last executing test programs: 51.42048743s ago: executing program 1 (id=3295): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000001340)={[{@bsdgroups}, {@errors_remount}, {@nombcache}, {@noload}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xff, 0x460, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000100)={0x17c04, 0xffffffffffffffff, 0x6, 0x8100000002}) 51.272804543s ago: executing program 1 (id=3299): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000001a00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0xed) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f00000000c0)=0x4, 0x4) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000240)) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x11) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@block_validity}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@test_dummy_encryption_v1}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$usbfs(0x0, 0x13, 0x400c02) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_pidfd_open(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4d0, &(0x7f00000013c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) write$rfkill(r6, &(0x7f0000000080)={0x9, 0x6, 0xff, 0x1}, 0xffffff66) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaa8248ef000086907415cdaaaaaaaabbbb0331b0bbbbbbbb0400450e002800640000070690", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50406069907801ff"], 0x0) 50.340729715s ago: executing program 1 (id=3308): syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff000800", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x800) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) ioprio_get$pid(0x2, r1) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x6, 0xfe, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x100000000000002}, 0x0, 0xfffffffffffffffc, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x2, 0x0, 0x6}, r1, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ptrace$getenv(0x4201, r1, 0x2, &(0x7f0000000240)) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4880) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfdef) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x220, 0x2, 0xfffffffe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x20) msgsnd(r2, &(0x7f0000000b80)=ANY=[@ANYBLOB="02150c0000000000"], 0x8, 0x800) msgctl$IPC_RMID(r2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = mq_open(&(0x7f0000000940)='!selinuxw\x00\x00\x1f\xd0m\xc3\x7f9\xc9\x8f\xbc\xdeY\x0f\x8f\xa3\x1as\xed\v\xe5}(p\xc9-QZ#\xd2\x14\xa5\xef{\x84\xbf@G\x00\xd9\xe9\xbb\x9a\xffC\xf6\xfe\xdc\xe3o\rC?t\xa6\xedR\xdc\x84\x9f@\x02,>\xb1\x94\xae\nB\x9d#\x1dL|G\x02\x0e\x81\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^6\xc8~\xfdR\xb2\xd2\xa6r~\xf2QL\xd2\x99k\x10J\nP\xf06\x85\xb4\xd5\xaf\xb9K-\xc9\\\xee\xf7\xccn\xffxo\x8dn\xb9c*\xf5Q\x8a\xf1\xd8<\n\x7f\xd2R8\xae\x9d\x88\xa5\xa3\xa5\xe7\x7f\xa2\x83\x9b@2\x94\x7f\x94\x8d\xfc\x8d\xfb\xfb\xc1\xe3\xbaH\xa3\xcd-E_\x8b\x95\xfc\xb1.\xbf\xf8\xca\x15\xcd\x9bT\xc2nR\xb3\x19\xaeTb&\x02d\xd6P\x83!E\xe4${\xa1\x9aI\xb3\xe5E\xe0av}\xf4\xe3\xa1v}\x00\xb2\xe0\x8bo\xea\x15A\x10; \x8c\xa8\xef\xe6$\x1dmU\xe8>\xab0\x9e\xb2\x05\xe1\x86\xc4\xa3\xd3=\x83ZG\x91x}\xe8\x88\x10\x96%\xc2\xe5\x93>\tM\x180\xd7\x8d$@\'\xbap\xc5\xa6\x01Y\xafz\xd6\x04|&\x11\xa2\x7fa\x8d>\xb3\x9b\xc2\x1c\xf8L\xc6\xb0x\x04E\xd5\x1a\x8d\xefD\xaf\x00\x1cAp\x95%U\xec\x0e\x94\va\xf9J,A\xe2\xdff\"d\x8c\xb5\x18\xc9\x96QJ<\xfc\xf92K!G\xbf\xbf', 0x840, 0x224, 0x0) finit_module(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000100adbd7000fedb1f2e68650ecd", @ANYRES32=0x0, @ANYBLOB="2008000001240400140003006e657464657673696d300000000000000800168004000180"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") creat(&(0x7f00000001c0)='./file2\x00', 0x18c) socket(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 49.70971488s ago: executing program 1 (id=3312): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2cfe"]) sendmsg$nl_netfilter(r1, &(0x7f0000002900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000001880)={0x1038, 0xd, 0xb, 0x5, 0x70bd25, 0x25dfdbfc, {0x3, 0x0, 0x3}, [@nested={0x1024, 0xa9, 0x0, 0x1, [@typed={0x7, 0x110, 0x0, 0x0, @str='&.\x00'}, @typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x10}}, @generic, @generic, @nested={0x4, 0x98}, @generic="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"]}]}, 0x1038}, 0x1, 0x0, 0x0, 0x81}, 0x40) syz_open_procfs(0x0, 0x0) unlink(&(0x7f0000000440)='./file0/../file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001400)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x4) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x1000) 48.904834189s ago: executing program 1 (id=3322): syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff000800", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x800) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) ioprio_get$pid(0x2, r1) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x6, 0xfe, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x100000000000002}, 0x0, 0xfffffffffffffffc, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x2, 0x0, 0x6}, r1, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ptrace$getenv(0x4201, r1, 0x2, &(0x7f0000000240)) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4880) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfdef) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x220, 0x2, 0xfffffffe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x20) msgsnd(r2, &(0x7f0000000b80)=ANY=[@ANYBLOB="02150c0000000000"], 0x8, 0x800) msgctl$IPC_RMID(r2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = mq_open(&(0x7f0000000940)='!selinuxw\x00\x00\x1f\xd0m\xc3\x7f9\xc9\x8f\xbc\xdeY\x0f\x8f\xa3\x1as\xed\v\xe5}(p\xc9-QZ#\xd2\x14\xa5\xef{\x84\xbf@G\x00\xd9\xe9\xbb\x9a\xffC\xf6\xfe\xdc\xe3o\rC?t\xa6\xedR\xdc\x84\x9f@\x02,>\xb1\x94\xae\nB\x9d#\x1dL|G\x02\x0e\x81\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^6\xc8~\xfdR\xb2\xd2\xa6r~\xf2QL\xd2\x99k\x10J\nP\xf06\x85\xb4\xd5\xaf\xb9K-\xc9\\\xee\xf7\xccn\xffxo\x8dn\xb9c*\xf5Q\x8a\xf1\xd8<\n\x7f\xd2R8\xae\x9d\x88\xa5\xa3\xa5\xe7\x7f\xa2\x83\x9b@2\x94\x7f\x94\x8d\xfc\x8d\xfb\xfb\xc1\xe3\xbaH\xa3\xcd-E_\x8b\x95\xfc\xb1.\xbf\xf8\xca\x15\xcd\x9bT\xc2nR\xb3\x19\xaeTb&\x02d\xd6P\x83!E\xe4${\xa1\x9aI\xb3\xe5E\xe0av}\xf4\xe3\xa1v}\x00\xb2\xe0\x8bo\xea\x15A\x10; \x8c\xa8\xef\xe6$\x1dmU\xe8>\xab0\x9e\xb2\x05\xe1\x86\xc4\xa3\xd3=\x83ZG\x91x}\xe8\x88\x10\x96%\xc2\xe5\x93>\tM\x180\xd7\x8d$@\'\xbap\xc5\xa6\x01Y\xafz\xd6\x04|&\x11\xa2\x7fa\x8d>\xb3\x9b\xc2\x1c\xf8L\xc6\xb0x\x04E\xd5\x1a\x8d\xefD\xaf\x00\x1cAp\x95%U\xec\x0e\x94\va\xf9J,A\xe2\xdff\"d\x8c\xb5\x18\xc9\x96QJ<\xfc\xf92K!G\xbf\xbf', 0x840, 0x224, 0x0) finit_module(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000100adbd7000fedb1f2e68650ecd", @ANYRES32=0x0, @ANYBLOB="2008000001240400140003006e657464657673696d300000000000000800168004000180"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") creat(&(0x7f00000001c0)='./file2\x00', 0x18c) socket(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 48.690313323s ago: executing program 1 (id=3324): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000000)=0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x1, 0x1, 0x10000000000000, 0x8000000000000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffffe, 0x4dbd}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYBLOB="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", @ANYRESDEC=r2], 0x3c}}, 0x0) 48.600022376s ago: executing program 32 (id=3324): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000000)=0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x1, 0x1, 0x10000000000000, 0x8000000000000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffffe, 0x4dbd}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYBLOB="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", @ANYRESDEC=r2], 0x3c}}, 0x0) 32.070230562s ago: executing program 5 (id=3463): syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x800) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) ioprio_get$pid(0x2, r1) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x6, 0xfe, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x100000000000002}, 0x0, 0xfffffffffffffffc, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x2, 0x0, 0x6}, r1, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ptrace$getenv(0x4201, r1, 0x2, &(0x7f0000000240)) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4880) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfdef) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x220, 0x2, 0xfffffffe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x20) msgsnd(r2, &(0x7f0000000b80)=ANY=[@ANYBLOB="02150c0000000000"], 0x8, 0x800) msgctl$IPC_RMID(r2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = mq_open(&(0x7f0000000940)='!selinuxw\x00\x00\x1f\xd0m\xc3\x7f9\xc9\x8f\xbc\xdeY\x0f\x8f\xa3\x1as\xed\v\xe5}(p\xc9-QZ#\xd2\x14\xa5\xef{\x84\xbf@G\x00\xd9\xe9\xbb\x9a\xffC\xf6\xfe\xdc\xe3o\rC?t\xa6\xedR\xdc\x84\x9f@\x02,>\xb1\x94\xae\nB\x9d#\x1dL|G\x02\x0e\x81\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^6\xc8~\xfdR\xb2\xd2\xa6r~\xf2QL\xd2\x99k\x10J\nP\xf06\x85\xb4\xd5\xaf\xb9K-\xc9\\\xee\xf7\xccn\xffxo\x8dn\xb9c*\xf5Q\x8a\xf1\xd8<\n\x7f\xd2R8\xae\x9d\x88\xa5\xa3\xa5\xe7\x7f\xa2\x83\x9b@2\x94\x7f\x94\x8d\xfc\x8d\xfb\xfb\xc1\xe3\xbaH\xa3\xcd-E_\x8b\x95\xfc\xb1.\xbf\xf8\xca\x15\xcd\x9bT\xc2nR\xb3\x19\xaeTb&\x02d\xd6P\x83!E\xe4${\xa1\x9aI\xb3\xe5E\xe0av}\xf4\xe3\xa1v}\x00\xb2\xe0\x8bo\xea\x15A\x10; \x8c\xa8\xef\xe6$\x1dmU\xe8>\xab0\x9e\xb2\x05\xe1\x86\xc4\xa3\xd3=\x83ZG\x91x}\xe8\x88\x10\x96%\xc2\xe5\x93>\tM\x180\xd7\x8d$@\'\xbap\xc5\xa6\x01Y\xafz\xd6\x04|&\x11\xa2\x7fa\x8d>\xb3\x9b\xc2\x1c\xf8L\xc6\xb0x\x04E\xd5\x1a\x8d\xefD\xaf\x00\x1cAp\x95%U\xec\x0e\x94\va\xf9J,A\xe2\xdff\"d\x8c\xb5\x18\xc9\x96QJ<\xfc\xf92K!G\xbf\xbf', 0x840, 0x224, 0x0) finit_module(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000100adbd7000fedb1f2e68650ecd", @ANYRES32=0x0, @ANYBLOB="2008000001240400140003006e657464657673696d300000000000000800168004000180"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") creat(&(0x7f00000001c0)='./file2\x00', 0x18c) socket(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 30.730234002s ago: executing program 5 (id=3470): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x19, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 5) 30.315137802s ago: executing program 5 (id=3472): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x68a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000c2bd0001032abd7000fcdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x400000c0}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0xe, 0x0, 0x1, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x3, 0x9, 0x82, 0x2, 0xa0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x70}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001080)=@allocspi={0x1e4, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in6=@private2, @in=@local, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@sa={0xe4, 0x6, {{@in=@rand_addr=0x64010100, @in=@private=0xa010100, 0x4e22, 0x86ec, 0x4e23, 0x3, 0xa, 0xa0, 0x1a0, 0x3a, 0x0, 0xee01}, {@in=@rand_addr=0x64010102, 0x4d2, 0x33}, @in=@local, {0x100, 0x4, 0x9, 0x66d, 0x10000, 0x5, 0x1, 0x200}, {0x1, 0xb0b2, 0x0, 0x6}, {0x2, 0xbd, 0x5}, 0x70bd25, 0x3506, 0xa, 0x0, 0x0, 0x5}}, @iptfs_init_delay={0x8, 0x27, 0x3}]}, 0x1e4}}, 0x4808) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02fe746d77000300000000000400010000000000200002000000000020f6020000000000"], 0x24, 0x2) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd6", 0xc) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x4}]) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4880) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4c840) r6 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, 0x0) 29.315263046s ago: executing program 5 (id=3481): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000000800)="$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") write(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) close(0xffffffffffffffff) syz_clone(0x82200011, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, 0x0, 0x4008090) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000000000001000000000000000b02000000006100302e610061610061"], 0x0, 0x58}, 0x28) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1020, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffff, 0x10000000000}, 0x102360, 0xffff, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ftruncate(0xffffffffffffffff, 0x200c17a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000070101b9a5e41000a986c553a6a8567200000008000640f500454300"], 0x30}, 0x1, 0x0, 0x0, 0x24044064}, 0x800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) fstat(r5, &(0x7f0000000000)) socket$inet6(0xa, 0x1, 0x0) 28.999679253s ago: executing program 5 (id=3485): socket(0x15, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1, 0x301f699}, 0x250, 0x1, 0xbd6, 0xe, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0xec9}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000680)={{0x3, 0x3, 0xe85, 0x2, 0xf}, 0xfffffffffffffff7, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r3, 0x9, 0xfffffffd, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) r6 = io_uring_setup(0x2942, &(0x7f0000000c00)={0x0, 0xb1c5, 0x8, 0x3, 0x26b}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000d00)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000004500)={{r5}, r7, 0x12, @unused=[0x401, 0xfffffffffffffff2, 0xf88, 0x400], @name="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"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001340)={{r2}, r7, 0x12, @unused=[0x6, 0x7, 0x8, 0x4], @name="194ca26e2e69f5df884c888d8b221e7cd0edae73d12e9bf10a748e04221fd85fbde2ccfd7332e37fd99fc33041bf83571dd10931b669a05f469f1f320d5cf6603bff3112a1556b7b321056d148ac995382816c7ff442917f935394f5c0da08c70317c8321beab4d24b9805d9e8a028edbbf010089f49e925b2e6570512835b0ccf4f307ba76fed53d2444e38783b50e322da2850524ccd61ec977b787be487bc17154b65b0f27d165d93129a47cf6f7667e51271cd8ae02b2f95690c8b6006ce13decd225d0dc7f202dba9105682a7873c97f11796a17e61c58b0e9722b784ebdceb4d741f8dadce06fe1fe5260beefef97f3b1b387ed276e73bf7dccb349f020e9a354ed4330e9dfecc7f506bc06ce683639c7ba098a9e45c679d13a0e09955fa547ebc8e691b1148f47459893621b71a73cff56445eaac30722b1ad499f4fa12ed849c2c53c2519b099fe3d73cceace97af1fa84c3517d3b9f97f180bbd0d54bd0c49043525fd1ef0a385910d3e0132f658233e4175bff1e2dd1e1dea2f0bc9293b737ec61c8386b62d4777978f4cb6d457ec8df7c4b1243fc71a3b9be5927f87b246fdfeb918edd3f406d46d6657af821c7ebc8c761bd804ceabaa12ea38bc5ec57d9feed8e28c570643fdb2487e5b0bf2530205f1ca189af675c50d3288b4375b5159c4decd7d13e59679661b6d0d43fdff925152e883c37a75c828ea0419a97f1ca57ef57e0a2d8da570ea40d569d6ce9f9eae41c471c7d91aa7aa2de2054f38c70c81d4dca6a89422d7eb84d0f7d6a5e541c0c4147e439f52b087bc3fc72dbd9938f24f906a846ede883ddf01c59da5b5d36f24f641f6dfe605c895de8f88be820637aa2dacac42c23139e38a1c2f94396bede446a467d0e5a79e8339ef5fb62f666c796359ee25d12a161fa0d8d9bc46da08cc10fd88a94e1d46fd830cb9f571f1e4af87e239aceba505211dba864fb19b1716b25e1723401474f9d6891c054e3d67d9aad568626d35aca1b5f7bd6f5f722e713410f1c7677c237315635e03bcca00db2efe5d8e7df98a1b64b656bc5086169afd86e4cb7d54c1d1dcee520a48feca22b8c1c4ed2ef2cf1040727ac09bf55381a86750ce465b8147220356b8f4606b2d61e22c68de82c21291bb8450a2211477f1256792065e402a32afacbde7ee2cada4846031f1b37f679bc7cadf61211629ae0419f22b81c23e0feb68e292f9044904e309ebd6920c970e04b950788b80d5efe4167d7cd03adf432f541b5d2ffdaf08c5ebad697919aa04e11c4f0c73b5074c7a7c9fc32ac955b0cfb1138f0c162dd5c18776d6c1da21cc2aabd99dce26fc7341dbb8b4e7521275cac6df53e6b11435a2f1acb45d42762cdce14f438fa327cb9da276704754b86adf2320de159ea207ea4e393efefb7039e9bb3a91a49ec20f6eb577ca09ef1c8aec68adaa4f3f2f78c18afb9fdacb19716efad0c6d574e60acd80609731dd07dcaf47f8507ace461dff7d94bbf8a3ffa22e05a9cafa6235360ce8922debb55ac6c906d5aa76ffd1e5051afe0b6c69bd27869d9c4049310531680ee60a1aad73714546e784e0168423db91cf7305c29797d6a9f881414ac8caccbc249370bffeac4d4d705d0a606d7c9878494558551bc729d5396d2de4022d4c553e6de1355971229eb5780ec35561c0d95b1800f9cb1b5e7566f6fe310c6fdc916d8caf67b8a144e92ddfd56844a92f84ade9fedaec2ea56f003b41caf7b89d83d74442d07c557c8310a5a0090671a9b383a086570591349b7a0ad6d1af9f80939c5675fc7e7cf3ef3d3c765426a4390ba11ccf3afcd7113c1a48c165e17d9fe4cb1014c491a29d64390e2eaf2fbb633fed9643e392ff9a0e976a7efc02670fb6e510ef7bb9530031b273dbc59123839b669bb7f72a012d75675bc101fd68d9d08852dd4e369b8980d69b1a6bf9c6f6552dd8c93aedf5fc05e2dce871cefb74a9d81af45ce4aaee9f9e68ec6ebcbaf7359aa7658351aa20adff9171826192d42a8e97958297bb73d7cd2789cb98968d8e46e1dd58d1214c020fe69e3871698bc304dcea3ef9a67431186ffb4745ef79c8680f993665bd5aa551b950bb5838cf9d017e24de1e1b82b0bc2028e0c3cd944aed506dfce55d71cb9f946aa74580fe4986ae69ec17d542582a861104b76127077a5e2097b8a918cd8cfb5372c7688fe1c0887ed1a0c79de08ff109d59b946f3ca918529ae16e93dca7b8a1466abd5de9a034fafc4e6212cadcacf92103fca548f5d40c6fa5a31e4ac357029dc4ffe8fb55707ac4720679cb2fa69af08abee3d570531de6bf95866a47bc1ff066b75756ec6fb5c1178d3de4666dab3e8fce691965d0bef40f12a0985a98cb11a4b9939963766cb05a2ab106586691537766add225faf142aa1e49102806588efcf0956388618f50da16682396f00d226c5cfb4b461aaf81d6d0507cb259aac40202ab9e5be8cf87e2b30adb025c29ce37e0a108e269d3309537e0cc1dda143b1e1012c2a8de95b77e07fc3743ae57c009165a495197a83507664ab94f18c71d7483f2849429b5d9490d82469d5253a81bf6fd2ddbcf535b0046269e1bc1cbf18e29184680ebf8def06df1a48257b1b7c81470e19a369bf08d830d9cc5b37e98c09480319f6bd08adc99824b7749bb29420e0b8a1824ab67ab83429413f10c8c6e1a93bee58527bf995d09cf68665b4fbbc9e744fd204348c0a19bc55ee569ad958f755e2a454c78571f44530c265e5c452854fa251b6d86b177a0186229688ebc41472635033937de339f2fbb32624255e355b34c51ac7d46c62c5af07f61cc1de0f6c3564a67942cc56ffed5aec8677f09483635b17c11320360fa7c73de8b511c0b2fa077ec6afc190fade39795acc1abae69b4862766d8ba0a0c2dd1d6c92994e95f264bc6a1eb8ba763294a500d0cee5c6a942d602b96a3a2d40ffe0dbbd0eb83feabf09d71668306e2ce34b29fcf127405a6eee8de3c62398138fcff0738c65e07900422a3c5dfeb2812e6c83609e7ac0a9fc0038923f5570f46dabc7291c1ffdc1287065c3f4973d2951dc6a810dd473cd74810191e2d39b18819bcb60d09b39779e82c91bad36c686248066d9a4ad87b2236b4e22b655a17ba1eb4234c2e23aa6a9fefef9d3b32cfcf0d19e34da026b78942e9e8dd649dd6dbcb32c8f9bd4a3222f222b40a84ba82c8abbde18a86fa5ca4153e76a6cd5dba8790c06d211292abbc9271c64be319c9511dc745f1feee311aa1ca9689452927a43c2692ad670f36db43e7018d40dda0fc2b04332624d02f69c5cdad823bf869ccd40e621fa88cb84363a542ee917ea53029bc359c71e476688f3122a9474f14ccd27fc0afd1e52cd43c9656e628a97d2f90bd082d930fbf9f48392a1a10993a30ea043cb9fc7c302455a94c86b63bf461aa82d8798eefcb9b65d206a265d78f94511f54c12923c828d01700771fc1bc0949d184ca7dfb4dde05e8ba14b870322be0e0c7022a8c77d6f2c1818bbdb0d1616547f63157b84bdf16078b72dfcf56b0db8977fdd15f1c4ca0f27345e734064d370aee92e0f23762664ae365965a0978224953710fd524a1e09d8585fb2069e0e5ed0595761cb7b72a29333debfb8be2b9ac83973925133443d9a8da1874d46a167e8c75f32a5b8877b13dc7a99bde206df712141cf83669d169fa62e23ace08853b8d6b57eeb279bf74d7565f9bfb291ea50d41a7a194ee44fa2d4bb8f522bc627f316c4e4b99a30ba37f00f034d75f0659e69d16f235fb65fa14a5c173b28490e7012b1657006d84814ff0398a4be27f5653b3fd8d8bcc28d74899a94895c456f0de67352ecaa711be5372a0910aa908510a4b28859b41f0b9be8a0fe09318f416eabeae351c47ea8bf586e2ccf7ac1de7d9c82123cac2d56236c4e6a2546487739a55451e36546cba10907fa8bc1009fd17f856887c2f8ef7f5c6d20ebc417e9fe39e598b076b56d2c8ead012ea78a5193933c92087579709b66e70abba890cacea23cdf0ae662e3cb71d77ff40af9cef7839b0254d5dab3bcbb2723c5479de4f81a91e799c5ba84810c7b0acc26ed8f25caffdf39b54eb85c0ca6028ed08f064a6fc3fe8cc36b8eb736264d0a96ed2f51c987b8526dd9a0d20bfee9120f25349701b6d465c0bc9037c50ae2b309682f306b9a7ceaa6402d76fe17eeeba659eb4f2d59863e60afd5b809fe8be05783417a0a05c6203074d68947c2c2dc09b66007ead5ad814d38b2ad3cf234a217d1d30d0d72aee5961e13702abc2d72ea22ee65168a7fccf30a4ec049cac7646b573dc44b3791d47067b7d3120622ba205e19ec785f394667218391cbe37043aad3245921e1ac1520a3ce85e76aba1744fc0ab5a90ec04ff9d5f128c863dc76c860284aabb82da3d4f68a172ae417e4c87ba8b82693bf797a3989e91520c7ba486c321c0918e331b7ce92dde1be81a8db85bde97d2bca5aab58e1eb3acb5fc1ba6a5740bd011532d001051b59bd7494abfdd6f6b0fb2c70dae9ec7d4da5bbcb18ef9755d9d0393b03d65b3765e9b6c33c5c2105e5e986a3869e8ea2dcf7d6a07d91aac069a873d523af51a9739851b7a67e77583fefbf6051eaacc7984a0f38cd6f54c9d959f80d37acdafc09542e5ceb2642e5be73e3b4bede331273c360eb9adf8829a5ef633b8e807ed75ade5423a9db6424389e243b458b4ceffe1c16cd4ba56fbd9e00b8ee6573bc6c31c9eca2d2ec42cf4404337194c86226f3133a35d9237aa637bb4a6d7d4ff95e77338922bf3f99cd9efd9c92eaa097941e2470d8e5674c283d8e1a81716ab8e556360c8cd2316a6c01a1c85ae724fa218be2ec29332c1850250f343fd31cf348d3458707518438fa7c9d0cfc95b3cc76f2d9b27f8d7af55992b350014b8da5a7a4716b0368fde7b2e6c06afff5885868b270b5ddb0cb82ec04c5223cf23efa9a49de85a62f83db198468343640b16788d0c1a3e7a5d5d041dff7412c3af2bcb7c5825d1f5e01065580adbfb9c9c8e49f06ec0737c51b56ad803b5d89f5eb55312962af0645852eb5832c2ec4eb633988d6e6bfaba7eb556f2afebf54b01b1594b1c0f92084abad5a924b8206261820f85e666c0474a5fa5041f3e9c990a7398de220852458c7899030b7873d78cb0f43283e97f57afd04e5052fd10dfaa173aa9b41df9037fe53c58777d582a2f5fb83c8c779b760f68b8b4daeb7e8fdb5aae28b46fa31253de1c15ee65e2d15c544bbabb0bc4f6779cee4b3a940e0f21fcbf65b09bd7afa36321bed512dca3bd477bbc86c2bb36f9b1af0cacaf222ce87653926341890626eb5ff18cf20cd94d32a3566a8a0401187c3991b999a043746ccc04544554fe47bcc813d0c681b16266f095d814d760ff657e026bae8c38f25ff4989bdb04493e6203c9706dfe328848d3229ff022c98ef45985ef60151743c0dac20279d65291e43945ee95f103e5ce3addec1f9c68fd87586b38b59bab30014294c8cc2582ab78bb8c324a7a8a8c3b9ad50420c2004e0f12e7f94f316bef7a36a217c6240d0df213c84296b1698469071c6b10f2a35a7bcf2c63f653bf55e612d4db56a4ba3a2c6d08f811f4bb160dc9df5c67bd3559fe3197da953dc7d0e23bbee34d37b8f01466de1503c2b8089b4ea1acbe2a3e2475e70aa07d39e35f3bacdf1d5f9fee5d9071b929325"}) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = epoll_create1(0x0) r11 = inotify_init1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000180)={0x10000004}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r13, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x3b07ef0615e3f436) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) syslog(0x4, &(0x7f0000000440)=""/237, 0xed) setsockopt$inet_group_source_req(r9, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) readv(r8, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/53, 0x35}], 0x1) 28.742117359s ago: executing program 5 (id=3492): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0xfc, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}}) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xf}) syz_open_procfs(0x0, 0x0) 28.724583179s ago: executing program 33 (id=3492): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0xfc, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}}) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xf}) syz_open_procfs(0x0, 0x0) 17.670485758s ago: executing program 2 (id=3590): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0xfff, 0x1) name_to_handle_at(0xffffffffffffffff, &(0x7f00000001c0)='./tracefs/dynamic_events\x00', 0x0, 0x0, 0x1b32e3d54c592073) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = gettid() openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) iopl(0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='{^&\xb8\x00', 0x5, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x4000, 0x0) socket(0x10, 0x3, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_create1(0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @local}, 0x2, 0x3, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000100)=0x1) r6 = socket$packet(0x11, 0x1, 0x300) accept4(r6, &(0x7f0000000140)=@sco, &(0x7f0000000200)=0x80, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) 17.501101641s ago: executing program 2 (id=3591): syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0x9, 0xfb, 0x0, 0x3c, 0xc002, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfe, 0x2, @perf_bp={0x0, 0x1}, 0x1c962, 0x0, 0xe, 0x7, 0x9, 0x3, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) syz_emit_ethernet(0x86, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 17.362954955s ago: executing program 2 (id=3593): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r0, 0x0, 0xd) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) 17.362706485s ago: executing program 2 (id=3594): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/195, 0xc3) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x154, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@rand_addr=0x64010102, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x323, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x200}, {0x2f82}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ctr-serpent-avx\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd26, 0x70bd2b, 0x70bd29, 0xe02}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2044810}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000c0dbdf2501000000080003000700000008000400040000000500050003000000050006"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x185093, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000200000f00e49d0004000000"], 0x1c}}, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 16.558714324s ago: executing program 2 (id=3601): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x300, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 16.190752602s ago: executing program 2 (id=3605): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000d40)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$eJzs3M1vFOUfAPDvTF94/7U/xBcQpIpG4ktLy4scvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4t34XxhOejHqRROvejckxHAB9bJmdmZgWXbbLd12affzSab7PDNP93m+M/PsPjPP7gbQtYayP0nE9oj4PSIG8uzdBYbyh1s3Lk38fePSRBKVytt/JdVyN29cmiiLlv+3Lc9UKkV+U4N6L78XMT4zM3W+yI/Mn/1wZO7CxRenz46fnjo9dW7s+PEjh/f1Hxs72pY4s7hu7vlkdu/uE+9eeXPi5JX3f0rSyOOOujjaZSjfuw090+7KOmxHTTrprd2y/5c76UZnAp3UExHZ4eqr9v+B6Iktt7cNxOufd7RxwKqqVCqVRV6VFyrABpZEp1sAdEb5Rp9d/5bLGg09HgjXX8kvgLK4bxVLvqU30jyxv6/u+nZ7G+sfioiTC/98nS2xSvchAABqfZeNf15oNP5L45E80Z/9+V8xhzIYEf+PiJ0R8VBE7IqIhyOqZR+NiMeWWX/9DMm945/02n0H14Js/PdyMbd19/gvLYsM9hS5HdX4+5JT0zNTh4p9cjD6Np2aTqZGF6nj+9d++7LZttrxX7Zk9ZdjwaId13rrbtBNjs+PryTmWtc/i9jT2yj+JMppnCQidkfEnvusY/q53qbblo5/Ec2ftmWVbyKezY//QtTFX0qazk+OvnRs7OjI5piZOjRSnhX3+vnXy281q39F8bdBdvy3Njz/b8c/mGyOmLtw8Ux1vnZuWU+fdZ24/McXTa9piviz7tXK+X9iR3H+9yfvVFf0Fxs+Hp+fPz8a0Z+8ce/6sTvPVubL8ln8Bw807v87486eeDwi9kbEvoh4IrsoLNr+ZEQ8FREHFtkJP7769AdLxN/g+K/NXGkW/+RSxz9qj//yEz1nfri6dPybI6LZ8T9STR0s1rTy+tdqA1ey7wAAAGC9yD8Dn6TDt9NpOjycf4Z/V2xNZ2bn5p8/NfvRucl83nsw+tLyTtdAzf3Q0eLecJkfq8sfLu4bf9WzpZofnpidmex08NDltjXp/5k/ezrdOmDVtWEeDVin9H/oXvo/dKdE/4eupv9D92rU/z9tWnr421VtDLCmWn//v7rY95yAdaiF/r+QPzQfFQDrk+t/6F76P3Slpt+NT1f0lf81T/xb/J7hg9KejZ+I9IFoxsZP9Lb8YxbLSFQG8v6frdnUsEynX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD///u35Ec=") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 16.181346492s ago: executing program 34 (id=3605): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000d40)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 14.850440473s ago: executing program 0 (id=3614): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="e76a4ab300", @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) read$msr(r3, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x4) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r6], 0x22c}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x400, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = mq_open(&(0x7f0000000940)='!selinuxw\x00\x00\x1f\xd0m\xc3\x7f9\xc9\x8f\xbc\xdeY\x0f\x8f\xa3\x1as\xed\v\xe5}(p\xc9-QZ#\xd2\x14\xa5\xef{\x84\xbf@G\x00\xd9\xe9\xbb\x9a\xffC\xf6\xfe\xdc\xe3o\rC?t\xa6\xedR\xdc\x84\x9f@\x02,>\xb1\x94\xae\nB\x9d#\x1dL|G\x02\x0e\x81\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^6\xc8~\xfdR\xb2\xd2\xa6r~\xf2QL\xd2\x99k\x10J\nP\xf06\x85\xb4\xd5\xaf\xb9K-\xc9\\\xee\xf7\xccn\xffxo\x8dn\xb9c*\xf5Q\x8a\xf1\xd8<\n\x7f\xd2R8\xae\x9d\x88\xa5\xa3\xa5\xe7\x7f\xa2\x83\x9b@2\x94\x7f\x94\x8d\xfc\x8d\xfb\xfb\xc1\xe3\xbaH\xa3\xcd-E_\x8b\x95\xfc\xb1.\xbf\xf8\xca\x15\xcd\x9bT\xc2nR\xb3\x19\xaeTb&\x02d\xd6P\x83!E\xe4${\xa1\x9aI\xb3\xe5E\xe0av}\xf4\xe3\xa1v}\x00\xb2\xe0\x8bo\xea\x15A\x10; \x8c\xa8\xef\xe6$\x1dmU\xe8>\xab0\x9e\xb2\x05\xe1\x86\xc4\xa3\xd3=\x83ZG\x91x}\xe8\x88\x10\x96%\xc2\xe5\x93>\tM\x180\xd7\x8d$@\'\xbap\xc5\xa6\x01Y\xafz\xd6\x04|&\x11\xa2\x7fa\x8d>\xb3\x9b\xc2\x1c\xf8L\xc6\xb0x\x04E\xd5\x1a\x8d\xefD\xaf\x00\x1cAp\x95%U\xec\x0e\x94\va\xf9J,A\xe2\xdff\"d\x8c\xb5\x18\xc9\x96QJ<\xfc\xf92K!G\xbf\xbf', 0x840, 0x224, 0x0) finit_module(r7, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="010000000300000064000000000000000000000000000000000000000000000000000000000000000100000000000000020000000100000002", 0x39}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="010000000300000064000000000000000000000000000000000000000000000000000000000000000000000000000000020000000100000002000000010000", 0x3f}], 0x1}}], 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00007718000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) unshare(0x8040600) 13.938914454s ago: executing program 0 (id=3619): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@noinit_itable}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r1, 0x7f, 0xfffffffffffffff4, 0x4) 13.791256298s ago: executing program 0 (id=3621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x7, 0x10074}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) fcntl$setstatus(r10, 0x4, 0x2000) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r11, 0x5608) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000140)="766744eebbf7a9a335d9c528ae75680bf033ab601fab6ba392650ca3d6bdffbd88fcab58c32415e1822054652414dd3c3c520f150048ff1a5e96cf3947632da137a5a97907b3f0efdf6c79f27b036cf249896d489e038f65c6e9", 0x5a}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 13.190505302s ago: executing program 0 (id=3623): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {}, {@delalloc}, {@usrjquota}, {@minixdf}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r1, &(0x7f0000004200)='r', 0x1) sendfile(r1, r0, 0x0, 0x7fffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='external:', 0x9) 12.926506508s ago: executing program 0 (id=3626): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 12.698887414s ago: executing program 0 (id=3627): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000001a00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0xed) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f00000000c0)=0x4, 0x4) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000240)) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x11) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@block_validity}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@test_dummy_encryption_v1}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$usbfs(0x0, 0x13, 0x400c02) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_pidfd_open(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4d0, &(0x7f00000013c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) write$rfkill(r5, &(0x7f0000000080)={0x9, 0x6, 0xff, 0x1}, 0xffffff66) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1813000074ed0000000000000040000918110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaa8248ef000086907415cdaaaaaaaabbbb0331b0bbbbbbbb0400450e002800640000070690", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50406069907801ff"], 0x0) 12.642485275s ago: executing program 35 (id=3627): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000001a00)="$eJzs3M9vFFUcAPDvbLulgNiK+AMEqSKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM2KX7oy3dsoX9fJLdvrfzuu99Z+bNvJk3bQBdayh9SyIeiIg/ImIgy95eYCj7cfP6xYl/rl+cSKJSefvvpFruxvWLE0XR4ve2ZplKJc9valDvpfcixmdmps7l+ZH5Mx+OzJ2/8OL0mfFTU6emzo4dO3b40J6+o2NH2hJnGteNXZ/M7t55/N3Lb06cuPz+z0kpsrhjSRztMpSt3Yb2t7uyDttWk0560/f+PLf318UljfYEOqknItLNVa72/4Hoic3/LxuI1z/vaOOAdVWpVCotjsoLFeA+lkSnWwB0RnGiT69/i9ddGnpsCNdeyS6A0rhv5q9sSW+UssTe8pLr23YaiogTC7eupK9Yp/sQAAC1vk/HPy80Gv+V4tEs0Ze+PZjPoQxGxEMRsT0iHo6IHRHxSES17GMR8fgq6186Q1I//ildvePgViAd/72cz23dPv4rFUUGe/Lctmr85eTk9MzUwXydHIjyppPTydRoizp+eO33L5stq47/isH4wq0raf3FWDBvx9XeJTfoJsfnx9cSc61rn0Xs6m0Uf1KdF4h8Xm9nROy6wzqmn+ttuqx2/HuiYfwtNP/aFat8HfFstv0XYkn8haTp/OToS0fHjoz0x8zUwZFir6j3y2+X3mpW/5rib4N0+2+pxl9cC9bFP5j0R8ydv3C6Ol87t/o6Lv35RdNrmuXjv23/P74t3//7kneqH/TlCz4en58/NxrRl7xR//nY4rcV+aJ8Gv+BfY37//ZYXBNPRMTuiNgTEU+mF4V525+KiKcjYl+L+H969ZkPVh9/47vy5Rb13Ik0/smGx7+a7R+123/1iZ7TP363fPz9EdFs+x+upg7kn6zk+LfSBq5l3QEAAMC9InsGPikNL6aT4eHsGf4dsaU0Mzs3//zJ2Y/OTmbPyg9GuVTc6RqouR86mt8bLvJjS/KH8vvGX/VsruaHJ2ZnJjsdPHS5rXX9v1RK+3/qr55Otw5Yd22YRwPuUfo/dC/9H7pTsmz/b/cjR8BG4vwP3atR//+0aenhb9e1McBd5fwP3WsF/X8h+9F8VADcm5z/oXvp/9CVmv5tfGlNf/Lf1sSeb7K2tirzb/4vVDZKm+//RJQ2RDPu/0Rv639msT8ilvmecn1frgxkfSr9ZFPD3+roYQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/gsAAP//90bgLQ==") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0xed) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f00000000c0)=0x4, 0x4) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000240)) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x11) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@block_validity}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@test_dummy_encryption_v1}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$usbfs(0x0, 0x13, 0x400c02) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_pidfd_open(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4d0, &(0x7f00000013c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) write$rfkill(r5, &(0x7f0000000080)={0x9, 0x6, 0xff, 0x1}, 0xffffff66) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1813000074ed0000000000000040000918110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaa8248ef000086907415cdaaaaaaaabbbb0331b0bbbbbbbb0400450e002800640000070690", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50406069907801ff"], 0x0) 2.590729069s ago: executing program 3 (id=3706): syz_read_part_table(0x5cc, &(0x7f0000000000)="$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") perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08000209"], 0x0) syz_emit_ethernet(0x96, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200040086dd6018232500602c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa890a020100"], 0x0) 2.355405105s ago: executing program 3 (id=3710): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1, 0x7ff}}, './sys/block/md0/md/array_state\x00'}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1d6b 0003)', 0xa) r2 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r3 = openat(r2, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000d00)=' f 127.0.0.1 2\\00000000 \\\\calhost\n', 0x24) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, &(0x7f0000009480)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYRESDEC=r1, @ANYRES8=r5, @ANYRES8=r6, @ANYRES64=r4], 0x48}}, 0x0) write(r4, &(0x7f0000000540)='c', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) ioctl$FIONREAD(0xffffffffffffffff, 0x8924, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000140)={@desc={0x1, 0x0, @desc1}}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0xfffffffffffffd66, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000100)='(()}^+&)\x00') 1.68944109s ago: executing program 4 (id=3722): syz_clone(0xa306fe00, 0x0, 0xffffffffffffff2c, 0x0, 0x0, 0x0) syz_clone(0xa306fe00, 0x0, 0xffffffffffffff2c, 0x0, 0x0, 0x0) (async) 1.612524742s ago: executing program 4 (id=3724): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x68a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000c2bd0001032abd7000fcdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x400000c0}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0xe, 0x0, 0x1, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x3, 0x9, 0x82, 0x2, 0xa0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x70}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001080)=@allocspi={0x1e4, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in6=@private2, @in=@local, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@sa={0xe4, 0x6, {{@in=@rand_addr=0x64010100, @in=@private=0xa010100, 0x4e22, 0x86ec, 0x4e23, 0x3, 0xa, 0xa0, 0x1a0, 0x3a, 0x0, 0xee01}, {@in=@rand_addr=0x64010102, 0x4d2, 0x33}, @in=@local, {0x100, 0x4, 0x9, 0x66d, 0x10000, 0x5, 0x1, 0x200}, {0x1, 0xb0b2, 0x0, 0x6}, {0x2, 0xbd, 0x5}, 0x70bd25, 0x3506, 0xa, 0x0, 0x0, 0x5}}, @iptfs_init_delay={0x8, 0x27, 0x3}]}, 0x1e4}}, 0x4808) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02fe746d77000300000000000400010000000000200002000000000020f6020000000000"], 0x24, 0x2) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) io_setup(0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x4}]) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4880) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4c840) r5 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, 0x0) 1.390792847s ago: executing program 3 (id=3729): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=@bridge_setlink={0x174, 0x13, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x6001, 0x60001}, [@IFLA_VF_PORTS={0x128, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '$\x00'}, @IFLA_PORT_PROFILE={0x13, 0x2, '/dev/snd/timer\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "4452e24a60bee083afc3246bb46dcd39"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffe}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "76d225b3b01565bf228d43aa27abb658"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b03fb2d2313cef8cb18de725827fd964"}, @IFLA_PORT_PROFILE={0x7, 0x2, '9p\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x9, 0x2, 'rfdno'}, @IFLA_PORT_PROFILE={0x13, 0x2, '/dev/snd/timer\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, 'rfdno'}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_PROFILE={0xd, 0x2, 'trans=fd,'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3a690d3d8ae73f9b2d1be1394b6f64c9"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xdc}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f3fe62d5bf9dde3384d3261ca975ba34"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x36a7}, @IFLA_EVENT={0x8}, @IFLA_PHYS_SWITCH_ID={0xb, 0x24, "4cc73fc416aa33"}, @IFLA_LINK_NETNSID={0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 1.390288697s ago: executing program 7 (id=3730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)={0x13c, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x100, 0xac}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r10, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x81, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x8000, 0x7, 0x5, 0x8, {{0x1a, 0x4, 0x3, 0x3e, 0x68, 0x68, 0x0, 0x7f, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@cipso={0x86, 0x3c, 0x3, [{0x5, 0x6, "8b3154ff"}, {0x2, 0xc, "59c161a688f7f8ab296c"}, {0x2, 0x12, "ec57fa85e1e2d36666117332e7df6060"}, {0x6, 0x5, "289f76"}, {0x2, 0xd, "f7a5c2dd8cd7d28aecb894"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x13, 0x1, [{0x6, 0xd, "76ace9a439dbce250eb4ca"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x40, 0x3ff, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x7, 0x800, 0x1}}) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r16 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r15, r17, 0x25, 0x4, @void}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x194, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 1.342499848s ago: executing program 6 (id=3731): r0 = socket$inet6(0xa, 0xa, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) 1.336426799s ago: executing program 7 (id=3732): syz_emit_ethernet(0x96, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200040086dd6018232500602c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa890a020100"], 0x0) 1.309334989s ago: executing program 8 (id=3733): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="3da39b2ad5defd21d90486407e56e26daf1a5c6f937e2b330e7f2a369d4e1d7d075b45ee8b8b533ce21787a34cc98008199ec62730423ed278abd4e2bb8877d253d1c697ecb90b33871b36094c4147ad2fee445105fc4e7c5c81085705792d8826b0", 0x62}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x2d8) 1.29978438s ago: executing program 7 (id=3734): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) fallocate(r1, 0x10, 0x10c01, 0x8000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x169b43, 0x18) fallocate(r2, 0x20, 0x4000, 0x8000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2025}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.250797491s ago: executing program 6 (id=3735): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0xff, 0x800, 0xffbffffffffffffb, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x800, 0x10000000}, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) close(0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 1.249695621s ago: executing program 8 (id=3736): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x3, 0x3000000, 0x4000010, 0xffffffffffffffff, 0x10000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) keyctl$search(0xa, r1, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000440)={'syz', 0x3}, r0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) 1.140012983s ago: executing program 7 (id=3737): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0xff, 0x800, 0xffbffffffffffffb, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x800, 0x10000000}, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) (fail_nth: 2) close(0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 1.138689763s ago: executing program 8 (id=3738): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x20000002668}, 0x10eccc, 0x1224, 0x0, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) recvfrom$l2tp(r0, &(0x7f0000000300)=""/128, 0x80, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0xff, 0x800, 0xffbffffffffffffb, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x800, 0x10000000}, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) close(0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 797.826141ms ago: executing program 4 (id=3739): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) r1 = openat(0xffffffffffffffff, 0x0, 0x725a02, 0x86) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001580)=ANY=[@ANYBLOB="7c0300001300000225bd7000fedbdf25e0000001000000000000000000000000fe8000000000000000000000000000aa4e2100024e2100030200802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x37c}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '@'}, {0x20, 'nfc\x00'}, {0x20, ' \x01\x00'}, {0x20, '%'}], 0xa, "8f56779677114eac21d8052c6c787fd7d2a651185a47a4fc8fc4421feee0fbe49796826718433351211dfcbb4a4e091084dc7c83c114e35266d7b8c7692565"}, 0x14a) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_procfs(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_hci(r4, 0x0, 0x16, &(0x7f0000001500)=""/3, &(0x7f0000001540)=0x3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") open(&(0x7f0000000000)='./bus\x00', 0x1cd27e, 0x1f6) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000200)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100020000000000040004000000000010000000000000002000070000000000"], 0x24, 0x3) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001280), r3) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x40240d0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffeffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x62) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0xa0) inotify_init1(0x80000) 674.820584ms ago: executing program 4 (id=3740): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x1, 0xe}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shutdown(r5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xed74, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) 487.851199ms ago: executing program 3 (id=3741): prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000948000/0x2000)=nil) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) 467.962019ms ago: executing program 3 (id=3742): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x88000cc, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000500000000000000000000aafe8000000000000000000000000000aa000000000000000000000000880000003148621527431e12d2f079d453732ab21753468c0d4b4ff701bf15323e68051d0c79f0014e86de7c78be465a5f572e3a0f386fff8afb0e0c7f42ba3818a1adf63b3e81b62d9c1cb93d00c1b2060a6813e6369ec1efba9435e9ee61295a593f5023d6e707b75f63af67717e9bed5935d6bf916316d0e64c92340363c081ad93bc952912ce44bdbc5a169132a05f94403af254c1fbe9b6589f17414f9fa8d195f9512c1ddd35bb67ee7b45f1c161f2abc2efc1cf3e1779b3424aafb08fce6b2549204d087bba0c1683f96ae195db9f5aca83712b0853648878f3d1af796c9dff4c5f807b242c33a444530d3fca511dc165758e44a460ebbf34d985c7b6d359e40a019fa8f13d5bbc2baedbe978506fe7468276f28eca9dbf4ad3b581ff10e530af38f4a3f0522d14db1341e1fb6c895abc1ded5001f588b704782a5718e517ce004de22430113254713aa2ab09835a7d17cefc81dac00eb8216dbfb845", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d633000000ff01000000000000000000000000000103000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000220000000000000027bd7000000000000a00000000000000000000004c001400636d6163286165732900"/244], 0x13c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1) mount(0x0, &(0x7f0000000140)='./dev/mapper/control\x00', &(0x7f00000000c0)='aufs\x00', 0x2800026, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="21ae0e3493bd617fe20e44f8a8fd78282c646566636f6e746578743d22227d22226fe68b62f696183f3362e6f16ce6ca40479c9d3b6fd4ccf11db01cd2836c0628ebe62439b8c5968de3ed5b06a9a595bb5dc2dedf33d2a4d2db22d3512cc445b82c77be4406327f84d2c011ac8ae7d0b1957b0f1eb7900f0960cc67de062616b4c74f0f51a4fdc6c491875f11ee01602edb8dcddc31f4a676c6d2cfa7180e936dac084e4e97b029f04facca2d5f9e99dab77d9d9991295ba6c1866f5b56b603d70178b2640382cb71b4d15321886aaeb4bb0af5d38545f5892808e478f8209852b02dde97aef54a7d2ed2c4ffb6e77075e813339186"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x0, 0x100) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x8}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x10000, 0xe4f, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000040)=""/40, 0xfffffffffffffedd) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000400000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a090000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a31"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB], 0x2c}}, 0x20008000) ioctl(r3, 0xc138fd08, &(0x7f0000000600)="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") write$binfmt_format(r0, &(0x7f0000000300)='1\x00', 0x2) 401.52042ms ago: executing program 4 (id=3743): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT=0x0], 0x20) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000b00)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x50, 0x0, 0xf9, 0x8, 0x1, 0x7, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x40d8, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)="d800000019008111e0021506040007040a6009003fbed7f95c0255a12a00090008000699e3ffffff14000500fe8081782c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d622fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4750500000000000000980dd6000000000000", 0xd8}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0xb3, 0x0, 0x7}}], 0x414, 0x406, 0x0) unshare(0x22020400) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="d4820000", @ANYRES16, @ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000a00)={0x53, 0xfffffffffffffffe, 0xdc, 0x3, @buffer={0x0, 0x81, &(0x7f0000000200)=""/129}, &(0x7f00000005c0)="2919641cecb5853ea890212e8bf128bb437218e5b2049e5e12d8d11fe60aceb9b44f1d13593273f7837b6efec9e17198a873a1466af4afff31717d65837ab60e77a655d7b5fad168e85794b03593e533431cd68aa5bdc9faced6cfb35ae69e96962ec0504e1284a452df0061cd41e0595be1e5aad2030762fca7586e1a24175fb433f78c77cfb608ce4cc3994f88f2887bfd0ac641f3b14cb4c887fa7f1962bb3b5a13869cb263a07fea53bd97b1f7ad2b0f53e32a8fdd65dc9dcec1a906b9f51ef66cd95d593fa0bd5a9d1f8d1916898b16c421456175e4c78b75c2", &(0x7f00000008c0)=""/195, 0x5, 0x10011, 0xffffffffffffffff, &(0x7f00000009c0)}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="0500fdffffff000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="31000e001c"], 0x80}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012dbd7000fcdbdf25860000000a00060008021100000100000600480055000000"], 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4008405) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x94140, 0x0) mknodat$loop(r3, &(0x7f00000000c0)='./file0\x00', 0x40, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000003c0)={'dummy0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x4b, 0x21, 0xfffffffffffffffe}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 371.234691ms ago: executing program 6 (id=3744): syz_emit_ethernet(0x96, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200040086dd6018232500602c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa890a020100"], 0x0) 370.762651ms ago: executing program 4 (id=3745): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") socket$netlink(0x10, 0x3, 0x1) setrlimit(0x1, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c00018008000140f60000020c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804a, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x10, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfbf8000000000001, 0xffffffffffffffff, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0xff7f0000, {0x0, 0x0, 0x0, r4, 0x50483, 0x28032}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x20820, 0x20000}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @private2, 0x2}}, [0x1, 0xc, 0xf8f8, 0x296080000000, 0xd, 0x7, 0x8, 0x80, 0x6, 0x9000000000, 0xecfe, 0x2, 0xb6c7, 0x7, 0xc5]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000300)={r5, 0x6, 0x2, 0x10000, 0xfb0, 0x76}, &(0x7f0000000340)=0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r6, &(0x7f0000000a00)="c7", 0x1) sendfile(r6, r2, 0x0, 0x3ffff) sendfile(r6, r2, 0x0, 0x7ffff000) 351.643682ms ago: executing program 6 (id=3746): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 266.882864ms ago: executing program 6 (id=3747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x101, 0x0, 0x0, {[@window={0x3, 0x3, 0x5}]}}}}}}}, 0x0) (fail_nth: 6) 265.541544ms ago: executing program 7 (id=3748): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x8, [@enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0x0, [{0xb, 0x8000, 0x9}]}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x1}, @union={0x0, 0x7, 0x0, 0x5, 0x1, 0x8001, [{0x3, 0x2, 0x4}, {0x10, 0x2, 0x9}, {0xa, 0x3, 0x1}, {0x1, 0x5, 0x7fff}, {0x9, 0x1, 0xfe5c}, {0xc, 0x0, 0x5}, {0xe, 0x2, 0x5}]}, @fwd={0x8}, @enum64={0x1, 0x4, 0x0, 0x13, 0x0, 0xd, [{0x8, 0xe0, 0x3}, {0x5, 0x5, 0xfffffff9}, {0x2, 0x5, 0x9}, {0x3, 0x3ff, 0x3}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000440), 0xec, 0x0, 0x1, 0x7}, 0x28) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4910, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112bd000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0xbf}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x8, [@enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0x0, [{0xb, 0x8000, 0x9}]}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x1}, @union={0x0, 0x7, 0x0, 0x5, 0x1, 0x8001, [{0x3, 0x2, 0x4}, {0x10, 0x2, 0x9}, {0xa, 0x3, 0x1}, {0x1, 0x5, 0x7fff}, {0x9, 0x1, 0xfe5c}, {0xc, 0x0, 0x5}, {0xe, 0x2, 0x5}]}, @fwd={0x8}, @enum64={0x1, 0x4, 0x0, 0x13, 0x0, 0xd, [{0x8, 0xe0, 0x3}, {0x5, 0x5, 0xfffffff9}, {0x2, 0x5, 0x9}, {0x3, 0x3ff, 0x3}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000440), 0xec, 0x0, 0x1, 0x7}, 0x28) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4910, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112bd000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0xbf}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) 265.300304ms ago: executing program 3 (id=3749): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x68a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000c2bd0001032abd7000fcdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x400000c0}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0xe, 0x0, 0x1, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x3, 0x9, 0x82, 0x2, 0xa0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x70}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001080)=@allocspi={0x1e4, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in6=@private2, @in=@local, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@sa={0xe4, 0x6, {{@in=@rand_addr=0x64010100, @in=@private=0xa010100, 0x4e22, 0x86ec, 0x4e23, 0x3, 0xa, 0xa0, 0x1a0, 0x3a, 0x0, 0xee01}, {@in=@rand_addr=0x64010102, 0x4d2, 0x33}, @in=@local, {0x100, 0x4, 0x9, 0x66d, 0x10000, 0x5, 0x1, 0x200}, {0x1, 0xb0b2, 0x0, 0x6}, {0x2, 0xbd, 0x5}, 0x70bd25, 0x3506, 0xa, 0x0, 0x0, 0x5}}, @iptfs_init_delay={0x8, 0x27, 0x3}]}, 0x1e4}}, 0x4808) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02fe746d77000300000000000400010000000000200002000000000020f6020000000000"], 0x24, 0x2) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4880) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4c840) r6 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, 0x0) 238.278744ms ago: executing program 8 (id=3750): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, 0x0, 0x0) 220.801645ms ago: executing program 6 (id=3751): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=@bridge_setlink={0x174, 0x13, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x6001, 0x60001}, [@IFLA_VF_PORTS={0x128, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '$\x00'}, @IFLA_PORT_PROFILE={0x13, 0x2, '/dev/snd/timer\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "4452e24a60bee083afc3246bb46dcd39"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffe}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "76d225b3b01565bf228d43aa27abb658"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b03fb2d2313cef8cb18de725827fd964"}, @IFLA_PORT_PROFILE={0x7, 0x2, '9p\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x9, 0x2, 'rfdno'}, @IFLA_PORT_PROFILE={0x13, 0x2, '/dev/snd/timer\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, 'rfdno'}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_PROFILE={0xd, 0x2, 'trans=fd,'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3a690d3d8ae73f9b2d1be1394b6f64c9"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xdc}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f3fe62d5bf9dde3384d3261ca975ba34"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x36a7}, @IFLA_EVENT={0x8}, @IFLA_PHYS_SWITCH_ID={0xb, 0x24, "4cc73fc416aa33"}, @IFLA_LINK_NETNSID={0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 150.926487ms ago: executing program 8 (id=3752): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x600, 0x10, &(0x7f0000000140)={@empty, @multicast1}, 0xc) 149.817467ms ago: executing program 8 (id=3753): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pause() syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080)={[{@errors_remount}, {@barrier_val}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0x7ab4}}, {@jqfmt_vfsv0}]}, 0x80, 0x63c, &(0x7f0000001bc0)="$eJzs3c9rG9kdAPDvjCwnTtw6KaU0aUsNPSRQothpaNqekvTQHAINNIdSeoiJ7dRE+UHsQOIG4kAPLbRQSq+l5NJ/oPRafF32tizs5rbnheyyZHcPu0u0zGgUK7IUa23L0mY+H5D05s1I7301enpvZjSaAEprOrtLI45ExJUkYqpt3mQ0Z04Xyz376MHV7JZEo/GbD5NIirzW8s+Lx4PZXdJ8zlvnI75V2Vzu8v3V63P1RtPDiJMrN26fXL6/emLpxty1hWsLN2dP/ez0mZmfz76xO3EeLB4vXPz19//2pz/8dPHt+okkzsbl6h/noyOO3TLdfHcjC7E9fywizmSJLu8L7KVK8XmsRsR3Yioq+VTTVCz9daiVAwaqUWn2T43xBlA6SQy7BsBwtMYBrW37QWwHj7Kn57L7e13iHyu23vfn20YHniVtW0ZZbsShXSh/LSK+eHD0X9kteuyHGNuFcnqW/ygivttt/Sd5/IfySLP400jbnpelZ4p9G1n9frmDOiRt6f4+fw93UNrLvkr87eshi/9s8Zjln+/x+lvt4pnumC5b+wNgONbPFR15NhCJjf4vGxm2xj/ROf5p/C8/NtTZd21H7/4v3YVX31o+/hvr1v+3+vv9eR+edozDklj75FL3l6x2Zrz3lwv/6FX+dNv4L7tl5bfGgn3Y8dDw6aOIox3x/zl/65MX6z/pMv7NFrnSZxm/eueDC73m7TD+HWs8jjjWdftnY1SapTqOTybROj55evbk4lJ9YaZ537WM/7/5+//0Kn/Y8Wfr/8BL8a9+rznn1es/y7vdZxn/vfT4RjO1b9O8yS3jT98fTy7nqfH8fqN5jScXi0WaD/fmVlbunHp1XVrL5I+zzfiP/6h7++8Rf77xMdH6yuzD7d9ef9b6Hu20w/X/vNHngr1k8c/3+Pxvtf7/3mcZn/7u7g+6zmi9JS/Fv7FPYmKbMQEAAAAAAEBZpfkx2CStvUinaa048PbtOJDWby2v/Hjx1t2b8xHH899DVtPWke6p5nSSTc8Wv4dtTZ/qmP5JRByOiH9WJvLp2tVqfX7YwQMAAAAAAAAAAAAAAAAAAMCIOFic//+8uB7Yx5U0rdWGXStgzwzyAnPAaNP+obzy9r8311sDRoz+H8qra/v3pQCloKlDeWn/UF7aP5SX9g/lpf1DefVu/5vmPBp0XQAAAACAXXP4h+tPxiJi7RcT+S0zXsyrDrVmwKB1tHFHAqFEKsOuADA0Lzp8p/9D6fS1jf9Z8eeAg68OMARJt8x8cNB4deNf7/pMAAAAAAAAAAAAAGAAjh1Zf5I4/x9KyWl/UF7bO/+/sv2nAiOj2x/++BMgKAfb+FByfewE2N9rhvP/AQAAAAAAAAAAAGDPTOa3JK0VPwOejDSt1SK+ERGHoposLtUXZiLimxHxbqW6L5ueHXalAQAAAAAAAAAAAAAAAAAA4DWzfH/1+ly9vnCnPfH5ppzXO9G64umo1Kc9EcnAi0ijI2ciIkYh9sEkxtpykoi1bM3vxisnO//8xCi8P0ViyF9MAAAAAAAAAAAAAAAAAABQQm3nHnd39N97XCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Hsb1/8fXGLYMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX09fBgAA//925zoW") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000005c0)={0x5, 0x80, 0x85, 0x2, 0x43, 0xda, 0x0, 0xfb9a, 0x820, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000580), 0x1}, 0x0, 0x7, 0x80, 0x1, 0x5, 0x7f, 0xf, 0x0, 0x1, 0x0, 0x56d}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) perf_event_open$cgroup(&(0x7f00000004c0)={0x4, 0x80, 0xf7, 0x4, 0x2, 0x1, 0x0, 0xffffffff80000000, 0x81892, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8952, 0x0, @perf_config_ext={0x63dc, 0x1}, 0x112100, 0xca3, 0x8997, 0x0, 0xf6, 0x92, 0x4, 0x0, 0x27539f95, 0x0, 0x8}, r1, 0x2, r2, 0xb) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 0s ago: executing program 7 (id=3754): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xfffffffffffffd63, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x134}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) recvmmsg(r0, &(0x7f0000001dc0)=[{{&(0x7f00000002c0)=@generic, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/202, 0xca}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000005c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000000780)=""/13, 0xd}, {&(0x7f0000000900)=""/24, 0x18}, {&(0x7f0000000940)=""/183, 0xb7}], 0x5, &(0x7f0000000a80)=""/4096, 0x1000}, 0x101}, {{&(0x7f0000001a80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b00)=""/157, 0x9d}, {&(0x7f0000001bc0)=""/85, 0x55}, {&(0x7f0000001c40)=""/82, 0x52}], 0x3, &(0x7f0000001d00)=""/175, 0xaf}, 0xc}], 0x3, 0x120, &(0x7f0000001e80)={0x0, 0x3938700}) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x5, 0x5}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x16, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, 0x12, 0x301, 0x0, 0x0, {0x22, 0x0, 0x0, 0x2, {0x17c1, 0x2000, [0x2], [0x88, 0x7]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="94000000000105060100000000000000020000003200018014000180080001007f000001080002007f0000011a0002800500010006000000060002003039000006000300001500003200028014000180080001007f000001080002007f0000011a0002800500010006000000060002000015000006000300303900000c0005800800010066747000080007"], 0x94}], 0x1}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x301) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): e 5 pos 0x0 len 0x0 error -117 [ 414.435401][T15052] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.3368: couldn't read orphan inode 15 (err -117) [ 414.435578][T15052] loop3: lost filesystem error report for type 5 error -117 [ 414.680680][T15058] EXT4-fs: Ignoring removed nobh option [ 414.703500][T15058] EXT4-fs (loop2): 1 truncate cleaned up [ 415.119074][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3373'. [ 415.119108][T15073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3373'. [ 415.428339][T15090] kernel read not supported for file /!selinuxw (pid: 15090 comm: syz.3.3375) [ 415.787722][T15090] set_capacity_and_notify: 3 callbacks suppressed [ 415.787930][T15090] loop3: detected capacity change from 0 to 512 [ 416.046254][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 416.046284][ T29] audit: type=1400 audit(1788764325.408:1158): avc: denied { write } for pid=15089 comm="syz.3.3375" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.199636][ T29] audit: type=1400 audit(1788764325.578:1159): avc: denied { write } for pid=15130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.265294][ T29] audit: type=1400 audit(1788764325.648:1160): avc: denied { write } for pid=15145 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.378677][T15150] loop3: detected capacity change from 0 to 512 [ 416.379106][T15150] EXT4-fs: Ignoring removed nobh option [ 416.391903][T15150] EXT4-fs (loop3): 1 truncate cleaned up [ 416.403918][ T29] audit: type=1400 audit(1788764325.788:1161): avc: denied { write } for pid=15149 comm="syz.3.3382" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.534786][ T29] audit: type=1400 audit(1788764325.918:1162): avc: denied { write } for pid=15148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.619673][ T29] audit: type=1400 audit(1788764325.998:1163): avc: denied { write } for pid=15164 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.668013][T15161] loop3: detected capacity change from 0 to 4096 [ 416.709186][ T29] audit: type=1400 audit(1788764326.088:1164): avc: denied { write } for pid=15160 comm="syz.3.3383" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.998414][T15171] loop4: detected capacity change from 0 to 512 [ 417.023312][T15171] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 417.023417][T15171] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.3385: corrupted in-inode xattr: e_value size too large [ 417.023456][T15171] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 417.023608][T15171] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.3385: couldn't read orphan inode 15 (err -117) [ 417.023655][T15171] loop4: lost filesystem error report for type 5 error -117 [ 417.259033][ T29] audit: type=1400 audit(1788764326.638:1165): avc: denied { write } for pid=15170 comm="syz.4.3385" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.521513][ T29] audit: type=1400 audit(1788764326.908:1166): avc: denied { write } for pid=15181 comm="syz.5.3389" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 417.591564][ T29] audit: type=1400 audit(1788764326.978:1167): avc: denied { setopt } for pid=15181 comm="syz.5.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 417.715138][T15190] loop3: detected capacity change from 0 to 256 [ 417.754507][T13131] EXT4-fs unmount: 64 callbacks suppressed [ 417.754556][T13131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.784850][T15191] __nla_validate_parse: 3 callbacks suppressed [ 417.784875][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3392'. [ 417.784893][T15191] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3392'. [ 417.788116][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3392'. [ 417.788213][T15191] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3392'. [ 417.834732][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3393'. [ 417.969242][T15193] kernel read not supported for file /!selinuxw (pid: 15193 comm: syz.4.3393) [ 418.052387][T15195] loop4: detected capacity change from 0 to 512 [ 418.073625][T15195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.097110][T15198] loop2: detected capacity change from 0 to 4096 [ 418.113050][T15198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.225777][T12617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.409449][T13131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.440442][T15213] loop4: detected capacity change from 0 to 512 [ 418.440841][T15213] EXT4-fs: Ignoring removed nobh option [ 418.454288][T15213] EXT4-fs (loop4): 1 truncate cleaned up [ 418.454717][T15213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.497260][T13131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.664120][T15224] loop5: detected capacity change from 0 to 512 [ 418.686506][T15224] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 418.688550][T15224] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.3403: corrupted in-inode xattr: e_value size too large [ 418.688664][T15224] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 418.689238][T15224] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.3403: couldn't read orphan inode 15 (err -117) [ 418.689375][T15224] loop5: lost filesystem error report for type 5 error -117 [ 418.690478][T15224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.756197][T15229] loop3: detected capacity change from 0 to 136 [ 418.920543][T15230] loop4: p1 < > p4 [ 418.925363][T15230] loop4: p4 size 722688 extends beyond EOD, truncated [ 419.218164][T15245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.326384][T14223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.361704][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3409'. [ 419.470718][T15253] kernel read not supported for file /!selinuxw (pid: 15253 comm: syz.2.3409) [ 419.516679][T15253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.533801][T15256] EXT4-fs: Ignoring removed nobh option [ 419.553413][T15256] EXT4-fs (loop0): 1 truncate cleaned up [ 419.553766][T15256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.620128][T14888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.649065][T14223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.721138][T12617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.849509][T15270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3414'. [ 419.855043][T15270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3414'. [ 420.021367][T15273] capability: warning: `syz.0.3413' uses deprecated v2 capabilities in a way that may be insecure [ 420.146961][T15276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.390907][T15282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.507233][T14223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.876842][T15291] set_capacity_and_notify: 5 callbacks suppressed [ 420.876879][T15291] loop5: detected capacity change from 0 to 512 [ 420.896537][T15291] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 420.896716][T15291] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.3421: corrupted in-inode xattr: e_value size too large [ 420.896827][T15291] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 420.897347][T15291] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.3421: couldn't read orphan inode 15 (err -117) [ 420.897392][T15291] loop5: lost filesystem error report for type 5 error -117 [ 420.898609][T15291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.201207][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 421.207735][ T29] audit: type=1400 audit(1788764330.588:1178): avc: denied { write } for pid=15290 comm="syz.5.3421" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.334420][T15296] loop3: detected capacity change from 0 to 1024 [ 421.345905][T15296] EXT4-fs: Ignoring removed bh option [ 421.345954][T15296] EXT4-fs: Ignoring removed bh option [ 421.346126][T15296] ext4: Unknown parameter 'journal_iopr' [ 421.706567][T15304] loop3: detected capacity change from 0 to 512 [ 421.715548][T15304] EXT4-fs: Ignoring removed nobh option [ 421.725392][T15304] EXT4-fs (loop3): 1 truncate cleaned up [ 421.725804][T15304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.746035][ T29] audit: type=1400 audit(1788764331.128:1179): avc: denied { write } for pid=15303 comm="syz.3.3425" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.746076][ T29] audit: type=1400 audit(1788764331.128:1180): avc: denied { write } for pid=15303 comm="syz.3.3425" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.817217][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3426'. [ 421.854613][T13594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.951039][ T29] audit: type=1400 audit(1788764331.338:1181): avc: denied { create } for pid=15308 comm="syz.0.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 421.984896][ T29] audit: type=1400 audit(1788764331.368:1182): avc: denied { connect } for pid=15308 comm="syz.0.3427" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 421.997229][T15307] kernel read not supported for file /!selinuxw (pid: 15307 comm: syz.2.3426) [ 422.085929][T14888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.222458][T15318] loop5: detected capacity change from 0 to 4096 [ 422.246592][T15318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.258098][T15307] loop2: detected capacity change from 0 to 512 [ 422.290043][ T29] audit: type=1400 audit(1788764331.668:1183): avc: denied { write } for pid=15317 comm="syz.5.3429" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.384070][T14888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.391704][T15307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.405820][ T29] audit: type=1400 audit(1788764331.778:1184): avc: denied { write } for pid=15305 comm="syz.2.3426" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.413590][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3433'. [ 422.574562][T12617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.799186][T15344] loop3: detected capacity change from 0 to 512 [ 422.800756][T15344] EXT4-fs: Ignoring removed nobh option [ 422.818578][T15344] EXT4-fs (loop3): 1 truncate cleaned up [ 422.819126][T15344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.839134][ T29] audit: type=1400 audit(1788764332.208:1185): avc: denied { write } for pid=15343 comm="syz.3.3438" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.861536][ T29] audit: type=1400 audit(1788764332.208:1186): avc: denied { write } for pid=15343 comm="syz.3.3438" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.913044][T13594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.981967][T15348] loop3: detected capacity change from 0 to 512 [ 422.995127][T15348] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 422.995267][T15348] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.3439: corrupted in-inode xattr: e_value size too large [ 422.995365][T15348] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 422.995540][T15348] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.3439: couldn't read orphan inode 15 (err -117) [ 422.995578][T15348] loop3: lost filesystem error report for type 5 error -117 [ 422.996185][T15348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.198937][ T29] audit: type=1400 audit(1788764332.578:1187): avc: denied { write } for pid=15347 comm="syz.3.3439" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.631746][T15364] loop5: detected capacity change from 0 to 512 [ 423.640335][T15364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 423.656562][T15364] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 423.656588][T15364] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 423.656745][T15364] EXT4-fs (loop5): orphan cleanup on readonly fs [ 423.657911][T15364] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.3445: bg 0: block 15: invalid block bitmap [ 423.657991][T15364] loop5: lost filesystem error report for type 5 error -117 [ 423.660669][T15364] EXT4-fs (loop5): Remounting filesystem read-only [ 423.664354][T15364] EXT4-fs (loop5): 1 truncate cleaned up [ 423.665242][T15364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 423.725419][T15362] loop0: detected capacity change from 0 to 4096 [ 423.748721][T15362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.830968][T14888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.882219][T15372] __nla_validate_parse: 2 callbacks suppressed [ 423.882250][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3447'. [ 423.937138][T15374] kernel read not supported for file /!selinuxw (pid: 15374 comm: syz.2.3447) [ 423.957903][T14223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.976557][T15374] loop2: detected capacity change from 0 to 512 [ 423.999920][T13594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.050375][T15374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.338848][T12617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.398685][T15389] xt_hashlimit: size too large, truncated to 1048576 [ 424.561582][T15393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.931341][T15399] FAULT_INJECTION: forcing a failure. [ 424.931341][T15399] name failslab, interval 1, probability 0, space 0, times 0 [ 424.931537][T15399] CPU: 0 UID: 0 PID: 15399 Comm: syz.3.3455 Not tainted syzkaller #0 PREEMPT(lazy) [ 424.931622][T15399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.931636][T15399] Call Trace: [ 424.931644][T15399] [ 424.931655][T15399] __dump_stack+0x1d/0x30 [ 424.931687][T15399] dump_stack_lvl+0x95/0xd0 [ 424.931711][T15399] dump_stack+0x15/0x1b [ 424.931733][T15399] should_fail_ex+0x262/0x280 [ 424.931794][T15399] ? bpf_diag_init+0x5c/0xd0 [ 424.931905][T15399] should_failslab+0x8c/0xb0 [ 424.931941][T15399] __kmalloc_cache_noprof+0x7a/0x400 [ 424.931975][T15399] ? bpf_diag_init+0x5c/0xd0 [ 424.932063][T15399] bpf_diag_init+0x5c/0xd0 [ 424.932097][T15399] bpf_check+0x352/0x1d00 [ 424.932178][T15399] bpf_prog_load+0xefb/0x1060 [ 424.932212][T15399] ? avc_has_perm_noaudit+0xa3/0x120 [ 424.932253][T15399] ? vfs_write+0x800/0x9a0 [ 424.932358][T15399] __sys_bpf+0xbae/0xc30 [ 424.932384][T15399] ? vfs_write+0x800/0x9a0 [ 424.932460][T15399] ? vfs_write+0x800/0x9a0 [ 424.932513][T15399] __x64_sys_bpf+0x69/0x80 [ 424.932610][T15399] x64_sys_call+0xf26/0x2550 [ 424.932643][T15399] do_syscall_64+0x112/0x360 [ 424.932707][T15399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.932733][T15399] RIP: 0033:0x7f22c083e159 [ 424.932798][T15399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.932833][T15399] RSP: 002b:00007f22bf297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 424.932919][T15399] RAX: ffffffffffffffda RBX: 00007f22c0ac5fa0 RCX: 00007f22c083e159 [ 424.932938][T15399] RDX: 0000000000000094 RSI: 00002000000009c0 RDI: 0000000000000005 [ 424.932953][T15399] RBP: 00007f22bf297090 R08: 0000000000000000 R09: 0000000000000000 [ 424.933066][T15399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.933149][T15399] R13: 00007f22c0ac6038 R14: 00007f22c0ac5fa0 R15: 00007ffdd52115b8 [ 424.933168][T15399] [ 425.141113][T15403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3456'. [ 425.141133][T15403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3456'. [ 425.263757][T15406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.347232][T15409] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 425.347285][T15409] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.3459: corrupted in-inode xattr: e_value size too large [ 425.347314][T15409] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 425.355557][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 425.355578][ C0] EXT4-fs (loop0): initial error at time 1788764334: ext4_iget_extra_inode:5210: inode 15 [ 425.355607][ C0] EXT4-fs (loop0): last error at time 1788764334: ext4_iget_extra_inode:5210: inode 15 [ 425.406186][T15409] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.3459: couldn't read orphan inode 15 (err -117) [ 425.406321][T15409] loop0: lost filesystem error report for type 5 error -117 [ 425.418978][T15409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.448520][T14888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.463607][T13594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.565523][T15416] FAULT_INJECTION: forcing a failure. [ 425.565523][T15416] name failslab, interval 1, probability 0, space 0, times 0 [ 425.565580][T15416] CPU: 1 UID: 0 PID: 15416 Comm: syz.3.3461 Not tainted syzkaller #0 PREEMPT(lazy) [ 425.565614][T15416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 425.565629][T15416] Call Trace: [ 425.565636][T15416] [ 425.565645][T15416] __dump_stack+0x1d/0x30 [ 425.565696][T15416] dump_stack_lvl+0x95/0xd0 [ 425.565727][T15416] dump_stack+0x15/0x1b [ 425.565749][T15416] should_fail_ex+0x262/0x280 [ 425.565788][T15416] ? usbdev_open+0x4c/0x450 [ 425.565822][T15416] should_failslab+0x8c/0xb0 [ 425.565891][T15416] __kmalloc_cache_noprof+0x7a/0x400 [ 425.565927][T15416] ? kobject_get_unless_zero+0xf5/0x160 [ 425.565959][T15416] ? usbdev_open+0x4c/0x450 [ 425.565998][T15416] ? mutex_unlock+0x4e/0x90 [ 425.566031][T15416] usbdev_open+0x4c/0x450 [ 425.566084][T15416] chrdev_open+0x2eb/0x3a0 [ 425.566201][T15416] do_dentry_open+0x49f/0xa60 [ 425.566227][T15416] ? __pfx_chrdev_open+0x10/0x10 [ 425.566288][T15416] vfs_open+0x37/0x1e0 [ 425.566310][T15416] path_openat+0xc01/0x10d0 [ 425.566390][T15416] do_file_open+0x16c/0x290 [ 425.566447][T15416] do_sys_openat2+0xa0/0x130 [ 425.566489][T15416] __x64_sys_openat+0xf2/0x120 [ 425.566517][T15416] x64_sys_call+0x1f72/0x2550 [ 425.566565][T15416] do_syscall_64+0x112/0x360 [ 425.566609][T15416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.566630][T15416] RIP: 0033:0x7f22c07fe98e [ 425.566646][T15416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 425.566686][T15416] RSP: 002b:00007f22bf296b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 425.566753][T15416] RAX: ffffffffffffffda RBX: 00007f22bf2976c0 RCX: 00007f22c07fe98e [ 425.566767][T15416] RDX: 0000000000101b01 RSI: 00007f22bf296c00 RDI: ffffffffffffff9c [ 425.566780][T15416] RBP: 00007f22bf296c00 R08: 0000000000000000 R09: 0000000000000000 [ 425.566793][T15416] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 425.566885][T15416] R13: 00007f22c0ac6038 R14: 00007f22c0ac5fa0 R15: 00007ffdd52115b8 [ 425.566910][T15416] [ 425.807008][T15419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3462'. [ 425.814529][T15419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3462'. [ 425.850314][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3463'. [ 425.992792][T15426] kernel read not supported for file /!selinuxw (pid: 15426 comm: syz.5.3463) [ 426.423595][T14223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.596257][T15422] set_capacity_and_notify: 3 callbacks suppressed [ 426.596423][T15422] loop5: detected capacity change from 0 to 512 [ 426.598436][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 426.598513][ T29] audit: type=1326 audit(1788764335.978:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad430de159 code=0x7ffc0000 [ 426.599403][ T29] audit: type=1326 audit(1788764335.978:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad430de159 code=0x7ffc0000 [ 426.599521][ T29] audit: type=1326 audit(1788764335.978:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad430de159 code=0x7ffc0000 [ 426.603014][ T29] audit: type=1326 audit(1788764335.988:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad4309e98e code=0x7ffc0000 [ 426.606533][ T29] audit: type=1326 audit(1788764335.988:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad430de159 code=0x7ffc0000 [ 426.609169][ T29] audit: type=1326 audit(1788764335.988:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad430de159 code=0x7ffc0000 [ 426.609292][ T29] audit: type=1326 audit(1788764335.988:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad430de159 code=0x7ffc0000 [ 426.622019][ T29] audit: type=1326 audit(1788764336.008:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad430de159 code=0x7ffc0000 [ 426.622112][ T29] audit: type=1326 audit(1788764336.008:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad430de159 code=0x7ffc0000 [ 426.622256][ T29] audit: type=1326 audit(1788764336.008:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad430de159 code=0x7ffc0000 [ 426.671160][T15431] hsr_slave_0: left promiscuous mode [ 426.693701][T15431] hsr_slave_1: left promiscuous mode [ 426.777499][T15422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.905119][T15436] loop0: detected capacity change from 0 to 512 [ 426.914906][T15436] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 426.914931][T15436] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 426.939795][T15436] EXT4-fs error (device loop0): __ext4_iget:5592: inode #11: block 2: comm syz.0.3466: invalid block [ 426.939845][T15436] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 426.949738][T15436] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.3466: couldn't read orphan inode 11 (err -117) [ 426.949818][T15436] loop0: lost filesystem error report for type 5 error -117 [ 426.950891][T15436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.056363][T14223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.069832][T14888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.227536][T15449] FAULT_INJECTION: forcing a failure. [ 427.227536][T15449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.227581][T15449] CPU: 1 UID: 0 PID: 15449 Comm: syz.5.3470 Not tainted syzkaller #0 PREEMPT(lazy) [ 427.227616][T15449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.227651][T15449] Call Trace: [ 427.227661][T15449] [ 427.227671][T15449] __dump_stack+0x1d/0x30 [ 427.227703][T15449] dump_stack_lvl+0x95/0xd0 [ 427.227789][T15449] dump_stack+0x15/0x1b [ 427.227811][T15449] should_fail_ex+0x262/0x280 [ 427.227841][T15449] should_fail+0xb/0x20 [ 427.227910][T15449] should_fail_usercopy+0x1a/0x20 [ 427.227942][T15449] _copy_to_user+0x20/0xa0 [ 427.227977][T15449] bpf_test_finish+0x2f2/0x4c0 [ 427.228014][T15449] ? ___migrate_enable+0x67/0x90 [ 427.228123][T15449] bpf_prog_test_run_flow_dissector+0x2c9/0x360 [ 427.228173][T15449] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 427.228221][T15449] bpf_prog_test_run+0x208/0x340 [ 427.228256][T15449] __sys_bpf+0x8da/0xc30 [ 427.228338][T15449] ? vfs_write+0x800/0x9a0 [ 427.228388][T15449] __x64_sys_bpf+0x69/0x80 [ 427.228418][T15449] x64_sys_call+0xf26/0x2550 [ 427.228445][T15449] do_syscall_64+0x112/0x360 [ 427.228525][T15449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.228552][T15449] RIP: 0033:0x7f3518cae159 [ 427.228569][T15449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.228625][T15449] RSP: 002b:00007f3517707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 427.228653][T15449] RAX: ffffffffffffffda RBX: 00007f3518f35fa0 RCX: 00007f3518cae159 [ 427.228673][T15449] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 427.228763][T15449] RBP: 00007f3517707090 R08: 0000000000000000 R09: 0000000000000000 [ 427.228782][T15449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.228875][T15449] R13: 00007f3518f36038 R14: 00007f3518f35fa0 R15: 00007ffdda2bf138 [ 427.228896][T15449] [ 427.259290][T15445] loop4: detected capacity change from 0 to 4096 [ 427.317498][T15445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.713821][T13131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.860545][T15462] batadv_slave_1: Caught tx_queue_len zero misconfig [ 427.965374][T15466] loop3: detected capacity change from 0 to 512 [ 427.993587][T15467] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 428.007424][T15466] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 428.015775][T15466] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.3476: corrupted in-inode xattr: e_value size too large [ 428.015825][T15466] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 428.029921][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 428.029942][ C0] EXT4-fs (loop3): initial error at time 1788764337: ext4_iget_extra_inode:5210: inode 15 [ 428.029973][ C0] EXT4-fs (loop3): last error at time 1788764337: ext4_iget_extra_inode:5210: inode 15 [ 428.066026][T15466] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.3476: couldn't read orphan inode 15 (err -117) [ 428.066085][T15466] loop3: lost filesystem error report for type 5 error -117 [ 428.073511][T15466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.268496][T15476] loop4: detected capacity change from 0 to 128 [ 428.281006][T15476] FAT-fs (loop4): Directory bread(block 1048) failed [ 428.281090][T15476] FAT-fs (loop4): Directory bread(block 1049) failed [ 428.281208][T15476] FAT-fs (loop4): Directory bread(block 1050) failed [ 428.281445][T15476] FAT-fs (loop4): Directory bread(block 1051) failed [ 428.281555][T15476] FAT-fs (loop4): Directory bread(block 1052) failed [ 428.281607][T15476] FAT-fs (loop4): Directory bread(block 1053) failed [ 428.281715][T15476] FAT-fs (loop4): Directory bread(block 1054) failed [ 428.281750][T15476] FAT-fs (loop4): Directory bread(block 1055) failed [ 428.477871][T15476] FAT-fs (loop4): FAT read failed (blocknr 128) [ 428.500600][T15480] loop5: detected capacity change from 0 to 128 [ 428.512478][T15480] FAT-fs (loop5): Directory bread(block 1048) failed [ 428.512557][T15480] FAT-fs (loop5): Directory bread(block 1049) failed [ 428.512659][T15480] FAT-fs (loop5): Directory bread(block 1050) failed [ 428.512717][T15480] FAT-fs (loop5): Directory bread(block 1051) failed [ 428.512802][T15480] FAT-fs (loop5): Directory bread(block 1052) failed [ 428.512822][T15480] FAT-fs (loop5): Directory bread(block 1053) failed [ 428.512861][T15480] FAT-fs (loop5): Directory bread(block 1054) failed [ 428.512911][T15480] FAT-fs (loop5): Directory bread(block 1055) failed [ 428.537576][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 428.601177][T15481] kernel read not supported for file /!selinuxw (pid: 15481 comm: syz.0.3480) [ 428.628284][T15485] loop4: detected capacity change from 0 to 512 [ 428.656383][T15480] FAT-fs (loop5): Directory bread(block 1048) failed [ 428.656447][T15480] FAT-fs (loop5): Directory bread(block 1049) failed [ 428.690182][T15480] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3481'. [ 428.711477][T15481] loop0: detected capacity change from 0 to 512 [ 428.722933][T13594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.768623][T15494] loop3: detected capacity change from 0 to 512 [ 428.771641][T15494] EXT4-fs: Ignoring removed nobh option [ 428.787379][T15494] EXT4-fs (loop3): 1 truncate cleaned up [ 428.788175][T15494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.815500][T15481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.832986][T13594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.844871][T15492] loop4: detected capacity change from 0 to 4096 [ 428.857437][T15492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.881304][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 428.882661][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 428.945109][T13131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.962040][T14223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.013769][T15505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.014055][T15505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.025795][T14290] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.107405][T14290] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.126403][T15516] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 429.126491][T15516] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.3494: corrupted in-inode xattr: e_value size too large [ 429.126532][T15516] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 429.134822][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 429.134850][ C1] EXT4-fs (loop4): initial error at time 1788764338: ext4_iget_extra_inode:5210: inode 15 [ 429.134883][ C1] EXT4-fs (loop4): last error at time 1788764338: ext4_iget_extra_inode:5210: inode 15 [ 429.149498][T15516] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.3494: couldn't read orphan inode 15 (err -117) [ 429.149530][T15516] loop4: lost filesystem error report for type 5 error -117 [ 429.159485][T15516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.224430][T14290] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.277261][T14290] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.383697][T14290] bridge_slave_1: left allmulticast mode [ 429.383796][T14290] bridge_slave_1: left promiscuous mode [ 429.383905][T14290] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.404339][T14290] bridge_slave_0: left allmulticast mode [ 429.404370][T14290] bridge_slave_0: left promiscuous mode [ 429.404743][T14290] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.535167][T14290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.544446][T14290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.558478][T14290] bond0 (unregistering): Released all slaves [ 429.621896][T14290] hsr_slave_0: left promiscuous mode [ 429.627379][T14290] hsr_slave_1: left promiscuous mode [ 429.628238][T14290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.628265][T14290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.666377][T14290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.666426][T14290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.701356][T14290] veth1_macvtap: left promiscuous mode [ 429.701436][T14290] veth0_macvtap: left promiscuous mode [ 429.701637][T14290] veth1_vlan: left promiscuous mode [ 429.701739][T14290] veth0_vlan: left promiscuous mode [ 429.907969][T15536] EXT4-fs: Ignoring removed nobh option [ 429.925939][T15536] EXT4-fs (loop3): 1 truncate cleaned up [ 429.940685][T15536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.959304][T14290] team0 (unregistering): Port device team_slave_1 removed [ 429.976964][T14290] team0 (unregistering): Port device team_slave_0 removed [ 430.002430][T13594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.035478][T13131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.132192][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3500'. [ 430.197138][T15552] kernel read not supported for file /!selinuxw (pid: 15552 comm: syz.3.3500) [ 430.209085][T15550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.244809][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 430.263123][T15562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.298153][T14223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.310839][T15552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.355302][T13131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.475957][T15588] netlink: 'syz.4.3504': attribute type 9 has an invalid length. [ 430.475982][T15588] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3504'. [ 430.515880][T15587] vlan0: entered promiscuous mode [ 430.523567][T15587] sctp: [Deprecated]: syz.4.3504 (pid 15587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.523567][T15587] Use struct sctp_sack_info instead [ 430.552946][T15586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.571138][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 430.587197][T15513] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.587227][T15513] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.587372][T15513] bridge_slave_0: entered allmulticast mode [ 430.587914][T15513] bridge_slave_0: entered promiscuous mode [ 430.615934][T15513] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.615981][T15513] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.616067][T15513] bridge_slave_1: entered allmulticast mode [ 430.616480][T15513] bridge_slave_1: entered promiscuous mode [ 430.648589][T15586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.672458][T15513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.693507][T15513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.736549][T15586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.754811][T15604] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 430.755230][T15604] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.3508: corrupted in-inode xattr: e_value size too large [ 430.755418][T15604] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 430.755787][T15604] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.3508: couldn't read orphan inode 15 (err -117) [ 430.755889][T15604] loop2: lost filesystem error report for type 5 error -117 [ 430.801350][T15608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15608 comm=syz.0.3507 [ 430.811945][T15513] team0: Port device team_slave_0 added [ 430.822328][T15513] team0: Port device team_slave_1 added [ 430.836580][T15586] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.884799][T15513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.893870][T15513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.919960][T15513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.936003][T15513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.936043][T15513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.936196][T15513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.037099][T15513] hsr_slave_0: entered promiscuous mode [ 431.039692][T15513] hsr_slave_1: entered promiscuous mode [ 431.040274][T15513] debugfs: 'hsr0' already exists in 'hsr' [ 431.040320][T15513] Cannot create hsr debugfs directory [ 431.059891][T14297] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.119346][T14292] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.215356][T14297] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.224273][T15623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3509'. [ 431.272629][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 431.370148][T14297] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.382799][T15630] netlink: 'syz.4.3511': attribute type 1 has an invalid length. [ 431.441797][T15630] bond1: (slave gretap1): making interface the new active one [ 431.442145][T15630] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 431.458239][T15513] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 431.486098][T15513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.506974][T15513] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 431.527466][T15513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.534869][T15513] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 431.546283][T15513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.557647][T15513] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 431.572202][T15513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.639247][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 431.653041][T15643] set_capacity_and_notify: 6 callbacks suppressed [ 431.653078][T15643] loop4: detected capacity change from 0 to 4096 [ 431.709470][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 431.709499][ T29] audit: type=1400 audit(1788764341.088:1333): avc: denied { write } for pid=15642 comm="syz.4.3513" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 431.764570][T15513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.791602][T15513] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.806347][T14292] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.806389][T14292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.827792][T14290] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.827838][T14290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.983152][ T29] audit: type=1400 audit(1788764341.368:1334): avc: denied { bind } for pid=15661 comm="syz.3.3516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 431.983235][ T29] audit: type=1400 audit(1788764341.368:1335): avc: denied { write } for pid=15661 comm="syz.3.3516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 431.991153][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3516'. [ 432.041403][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3515'. [ 432.127114][T15671] kernel read not supported for file /!selinuxw (pid: 15671 comm: syz.4.3515) [ 432.188910][T15513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.294598][T15671] loop4: detected capacity change from 0 to 512 [ 432.393369][ T29] audit: type=1400 audit(1788764341.778:1336): avc: denied { write } for pid=15667 comm="syz.4.3515" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 432.415319][ T29] audit: type=1326 audit(1788764341.778:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15692 comm="syz.3.3520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c083e159 code=0x7ffc0000 [ 432.415374][ T29] audit: type=1326 audit(1788764341.778:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15692 comm="syz.3.3520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c083e159 code=0x7ffc0000 [ 432.415433][ T29] audit: type=1326 audit(1788764341.778:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15692 comm="syz.3.3520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c083e159 code=0x7ffc0000 [ 432.415474][ T29] audit: type=1326 audit(1788764341.778:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15692 comm="syz.3.3520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22c083e159 code=0x7ffc0000 [ 432.450948][ T29] audit: type=1326 audit(1788764341.798:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15692 comm="syz.3.3520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c083e159 code=0x7ffc0000 [ 432.451042][ T29] audit: type=1326 audit(1788764341.798:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15692 comm="syz.3.3520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c083e159 code=0x7ffc0000 [ 432.595806][T15513] veth0_vlan: entered promiscuous mode [ 432.605897][T15513] veth1_vlan: entered promiscuous mode [ 432.625168][T15513] veth0_macvtap: entered promiscuous mode [ 432.630031][T15513] veth1_macvtap: entered promiscuous mode [ 432.640052][T15513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.649532][T15513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.681668][T14297] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.687210][T14297] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.687255][T14297] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.687425][T14297] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.732782][T15710] loop3: detected capacity change from 0 to 256 [ 432.752496][T15710] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 432.772973][T15710] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3523'. [ 432.841355][T15714] loop2: detected capacity change from 0 to 4096 [ 432.854159][T15718] loop4: detected capacity change from 0 to 4096 [ 433.033943][T15717] usb usb9: usbfs: process 15717 (syz.6.3493) did not claim interface 0 before use [ 433.173358][T15730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3527'. [ 433.251301][T15718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.254861][T15718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.294418][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3531'. [ 433.345414][T15745] kernel read not supported for file /!selinuxw (pid: 15745 comm: syz.0.3531) [ 433.409499][T15747] usb usb5: usbfs: process 15747 (syz.3.3533) did not claim interface 0 before use [ 433.481295][T15745] loop0: detected capacity change from 0 to 512 [ 433.525164][T15751] loop3: detected capacity change from 0 to 128 [ 433.613264][T15751] sg_write: data in/out 679936/136 bytes for SCSI command 0x0-- guessing data in; [ 433.613264][T15751] program syz.3.3534 not setting count and/or reply_len properly [ 433.694181][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3531'. [ 433.917831][T15762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3536'. [ 434.084545][T15765] loop6: detected capacity change from 0 to 4096 [ 434.217150][T15772] loop2: detected capacity change from 0 to 4096 [ 434.225989][T15772] EXT4-fs: dax option not supported [ 434.354703][T15763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.442764][T14292] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 434.526290][T15787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15787 comm=syz.6.3542 [ 434.601793][T15790] FAULT_INJECTION: forcing a failure. [ 434.601793][T15790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.601856][T15790] CPU: 0 UID: 60929 PID: 15790 Comm: syz.6.3543 Not tainted syzkaller #0 PREEMPT(lazy) [ 434.601890][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.601909][T15790] Call Trace: [ 434.601916][T15790] [ 434.601924][T15790] __dump_stack+0x1d/0x30 [ 434.601949][T15790] dump_stack_lvl+0x95/0xd0 [ 434.602071][T15790] dump_stack+0x15/0x1b [ 434.602092][T15790] should_fail_ex+0x262/0x280 [ 434.602116][T15790] should_fail+0xb/0x20 [ 434.602140][T15790] should_fail_usercopy+0x1a/0x20 [ 434.602178][T15790] _copy_from_user+0x1c/0xb0 [ 434.602204][T15790] __sys_bpf+0x1e2/0xc30 [ 434.602384][T15790] ? do_futex+0x390/0x460 [ 434.602548][T15790] __x64_sys_bpf+0x69/0x80 [ 434.602624][T15790] x64_sys_call+0xf26/0x2550 [ 434.602814][T15790] do_syscall_64+0x112/0x360 [ 434.602923][T15790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.603170][T15790] RIP: 0033:0x7f4c69d6e159 [ 434.603218][T15790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.603324][T15790] RSP: 002b:00007f4c687c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.603397][T15790] RAX: ffffffffffffffda RBX: 00007f4c69ff5fa0 RCX: 00007f4c69d6e159 [ 434.603455][T15790] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 434.603505][T15790] RBP: 00007f4c69e05024 R08: 0000000000000000 R09: 0000000000000000 [ 434.603564][T15790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.603604][T15790] R13: 00007f4c69ff6038 R14: 00007f4c69ff5fa0 R15: 00007ffcc21d2838 [ 434.603688][T15790] [ 434.879841][T15774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.983006][T15804] kernel read not supported for file /!selinuxw (pid: 15804 comm: syz.0.3545) [ 435.046449][T15806] loop0: detected capacity change from 0 to 512 [ 435.600994][T15811] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 435.611492][T15811] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.3546: corrupted in-inode xattr: e_value size too large [ 435.627600][T15811] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 435.628416][T15811] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.3546: couldn't read orphan inode 15 (err -117) [ 435.637769][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 435.637785][ C1] EXT4-fs (loop2): initial error at time 1788764345: ext4_iget_extra_inode:5210: inode 15 [ 435.637827][ C1] EXT4-fs (loop2): last error at time 1788764345: ext4_iget_extra_inode:5210: inode 15 [ 435.653284][T15811] loop2: lost filesystem error report for type 5 error -117 [ 436.161426][T15718] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.3525: corrupted inode contents [ 436.161472][T15718] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 436.163021][T15718] EXT4-fs error (device loop4): ext4_dirty_inode:6731: inode #15: comm syz.4.3525: mark_inode_dirty error [ 436.163046][T15718] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 436.166081][T15718] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.3525: corrupted inode contents [ 436.166115][T15718] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 436.168355][T15718] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.3525: mark_inode_dirty error [ 436.168389][T15718] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 436.168543][T15718] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.3525: corrupted inode contents [ 436.168572][T15718] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 436.168669][T15718] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.3525: mark_inode_dirty error [ 436.168701][T15718] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 436.168926][T15718] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.3525: corrupted inode contents [ 436.168951][T15718] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 436.169216][T15718] EXT4-fs error (device loop4): ext4_truncate:4721: inode #15: comm syz.4.3525: mark_inode_dirty error [ 436.169241][T15718] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 436.169332][T15718] EXT4-fs error (device loop4): ext4_evict_inode:280: comm syz.4.3525: couldn't truncate inode 15 (err -117) [ 436.194203][T15817] lo: Caught tx_queue_len zero misconfig [ 436.206611][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.431080][T13594] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 436.431147][T13594] FAT-fs (loop3): Filesystem has been set read-only [ 436.512587][T12519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.754803][T15825] set_capacity_and_notify: 2 callbacks suppressed [ 436.754835][T15825] loop0: detected capacity change from 0 to 512 [ 436.786158][T15825] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 436.786271][T15825] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.3547: corrupted in-inode xattr: e_value size too large [ 436.786385][T15825] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 436.786706][T15825] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.3547: couldn't read orphan inode 15 (err -117) [ 436.786765][T15825] loop0: lost filesystem error report for type 5 error -117 [ 436.901189][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 436.901212][ T29] audit: type=1400 audit(1788764346.288:1505): avc: denied { create } for pid=15829 comm="syz.3.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 437.162514][ T29] audit: type=1400 audit(1788764346.548:1506): avc: denied { write } for pid=15824 comm="syz.0.3547" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.219350][T15828] loop6: detected capacity change from 0 to 512 [ 437.355578][ T29] audit: type=1400 audit(1788764346.728:1507): avc: denied { read write } for pid=15837 comm="syz.3.3555" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 437.361909][ T29] audit: type=1400 audit(1788764346.738:1508): avc: denied { open } for pid=15837 comm="syz.3.3555" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 437.471906][ T29] audit: type=1400 audit(1788764346.858:1509): avc: denied { map } for pid=15827 comm="syz.6.3553" path="socket:[44787]" dev="sockfs" ino=44787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 437.471954][ T29] audit: type=1400 audit(1788764346.858:1510): avc: denied { read } for pid=15827 comm="syz.6.3553" path="socket:[44787]" dev="sockfs" ino=44787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 437.551024][ T3435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.786662][T15845] __nla_validate_parse: 5 callbacks suppressed [ 437.786693][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3557'. [ 437.807086][T15845] kernel read not supported for file /!selinuxw (pid: 15845 comm: syz.6.3557) [ 437.849747][T15845] loop6: detected capacity change from 0 to 512 [ 437.900207][ T29] audit: type=1400 audit(1788764347.288:1511): avc: denied { write } for pid=15843 comm="syz.6.3557" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.975342][T15852] loop2: detected capacity change from 0 to 512 [ 437.983887][T15852] EXT4-fs: Ignoring removed i_version option [ 437.990324][T15852] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 438.002332][T15852] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.3559: iget: bogus i_mode (160) [ 438.013861][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 438.013905][ C1] EXT4-fs (loop2): initial error at time 1788764347: ext4_orphan_get:1403: inode 15 [ 438.013936][ C1] EXT4-fs (loop2): last error at time 1788764347: ext4_orphan_get:1403: inode 15 [ 438.038030][T15852] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.3559: couldn't read orphan inode 15 (err -117) [ 438.038173][T15852] loop2: lost filesystem error report for type 5 error -117 [ 438.048281][ T29] audit: type=1400 audit(1788764347.418:1512): avc: denied { bind } for pid=15851 comm="syz.2.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.054692][ T29] audit: type=1400 audit(1788764347.438:1513): avc: denied { listen } for pid=15851 comm="syz.2.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.059324][ T29] audit: type=1400 audit(1788764347.438:1514): avc: denied { connect } for pid=15851 comm="syz.2.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.130762][T15856] netlink: 'syz.6.3560': attribute type 4 has an invalid length. [ 438.270351][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.291789][T15861] loop6: detected capacity change from 0 to 2048 [ 438.322515][T15865] loop0: detected capacity change from 0 to 512 [ 438.331718][T15861] loop6: p1 < > p4 [ 438.332987][T15865] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 438.333565][T15861] loop6: p4 size 8388608 extends beyond EOD, truncated [ 438.335203][T15865] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.3564: corrupted in-inode xattr: e_value size too large [ 438.335928][T15865] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.3564: couldn't read orphan inode 15 (err -117) [ 438.336012][T15865] loop0: lost filesystem error report for type 5 error -117 [ 438.509633][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 438.589836][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.814655][T15877] loop3: detected capacity change from 0 to 512 [ 438.835055][T15877] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 438.851955][T15877] EXT4-fs (loop3): 1 truncate cleaned up [ 438.865449][T15877] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 438.911535][T15885] loop4: detected capacity change from 0 to 1024 [ 438.918549][T15885] EXT4-fs: Ignoring removed orlov option [ 438.948598][T15892] ip6t_hbh: unknown flags 2A [ 438.972353][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3570'. [ 438.998898][T15893] kernel read not supported for file /!selinuxw (pid: 15893 comm: syz.3.3570) [ 439.025860][T15893] loop3: detected capacity change from 0 to 512 [ 439.077125][T15911] bond0: entered promiscuous mode [ 439.077152][T15911] bond_slave_0: entered promiscuous mode [ 439.077292][T15911] bond_slave_1: entered promiscuous mode [ 439.096857][T15911] batadv0: entered promiscuous mode [ 439.103416][T15911] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 439.113257][T15905] tipc: Started in network mode [ 439.113487][T15905] tipc: Node identity 4, cluster identity 4711 [ 439.113617][T15905] tipc: Node number set to 4 [ 439.205400][T15913] loop2: detected capacity change from 0 to 512 [ 439.205917][T15913] EXT4-fs: Ignoring removed oldalloc option [ 439.213831][T15913] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.3579: bad orphan inode 15 [ 439.213898][T15913] loop2: lost filesystem error report for type 5 error -117 [ 439.215708][T15913] ext4_test_bit(bit=14, block=5) = 0 [ 439.239520][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.260757][T15913] EXT4-fs warning (device loop2): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 439.280087][T15923] EXT4-fs warning (device loop2): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 439.387758][T15928] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 439.388003][T15928] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.3582: corrupted in-inode xattr: e_value size too large [ 439.388232][T15928] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.3582: couldn't read orphan inode 15 (err -117) [ 439.388334][T15928] loop2: lost filesystem error report for type 5 error -117 [ 439.461050][T15932] xt_ecn: cannot match TCP bits for non-tcp packets [ 439.629843][T12519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.907931][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3585'. [ 439.908007][T15938] bond0: Caught tx_queue_len zero misconfig [ 439.933528][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3585'. [ 440.195012][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3588'. [ 440.198513][T15949] kernel read not supported for file /!selinuxw (pid: 15949 comm: syz.3.3588) [ 440.898013][T15971] syz_tun: entered promiscuous mode [ 440.929058][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3594'. [ 441.160051][T12519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.237394][T15986] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 441.246648][T15986] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.3600: corrupted in-inode xattr: e_value size too large [ 441.246681][T15986] fserror_report: 3 callbacks suppressed [ 441.246699][T15986] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 441.260978][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 441.261003][ C1] EXT4-fs (loop0): initial error at time 1788764350: ext4_iget_extra_inode:5210: inode 15 [ 441.261035][ C1] EXT4-fs (loop0): last error at time 1788764350: ext4_iget_extra_inode:5210: inode 15 [ 441.304909][T15986] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.3600: couldn't read orphan inode 15 (err -117) [ 441.304989][T15986] loop0: lost filesystem error report for type 5 error -117 [ 441.347955][T15990] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 441.602391][T14292] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.688203][T14292] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.785860][T14292] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.843932][T14292] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.895224][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3602'. [ 441.940061][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 441.940089][ T29] audit: type=1400 audit(1788764351.328:1539): avc: denied { getopt } for pid=16021 comm="syz.0.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 441.977673][T16019] kernel read not supported for file /!selinuxw (pid: 16019 comm: syz.3.3602) [ 441.986979][ T29] audit: type=1400 audit(1788764351.358:1540): avc: denied { write } for pid=15998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.027396][T16029] cgroup: noprefix used incorrectly [ 442.058731][T14292] bridge_slave_1: left allmulticast mode [ 442.058764][T14292] bridge_slave_1: left promiscuous mode [ 442.058936][T14292] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.078833][T14292] bridge_slave_0: left allmulticast mode [ 442.078865][T14292] bridge_slave_0: left promiscuous mode [ 442.078972][T14292] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.116137][T16029] set_capacity_and_notify: 4 callbacks suppressed [ 442.119676][ T29] audit: type=1400 audit(1788764351.498:1541): avc: denied { write } for pid=16032 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.120572][T16029] loop4: detected capacity change from 0 to 512 [ 442.164684][T16029] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 442.184467][T16029] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.3610: bad orphan inode 13 [ 442.184507][T16029] loop4: lost filesystem error report for type 5 error -117 [ 442.184889][T16029] ext4_test_bit(bit=12, block=18) = 1 [ 442.184944][T16029] is_bad_inode(inode)=0 [ 442.184973][T16029] NEXT_ORPHAN(inode)=0 [ 442.184995][T16029] max_ino=32 [ 442.185022][T16029] i_nlink=1 [ 442.194778][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.207646][ T29] audit: type=1400 audit(1788764351.588:1542): avc: denied { ioctl } for pid=16027 comm="syz.4.3610" path="socket:[45206]" dev="sockfs" ino=45206 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 442.270449][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.279331][ T29] audit: type=1400 audit(1788764351.658:1543): avc: denied { mount } for pid=16027 comm="syz.4.3610" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 442.476044][ T29] audit: type=1326 audit(1788764351.858:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16042 comm="syz.6.3612" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c69d6e159 code=0x0 [ 442.581988][T16019] loop3: detected capacity change from 0 to 512 [ 442.802548][T14292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.817586][T14292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.830355][T14292] bond0 (unregistering): Released all slaves [ 442.863639][ T29] audit: type=1400 audit(1788764352.248:1545): avc: denied { write } for pid=16018 comm="syz.3.3602" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 442.914039][ T29] audit: type=1400 audit(1788764352.298:1546): avc: denied { write } for pid=16018 comm="syz.3.3602" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 442.946930][ T29] audit: type=1400 audit(1788764352.328:1547): avc: denied { open } for pid=16018 comm="syz.3.3602" path="/114/file2/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 442.971898][T14292] tipc: Left network mode [ 442.981415][T14292] hsr_slave_0: left promiscuous mode [ 442.987982][T14292] hsr_slave_1: left promiscuous mode [ 442.988491][T14292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.988512][T14292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.011065][T14292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.011088][T14292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.031748][T16060] kernel read not supported for file /!selinuxw (pid: 16060 comm: syz.0.3614) [ 443.046368][T14292] veth1_macvtap: left promiscuous mode [ 443.046395][T14292] veth0_macvtap: left promiscuous mode [ 443.046520][T14292] veth1_vlan: left promiscuous mode [ 443.046585][T14292] veth0_vlan: left promiscuous mode [ 443.133943][T16063] loop6: detected capacity change from 0 to 512 [ 443.152665][T16063] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 443.161034][T16063] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.3617: corrupted in-inode xattr: e_value size too large [ 443.161090][T16063] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 443.175357][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 443.175403][ C1] EXT4-fs (loop6): initial error at time 1788764352: ext4_iget_extra_inode:5210: inode 15 [ 443.175431][ C1] EXT4-fs (loop6): last error at time 1788764352: ext4_iget_extra_inode:5210: inode 15 [ 443.214309][T16063] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.3617: couldn't read orphan inode 15 (err -117) [ 443.214357][T16063] loop6: lost filesystem error report for type 5 error -117 [ 443.229667][ T3435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.443059][T16069] loop4: detected capacity change from 0 to 1024 [ 443.460141][T16069] EXT4-fs: inline encryption not supported [ 443.485247][ T29] audit: type=1400 audit(1788764352.868:1548): avc: denied { write } for pid=16062 comm="syz.6.3617" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.667610][T14292] team0 (unregistering): Port device team_slave_1 removed [ 443.686060][T14292] team0 (unregistering): Port device team_slave_0 removed [ 443.766493][T16059] kthread_run failed with err -4 [ 443.824889][T16080] loop0: detected capacity change from 0 to 1024 [ 443.853881][T16080] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.894497][T16080] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 3: comm syz.0.3619: lblock 3 mapped to illegal pblock 3 (length 3) [ 443.894855][T16080] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 443.894887][T16080] EXT4-fs (loop0): This should not happen!! Data will be lost [ 443.894887][T16080] [ 443.900176][T14290] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.900297][T14290] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.900472][T14290] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.900602][T14290] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.989919][T14290] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 443.990214][T14290] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 443.990277][T14290] EXT4-fs (loop0): This should not happen!! Data will be lost [ 443.990277][T14290] [ 444.029440][T16069] pim6reg: entered allmulticast mode [ 444.100051][T16069] pim6reg: left allmulticast mode [ 444.188243][T16099] syzkaller0: entered promiscuous mode [ 444.188271][T16099] syzkaller0: entered allmulticast mode [ 444.201059][T16001] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.201126][T16001] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.201209][T16001] bridge_slave_0: entered allmulticast mode [ 444.201832][T16001] bridge_slave_0: entered promiscuous mode [ 444.229017][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 444.229446][T16001] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.229479][T16001] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.251017][T16001] bridge_slave_1: entered allmulticast mode [ 444.257641][T16001] bridge_slave_1: entered promiscuous mode [ 444.296714][ T3435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.300914][T16001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.313013][T16106] netlink: 'syz.6.3620': attribute type 1 has an invalid length. [ 444.316053][T16001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.350567][T16001] team0: Port device team_slave_0 added [ 444.355557][T16001] team0: Port device team_slave_1 added [ 444.428115][T16001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.428135][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.428171][T16001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.429471][T16001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.429511][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.436633][T16001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.476707][T16118] xt_hashlimit: size too large, truncated to 1048576 [ 444.476802][T16118] xt_hashlimit: invalid rate [ 444.533974][T16118] WARNING! power/level is deprecated; use power/control instead [ 444.550297][T16001] hsr_slave_0: entered promiscuous mode [ 444.550757][T16001] hsr_slave_1: entered promiscuous mode [ 444.567555][T16123] loop0: detected capacity change from 0 to 512 [ 444.568228][T16001] debugfs: 'hsr0' already exists in 'hsr' [ 444.568287][T16001] Cannot create hsr debugfs directory [ 444.588654][T16123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.604945][T16123] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.3623: iget: bad i_size value: 38620345925642 [ 444.604989][T16123] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 444.617718][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 444.617758][ C1] EXT4-fs (loop0): initial error at time 1788764353: ext4_orphan_get:1403: inode 15 [ 444.617800][ C1] EXT4-fs (loop0): last error at time 1788764353: ext4_orphan_get:1403: inode 15 [ 444.653657][T16123] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.3623: couldn't read orphan inode 15 (err -117) [ 444.653697][T16123] loop0: lost filesystem error report for type 5 error -117 [ 444.670280][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.716226][T16123] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.3623: bg 0: block 5: invalid block bitmap [ 444.716504][T16123] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 444.716538][T16123] EXT4-fs (loop0): This should not happen!! Data will be lost [ 444.716538][T16123] [ 444.716585][T16123] EXT4-fs (loop0): Total free blocks count 0 [ 444.716691][T16123] EXT4-fs (loop0): Free/Dirty block details [ 444.716720][T16123] EXT4-fs (loop0): free_blocks=0 [ 444.716733][T16123] EXT4-fs (loop0): dirty_blocks=1 [ 444.716746][T16123] EXT4-fs (loop0): Block reservation details [ 444.716757][T16123] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 444.803962][T16132] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3624'. [ 444.890029][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3625'. [ 444.915506][T16001] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 444.925976][T16001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.935274][T16001] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 444.944287][T16001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.953671][T16001] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 444.964136][T16001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.969527][T16145] kernel read not supported for file /!selinuxw (pid: 16145 comm: syz.6.3625) [ 444.981072][T16001] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 444.991394][T16001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.037351][T14295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.037471][T14295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.098908][T14295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.098960][T14295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.145613][T16001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.173465][T14295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.173516][T14295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.200343][T16001] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.211639][T14292] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.211681][T14292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.212323][T16138] loop6: detected capacity change from 0 to 512 [ 445.219498][T14309] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.219651][T14309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.253889][T14295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.253996][T14295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.313102][ T3435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.351602][T16001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.438402][T14295] bridge_slave_1: left allmulticast mode [ 445.438432][T14295] bridge_slave_1: left promiscuous mode [ 445.438740][T14295] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.450218][T14295] bridge_slave_0: left allmulticast mode [ 445.450324][T14295] bridge_slave_0: left promiscuous mode [ 445.450543][T14295] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.556042][T14295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.566255][T16188] loop4: detected capacity change from 0 to 256 [ 445.573710][T14295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.586531][T14295] bond0 (unregistering): Released all slaves [ 445.597657][T16188] vfat: Unknown parameter '00000000000000000004' [ 445.626155][T14295] tipc: Left network mode [ 445.646759][T14295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.646781][T14295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.662128][T14295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.662241][T14295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.685484][T14295] veth1_macvtap: left promiscuous mode [ 445.685520][T14295] veth0_macvtap: left promiscuous mode [ 445.685703][T14295] veth1_vlan: left promiscuous mode [ 445.685807][T14295] veth0_vlan: left promiscuous mode [ 445.803804][T16204] loop6: detected capacity change from 0 to 256 [ 445.812932][T16204] vfat: Unknown parameter '00000000000000000004' [ 445.872808][T14295] team0 (unregistering): Port device team_slave_1 removed [ 445.881792][T14295] team0 (unregistering): Port device team_slave_0 removed [ 445.922239][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3633'. [ 446.130801][T16001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.286963][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 446.349742][ T3435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.991360][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 446.991387][ T29] audit: type=1400 audit(1788764356.378:1576): avc: denied { write } for pid=16253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.068886][ T29] audit: type=1400 audit(1788764356.448:1577): avc: denied { write } for pid=16264 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.340051][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 447.363268][T16164] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.381234][T16164] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.381407][T16164] bridge_slave_0: entered allmulticast mode [ 447.381987][T16164] bridge_slave_0: entered promiscuous mode [ 447.463368][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.473731][T16164] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.473782][T16164] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.473905][T16164] bridge_slave_1: entered allmulticast mode [ 447.474587][T16164] bridge_slave_1: entered promiscuous mode [ 447.529254][T16273] loop3: detected capacity change from 0 to 2048 [ 447.537891][T16164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.550209][T16164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.620200][T16164] team0: Port device team_slave_0 added [ 447.627646][T16164] team0: Port device team_slave_1 added [ 447.646434][T16001] veth0_vlan: entered promiscuous mode [ 447.662126][T16001] veth1_vlan: entered promiscuous mode [ 447.667040][T16164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.667090][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.667252][T16164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.669528][T16164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.671414][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.671512][T16164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.745526][ T29] audit: type=1400 audit(1788764357.098:1578): avc: denied { connect } for pid=16268 comm="syz.3.3638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 447.746206][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.756275][ T29] audit: type=1400 audit(1788764357.128:1579): avc: denied { write } for pid=16268 comm="syz.3.3638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 447.806614][T16164] hsr_slave_0: entered promiscuous mode [ 447.811162][T16164] hsr_slave_1: entered promiscuous mode [ 447.811820][T16164] debugfs: 'hsr0' already exists in 'hsr' [ 447.816534][T16164] Cannot create hsr debugfs directory [ 447.872401][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.889983][T16287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3639'. [ 447.899178][ T29] audit: type=1400 audit(1788764357.278:1580): avc: denied { write } for pid=16275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.910259][T16001] veth0_macvtap: entered promiscuous mode [ 447.929049][T16001] veth1_macvtap: entered promiscuous mode [ 448.008613][T16294] loop3: detected capacity change from 0 to 512 [ 448.021487][T16293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3641'. [ 448.024004][T16294] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.3640: inode has both inline data and extents flags [ 448.024106][T16294] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 448.024392][T16294] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.3640: couldn't read orphan inode 15 (err -117) [ 448.024479][T16294] loop3: lost filesystem error report for type 5 error -117 [ 448.025701][T16294] EXT4-fs mount: 57 callbacks suppressed [ 448.025788][T16294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.080154][T16293] kernel read not supported for file /!selinuxw (pid: 16293 comm: syz.4.3641) [ 448.100317][T16001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.102495][ T29] audit: type=1400 audit(1788764357.418:1581): avc: denied { write } for pid=16292 comm="syz.3.3640" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.123056][T16293] loop4: detected capacity change from 0 to 512 [ 448.137637][T16001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.146232][ T29] audit: type=1400 audit(1788764357.528:1582): avc: denied { write } for pid=16290 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.206199][T16164] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 448.210952][T16164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.222776][T16217] loop6: detected capacity change from 0 to 512 [ 448.243793][T16293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.245098][T16164] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 448.280004][T16164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.289861][T16164] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 448.301314][ T29] audit: type=1400 audit(1788764357.678:1583): avc: denied { write } for pid=16291 comm="syz.4.3641" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.326790][T16164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.332531][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 448.342481][T16164] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 448.356045][T16164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.356356][T16217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.356431][T16217] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.381213][T14290] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.381308][T14290] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.381474][T14290] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.381627][T14290] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.383648][ T29] audit: type=1400 audit(1788764357.758:1584): avc: denied { write } for pid=16216 comm="syz.6.3635" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.397516][ T29] audit: type=1400 audit(1788764357.778:1585): avc: denied { append } for pid=16216 comm="syz.6.3635" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 448.509673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.510689][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.571146][T15513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.595423][T13131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.684906][T16164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.693007][T16332] loop7: detected capacity change from 0 to 128 [ 448.725906][T16164] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.734697][T16334] loop4: detected capacity change from 0 to 2048 [ 448.745659][T14295] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.745718][T14295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.762187][T14292] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.762226][T14292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.787521][T16338] loop6: detected capacity change from 0 to 512 [ 448.790405][T16338] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 448.811137][T16338] EXT4-fs (loop6): 1 truncate cleaned up [ 448.811700][T16338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.843715][T13594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.859164][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 448.992821][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3643'. [ 449.150764][T16164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.223565][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 449.549896][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.798466][T15513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.021173][T16402] loop3: detected capacity change from 0 to 512 [ 450.049405][T16402] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 450.057862][T16402] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.3647: invalid block [ 450.057900][T16402] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 450.069619][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 450.069637][ C1] EXT4-fs (loop3): initial error at time 1788764359: ext4_get_branch:178: inode 13: block 1024 [ 450.069691][ C1] EXT4-fs (loop3): last error at time 1788764359: ext4_get_branch:178: inode 13: block 1024 [ 450.109203][T16402] EXT4-fs error (device loop3) in ext4_process_orphan:346: IO failure [ 450.109227][T16402] loop3: lost filesystem error report for type 5 error -5 [ 450.118907][T16402] EXT4-fs (loop3): 1 truncate cleaned up [ 450.139069][T16402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.154756][T16402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.181315][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 450.214042][T16164] veth0_vlan: entered promiscuous mode [ 450.246929][T16164] veth1_vlan: entered promiscuous mode [ 450.292130][T16164] veth0_macvtap: entered promiscuous mode [ 450.302422][T16164] veth1_macvtap: entered promiscuous mode [ 450.305929][T16411] FAULT_INJECTION: forcing a failure. [ 450.305929][T16411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.306020][T16411] CPU: 0 UID: 0 PID: 16411 Comm: syz.6.3651 Not tainted syzkaller #0 PREEMPT(lazy) [ 450.306149][T16411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.306191][T16411] Call Trace: [ 450.306218][T16411] [ 450.306241][T16411] __dump_stack+0x1d/0x30 [ 450.306329][T16411] dump_stack_lvl+0x95/0xd0 [ 450.306422][T16411] dump_stack+0x15/0x1b [ 450.306544][T16411] should_fail_ex+0x262/0x280 [ 450.306669][T16411] should_fail+0xb/0x20 [ 450.306735][T16411] should_fail_usercopy+0x1a/0x20 [ 450.306813][T16411] _copy_from_user+0x1c/0xb0 [ 450.306872][T16411] restore_altstack+0x4b/0x300 [ 450.306921][T16411] ? __set_current_blocked+0x284/0x2e0 [ 450.307047][T16411] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 450.307210][T16411] ? arch_do_signal_or_restart+0x2f3/0x480 [ 450.307380][T16411] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 450.307494][T16411] ? fput+0x91/0xc0 [ 450.307563][T16411] x64_sys_call+0x1532/0x2550 [ 450.307622][T16411] do_syscall_64+0x112/0x360 [ 450.307696][T16411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.307768][T16411] RIP: 0033:0x7f4c69d0f4d9 [ 450.307825][T16411] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 450.307880][T16411] RSP: 002b:00007f4c687c6a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 450.307938][T16411] RAX: ffffffffffffffda RBX: 00007f4c69ff5fa0 RCX: 00007f4c69d0f4d9 [ 450.308038][T16411] RDX: 00007f4c687c6a80 RSI: 00007f4c687c6bb0 RDI: 0000000000000011 [ 450.308083][T16411] RBP: 00007f4c687c7090 R08: 0000000000000000 R09: 0000000000000000 [ 450.308121][T16411] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 450.308158][T16411] R13: 00007f4c69ff6038 R14: 00007f4c69ff5fa0 R15: 00007ffcc21d2838 [ 450.308214][T16411] [ 450.377334][T16164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.427439][T16164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.453210][T16402] loop3: detected capacity change from 0 to 1024 [ 450.533405][T16402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.544466][T16402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.570382][ T353] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.574564][T14295] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.575389][T14305] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.575575][T14305] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.606878][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.623334][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3652'. [ 450.659075][T16419] team0: Port device team_slave_0 removed [ 450.760572][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.793138][T16424] loop6: detected capacity change from 0 to 4096 [ 450.813009][T16424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.861222][T16419] vlan2: entered promiscuous mode [ 450.861242][T16419] batadv0: entered promiscuous mode [ 450.861345][T16419] vlan2: entered allmulticast mode [ 450.861425][T16419] batadv0: entered allmulticast mode [ 450.901945][T16437] sctp: [Deprecated]: syz.8.3628 (pid 16437) Use of int in maxseg socket option. [ 450.901945][T16437] Use struct sctp_assoc_value instead [ 450.954604][T16440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3654'. [ 450.954709][T16440] tunl0: Caught tx_queue_len zero misconfig [ 451.004523][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 451.008270][T15513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.026368][T16443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.161948][T16443] syz.3.3654(16443): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 451.240305][T16463] tipc: Started in network mode [ 451.240373][T16463] tipc: Node identity 0010000000000000002, cluster identity 1 [ 451.387933][T16470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.462460][T16001] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.568788][T16478] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 451.578170][T16478] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 451.589497][T16478] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 451.589660][T16478] EXT4-fs (loop7): orphan cleanup on readonly fs [ 451.606362][T16478] EXT4-fs error (device loop7): ext4_free_blocks:6719: comm syz.7.3663: Freeing blocks not in datazone - block = 0, count = 4096 [ 451.606400][T16478] loop7: lost filesystem error report for type 5 error -117 [ 451.619835][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 451.619859][ C0] EXT4-fs (loop7): initial error at time 1788764360: ext4_free_blocks:6719 [ 451.619886][ C0] EXT4-fs (loop7): last error at time 1788764360: ext4_free_blocks:6719 [ 451.628233][T16478] EXT4-fs (loop7): Remounting filesystem read-only [ 451.628258][T16478] EXT4-fs (loop7): 1 orphan inode deleted [ 451.628647][T16478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 451.638481][T12519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.772435][T14290] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 451.788232][T14290] EXT4-fs (loop3): Remounting filesystem read-only [ 451.832670][T16488] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3666'. [ 451.868609][T16488] EXT4-fs: Ignoring removed nobh option [ 451.886686][T16488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.886896][T16488] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.922333][T13594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.943806][T16496] ip6tnl0: Caught tx_queue_len zero misconfig [ 451.956913][T13131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.019890][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 452.019927][ T29] audit: type=1400 audit(1788764361.408:1619): avc: denied { create } for pid=16499 comm="syz.4.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 452.020337][ T29] audit: type=1400 audit(1788764361.408:1620): avc: denied { connect } for pid=16499 comm="syz.4.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 452.081432][ T29] audit: type=1400 audit(1788764361.468:1621): avc: denied { write } for pid=16499 comm="syz.4.3667" name="functions" dev="configfs" ino=24311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 452.081469][ T29] audit: type=1400 audit(1788764361.468:1622): avc: denied { create } for pid=16499 comm="syz.4.3667" name="uvc.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 452.084299][ T29] audit: type=1400 audit(1788764361.468:1623): avc: denied { write } for pid=16499 comm="syz.4.3667" name="header" dev="configfs" ino=47049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 452.087515][ T29] audit: type=1400 audit(1788764361.468:1624): avc: denied { write } for pid=16499 comm="syz.4.3667" name="header" dev="configfs" ino=47062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 452.088593][ T29] audit: type=1400 audit(1788764361.468:1625): avc: denied { write } for pid=16499 comm="syz.4.3667" name="fs" dev="configfs" ino=47069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 452.088740][ T29] audit: type=1400 audit(1788764361.468:1626): avc: denied { create } for pid=16499 comm="syz.4.3667" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 452.088806][ T29] audit: type=1400 audit(1788764361.468:1627): avc: denied { write } for pid=16499 comm="syz.4.3667" name="fs" dev="configfs" ino=47069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 452.130362][ T29] audit: type=1400 audit(1788764361.508:1628): avc: denied { open } for pid=16504 comm="syz.6.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 452.306484][T16512] tipc: Cannot configure node identity twice [ 452.364736][T16001] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.499303][T16524] EXT4-fs: Ignoring removed orlov option [ 452.499371][T16524] EXT4-fs: Ignoring removed orlov option [ 452.499513][T16524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.539763][T16523] bridge_slave_0: left allmulticast mode [ 452.539828][T16523] bridge_slave_0: left promiscuous mode [ 452.540047][T16523] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.567024][T16523] bridge_slave_1: left allmulticast mode [ 452.567048][T16523] bridge_slave_1: left promiscuous mode [ 452.594999][T16523] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.607477][T16523] bond0: (slave bond_slave_0): Releasing backup interface [ 452.618265][T16523] bond0: (slave bond_slave_1): Releasing backup interface [ 452.633130][T16523] team0: Port device team_slave_0 removed [ 452.659910][T16524] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.672820][ T3435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.685615][T16523] team0: Port device team_slave_1 removed [ 452.686591][T16523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.686618][T16523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.714575][T16523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.714604][T16523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.722833][T16526] LUN: removable file: (no medium) [ 452.737622][T16523] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.763963][T16529] bridge0: port 1(syz_tun) entered blocking state [ 452.764020][T16529] bridge0: port 1(syz_tun) entered disabled state [ 452.764179][T16529] syz_tun: entered allmulticast mode [ 452.764796][T16529] syz_tun: entered promiscuous mode [ 452.765001][T16529] bridge0: port 1(syz_tun) entered blocking state [ 452.765040][T16529] bridge0: port 1(syz_tun) entered forwarding state [ 452.872764][T16542] FAULT_INJECTION: forcing a failure. [ 452.872764][T16542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.872941][T16542] CPU: 0 UID: 0 PID: 16542 Comm: syz.4.3680 Not tainted syzkaller #0 PREEMPT(lazy) [ 452.872973][T16542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.873008][T16542] Call Trace: [ 452.873017][T16542] [ 452.873027][T16542] __dump_stack+0x1d/0x30 [ 452.873118][T16542] dump_stack_lvl+0x95/0xd0 [ 452.873150][T16542] dump_stack+0x15/0x1b [ 452.873202][T16542] should_fail_ex+0x262/0x280 [ 452.873224][T16542] should_fail+0xb/0x20 [ 452.873242][T16542] should_fail_usercopy+0x1a/0x20 [ 452.873265][T16542] _copy_from_iter+0xcc/0xe70 [ 452.873294][T16542] ? __alloc_skb+0x516/0x6f0 [ 452.873393][T16542] ? __alloc_skb+0x209/0x6f0 [ 452.873465][T16542] netlink_sendmsg+0x4a4/0x6f0 [ 452.873506][T16542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.873542][T16542] ____sys_sendmsg+0x532/0x580 [ 452.873587][T16542] ___sys_sendmsg+0x195/0x1e0 [ 452.873726][T16542] __x64_sys_sendmsg+0xd4/0x160 [ 452.873778][T16542] x64_sys_call+0x22ab/0x2550 [ 452.873814][T16542] do_syscall_64+0x112/0x360 [ 452.873909][T16542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.873939][T16542] RIP: 0033:0x7fecce27e159 [ 452.873961][T16542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.873988][T16542] RSP: 002b:00007feccccd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.874096][T16542] RAX: ffffffffffffffda RBX: 00007fecce505fa0 RCX: 00007fecce27e159 [ 452.874113][T16542] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 452.874127][T16542] RBP: 00007feccccd7090 R08: 0000000000000000 R09: 0000000000000000 [ 452.874145][T16542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.874171][T16542] R13: 00007fecce506038 R14: 00007fecce505fa0 R15: 00007fff08d2efb8 [ 452.874198][T16542] [ 453.088775][T16543] set_capacity_and_notify: 8 callbacks suppressed [ 453.088801][T16543] loop3: detected capacity change from 0 to 2048 [ 453.126914][T16550] tipc: Enabled bearer , priority 0 [ 453.198405][T16550] syzkaller0: entered promiscuous mode [ 453.198437][T16550] syzkaller0: entered allmulticast mode [ 453.211342][T16550] tipc: Resetting bearer [ 453.223840][T16547] tipc: Resetting bearer [ 453.260704][T16547] tipc: Disabling bearer [ 453.270352][T16555] tipc: Started in network mode [ 453.270386][T16555] tipc: Node identity 0010000000000000002, cluster identity 1 [ 453.290655][T16557] loop3: detected capacity change from 0 to 512 [ 453.297164][T16557] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 453.307747][T16557] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3685: invalid indirect mapped block 9 (level 0) [ 453.307775][T16557] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 453.308158][T16557] EXT4-fs (loop3): 1 truncate cleaned up [ 453.308612][T16557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.388008][T16164] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.708934][T16574] tmpfs: Unsupported parameter 'huge' [ 453.787831][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3687'. [ 453.800035][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.889518][T16579] FAULT_INJECTION: forcing a failure. [ 453.889518][T16579] name failslab, interval 1, probability 0, space 0, times 0 [ 453.902899][T16579] CPU: 1 UID: 0 PID: 16579 Comm: syz.8.3687 Not tainted syzkaller #0 PREEMPT(lazy) [ 453.902960][T16579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.902979][T16579] Call Trace: [ 453.902988][T16579] [ 453.902997][T16579] __dump_stack+0x1d/0x30 [ 453.903028][T16579] dump_stack_lvl+0x95/0xd0 [ 453.903061][T16579] dump_stack+0x15/0x1b [ 453.903146][T16579] should_fail_ex+0x262/0x280 [ 453.903171][T16579] ? seq_create_client1+0x36/0x2e0 [ 453.903206][T16579] should_failslab+0x8c/0xb0 [ 453.903249][T16579] __kmalloc_cache_noprof+0x7a/0x400 [ 453.903336][T16579] ? seq_create_client1+0x36/0x2e0 [ 453.903373][T16579] ? __pfx_snd_seq_open+0x10/0x10 [ 453.903407][T16579] seq_create_client1+0x36/0x2e0 [ 453.903463][T16579] ? __pfx_snd_seq_open+0x10/0x10 [ 453.903557][T16579] snd_seq_open+0x3d/0x300 [ 453.903596][T16579] ? __pfx_snd_seq_open+0x10/0x10 [ 453.903662][T16579] snd_open+0x23b/0x290 [ 453.903706][T16579] chrdev_open+0x2eb/0x3a0 [ 453.903749][T16579] do_dentry_open+0x49f/0xa60 [ 453.903769][T16579] ? __pfx_chrdev_open+0x10/0x10 [ 453.903842][T16579] vfs_open+0x37/0x1e0 [ 453.903867][T16579] path_openat+0xc01/0x10d0 [ 453.903941][T16579] do_file_open+0x16c/0x290 [ 453.904048][T16579] do_sys_openat2+0xa0/0x130 [ 453.904076][T16579] __x64_sys_openat+0xf2/0x120 [ 453.904155][T16579] x64_sys_call+0x1f72/0x2550 [ 453.904186][T16579] do_syscall_64+0x112/0x360 [ 453.904215][T16579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.904259][T16579] RIP: 0033:0x7f6f53dae159 [ 453.904280][T16579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.904348][T16579] RSP: 002b:00007f6f523a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.904367][T16579] RAX: ffffffffffffffda RBX: 00007f6f54036270 RCX: 00007f6f53dae159 [ 453.904382][T16579] RDX: 00000000000e0c81 RSI: 00002000000018c0 RDI: ffffffffffffff9c [ 453.904457][T16579] RBP: 00007f6f53e45024 R08: 0000000000000000 R09: 0000000000000000 [ 453.904469][T16579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.904501][T16579] R13: 00007f6f54036308 R14: 00007f6f54036270 R15: 00007fff1442f648 [ 453.904526][T16579] [ 454.010772][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.159432][T13594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.230219][T16582] loop3: detected capacity change from 0 to 4096 [ 454.248216][T16582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.408790][T16597] loop6: detected capacity change from 0 to 2048 [ 454.502010][T16600] loop6: detected capacity change from 0 to 128 [ 454.502835][T16600] vfat: Unknown parameter '6%quú· `fCB;éKGþQ.‘þŸëk“b}…0‹ þÐ…#á7`oH�Zi>æð£Üpj¸å�²†Âƒº+_És�™à%樠õ£übYIÃÃ[%ÏäÔC1*}’ »[4;äV¢ƒ6¼ÂÇÞl2‘mhý0ÁL¶ŒNfÖfqEäHøêWŒ4*îè#üÔ4.™ãnÅÊ;· [ 454.502835][T16600] έï. š”óÍ«úá–'Tõ3¦Ù@x!3FQ§`à ZYWSaÅúiå‘)Ã9†å‚pÒ_ƒ‡ÚO¶Ù·¥ÿÿÿÿ' [ 454.534642][T16605] loop6: detected capacity change from 0 to 1024 [ 454.586996][T16587] FAULT_INJECTION: forcing a failure. [ 454.586996][T16587] name failslab, interval 1, probability 0, space 0, times 0 [ 454.587037][T16587] CPU: 1 UID: 0 PID: 16587 Comm: syz.4.3693 Not tainted syzkaller #0 PREEMPT(lazy) [ 454.587071][T16587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.587095][T16587] Call Trace: [ 454.587105][T16587] [ 454.587113][T16587] __dump_stack+0x1d/0x30 [ 454.587182][T16587] dump_stack_lvl+0x95/0xd0 [ 454.587215][T16587] dump_stack+0x15/0x1b [ 454.587236][T16587] should_fail_ex+0x262/0x280 [ 454.587258][T16587] ? jbd2_journal_add_journal_head+0x60/0x380 [ 454.587327][T16587] should_failslab+0x8c/0xb0 [ 454.587502][T16587] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 454.587550][T16587] ? jbd2_journal_add_journal_head+0x60/0x380 [ 454.587593][T16587] jbd2_journal_add_journal_head+0x60/0x380 [ 454.587627][T16587] jbd2_journal_get_write_access+0x172/0x240 [ 454.587816][T16587] __ext4_journal_get_write_access+0x8a/0x3b0 [ 454.587857][T16587] ? jbd2__journal_start+0xe3/0x3a0 [ 454.588026][T16587] ext4_orphan_add+0x3cc/0xa00 [ 454.588067][T16587] ext4_file_write_iter+0xcc5/0x1020 [ 454.588101][T16587] ? ext4_file_write_iter+0x641/0x1020 [ 454.588142][T16587] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 454.588180][T16587] vfs_write+0x57f/0x9a0 [ 454.588219][T16587] __x64_sys_pwrite64+0xfd/0x150 [ 454.588318][T16587] x64_sys_call+0x23be/0x2550 [ 454.588379][T16587] do_syscall_64+0x112/0x360 [ 454.588475][T16587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.588536][T16587] RIP: 0033:0x7fecce27e159 [ 454.588559][T16587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.588586][T16587] RSP: 002b:00007feccccd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 454.588666][T16587] RAX: ffffffffffffffda RBX: 00007fecce505fa0 RCX: 00007fecce27e159 [ 454.588688][T16587] RDX: 0000000000058200 RSI: 0000200000000000 RDI: 0000000000000004 [ 454.588705][T16587] RBP: 00007feccccd7090 R08: 0000000000000000 R09: 0000000000000000 [ 454.588719][T16587] R10: 0000000000002200 R11: 0000000000000246 R12: 0000000000000001 [ 454.588805][T16587] R13: 00007fecce506038 R14: 00007fecce505fa0 R15: 00007fff08d2efb8 [ 454.588828][T16587] [ 454.643820][T16565] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 454.686396][T16587] ENOMEM in journal_alloc_journal_head, retrying. [ 454.832637][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.885989][T16620] tipc: Cannot configure node identity twice [ 454.920710][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.935181][T16623] tipc: Cannot configure node identity twice [ 454.972853][T16623] vhci_hcd vhci_hcd.4: default hub control req: 0303 v0004 i0003 l0 [ 454.982565][T16628] loop6: detected capacity change from 0 to 256 [ 455.014373][T16628] FAT-fs (loop6): IO charset cp1255 not found [ 455.037172][T16581] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #15: comm syz.3.3691: corrupted inode contents [ 455.037242][T16581] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 455.049885][T16628] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3702'. [ 455.049969][T16581] EXT4-fs error (device loop3): ext4_dirty_inode:6731: inode #15: comm syz.3.3691: mark_inode_dirty error [ 455.050081][T16581] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 455.050444][T16581] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #15: comm syz.3.3691: corrupted inode contents [ 455.050555][T16581] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 455.053623][T16581] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.3691: mark_inode_dirty error [ 455.053713][T16581] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 455.054218][T16581] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #15: comm syz.3.3691: corrupted inode contents [ 455.054314][T16581] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 455.055818][T16581] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.3691: mark_inode_dirty error [ 455.055900][T16581] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 455.058331][T16581] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #15: comm syz.3.3691: corrupted inode contents [ 455.064090][T16581] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 455.064476][T16581] EXT4-fs error (device loop3): ext4_truncate:4721: inode #15: comm syz.3.3691: mark_inode_dirty error [ 455.064593][T16581] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 455.065503][T16581] EXT4-fs error (device loop3): ext4_evict_inode:280: comm syz.3.3691: couldn't truncate inode 15 (err -117) [ 455.170007][T16638] netlink: 'syz.8.3703': attribute type 4 has an invalid length. [ 455.197285][T13594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.270121][ T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 455.270727][ T11] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 455.332034][T16642] loop3: detected capacity change from 0 to 2048 [ 455.369515][T16643] fido_id[16643]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 455.519968][T16655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.520046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.697371][T16665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.697504][T16665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.716088][T16665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.716205][T16665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.871232][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.890874][T16669] 9p: Bad value for 'wfdno' [ 455.934431][T16669] loop4: detected capacity change from 0 to 512 [ 455.956069][T16669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.956779][T16669] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 455.984907][T16673] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 455.994618][T13131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.186953][T16699] tipc: Cannot configure node identity twice [ 456.255570][T16703] ip6t_hbh: unknown flags 2A [ 456.391038][T16705] usb usb8: usbfs: process 16705 (syz.6.3727) did not claim interface 0 before use [ 456.506146][T16726] loop7: detected capacity change from 0 to 1024 [ 456.506788][T16726] EXT4-fs: Ignoring removed bh option [ 456.535441][T16726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.555265][T16726] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 456.599167][T16001] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.675995][T16741] FAULT_INJECTION: forcing a failure. [ 456.675995][T16741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.676041][T16741] CPU: 0 UID: 0 PID: 16741 Comm: syz.7.3737 Not tainted syzkaller #0 PREEMPT(lazy) [ 456.676065][T16741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.676084][T16741] Call Trace: [ 456.676092][T16741] [ 456.676100][T16741] __dump_stack+0x1d/0x30 [ 456.676132][T16741] dump_stack_lvl+0x95/0xd0 [ 456.676181][T16741] dump_stack+0x15/0x1b [ 456.676209][T16741] should_fail_ex+0x262/0x280 [ 456.676285][T16741] should_fail+0xb/0x20 [ 456.676317][T16741] should_fail_usercopy+0x1a/0x20 [ 456.676358][T16741] strncpy_from_user+0x27/0x250 [ 456.676388][T16741] do_getname+0x59/0x1c0 [ 456.676406][T16741] getname_flags+0x1d/0x30 [ 456.676422][T16741] do_sys_openat2+0x6c/0x130 [ 456.676444][T16741] __x64_sys_openat+0xf2/0x120 [ 456.676539][T16741] x64_sys_call+0x1f72/0x2550 [ 456.676563][T16741] do_syscall_64+0x112/0x360 [ 456.676592][T16741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.676659][T16741] RIP: 0033:0x7f4ff7ffe98e [ 456.676674][T16741] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 456.676691][T16741] RSP: 002b:00007f4ff6a75b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 456.676709][T16741] RAX: ffffffffffffffda RBX: 00007f4ff6a766c0 RCX: 00007f4ff7ffe98e [ 456.676722][T16741] RDX: 0000000000001501 RSI: 00007f4ff6a75c00 RDI: ffffffffffffff9c [ 456.676771][T16741] RBP: 00007f4ff6a75c00 R08: 0000000000000000 R09: 0000000000000000 [ 456.676783][T16741] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 456.676795][T16741] R13: 00007f4ff82c6128 R14: 00007f4ff82c6090 R15: 00007fffa463be08 [ 456.676812][T16741] [ 456.919705][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.005460][T16745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 457.022697][T16745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.023332][T16745] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.048668][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 457.048696][ T29] audit: type=1400 audit(1788764366.428:1670): avc: denied { setattr } for pid=16744 comm="syz.4.3739" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 457.077615][ T29] audit: type=1400 audit(1788764366.448:1671): avc: denied { write } for pid=16744 comm="syz.4.3739" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.077649][ T29] audit: type=1400 audit(1788764366.448:1672): avc: denied { create } for pid=16744 comm="syz.4.3739" name="dbg" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 457.077717][ T29] audit: type=1400 audit(1788764366.458:1673): avc: denied { mounton } for pid=16744 comm="syz.4.3739" path="/165/file0/dbg" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 457.077750][ T29] audit: type=1400 audit(1788764366.458:1674): avc: denied { mount } for pid=16744 comm="syz.4.3739" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 457.116783][ T29] audit: type=1400 audit(1788764366.488:1675): avc: denied { write } for pid=13131 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.116910][ T29] audit: type=1400 audit(1788764366.488:1676): avc: denied { write } for pid=13131 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.117036][ T29] audit: type=1400 audit(1788764366.498:1677): avc: denied { write } for pid=13131 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.117117][ T29] audit: type=1400 audit(1788764366.498:1678): avc: denied { unlink } for pid=13131 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 457.117208][ T29] audit: type=1400 audit(1788764366.498:1679): avc: denied { write } for pid=13131 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.148536][T13131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.320913][T16754] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3742'. [ 457.331069][T16754] SELinux: security_context_str_to_sid (}oæ‹bö–?3bæñlæÊ@Gœ�;oÔÌñ°Òƒl(ëæ$9¸Å–�ãí[©¥•»]ÂÞß3Ò¤ÒÛÓQ,ÄE¸,w¾D2„ÒÀ¬Šçб•{·� `ÌgÞ&´ÇOQ¤ýÆÄ‘‡_î`.Û�ÍÜ1ô¦vÆÒϧ“m¬NN—°)ðO¬Ê-_ž™Ú·}�™‘)[¦Á†o[V¶×x²d‚Ëq´ÑS!ˆj®´» [ 457.331069][T16754] õÓ…Eõ‰(äxø ˜R°-Þ—®õJ}.ÒÄÿ¶çpuè3‘†) failed with errno=-22 [ 457.368519][T16757] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3743'. [ 457.396295][T16754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3742'. [ 457.476007][T16759] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 457.483976][T16759] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.484447][T16759] ext2 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.665792][T16796] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 457.675205][T16796] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 457.686010][T16796] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 457.686194][T16796] EXT4-fs (loop8): orphan cleanup on readonly fs [ 457.686358][T16796] EXT4-fs error (device loop8): ext4_free_blocks:6719: comm syz.8.3753: Freeing blocks not in datazone - block = 0, count = 4096 [ 457.686393][T16796] loop8: lost filesystem error report for type 5 error -117 [ 457.694574][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 457.694590][ C0] EXT4-fs (loop8): initial error at time 1788764367: ext4_free_blocks:6719 [ 457.694619][ C0] EXT4-fs (loop8): last error at time 1788764367: ext4_free_blocks:6719 [ 457.707012][T16796] EXT4-fs (loop8): Remounting filesystem read-only [ 457.707089][T16796] EXT4-fs (loop8): 1 orphan inode deleted [ 457.707860][T16796] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 457.851910][T16801] sd 0:0:1:0: PR command failed: 1026 [ 457.852016][T16801] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 457.852110][T16801] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 457.949788][ T37] net_ratelimit: 1 callbacks suppressed [ 457.949812][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.949864][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.199514][T16801] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3754'. [ 458.279237][T16782] ================================================================== [ 458.279268][T16782] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 458.279303][T16782] [ 458.279311][T16782] write to 0xffff888115d9fca0 of 8 bytes by task 16759 on cpu 0: [ 458.279335][T16782] filemap_splice_read+0x52a/0x790 [ 458.279373][T16782] ext4_file_splice_read+0x8f/0xb0 [ 458.279406][T16782] splice_direct_to_actor+0x261/0x680 [ 458.279454][T16782] do_splice_direct+0x119/0x1a0 [ 458.279499][T16782] do_sendfile+0x37d/0x640 [ 458.279523][T16782] __x64_sys_sendfile64+0x105/0x150 [ 458.279559][T16782] x64_sys_call+0x1015/0x2550 [ 458.279586][T16782] do_syscall_64+0x112/0x360 [ 458.279618][T16782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.279647][T16782] [ 458.279656][T16782] write to 0xffff888115d9fca0 of 8 bytes by task 16782 on cpu 1: [ 458.279677][T16782] filemap_splice_read+0x52a/0x790 [ 458.279699][T16782] ext4_file_splice_read+0x8f/0xb0 [ 458.279722][T16782] splice_direct_to_actor+0x261/0x680 [ 458.279768][T16782] do_splice_direct+0x119/0x1a0 [ 458.279814][T16782] do_sendfile+0x37d/0x640 [ 458.279838][T16782] __x64_sys_sendfile64+0x105/0x150 [ 458.279882][T16782] x64_sys_call+0x1015/0x2550 [ 458.279928][T16782] do_syscall_64+0x112/0x360 [ 458.279959][T16782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.279978][T16782] [ 458.279982][T16782] value changed: 0x00000000000005bd -> 0x00000000000005be [ 458.279993][T16782] [ 458.279997][T16782] Reported by Kernel Concurrency Sanitizer on: [ 458.280007][T16782] CPU: 1 UID: 0 PID: 16782 Comm: syz.4.3745 Not tainted syzkaller #0 PREEMPT(lazy) [ 458.280039][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.280055][T16782] ================================================================== [ 458.451068][T13131] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.487111][T16164] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.989881][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.030542][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.989942][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.069713][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.109711][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.123231][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 462.123283][ T29] audit: type=1400 audit(1788764371.508:1703): avc: denied { write } for pid=16851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.162833][ T29] audit: type=1400 audit(1788764371.548:1704): avc: denied { write } for pid=16862 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.385233][ T29] audit: type=1400 audit(1788764371.768:1705): avc: denied { write } for pid=16865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.417642][ T29] audit: type=1400 audit(1788764371.798:1706): avc: denied { write } for pid=16876 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.110740][ T29] audit: type=1400 audit(1788764372.498:1707): avc: denied { write } for pid=16879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.145919][ T29] audit: type=1400 audit(1788764372.528:1708): avc: denied { write } for pid=16890 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.168762][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.242200][ T29] audit: type=1400 audit(1788764372.628:1709): avc: denied { write } for pid=16893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.275378][ T29] audit: type=1400 audit(1788764372.658:1710): avc: denied { write } for pid=16904 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.606097][ T29] audit: type=1400 audit(1788764372.988:1711): avc: denied { write } for pid=16908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.640245][ T29] audit: type=1400 audit(1788764373.028:1712): avc: denied { write } for pid=16919 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.029710][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.189873][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.229873][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.269713][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.080226][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.080421][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.309850][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog