribute type 7 has an invalid length. [ 100.494896][ T5294] netlink: 'syz.6.504': attribute type 8 has an invalid length. [ 100.558871][ T5307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.567693][ T5294] team0: entered promiscuous mode [ 100.567746][ T5294] team_slave_0: entered promiscuous mode [ 100.568235][ T5294] team_slave_1: entered promiscuous mode [ 100.573270][ T5294] bond0: entered promiscuous mode [ 100.587988][ T5307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.596745][ T5294] bond_slave_0: entered promiscuous mode [ 100.608583][ T5294] bond_slave_1: entered promiscuous mode [ 100.616444][ T5294] erspan0: entered promiscuous mode [ 100.624520][ T5294] debugfs: 'hsr1' already exists in 'hsr' [ 100.632060][ T5294] Cannot create hsr debugfs directory [ 100.639733][ T5294] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 101.062605][ T5313] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.077881][ T5313] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.693376][ T5305] FAULT_INJECTION: forcing a failure. [ 101.693376][ T5305] name fail_futex, interval 1, probability 0, space 0, times 1 [ 101.710029][ T5305] CPU: 0 UID: 0 PID: 5305 Comm: syz.1.507 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 101.710068][ T5305] Tainted: [W]=WARN [ 101.710141][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 101.710154][ T5305] Call Trace: [ 101.710160][ T5305] [ 101.710167][ T5305] __dump_stack+0x1d/0x30 [ 101.710191][ T5305] dump_stack_lvl+0x95/0xd0 [ 101.710272][ T5305] dump_stack+0x15/0x1b [ 101.710301][ T5305] should_fail_ex+0x25e/0x270 [ 101.710340][ T5305] should_fail+0xb/0x20 [ 101.710366][ T5305] get_futex_key+0x596/0xb10 [ 101.710491][ T5305] futex_wake+0x89/0x400 [ 101.710576][ T5305] do_futex+0x3f8/0x460 [ 101.710681][ T5305] mm_release+0x9f/0x180 [ 101.710704][ T5305] exit_mm_release+0x25/0x30 [ 101.710729][ T5305] exit_mm+0x37/0x1a0 [ 101.710865][ T5305] do_exit+0x438/0x1500 [ 101.710894][ T5305] do_group_exit+0xfe/0x140 [ 101.710960][ T5305] ? get_signal+0xe00/0xf10 [ 101.711062][ T5305] get_signal+0xe07/0xf10 [ 101.711099][ T5305] ? fput+0xb7/0xc0 [ 101.711131][ T5305] arch_do_signal_or_restart+0x96/0x480 [ 101.711172][ T5305] exit_to_user_mode_loop+0x15d/0x8c0 [ 101.711199][ T5305] ? __x64_sys_recvmmsg+0xe5/0x170 [ 101.711226][ T5305] do_syscall_64+0x23c/0x3c0 [ 101.711322][ T5305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.711343][ T5305] RIP: 0033:0x7f390400de99 [ 101.711358][ T5305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.711379][ T5305] RSP: 002b:00007f3902a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 101.711398][ T5305] RAX: fffffffffffffe00 RBX: 00007f3904295fa0 RCX: 00007f390400de99 [ 101.711505][ T5305] RDX: 0000000000000001 RSI: 0000200000003a40 RDI: 0000000000000003 [ 101.711524][ T5305] RBP: 00007f3902a67090 R08: 0000000000000000 R09: 0000000000000000 [ 101.711538][ T5305] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 101.711564][ T5305] R13: 00007f3904296038 R14: 00007f3904295fa0 R15: 00007fff118da6b8 [ 101.711582][ T5305] [ 102.780056][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.817576][ T5319] __nla_validate_parse: 19 callbacks suppressed [ 102.817709][ T5319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.511'. [ 102.843777][ T5319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.511'. [ 102.892863][ T5323] set_capacity_and_notify: 1 callbacks suppressed [ 102.892896][ T5323] loop0: detected capacity change from 0 to 128 [ 102.910975][ T5319] netlink: 104 bytes leftover after parsing attributes in process `syz.1.511'. [ 102.949124][ T5323] EXT4-fs: Ignoring removed orlov option [ 102.958187][ T5319] netlink: 'syz.1.511': attribute type 9 has an invalid length. [ 102.972119][ T5323] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.993032][ T5323] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.018870][ T28] audit: type=1400 audit(1784672482.939:854): avc: denied { write } for pid=5322 comm="syz.0.510" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.033800][ T5319] loop1: detected capacity change from 0 to 512 [ 103.065801][ T28] audit: type=1400 audit(1784672482.979:855): avc: denied { write } for pid=5322 comm="syz.0.510" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.139441][ T28] audit: type=1400 audit(1784672483.049:856): avc: denied { watch_reads } for pid=5322 comm="syz.0.510" path="/112/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.187901][ T5319] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.511: bg 0: block 127: padding at end of block bitmap is not set [ 103.203248][ T5319] loop1: lost filesystem error report for type 5 error -117 [ 103.204813][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 103.219700][ C1] EXT4-fs (loop1): initial error at time 1784672483: ext4_validate_block_bitmap:441 [ 103.229301][ C1] EXT4-fs (loop1): last error at time 1784672483: ext4_validate_block_bitmap:441 [ 103.261579][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.273225][ T5319] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.511: bit already cleared for inode 11 [ 103.286444][ T5319] loop1: lost filesystem error report for type 5 error -117 [ 103.287530][ T5319] EXT4-fs (loop1): 1 orphan inode deleted [ 103.321621][ T28] audit: type=1400 audit(1784672483.239:857): avc: denied { create } for pid=5333 comm="syz.6.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 103.335879][ T5319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.362645][ T5334] loop6: detected capacity change from 0 to 1024 [ 103.389083][ T5334] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.409617][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 103.423776][ T5334] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 103.431838][ T5334] EXT4-fs (loop6): orphan cleanup on readonly fs [ 103.445029][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.458405][ T5334] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 103.494234][ T5334] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 103.509134][ T5334] EXT4-fs (loop6): Cannot turn on quotas: error -5 [ 103.527868][ T5341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 103.542471][ T5341] netlink: 'syz.4.519': attribute type 7 has an invalid length. [ 103.561820][ T5339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.571618][ T5339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.581847][ T5341] netlink: 'syz.4.519': attribute type 8 has an invalid length. [ 103.592276][ T5339] rdma_op ffff88811ae3c580 conn xmit_rdma 0000000000000000 [ 103.600392][ T5341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 103.633441][ T5334] EXT4-fs (loop6): 1 truncate cleaned up [ 103.639807][ T5334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.807739][ T5347] loop1: detected capacity change from 0 to 128 [ 103.912646][ T5347] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.925309][ T5347] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.026008][ T5351] FAULT_INJECTION: forcing a failure. [ 104.026008][ T5351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.093441][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.2.521 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 104.093478][ T5351] Tainted: [W]=WARN [ 104.093485][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 104.093518][ T5351] Call Trace: [ 104.093527][ T5351] [ 104.093536][ T5351] __dump_stack+0x1d/0x30 [ 104.093568][ T5351] dump_stack_lvl+0x95/0xd0 [ 104.093600][ T5351] dump_stack+0x15/0x1b [ 104.093622][ T5351] should_fail_ex+0x25e/0x270 [ 104.093688][ T5351] should_fail+0xb/0x20 [ 104.093716][ T5351] should_fail_usercopy+0x1a/0x20 [ 104.093758][ T5351] _copy_from_user+0x1c/0xb0 [ 104.093797][ T5351] sock_do_ioctl+0xe5/0x230 [ 104.093824][ T5351] sock_ioctl+0x439/0x610 [ 104.093855][ T5351] ? __pfx_sock_ioctl+0x10/0x10 [ 104.093964][ T5351] __se_sys_ioctl+0xce/0x140 [ 104.093992][ T5351] __x64_sys_ioctl+0x43/0x50 [ 104.094017][ T5351] x64_sys_call+0x1563/0x3020 [ 104.094051][ T5351] do_syscall_64+0x136/0x3c0 [ 104.094118][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.094197][ T5351] RIP: 0033:0x7feb4f03de99 [ 104.094218][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.094244][ T5351] RSP: 002b:00007feb4da97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.094272][ T5351] RAX: ffffffffffffffda RBX: 00007feb4f2c5fa0 RCX: 00007feb4f03de99 [ 104.094288][ T5351] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 104.094377][ T5351] RBP: 00007feb4da97090 R08: 0000000000000000 R09: 0000000000000000 [ 104.094396][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.094413][ T5351] R13: 00007feb4f2c6038 R14: 00007feb4f2c5fa0 R15: 00007ffe45c5ab18 [ 104.094452][ T5351] [ 104.722411][ T5357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.566141][ T5357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.574809][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.576626][ T4374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.611374][ T5355] netlink: 184 bytes leftover after parsing attributes in process `syz.4.522'. [ 105.790318][ T5369] tmpfs: Too few inodes for current use [ 106.771318][ T5374] loop1: detected capacity change from 0 to 512 [ 106.783223][ T5376] loop6: detected capacity change from 0 to 512 [ 106.789965][ T5374] ext4: Unknown parameter 'euid>00000000000000000000' [ 106.956609][ T5376] ext4: Unknown parameter 'euid>00000000000000000000' [ 107.370331][ T5387] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.669022][ T5401] FAULT_INJECTION: forcing a failure. [ 107.669022][ T5401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.697958][ T5401] CPU: 1 UID: 0 PID: 5401 Comm: syz.0.536 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 107.698002][ T5401] Tainted: [W]=WARN [ 107.698012][ T5401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 107.698050][ T5401] Call Trace: [ 107.698058][ T5401] [ 107.698066][ T5401] __dump_stack+0x1d/0x30 [ 107.698097][ T5401] dump_stack_lvl+0x95/0xd0 [ 107.698119][ T5401] dump_stack+0x15/0x1b [ 107.698144][ T5401] should_fail_ex+0x25e/0x270 [ 107.698283][ T5401] should_fail+0xb/0x20 [ 107.698309][ T5401] should_fail_usercopy+0x1a/0x20 [ 107.698341][ T5401] _copy_from_user+0x1c/0xb0 [ 107.698363][ T5401] kstrtouint_from_user+0x69/0xf0 [ 107.698477][ T5401] ? 0xffffffff81000000 [ 107.698584][ T5401] ? avc_policy_seqno+0x15/0x30 [ 107.698613][ T5401] proc_fail_nth_write+0x50/0x160 [ 107.698637][ T5401] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 107.698659][ T5401] vfs_write+0x252/0x990 [ 107.698683][ T5401] ? __fget_files+0x184/0x1c0 [ 107.698759][ T5401] ? mutex_lock+0x57/0x90 [ 107.698817][ T5401] ksys_write+0xdc/0x1a0 [ 107.698899][ T5401] __x64_sys_write+0x40/0x50 [ 107.698924][ T5401] x64_sys_call+0x27e1/0x3020 [ 107.698993][ T5401] do_syscall_64+0x136/0x3c0 [ 107.699026][ T5401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.699052][ T5401] RIP: 0033:0x7f2f9931e6ce [ 107.699102][ T5401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.699124][ T5401] RSP: 002b:00007f2f97db6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.699161][ T5401] RAX: ffffffffffffffda RBX: 00007f2f97db76c0 RCX: 00007f2f9931e6ce [ 107.699175][ T5401] RDX: 0000000000000001 RSI: 00007f2f97db70a0 RDI: 0000000000000003 [ 107.699192][ T5401] RBP: 00007f2f97db7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.699204][ T5401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.699264][ T5401] R13: 00007f2f995e6038 R14: 00007f2f995e5fa0 R15: 00007ffc54842cc8 [ 107.699291][ T5401] [ 107.964819][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 107.964839][ T28] audit: type=1400 audit(1784672487.869:864): avc: denied { write } for pid=5395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.012523][ T5413] loop0: detected capacity change from 0 to 512 [ 108.019532][ T28] audit: type=1400 audit(1784672487.919:865): avc: denied { write } for pid=5411 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.053512][ T5413] netlink: 60 bytes leftover after parsing attributes in process `syz.0.538'. [ 108.076001][ T28] audit: type=1400 audit(1784672487.969:866): avc: denied { getopt } for pid=5412 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 108.097906][ T5413] netlink: 32 bytes leftover after parsing attributes in process `syz.0.538'. [ 108.115648][ T3020] veth0_vlan: left promiscuous mode [ 108.132784][ T4290] veth0_vlan: entered promiscuous mode [ 108.460093][ T5430] loop4: detected capacity change from 0 to 512 [ 108.485546][ T5430] ext4: Unknown parameter 'euid>00000000000000000000' [ 108.833798][ T5437] loop1: detected capacity change from 0 to 1024 [ 108.848403][ T5437] EXT4-fs: inline encryption not supported [ 108.862867][ T5437] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.895726][ T5437] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.541: lblock 2 mapped to illegal pblock 2 (length 1) [ 108.910321][ T5437] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 108.911634][ T5437] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 108.921127][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 108.921277][ C1] EXT4-fs (loop1): initial error at time 1784672488: ext4_map_blocks:791: inode 3: block 2 [ 108.921807][ C1] EXT4-fs (loop1): last error at time 1784672488: ext4_map_blocks:791: inode 3: block 2 [ 108.958956][ T5437] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.541: Invalid inode table block 1 in block_group 0 [ 108.972256][ T5437] loop1: lost filesystem error report for type 5 error -117 [ 108.977023][ T5437] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 108.995237][ T5437] loop1: lost filesystem error report for type 5 error -117 [ 108.997205][ T5437] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.541: mark_inode_dirty error [ 109.017604][ T5437] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 109.025823][ T5437] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 109.045091][ T5437] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.541: Failed to acquire dquot type 0 [ 109.056605][ T5437] loop1: lost filesystem error report for type 5 error -117 [ 109.058427][ T5437] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 109.076213][ T5437] loop1: lost filesystem error report for type 5 error -117 [ 109.077342][ T5437] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.541: mark_inode_dirty error [ 109.097828][ T5437] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.100836][ T5437] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 109.121880][ T5437] EXT4-fs (loop1): 1 orphan inode deleted [ 109.134203][ T5437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.340084][ T5444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.380763][ T5446] FAULT_INJECTION: forcing a failure. [ 109.380763][ T5446] name failslab, interval 1, probability 0, space 0, times 0 [ 109.400726][ T119] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.484954][ T5444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.533240][ T119] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 109.567847][ T28] audit: type=1400 audit(1784672489.489:867): avc: denied { write } for pid=5416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.593688][ T5446] CPU: 1 UID: 0 PID: 5446 Comm: syz.2.545 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 109.593775][ T5446] Tainted: [W]=WARN [ 109.593782][ T5446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 109.593794][ T5446] Call Trace: [ 109.593801][ T5446] [ 109.593810][ T5446] __dump_stack+0x1d/0x30 [ 109.593836][ T5446] dump_stack_lvl+0x95/0xd0 [ 109.593864][ T5446] dump_stack+0x15/0x1b [ 109.593962][ T5446] should_fail_ex+0x25e/0x270 [ 109.594010][ T5446] should_failslab+0x8c/0xb0 [ 109.594178][ T5446] __kmalloc_noprof+0xd4/0x4a0 [ 109.594202][ T5446] ? set_mcast_msfilter+0x3c/0x180 [ 109.594229][ T5446] ? set_mcast_msfilter+0x3c/0x180 [ 109.594301][ T5446] set_mcast_msfilter+0x3c/0x180 [ 109.594353][ T5446] ip_set_mcast_msfilter+0x239/0x280 [ 109.594395][ T5446] do_ip_setsockopt+0x1720/0x22f0 [ 109.594441][ T5446] ip_setsockopt+0x58/0x110 [ 109.594468][ T5446] udp_setsockopt+0x89/0xa0 [ 109.594512][ T5446] sock_common_setsockopt+0x69/0x80 [ 109.594547][ T5446] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 109.594575][ T5446] __sys_setsockopt+0x184/0x200 [ 109.594628][ T5446] __x64_sys_setsockopt+0x64/0x80 [ 109.594669][ T5446] x64_sys_call+0x2327/0x3020 [ 109.594701][ T5446] do_syscall_64+0x136/0x3c0 [ 109.594734][ T5446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.594774][ T5446] RIP: 0033:0x7feb4f03de99 [ 109.594790][ T5446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.594809][ T5446] RSP: 002b:00007feb4da97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.594833][ T5446] RAX: ffffffffffffffda RBX: 00007feb4f2c5fa0 RCX: 00007feb4f03de99 [ 109.594853][ T5446] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 109.594877][ T5446] RBP: 00007feb4da97090 R08: 0000000000000090 R09: 0000000000000000 [ 109.594892][ T5446] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001 [ 109.594905][ T5446] R13: 00007feb4f2c6038 R14: 00007feb4f2c5fa0 R15: 00007ffe45c5ab18 [ 109.594927][ T5446] [ 109.832394][ T119] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 109.896721][ T28] audit: type=1400 audit(1784672489.749:868): avc: denied { write } for pid=5452 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.943116][ T5437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.955919][ T5437] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.541: Invalid inode table block 1 in block_group 0 [ 109.969255][ T5437] loop1: lost filesystem error report for type 5 error -117 [ 109.971789][ T5437] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 109.989778][ T5437] loop1: lost filesystem error report for type 5 error -117 [ 109.990884][ T5437] EXT4-fs error (device loop1): ext4_quota_off:7325: inode #3: comm syz.1.541: mark_inode_dirty error [ 110.010455][ T5437] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 110.535162][ T5459] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 110.840895][ T5459] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.004654][ T5466] loop2: detected capacity change from 0 to 512 [ 111.069860][ T5466] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.083102][ T5478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.104320][ T5478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.138796][ T28] audit: type=1400 audit(1784672491.059:869): avc: denied { write } for pid=5474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.190722][ T28] audit: type=1400 audit(1784672491.099:870): avc: denied { write } for pid=5492 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.194683][ T5466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.225106][ T5466] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.325230][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.462158][ T5510] loop0: detected capacity change from 0 to 512 [ 111.472492][ T5506] ================================================================== [ 111.480606][ T5506] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 111.488368][ T5506] [ 111.490720][ T5506] write to 0xffff888103efc000 of 8 bytes by task 5508 on cpu 0: [ 111.498462][ T5506] mas_wr_store_entry+0x3b95/0x5a90 [ 111.503711][ T5506] mas_store_prealloc+0x421/0x670 [ 111.508766][ T5506] mmap_region+0x1c69/0x20c0 [ 111.513407][ T5506] do_mmap+0x970/0xbc0 [ 111.517523][ T5506] vm_mmap_pgoff+0x183/0x2d0 [ 111.522158][ T5506] ksys_mmap_pgoff+0xc1/0x310 [ 111.526884][ T5506] x64_sys_call+0x14df/0x3020 [ 111.531592][ T5506] do_syscall_64+0x136/0x3c0 [ 111.536217][ T5506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.542131][ T5506] [ 111.544474][ T5506] read to 0xffff888103efc000 of 8 bytes by task 5506 on cpu 1: [ 111.552051][ T5506] mtree_range_walk+0x35a/0x480 [ 111.556922][ T5506] mas_walk+0x1ac/0x340 [ 111.561100][ T5506] lock_vma_under_rcu+0xc9/0x210 [ 111.566083][ T5506] do_user_addr_fault+0x237/0x1060 [ 111.571254][ T5506] exc_page_fault+0x62/0xa0 [ 111.575799][ T5506] asm_exc_page_fault+0x26/0x30 [ 111.580675][ T5506] [ 111.583015][ T5506] value changed: 0xffff8881023c110e -> 0xffff888103efc000 [ 111.590137][ T5506] [ 111.592473][ T5506] Reported by Kernel Concurrency Sanitizer on: [ 111.598647][ T5506] CPU: 1 UID: 0 PID: 5506 Comm: syz.2.556 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 111.609434][ T5506] Tainted: [W]=WARN [ 111.613248][ T5506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 111.623324][ T5506] ================================================================== [ 111.662082][ T5510] ext4: Unknown parameter 'euid>00000000000000000000'